$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json) Hash identifier: nH8n8TC/TjSAD8poN04iNMhLYA45sLQX1G9gVpVH+Es= Subject key identifier: E8:19:1D:F8:D7:51:8E:BC:8C:B1:BD:80:F3:BA:8E:2E:66:8F:32:A4 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 0701F8C4D1463FB01436C7FBA0B9FE2A1375D064 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft Manifest number: CE Signing time: Sat 10 Oct 2026 08:19:29 +0000 Manifest this update: Sat 10 Oct 2026 08:14:29 +0000 Manifest next update: Tue 13 Oct 2026 17:06:29 +0000 Files and hashes: 1: 34332e3232372e3135362e302f32342d3234203d3e203539303337.roa (hash: f8k2uHJkxlDOHk6U2wcq6Y9MtTN6Ns1VpmNNEm8tdvI=) 2: 34332e3232372e3135322e302f32322d3232203d3e203539303337.roa (hash: QIz3TKxpZgnoUcA1hl9WKpzeLVBTQ+JGjmxOuKy4GrQ=) 3: 3130332e34362e37322e302f32312d3231203d3e203539303337.roa (hash: oKFr93oc522lAnBsLoH0ODIBsn4nvsSfOPo/OuULMAs=) 4: 3130332e34362e3133362e302f32322d3232203d3e203539303337.roa (hash: D2kMyrr7bw9DRjkS5nUJqTdgGRDaclhkEIprxy+b880=) 5: 3130332e34362e31322e302f32322d3232203d3e203539303337.roa (hash: ywzwxdSlzCtlBPbJIW2oRBJRpuYa2If5IjjWIHmsM5Q=) 6: 34332e3232382e302e302f32322d3232203d3e203539303337.roa (hash: WIIM6WznzsN69nFg27fgZKP/ipX97t44tdGInDFlG60=) 7: 34332e3232382e34302e302f32312d3231203d3e203539303337.roa (hash: qeXeR1451IWjM2MaVOFH13EgA6uzkpa7Bb5PHeLdhv0=) 8: 34332e3232382e36342e302f32312d3231203d3e203539303337.roa (hash: LDzIRzb+kpK0iSRjCFPcMNG5IzX1u7FVWHoKXtw3pVg=) 9: 3130332e34362e3132382e302f32312d3231203d3e203539303337.roa (hash: gUAtSKWCG2dmoSdNr2GAVffzXAEmzrCj2y4haWCVI/Y=) 10: 34332e3232372e3136302e302f32302d3230203d3e203539303337.roa (hash: mYKkDD8Z0mIsKYeGiTjEGbCj6sBVC9uFi50oRb7vO8w=) 11: 3130332e34362e36342e302f32322d3232203d3e203539303337.roa (hash: PP+OXL9whfeB4jl7/Wt2OAcPI9dw/FLp5oC1kYScsfs=) 12: 34332e3232372e3231362e302f32312d3231203d3e203539303337.roa (hash: eOdDSpohvIQaRUhNCKd/AludGOi6DkSOuO5M4MbkIhU=) 13: 34332e3232372e3135382e302f32332d3233203d3e203539303337.roa (hash: xLUQrK7HXMisNWpcI4murhTAbAVLoUH7WMnjC6mgx+k=) 14: 34332e3232352e3138302e302f32322d3232203d3e203539303337.roa (hash: SEJHMfLUSI9Nyo4CW7SdPMIHAjmkg8cZO26hzd1up1E=) 15: 34332e3232382e32342e302f32312d3231203d3e203539303337.roa (hash: +Mmz62MyqPj7tvMxl3lF/Y1asGlPdV6BhH2hlmm7ZV4=) 16: 34332e3232372e3139342e302f32332d3233203d3e203539303337.roa (hash: FvxvtfB1pPaIDUCFL2kbFsszoKdUHIds2+TRH0JsnZk=) 17: 34332e3232382e382e302f32312d3231203d3e203539303337.roa (hash: PHN/5/xP2k7xFIXMNFI3gkfrjNxg+7yOL+A3kfav0kw=) 18: 34332e3232382e31362e302f32312d3231203d3e203539303337.roa (hash: rgr3Igl4YqRPWKPLPI5NqRfuCLNo98whE5uG5eCp4KY=) 19: 3130332e34392e3130382e302f32322d3232203d3e203539303337.roa (hash: