$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json) Hash identifier: DTcxy9qESoOi0yTp4bXEYuBm63nIkXQJvF1Q1ljESig= Subject key identifier: 8E:49:43:E2:CE:4B:9B:C8:D9:5B:72:4A:30:70:C9:0B:D1:AB:93:7D Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 69AA7509BCFEDB7D3D4448BA635EFD72F46FC08F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft Manifest number: D1 Signing time: Fri 09 Oct 2026 10:43:18 +0000 Manifest this update: Fri 09 Oct 2026 10:38:18 +0000 Manifest next update: Mon 12 Oct 2026 19:28:18 +0000 Files and hashes: 1: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=) 2: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=) 3: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=) 4: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=) 5: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=) 6: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: MnvsFAiS/aXtPyR47aGYD754iEtA183mL7FFwOOCAh8=) 7: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=) 8: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=) 9: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=) 10: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=) 11: 3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (hash: Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=) 12: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=) 13: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=) 14: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=) 15: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=) 16: 3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (hash: 95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=) 17: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=) 18: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=) 19: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=) 20: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=) 21: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=) 22: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=) 23: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=) 24: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=) 25: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=) 26: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=) 27: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=) 28: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=) 29: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=) 30: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (hash: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=) 31: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=) 32: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=) 33: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=) 34: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (hash: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=) 35: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=) 36: 3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (hash: 5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=) 37: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=) 38: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=) 39: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=) 40: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=) 41: 3130332e3231332e3136302e302f31392d3139203d3e203633363437.roa (hash: Q1hWstIlbWyYLHeSa+nYYB06fwRTOhKBBOWA+/njAAw=) 42: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=) 