$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: kUqvmkSLfoPcHmJ8tQOYjRQpnuZg9gtf7NtuG4e4qCg= Subject key identifier: F3:E0:4C:2D:4D:1F:9C:80:60:F8:BA:98:88:72:A7:AE:C2:3D:26:A5 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 2AE7DF4D13B3CEEC9505A1E45611B53BEC1BBA6C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: CD Signing time: Mon 12 Oct 2026 08:51:49 +0000 Manifest this update: Mon 12 Oct 2026 08:46:49 +0000 Manifest next update: Thu 15 Oct 2026 12:18:49 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: Ogy+QCAfOZhfcY33SgPr1pWgRNxk4PAHha4gihH7l38=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e7:df:4d:13:b3:ce:ec:95:05:a1:e4:56:11:b5:3b:ec:1b:ba:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Oct 12 08:46:49 2026 GMT Not After : Oct 15 12:18:49 2026 GMT Subject: CN=F3E04C2D4D1F9C8060F8BA988872A7AEC23D26A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:80:8e:90:91:bb:53:bf:f5:1d:9b:1e:75: 1b:05:1b:3a:fc:d7:b5:1d:9c:9f:a0:96:d6:c6:0f: 87:41:8e:1d:91:25:6b:ea:a5:48:df:9a:3f:11:13: 36:a5:30:9e:48:c3:0c:22:f9:07:41:e5:15:bf:6d: 22:e9:c8:55:d8:23:0c:78:a0:32:06:3c:c5:7b:82: a3:48:30:51:09:f1:9c:ca:69:7d:62:fb:2f:48:2d: 30:53:fe:f1:c3:74:7e:1e:b8:97:3d:6b:16:bf:ee: e3:0d:a1:79:8a:63:db:9f:56:15:fd:85:f5:c8:a1: 1c:94:d2:eb:84:02:53:d8:c3:03:bc:a3:ce:67:d0: 6d:bf:6e:21:39:15:64:bf:77:50:9f:d1:2a:ba:58: a0:ba:49:58:d8:04:ec:3d:08:5e:db:f4:fa:24:3d: f5:ba:27:7b:69:fc:4f:2d:4c:1f:6b:02:1f:1c:7b: df:b8:00:a4:f4:9f:5e:6c:df:e8:a0:34:a1:58:cd: bd:18:09:46:e6:a5:9a:73:36:2c:66:9d:fe:74:e6: bd:dd:63:07:59:ad:3f:c9:74:ce:c1:10:de:a3:5e: a4:e8:06:7e:07:fc:7a:12:b7:96:05:d8:72:e1:1d: ef:10:0b:67:e8:fb:b6:15:83:7a:de:56:ed:10:5e: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E0:4C:2D:4D:1F:9C:80:60:F8:BA:98:88:72:A7:AE:C2:3D:26:A5 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:52:a9:32:58:fc:bf:67:cd:34:39:7f:3f:73:f7:46:4e:81: 27:c8:76:46:52:5d:25:ad:8f:65:5b:1f:6c:0b:e1:8b:6f:01: ef:84:fb:fe:3e:18:59:2a:56:d7:ab:1f:f8:d3:b6:ee:10:b3: 2a:60:f1:18:e2:7b:d9:70:c4:85:4f:a9:3e:f7:d6:16:04:d0: 73:ea:e0:f0:95:8d:f4:e1:b1:50:ed:03:77:6d:4d:13:76:f8: 41:b3:89:86:1d:63:5b:9c:41:17:fc:d2:56:39:89:3d:06:1b: 78:cd:44:03:fd:12:a2:65:28:2f:b3:77:8d:ee:c7:28:cb:b9: 45:77:48:76:49:06:f5:51:6a:1d:e0:e4:ba:36:5e:dc:7b:20: 94:26:c0:8d:33:0b:9e:45:8e:f0:8e:07:57:9f:c1:43:a1:ea: eb:3a:28:94:66:37:76:94:aa:fc:f4:d0:f9:8d:a5:99:1e:be: d2:1c:b9:a5:1f:05:55:6f:0d:5f:f9:28:76:9c:40:35:8c:b2: f3:e7:b7:07:13:7d:8a:5e:a8:1d:c4:f9:a6:8f:71:50:72:db: ea:1e:f9:98:94:44:0a:59:e0:16:12:b9:6f:c4:21:16:74:10: 35:98:98:24:b2:70:7b:59:55:45:f7:cf:46:6a:a4:71:a9:9b: 15:5e:ca:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKuffTROzzuyVBaHkVhG1O+wbumwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjEwMTIwODQ2NDlaFw0yNjEwMTUxMjE4NDlaMDMxMTAvBgNV BAMTKEYzRTA0QzJENEQxRjlDODA2MEY4QkE5ODg4NzJBN0FFQzIzRDI2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfUoCOkJG7U7/1HZsedRsFGzr8 17UdnJ+gltbGD4dBjh2RJWvqpUjfmj8REzalMJ5Iwwwi+QdB5RW/bSLpyFXYIwx4 oDIGPMV7gqNIMFEJ8ZzKaX1i+y9ILTBT/vHDdH4euJc9axa/7uMNoXmKY9ufVhX9 hfXIoRyU0uuEAlPYwwO8o85n0G2/biE5FWS/d1Cf0Sq6WKC6SVjYBOw9CF7b9Pok PfW6J3tp/E8tTB9rAh8ce9+4AKT0n15s3+igNKFYzb0YCUbmpZpzNixmnf505r3d YwdZrT/JdM7BEN6jXqToBn4H/HoSt5YF2HLhHe8QC2fo+7YVg3reVu0QXhM7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8+BMLU0fnIBg+LqYiHKnrsI9JqUwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVKpMlj8v2fN NDl/P3P3Rk6BJ8h2RlJdJa2PZVsfbAvhi28B74T7/j4YWSpW16sf+NO27hCzKmDx GOJ72XDEhU+pPvfWFgTQc+rg8JWN9OGxUO0Dd21NE3b4QbOJhh1jW5xBF/zSVjmJ PQYbeM1EA/0SomUoL7N3je7HKMu5RXdIdkkG9VFqHeDkujZe3HsglCbAjTMLnkWO 8I4HV5/BQ6Hq6zoolGY3dpSq/PTQ+Y2lmR6+0hy5pR8FVW8NX/kodpxANYyy8+e3 BxN9il6oHcT5po9xUHLb6h75mJREClngFhK5b8QhFnQQNZiYJLJwe1lVRffPRmqk cambFV7Kjw== -----END CERTIFICATE-----Generated at Wed Oct 14 10:37:29 2026 by rpki-client