$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft File: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json) Hash identifier: TwRmHr4ufMzYAlLLPjXs+hKW7FhTY5s+NYlZHWlmbtA= Subject key identifier: 3B:A9:9A:73:80:36:CC:15:9A:0D:AA:34:DF:1E:9D:18:6D:2B:11:E5 Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5 Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5 Certificate serial: 6534F78F4E7734826E26AAB122C0FE3080529CAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 18:37:39 +0000 Manifest this update: Thu 08 Oct 2026 18:32:39 +0000 Manifest next update: Mon 12 Oct 2026 03:00:39 +0000 Files and hashes: 1: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=) 2: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=) 3: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=) 4: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: exeYpnFNeiz68/b8XQKBgtNuYedob126DimDh8Gsi/A=) 5: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=) 6: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=) 7: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=) 8: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=) 9: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=) 10: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=) 11: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=) 12: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=) 13: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=) 14: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=) 15: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=) 16: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=) 17: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=) 18: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:34:f7:8f:4e:77:34:82:6e:26:aa:b1:22:c0:fe:30:80:52:9c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5 Validity Not Before: Oct 8 18:32:39 2026 GMT Not After : Oct 12 03:00:39 2026 GMT Subject: CN=3BA99A738036CC159A0DAA34DF1E9D186D2B11E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:93:93:34:39:07:2f:02:df:58:b4:87:74: a1:13:1b:84:93:d4:24:1e:96:dc:d5:73:e1:44:d8: 82:af:70:65:6b:9d:1b:c1:3a:48:26:f5:48:b0:99: b2:73:fd:98:0f:ed:5b:9e:7b:96:73:4d:be:ea:31: 73:ba:dd:d4:4a:a7:61:65:f8:02:45:83:09:f6:b1: 43:bb:05:9f:48:c6:01:e1:37:32:97:c2:2e:dd:07: 7c:d9:7c:12:0c:b8:fc:54:9a:5c:74:2c:b4:e6:d2: 21:7a:cc:30:aa:25:14:ba:f3:e8:27:98:97:05:26: 75:42:e5:a0:8e:10:c5:02:3a:14:5c:80:ca:fd:ce: dd:51:7a:32:ab:d6:a8:0e:42:c9:8b:09:df:bf:a5: 82:fd:80:b0:85:a5:c1:c7:df:69:fd:57:2a:13:ea: 29:39:04:c7:9e:97:df:1a:08:c7:87:a7:55:ee:3f: fc:80:87:98:d0:15:91:bc:3b:a5:bc:d4:58:79:22: a5:70:fb:81:d1:29:e5:81:1f:a4:97:81:21:ee:34: d2:7e:70:69:11:7f:14:ae:0b:45:84:c2:87:fd:69: 1b:42:d5:84:0c:91:44:7b:77:dd:34:86:cc:b3:55: 49:78:58:eb:08:2b:75:92:37:12:c3:0f:60:c5:10: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:9A:73:80:36:CC:15:9A:0D:AA:34:DF:1E:9D:18:6D:2B:11:E5 X509v3 Authority Key Identifier: keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:29:c8:a7:4c:97:80:1e:86:dc:83:8f:2d:9a:4d:77:df:db: 49:28:dc:a8:8c:b0:c0:38:c9:d0:db:67:60:d1:26:de:f2:9a: 11:09:28:c2:fa:25:be:d5:76:1c:b7:6d:27:e6:f8:8a:bb:02: d9:b9:47:48:ab:ae:a6:66:25:7c:1b:04:09:de:a7:47:d8:e4: 9e:c0:1e:64:83:cf:f8:b4:04:bc:51:fc:a6:1c:43:b0:03:e5: a6:21:0c:8e:35:7c:32:22:24:d5:86:6e:31:35:bb:b7:e3:22: 25:ee:df:c9:71:19:73:01:0d:dc:36:a5:1e:0c:dc:db:8c:e3: 91:65:2d:48:03:39:8e:65:02:0c:a7:14:24:35:8e:74:2a:28: ff:f9:83:f0:b7:83:7c:d2:48:02:ec:a0:e0:57:c9:eb:0d:33: df:15:5b:8a:a8:e1:73:0e:58:60:fb:3a:0e:4a:d2:b5:32:ec: af:39:45:e4:26:a0:07:ad:c0:dc:83:85:9c:26:17:a3:2d:bf: 4f:f1:3e:a2:a4:3e:63:91:28:1c:2d:5c:60:5a:d8:3c:b5:bd: 9e:b3:ad:fe:41:cd:5c:e3:a0:86:01:8d:54:bf:22:ac:43:ae: 93:58:a3:7c:95:78:7b:98:13:66:ee:53:7c:71:33:d7:0d:ad: 28:bd:9a:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZTT3j053NIJuJqqxIsD+MIBSnK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIy M0JGQzNGNTAeFw0yNjEwMDgxODMyMzlaFw0yNjEwMTIwMzAwMzlaMDMxMTAvBgNV BAMTKDNCQTk5QTczODAzNkNDMTU5QTBEQUEzNERGMUU5RDE4NkQyQjExRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgZOTNDkHLwLfWLSHdKETG4ST 1CQeltzVc+FE2IKvcGVrnRvBOkgm9UiwmbJz/ZgP7Vuee5ZzTb7qMXO63dRKp2Fl +AJFgwn2sUO7BZ9IxgHhNzKXwi7dB3zZfBIMuPxUmlx0LLTm0iF6zDCqJRS68+gn mJcFJnVC5aCOEMUCOhRcgMr9zt1RejKr1qgOQsmLCd+/pYL9gLCFpcHH32n9VyoT 6ik5BMeel98aCMeHp1XuP/yAh5jQFZG8O6W81Fh5IqVw+4HRKeWBH6SXgSHuNNJ+ cGkRfxSuC0WEwof9aRtC1YQMkUR7d900hsyzVUl4WOsIK3WSNxLDD2DFED31AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO6mac4A2zBWaDao03x6dGG0rEeUwHwYDVR0j BBgwFoAUzuD7Cl5Nqax9eMX8jwPZqyO/w/UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0NzkyMzcxNS8xL0NFRTBGQjBBNUU0REE5QUM3RDc4QzVGQzhGMDNE OUFCMjNCRkMzRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIyM0JGQzNGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc5MjM3MTUvMS9DRUUwRkIwQTVFNERB OUFDN0Q3OEM1RkM4RjAzRDlBQjIzQkZDM0Y1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKinIp0yXgB6G 3IOPLZpNd9/bSSjcqIywwDjJ0NtnYNEm3vKaEQkowvolvtV2HLdtJ+b4irsC2blH SKuupmYlfBsECd6nR9jknsAeZIPP+LQEvFH8phxDsAPlpiEMjjV8MiIk1YZuMTW7 t+MiJe7fyXEZcwEN3DalHgzc24zjkWUtSAM5jmUCDKcUJDWOdCoo//mD8LeDfNJI Auyg4FfJ6w0z3xVbiqjhcw5YYPs6DkrStTLsrzlF5CagB63A3IOFnCYXoy2/T/E+ oqQ+Y5EoHC1cYFrYPLW9nrOt/kHNXOOghgGNVL8irEOuk1ijfJV4e5gTZu5TfHEz 1w2tKL2acQ== -----END CERTIFICATE-----Generated at Fri Oct 9 02:28:17 2026 by rpki-client