43: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 19:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:aa:75:09:bc:fe:db:7d:3d:44:48:ba:63:5e:fd:72:f4:6f:c0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Oct 9 10:38:18 2026 GMT Not After : Oct 12 19:28:18 2026 GMT Subject: CN=8E4943E2CE4B9BC8D95B724A3070C90BD1AB937D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:ba:f7:72:21:35:3e:f0:44:70:f7:06:7f: f7:a2:78:c1:ab:8c:dc:0f:89:59:3e:c6:e6:9c:1e: 2c:5a:c4:49:aa:31:58:4e:1a:90:cc:16:61:80:34: 79:5c:56:b1:29:76:d2:68:87:ae:68:47:95:4d:bf: af:94:ad:f6:80:f7:da:d7:69:77:b9:f3:16:11:1b: a3:8a:a4:17:62:e4:8f:6f:30:f8:b0:25:80:ac:34: 7f:ba:2b:69:0c:90:a1:9c:27:d4:2a:4e:d3:b1:cf: a5:33:64:64:72:11:99:9c:50:ba:3f:c2:db:39:d0: 1c:5a:71:26:53:0f:48:67:42:cd:b1:07:c0:44:35: 7a:4b:c2:9d:56:ee:12:e4:7a:a3:37:d0:5f:ae:2b: 0e:57:87:9e:a7:54:c6:3f:80:ef:83:e8:64:3d:9f: 20:fd:d7:7b:81:b0:9d:7d:19:84:01:04:3c:f8:be: 97:db:97:64:5a:5c:29:81:59:6b:b1:b2:55:62:96: 9c:ad:68:52:5c:a6:41:c5:eb:3d:19:f4:d8:e1:55: 33:73:74:ba:9c:fb:33:a1:34:38:dc:ec:29:e3:f6: 0f:06:60:c5:4d:a3:f0:a9:c7:af:bb:c6:a3:e5:2d: 73:d7:ae:f1:74:c4:28:e8:97:d5:c7:bd:0b:fc:8c: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:49:43:E2:CE:4B:9B:C8:D9:5B:72:4A:30:70:C9:0B:D1:AB:93:7D X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:43:cc:65:8d:0a:b9:0e:ed:cb:66:0a:df:98:6b:23:d6:ac: 23:9f:ec:5f:35:20:ab:ae:13:81:fe:8b:4e:99:9e:38:67:ee: c7:63:04:9e:d8:1d:57:e1:c6:bf:cf:5f:7d:83:a5:0b:2e:ac: 26:c9:8a:e1:3f:5d:31:2c:1d:6c:2e:ed:c5:bd:5c:57:fe:29: 1c:2b:d7:87:d2:83:8b:26:ac:11:2d:7c:70:3a:68:f3:47:72: 3f:a8:17:52:09:0e:a7:ed:1e:a4:ea:6f:25:9a:29:e6:87:0f: 0e:a6:9c:d8:7a:24:2a:08:0a:a2:f9:fa:2e:03:55:b9:a4:cf: c7:54:be:64:26:24:9d:50:5b:29:24:c5:fa:55:d8:e1:4e:f2: af:66:5f:f6:80:17:3c:b4:2a:bf:ff:b7:5a:68:73:64:50:50: 64:de:57:f3:e0:29:b5:ea:b3:25:16:a5:34:82:6c:59:c9:71: 4c:31:a5:1b:73:73:52:44:a4:35:56:99:4e:04:2e:63:3f:e5: 27:4e:2e:b2:dd:b2:90:f5:f7:7d:0d:2c:f4:02:5f:2b:ac:ed: 48:c7:e6:65:1a:47:54:06:d6:19:e1:f0:84:49:3a:ba:b1:b6: 91:9e:94:2a:f5:31:e1:12:51:af:c4:a0:dd:f2:10:57:b6:dd: 6c:d7:60:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaap1Cbz+2309REi6Y179cvRvwI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjEwMDkxMDM4MThaFw0yNjEwMTIxOTI4MThaMDMxMTAvBgNV BAMTKDhFNDk0M0UyQ0U0QjlCQzhEOTVCNzI0QTMwNzBDOTBCRDFBQjkzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPLr3ciE1PvBEcPcGf/eieMGr jNwPiVk+xuacHixaxEmqMVhOGpDMFmGANHlcVrEpdtJoh65oR5VNv6+UrfaA99rX aXe58xYRG6OKpBdi5I9vMPiwJYCsNH+6K2kMkKGcJ9QqTtOxz6UzZGRyEZmcULo/ wts50BxacSZTD0hnQs2xB8BENXpLwp1W7hLkeqM30F+uKw5Xh56nVMY/gO+D6GQ9 nyD913uBsJ19GYQBBDz4vpfbl2RaXCmBWWuxslVilpytaFJcpkHF6z0Z9NjhVTNz dLqc+zOhNDjc7Cnj9g8GYMVNo/Cpx6+7xqPlLXPXrvF0xCjol9XHvQv8jD5jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjklD4s5Lm8jZW3JKMHDJC9Grk30wHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC9DMUM0OEY5NTkzRDZB MTlEQkQzRkFDQTlDNkVGQTVCNTVBRDNGMzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0PMZY0KuQ7t y2YK35hrI9asI5/sXzUgq64Tgf6LTpmeOGfux2MEntgdV+HGv89ffYOlCy6sJsmK 4T9dMSwdbC7txb1cV/4pHCvXh9KDiyasES18cDpo80dyP6gXUgkOp+0epOpvJZop 5ocPDqac2HokKggKovn6LgNVuaTPx1S+ZCYknVBbKSTF+lXY4U7yr2Zf9oAXPLQq v/+3WmhzZFBQZN5X8+ApteqzJRalNIJsWclxTDGlG3NzUkSkNVaZTgQuYz/lJ04u st2ykPX3fQ0s9AJfK6ztSMfmZRpHVAbWGeHwhEk6urG2kZ6UKvUx4RJRr8Sg3fIQ V7bdbNdg9w== -----END CERTIFICATE-----Generated at Sat Oct 10 17:47:13 2026 by rpki-client