Pe7NMueOxrfJXqC0NHkvbeXsXiRDcuwLlpUM9Y9uVJQ=) 20: 3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (hash: ydpc8OpnVnfHvAryBOlT6Mz/3uQLnQeuyTk6X+FwZF8=) 21: 34332e3232372e3139362e302f32322d3232203d3e203539303337.roa (hash: 7zw6/gtCTl50gOBT8n2iBD5ACi9b6uueqr2xJfludOs=) 22: 34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (hash: vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=) 23: 34332e3233302e37322e302f32322d3232203d3e203539303337.roa (hash: bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=) 24: 323430333a316638303a3a2f33322d3332203d3e2030.roa (hash: C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=) 25: 34332e3232372e3230382e302f32312d3231203d3e203539303337.roa (hash: bo1ZP0YzQU1rJ2s6NixhslV0CR6fL1oWv36KgCoRWTA=) 26: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: w4QeSd8aC71sfJ9vuliRfZbU+eM1VBI/xyM2CLXudiA=) 27: 3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (hash: HNLmQn8lLO9Uu02GIjGzPHKTe0HMbM+3HCSS9Z1OiFk=) 28: 34332e3232382e34382e302f32302d3230203d3e203539303337.roa (hash: CzpiszzKgANc2Lot7VkDYrpJHE4Ux4uH0np9rBUcL3c=) 29: 3130332e34362e33322e302f31392d3139203d3e203539303337.roa (hash: NcQzYetXCMxeJYxBzuzgBArjI8Q+AwsvzNwE+2b9lw0=) 30: 3130332e34362e31362e302f32302d3230203d3e203539303337.roa (hash: L1X3KvJMBCddXtzpgZGgETHC1CyJALdanfpgny8ufvQ=) 31: 34332e3232382e342e302f32332d3233203d3e203539303337.roa (hash: kzKiIsvxw3cDPYwwGMRS7ndjvujNgDjAr1FO8WGOxg0=) 32: 3130332e34362e38302e302f32302d3230203d3e203539303337.roa (hash: VM9UgyFDP8OacfKzHanvtWsJQyUyLRlw9EFxofOZsdA=) 33: 34332e3232372e3230302e302f32312d3231203d3e203539303337.roa (hash: hTp3pYGtwIReZ3YlyeCyX6yn0YsVyG831tK3z0ykMWU=) 34: 3130332e34362e36382e302f32342d3234203d3e203539303337.roa (hash: hWv/xnaXctv4tbQZt1+mHXpK7XR8uORN9eAUseujZyA=) 35: 34332e3232382e362e302f32342d3234203d3e203539303337.roa (hash: nxwj9rXkme8ywNqPqilfOQRX08ia+zFuoJP/pXWEMu8=) 36: 3130332e34362e39362e302f31392d3139203d3e203539303337.roa (hash: 4ho5GfdYPdk7Q9EI+slTRKjHENffO7eayNCTJEvE6Iw=) 37: 34332e3232372e3137362e302f32312d3231203d3e203539303337.roa (hash: gGI6VfwnsWiX6Xt4eelEH9yUymsgRx5+rq1tGILXWuw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:01:f8:c4:d1:46:3f:b0:14:36:c7:fb:a0:b9:fe:2a:13:75:d0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: Oct 10 08:14:29 2026 GMT Not After : Oct 13 17:06:29 2026 GMT Subject: CN=E8191DF8D7518EBC8CB1BD80F3BA8E2E668F32A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:ec:ed:8a:d9:18:0a:11:7a:58:5c:fb:3c: b5:cf:d7:1a:d2:ad:40:3b:f5:0c:c4:26:8a:92:30: 1f:a2:2d:f0:22:d4:a6:c3:cc:a2:8a:e8:6e:fa:b3: 5e:f0:b2:75:9f:d2:96:34:5a:97:df:b3:27:c0:f9: 4f:cf:d5:5f:18:c0:53:fe:82:01:6d:48:45:01:73: 49:9e:65:eb:d4:51:25:c7:fa:77:cf:35:97:7d:cb: f7:f5:74:52:bd:b0:c2:81:68:85:a6:dc:f6:d0:6f: ba:94:17:7d:b4:51:c9:e2:8b:1f:a1:d1:c5:4f:f3: 7c:69:97:af:ac:e4:e8:11:a0:7e:06:73:2f:ef:b4: 93:7c:4a:55:dc:64:bf:50:f1:19:d9:8d:5c:9d:2a: cb:6d:26:9d:bc:7d:32:81:40:b0:d5:ec:b9:db:33: 2a:c9:61:53:12:85:42:74:e2:db:0d:3e:2d:5b:81: 0f:73:f7:f8:30:c4:e4:cf:d5:d5:2f:99:6d:e0:73: 19:29:b9:ff:c0:39:c7:5f:00:6c:bc:82:e7:04:c0: 24:d8:01:d8:e0:51:55:2b:97:70:de:c0:03:fb:c4: 9e:bb:a0:5b:56:16:46:6a:07:fe:b6:20:9d:de:71: 7f:6a:a7:08:a0:3e:d6:b5:56:c0:92:00:25:3c:17: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:19:1D:F8:D7:51:8E:BC:8C:B1:BD:80:F3:BA:8E:2E:66:8F:32:A4 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:de:07:54:ef:bc:d4:9a:a1:65:51:39:b7:ee:83:04:26:a5: 05:8d:3f:d5:e3:b2:01:e4:c2:e5:d2:c6:0b:b3:81:9a:2c:e1: e0:c3:ef:6d:0a:1b:c7:69:18:92:19:7a:02:53:63:62:c2:c4: 15:9f:29:b5:d3:a5:4c:7b:d9:1b:55:84:b1:f3:25:f5:45:87: 04:ad:d3:77:24:16:5f:62:1b:4f:d4:b3:24:bf:2c:a4:76:03: 84:70:4b:b9:88:27:d5:c2:c8:96:ff:60:27:19:43:8b:92:e1: ec:e0:2c:9e:87:48:d4:f6:23:98:a0:94:97:13:dc:47:58:e7: a3:de:fb:73:6c:cb:87:7a:94:34:90:1b:13:29:7b:bf:f7:b4: 33:ee:dc:67:43:d6:89:28:68:c2:ce:3b:0a:4d:63:32:59:12: e1:e0:65:2a:b0:91:59:07:46:66:04:33:63:29:ff:49:fa:60: 95:6b:25:41:21:55:0e:da:4d:e2:55:f1:02:60:25:7f:85:6c: f2:9c:0c:64:ab:64:ec:5d:2e:e8:a3:09:20:76:82:b2:56:da: b4:78:a3:7a:dd:28:57:60:08:23:d4:35:58:14:cc:d1:00:b5: 2f:5b:de:ec:ca:68:db:c8:31:b1:d5:b1:be:ca:44:0f:e4:de: e2:0d:6f:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBwH4xNFGP7AUNsf7oLn+KhN10GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjEwMTAwODE0MjlaFw0yNjEwMTMxNzA2MjlaMDMxMTAvBgNV BAMTKEU4MTkxREY4RDc1MThFQkM4Q0IxQkQ4MEYzQkE4RTJFNjY4RjMyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GuztitkYChF6WFz7PLXP1xrS rUA79QzEJoqSMB+iLfAi1KbDzKKK6G76s17wsnWf0pY0WpffsyfA+U/P1V8YwFP+ ggFtSEUBc0meZevUUSXH+nfPNZd9y/f1dFK9sMKBaIWm3PbQb7qUF320Ucniix+h 0cVP83xpl6+s5OgRoH4Gcy/vtJN8SlXcZL9Q8RnZjVydKsttJp28fTKBQLDV7Lnb MyrJYVMShUJ04tsNPi1bgQ9z9/gwxOTP1dUvmW3gcxkpuf/AOcdfAGy8gucEwCTY AdjgUVUrl3DewAP7xJ67oFtWFkZqB/62IJ3ecX9qpwigPta1VsCSACU8F8lbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6Bkd+NdRjryMsb2A87qOLmaPMqQwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5 NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt4HVO+81Jqh ZVE5t+6DBCalBY0/1eOyAeTC5dLGC7OBmizh4MPvbQobx2kYkhl6AlNjYsLEFZ8p tdOlTHvZG1WEsfMl9UWHBK3TdyQWX2IbT9SzJL8spHYDhHBLuYgn1cLIlv9gJxlD i5Lh7OAsnodI1PYjmKCUlxPcR1jno977c2zLh3qUNJAbEyl7v/e0M+7cZ0PWiSho ws47Ck1jMlkS4eBlKrCRWQdGZgQzYyn/SfpglWslQSFVDtpN4lXxAmAlf4Vs8pwM ZKtk7F0u6KMJIHaCslbatHijet0oV2AII9Q1WBTM0QC1L1ve7Mpo28gxsdWxvspE D+Te4g1vWg== -----END CERTIFICATE-----Generated at Mon Oct 12 06:37:24 2026 by rpki-client