$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: oBlVkxf9WjWFt311IymvQHQx4UohYtHXJDOnBF2AV1s= Subject key identifier: 88:B6:F7:A9:A2:42:91:DA:AF:E9:9C:4D:70:97:6D:54:AA:FC:8A:CA Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 56DA0619C2E22FFBF940AFA107751E2BBA5E61CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: D1 Signing time: Fri 09 Oct 2026 08:38:16 +0000 Manifest this update: Fri 09 Oct 2026 08:33:16 +0000 Manifest next update: Mon 12 Oct 2026 11:09:16 +0000 Files and hashes: 1: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) 2: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 3: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: AyghAIb7oimNZAxFMJVpPbFmAKVIZfHq4sWJilf7aDA=) 4: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:da:06:19:c2:e2:2f:fb:f9:40:af:a1:07:75:1e:2b:ba:5e:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Oct 9 08:33:16 2026 GMT Not After : Oct 12 11:09:16 2026 GMT Subject: CN=88B6F7A9A24291DAAFE99C4D70976D54AAFC8ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:95:cf:35:ac:90:f1:b2:0d:5f:19:6a:8e: 1b:d8:70:96:b3:22:5b:2a:a5:1a:1d:e6:bc:28:e6: 50:8c:76:54:c0:fd:09:55:d7:b1:1f:1d:66:83:2d: 26:98:68:4d:71:bc:fa:99:b8:6a:75:80:0b:b1:32: e1:63:b6:ce:5e:b5:64:c7:93:ff:e7:12:71:8a:f5: be:c8:63:fd:8f:69:12:72:7a:1d:bd:59:02:c1:5a: 34:dd:77:d1:4a:ca:96:5d:46:96:25:b1:9c:45:f7: d9:08:aa:3c:b8:d0:34:51:bd:e0:1a:90:57:26:23: 34:90:7a:aa:e5:2e:11:5c:01:0b:3e:f0:f4:ff:cc: d6:d0:43:bd:21:67:1a:72:4e:a4:bb:a6:91:2d:19: 11:a8:28:40:81:0c:80:8b:c8:3a:f7:14:c2:28:5e: 3d:e8:36:90:f1:72:85:3c:a8:d5:f1:de:ea:9b:55: 98:54:eb:df:83:f3:eb:ec:d4:61:55:a5:29:b9:d6: 0a:b9:66:b6:65:88:31:2c:b5:ea:19:bd:04:9f:d9: 7e:4f:96:48:d5:b1:9e:49:c4:4e:09:32:9d:62:cb: ee:63:29:46:c8:80:6d:f3:b3:ea:f4:bf:a0:50:da: 25:cb:ed:16:79:3a:ef:5d:5b:61:eb:4d:40:a6:87: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B6:F7:A9:A2:42:91:DA:AF:E9:9C:4D:70:97:6D:54:AA:FC:8A:CA X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:25:9d:84:ee:5d:97:88:9b:cb:0f:63:a6:85:c6:a8:2d:32: 08:54:c3:01:66:ea:40:4a:f1:2a:07:17:aa:a1:ee:f9:2b:1f: 35:15:ab:a0:a0:cb:48:f6:be:11:c8:e6:2f:07:ef:86:8f:74: 55:90:43:82:b0:c7:11:33:10:60:65:69:ba:d3:40:61:86:0b: cc:db:f9:ff:fa:58:01:7c:b1:71:c9:d3:7b:45:21:1c:91:49: c4:d7:35:08:b8:23:5e:20:ae:33:82:f6:68:8b:ab:61:da:de: dc:59:21:72:a0:a5:ac:76:e3:4a:60:3d:91:42:4c:49:82:79: ef:65:63:d3:85:db:67:9a:74:8f:ba:bb:70:d1:0b:ea:27:fb: 03:dd:ae:4b:d5:e9:87:d0:2d:46:5d:5e:d7:49:aa:7a:45:23: 31:d8:b3:1b:71:74:e6:22:c3:4e:e0:83:12:96:89:e2:fa:54: 80:04:49:43:d6:58:f6:71:a9:38:f7:93:08:72:2c:4a:75:f6: c8:28:eb:f4:92:69:62:e3:be:d6:44:b6:34:cd:bd:59:1e:60: 48:76:ac:c3:77:f9:e5:b3:c2:d0:69:07:6d:fe:d9:5e:98:b2: 02:0c:f3:02:30:5a:fd:e4:ff:41:ea:15:b4:8f:8c:96:cd:6b: ab:61:26:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVtoGGcLiL/v5QK+hB3UeK7peYc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjEwMDkwODMzMTZaFw0yNjEwMTIxMTA5MTZaMDMxMTAvBgNV BAMTKDg4QjZGN0E5QTI0MjkxREFBRkU5OUM0RDcwOTc2RDU0QUFGQzhBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnepXPNayQ8bINXxlqjhvYcJaz IlsqpRod5rwo5lCMdlTA/QlV17EfHWaDLSaYaE1xvPqZuGp1gAuxMuFjts5etWTH k//nEnGK9b7IY/2PaRJyeh29WQLBWjTdd9FKypZdRpYlsZxF99kIqjy40DRRveAa kFcmIzSQeqrlLhFcAQs+8PT/zNbQQ70hZxpyTqS7ppEtGRGoKECBDICLyDr3FMIo Xj3oNpDxcoU8qNXx3uqbVZhU69+D8+vs1GFVpSm51gq5ZrZliDEsteoZvQSf2X5P lkjVsZ5JxE4JMp1iy+5jKUbIgG3zs+r0v6BQ2iXL7RZ5Ou9dW2HrTUCmhxlTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiLb3qaJCkdqv6ZxNcJdtVKr8isowHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCWdhO5dl4ib yw9jpoXGqC0yCFTDAWbqQErxKgcXqqHu+SsfNRWroKDLSPa+EcjmLwfvho90VZBD grDHETMQYGVputNAYYYLzNv5//pYAXyxccnTe0UhHJFJxNc1CLgjXiCuM4L2aIur Ydre3FkhcqClrHbjSmA9kUJMSYJ572Vj04XbZ5p0j7q7cNEL6if7A92uS9Xph9At Rl1e10mqekUjMdizG3F05iLDTuCDEpaJ4vpUgARJQ9ZY9nGpOPeTCHIsSnX2yCjr 9JJpYuO+1kS2NM29WR5gSHasw3f55bPC0GkHbf7ZXpiyAgzzAjBa/eT/QeoVtI+M ls1rq2EmyA== -----END CERTIFICATE-----Generated at Fri Oct 9 15:17:26 2026 by rpki-client