$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: NvLi/BFnSdPLkniS9h37DuLbDFYgFPNempFwRJARSNU= Subject key identifier: E4:77:B8:EF:4A:3D:0D:06:CF:E9:D7:F4:5B:70:6E:FF:1F:2F:18:28 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 757903E7A68388260871569482DBAA780ECC5023 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: CF Signing time: Wed 14 Oct 2026 01:43:24 +0000 Manifest this update: Wed 14 Oct 2026 01:38:24 +0000 Manifest next update: Sat 17 Oct 2026 02:09:24 +0000 Files and hashes: 1: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 2: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: zsDWCyTEy59EXvKL5KcpgyO5UC5EieUElsuwhqkvBPM=) 3: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 4: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 5: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 6: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 02:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:79:03:e7:a6:83:88:26:08:71:56:94:82:db:aa:78:0e:cc:50:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Oct 14 01:38:24 2026 GMT Not After : Oct 17 02:09:24 2026 GMT Subject: CN=E477B8EF4A3D0D06CFE9D7F45B706EFF1F2F1828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:84:8c:02:4d:8e:6b:26:e4:6f:4a:55:c9: fb:c8:0b:10:a5:c7:0f:a8:23:dd:2e:33:5b:59:f8: 41:93:ba:67:fc:53:14:2c:d8:3d:00:9d:c1:33:a2: 4d:a2:ce:11:be:d7:be:14:d5:dc:13:a7:f5:b4:01: cb:b3:0d:be:00:1f:f7:94:b3:a1:14:80:4f:9f:da: b3:83:ff:eb:d9:eb:8f:c7:93:cf:a6:55:19:ab:14: c5:6a:f5:ab:f6:4f:54:70:c1:82:5f:f1:f6:af:4c: f3:b0:4f:1a:0a:c6:c0:5d:09:db:bc:d1:5a:bf:52: 29:d3:db:11:5a:33:fe:bf:78:14:7c:2a:67:22:cb: 23:72:cc:1c:e0:eb:5b:e5:30:7e:dc:f7:d6:f2:38: db:bb:d2:d7:a5:17:b9:f3:92:21:f4:7e:89:03:a2: 96:8d:ae:2a:97:cd:3c:f9:38:45:9d:dc:28:ae:9d: f2:1b:cd:c3:94:70:01:a1:69:25:b6:6d:21:10:b8: d9:60:5e:a5:0a:45:5f:c9:f8:0f:60:ae:a1:c7:d0: be:81:33:0c:e1:05:1d:34:da:ab:90:d1:a6:d7:db: 8c:0e:e2:10:fd:be:72:4a:64:cb:bd:46:49:73:2a: b6:36:21:a2:f2:cf:2d:ad:ec:ef:47:88:50:67:b4: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:77:B8:EF:4A:3D:0D:06:CF:E9:D7:F4:5B:70:6E:FF:1F:2F:18:28 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d8:fb:c2:71:60:d0:a4:4f:70:95:b5:95:44:fb:56:3a:77: eb:a2:00:48:ff:f9:d5:c3:cb:e6:5c:31:99:fc:bc:79:84:dd: 67:87:31:1b:53:68:0b:41:f9:76:98:7a:a9:f9:fb:b9:ef:f7: 9f:5e:14:32:06:96:22:a5:6a:cd:4e:98:16:56:ee:cd:ae:3b: 95:50:f5:65:26:4d:ed:29:45:e3:60:11:f9:5f:7b:1b:0f:bc: 92:6a:bc:75:6f:86:17:8f:dd:49:a2:a4:fd:57:75:3d:4b:01: d8:53:e6:ff:17:bd:f6:1f:40:9f:4e:47:c9:2d:b7:44:bf:3c: d2:47:5a:11:82:c4:ee:3a:40:7e:68:bc:cd:38:bc:b4:2e:d4: 62:b8:2b:01:a8:52:b0:5b:eb:17:57:61:9f:05:76:46:89:04: 3c:1b:1c:c7:79:4f:50:46:bb:d0:83:30:6b:bd:f3:07:33:1a: 61:73:51:83:49:dc:6a:70:1a:d5:39:97:4d:36:39:77:43:a0: 6b:3a:52:b1:b4:74:8b:b3:6a:e3:99:b4:36:f7:37:b8:bb:e2: ad:a4:08:00:76:ed:9b:01:71:54:87:78:58:84:a0:df:98:37: fb:95:1c:dc:64:92:b6:03:45:b6:e7:87:83:2d:e4:d5:8c:f1: df:f9:52:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdXkD56aDiCYIcVaUgtuqeA7MUCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjEwMTQwMTM4MjRaFw0yNjEwMTcwMjA5MjRaMDMxMTAvBgNV BAMTKEU0NzdCOEVGNEEzRDBEMDZDRkU5RDdGNDVCNzA2RUZGMUYyRjE4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+foSMAk2Oaybkb0pVyfvICxCl xw+oI90uM1tZ+EGTumf8UxQs2D0AncEzok2izhG+174U1dwTp/W0AcuzDb4AH/eU s6EUgE+f2rOD/+vZ64/Hk8+mVRmrFMVq9av2T1RwwYJf8favTPOwTxoKxsBdCdu8 0Vq/UinT2xFaM/6/eBR8KmciyyNyzBzg61vlMH7c99byONu70telF7nzkiH0fokD opaNriqXzTz5OEWd3CiunfIbzcOUcAGhaSW2bSEQuNlgXqUKRV/J+A9grqHH0L6B MwzhBR002quQ0abX24wO4hD9vnJKZMu9RklzKrY2IaLyzy2t7O9HiFBntAm7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5He470o9DQbP6df0W3Bu/x8vGCgwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNj7wnFg0KRP cJW1lUT7Vjp366IASP/51cPL5lwxmfy8eYTdZ4cxG1NoC0H5dph6qfn7ue/3n14U MgaWIqVqzU6YFlbuza47lVD1ZSZN7SlF42AR+V97Gw+8kmq8dW+GF4/dSaKk/Vd1 PUsB2FPm/xe99h9An05HyS23RL880kdaEYLE7jpAfmi8zTi8tC7UYrgrAahSsFvr F1dhnwV2RokEPBscx3lPUEa70IMwa73zBzMaYXNRg0ncanAa1TmXTTY5d0OgazpS sbR0i7Nq45m0Nvc3uLviraQIAHbtmwFxVId4WISg35g3+5Uc3GSStgNFtueHgy3k 1Yzx3/lSJw== -----END CERTIFICATE-----Generated at Thu Oct 15 08:17:24 2026 by rpki-client