$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: qsU1XNl5PSJGmmLEQSQ2VQF7lrsMD9q8pxuIxYDgIYg= Subject key identifier: E2:44:53:4A:94:15:02:F8:0B:27:C9:25:70:CC:B4:E0:5F:5A:13:A1 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 765DCE6138120E0E4A907739E6EFAB30C2031788 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: C9 Signing time: Mon 12 Oct 2026 01:46:18 +0000 Manifest this update: Mon 12 Oct 2026 01:41:18 +0000 Manifest next update: Thu 15 Oct 2026 06:30:18 +0000 Files and hashes: 1: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 2: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 3: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 4: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: raP6JUpkk+NjEohfgc5Mw2dTK5mFRDL9lqVOyoGrc80=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5d:ce:61:38:12:0e:0e:4a:90:77:39:e6:ef:ab:30:c2:03:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Oct 12 01:41:18 2026 GMT Not After : Oct 15 06:30:18 2026 GMT Subject: CN=E244534A941502F80B27C92570CCB4E05F5A13A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:65:1f:dd:4d:22:95:a8:d3:95:8c:0f:79: 71:f6:8c:8b:3c:62:e3:04:b4:10:ea:77:33:6e:86: b2:92:e7:6b:7b:3e:7b:4a:eb:dc:b2:9f:5c:bd:6f: ae:25:09:24:f5:c2:40:3a:39:0b:e0:df:d7:80:dd: 4d:b7:6c:fc:13:9f:ed:dd:ff:f7:cc:3f:c6:4b:78: c6:e9:da:c8:42:f8:79:fb:33:c2:74:ba:4c:11:88: 26:da:ab:a3:58:c3:20:d5:5f:d2:f8:94:8f:bd:b3: 7d:0a:c8:ba:dd:02:48:b7:34:6a:b7:40:0a:66:30: 55:81:0b:a9:35:55:04:12:e3:66:df:e5:b3:e8:45: a8:b6:bb:c3:48:c7:fb:5f:83:9d:30:d5:13:60:95: fb:ca:1f:1b:5d:f9:15:65:01:19:f8:91:9d:ec:9d: 8c:37:90:0e:13:ac:5c:f3:93:7c:07:30:17:bd:a6: f7:37:ec:2d:80:1b:8b:a4:6e:3d:80:3f:0f:23:34: 1b:44:c9:18:15:f1:7f:d3:cb:18:7e:e1:25:de:f8: d6:60:72:5c:7d:d6:69:cc:82:e4:82:c4:f4:36:2c: 31:b1:d3:95:f4:73:9a:16:4b:e2:bf:9f:35:c4:03: 56:25:f7:a7:6c:ba:c1:13:9a:18:1a:4f:37:5f:c9: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:53:4A:94:15:02:F8:0B:27:C9:25:70:CC:B4:E0:5F:5A:13:A1 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b5:99:b7:0b:a3:f9:4e:8c:af:79:c7:d5:6c:b6:1c:0a:e3: d6:e5:c0:7a:1e:71:a9:1f:d3:d7:a4:a9:db:90:81:59:5d:5f: 00:ec:08:c7:85:55:8f:1f:48:fd:38:6b:48:64:4f:8f:bf:d9: f8:3a:d7:29:ab:fe:ba:00:43:9c:f1:47:b2:65:0a:55:5a:db: c5:3f:0e:62:20:60:c1:b4:cd:59:02:55:ed:8b:2f:03:62:48: 69:a2:1d:90:f7:9d:78:b4:43:9e:c6:90:b0:77:a8:35:35:ab: e0:a3:ab:73:43:34:74:2b:8f:ca:ce:3a:03:3a:d9:7e:29:b9: 62:fc:e3:e0:12:4c:47:f8:e1:ff:27:53:dc:b9:cc:99:cc:ca: f6:77:3a:ed:26:76:55:01:58:4a:f1:28:67:17:b5:aa:4b:9d: 5d:6b:6d:b0:92:cc:ae:63:a0:4c:80:45:56:13:31:ff:d5:30: fd:ba:28:47:c8:62:ac:a6:9b:1e:50:b6:64:5e:4a:b0:39:b4: c9:57:de:02:ac:67:a0:e2:1a:07:bd:88:e3:76:26:c9:d5:a4: 53:53:13:71:da:69:d8:a5:3e:b7:cc:08:ed:1a:ca:55:81:e5: 24:04:61:1c:7d:1f:61:02:8c:22:da:d8:c7:8f:ec:0d:9d:ff: 77:37:4c:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdl3OYTgSDg5KkHc55u+rMMIDF4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjEwMTIwMTQxMThaFw0yNjEwMTUwNjMwMThaMDMxMTAvBgNV BAMTKEUyNDQ1MzRBOTQxNTAyRjgwQjI3QzkyNTcwQ0NCNEUwNUY1QTEzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgS2Uf3U0ilajTlYwPeXH2jIs8 YuMEtBDqdzNuhrKS52t7PntK69yyn1y9b64lCST1wkA6OQvg39eA3U23bPwTn+3d //fMP8ZLeMbp2shC+Hn7M8J0ukwRiCbaq6NYwyDVX9L4lI+9s30KyLrdAki3NGq3 QApmMFWBC6k1VQQS42bf5bPoRai2u8NIx/tfg50w1RNglfvKHxtd+RVlARn4kZ3s nYw3kA4TrFzzk3wHMBe9pvc37C2AG4ukbj2APw8jNBtEyRgV8X/Tyxh+4SXe+NZg clx91mnMguSCxPQ2LDGx05X0c5oWS+K/nzXEA1Yl96dsusETmhgaTzdfyaD5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4kRTSpQVAvgLJ8klcMy04F9aE6EwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLWZtwuj+U6M r3nH1Wy2HArj1uXAeh5xqR/T16Sp25CBWV1fAOwIx4VVjx9I/ThrSGRPj7/Z+DrX Kav+ugBDnPFHsmUKVVrbxT8OYiBgwbTNWQJV7YsvA2JIaaIdkPedeLRDnsaQsHeo NTWr4KOrc0M0dCuPys46AzrZfim5Yvzj4BJMR/jh/ydT3LnMmczK9nc67SZ2VQFY SvEoZxe1qkudXWttsJLMrmOgTIBFVhMx/9Uw/booR8hirKabHlC2ZF5KsDm0yVfe AqxnoOIaB72I43YmydWkU1MTcdpp2KU+t8wI7RrKVYHlJARhHH0fYQKMItrYx4/s DZ3/dzdMLA== -----END CERTIFICATE-----Generated at Tue Oct 13 16:11:54 2026 by rpki-client