$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: KTKaUJjUUHBW1Ac+t0u9lI7ZBXuFK49fMP84LyeiJk4= Subject key identifier: 21:D0:AB:78:EE:6D:B9:BC:A7:59:B5:AE:CD:79:C5:B8:30:EB:2D:52 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 2F82310733AE5C08E6D1BE83BFBAAEF3BD4E5728 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: CE Signing time: Sat 10 Oct 2026 11:14:36 +0000 Manifest this update: Sat 10 Oct 2026 11:09:36 +0000 Manifest next update: Tue 13 Oct 2026 22:50:36 +0000 Files and hashes: 1: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 2: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 3: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 4: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 5: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 6: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 7: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 8: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 9: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 10: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 11: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 12: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 13: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 14: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 15: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 16: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 17: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 18: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 19: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 20: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 21: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 22: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 23: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: KTEuRS/yHBGGcVdhkA3B9CIakQjH90Z+aKSCjXN72Ig=) 24: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 25: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 26: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 27: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 28: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 29: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 30: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 31: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 32: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 33: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 34: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 35: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 36: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 37: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 38: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 39: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 40: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 41: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:82:31:07:33:ae:5c:08:e6:d1:be:83:bf:ba:ae:f3:bd:4e:57:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Oct 10 11:09:36 2026 GMT Not After : Oct 13 22:50:36 2026 GMT Subject: CN=21D0AB78EE6DB9BCA759B5AECD79C5B830EB2D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:e7:6d:15:d5:90:88:37:98:ef:2a:93:37: b4:6e:07:35:95:34:d7:a5:74:3c:7e:77:da:0b:12: 84:68:cd:fc:25:5e:59:55:bf:72:1f:46:57:33:64: 7a:14:1e:e7:09:80:cc:f3:96:a5:1b:14:84:99:d9: 63:b9:61:80:aa:d5:34:3c:95:2b:04:82:df:49:7c: 20:ef:ae:6a:ed:66:76:86:ff:49:95:ac:f9:0c:71: be:bf:c8:f2:04:a5:42:51:bf:17:ee:57:aa:f7:db: 45:47:e7:02:02:d2:3d:11:56:e0:53:26:88:ce:05: 40:ce:16:b7:c1:0e:b0:9f:ff:8f:62:ac:e1:7f:38: 8c:02:96:79:6a:83:11:5a:f5:8d:0e:0f:bd:78:82: 90:ef:bd:b9:33:34:c2:5f:c0:cc:3b:e7:05:11:c9: ee:d9:e8:71:40:e6:81:24:8a:f6:0e:b3:a4:80:d6: 1e:ff:ea:b2:b9:54:cf:e8:77:f0:e1:3e:37:90:6e: 0b:14:8b:3e:30:a3:46:36:fe:1e:02:c0:71:e7:6f: 77:c3:82:66:2e:7c:a5:8d:3a:f2:c5:1f:7a:bb:ef: 75:53:46:d0:64:71:c5:61:fc:9d:01:37:cd:be:b5: 73:09:5e:0c:30:c8:49:2b:9d:6a:14:dd:1c:af:c4: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:AB:78:EE:6D:B9:BC:A7:59:B5:AE:CD:79:C5:B8:30:EB:2D:52 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:31:ec:64:54:fa:e8:9d:e0:8b:1c:00:93:12:08:18:09:5b: 25:2c:86:65:65:61:2a:48:50:0c:2c:df:41:9a:5a:0e:0a:18: a8:46:df:4e:a7:b5:25:d3:97:72:3c:1a:f4:eb:46:98:03:f6: fb:33:c0:8a:9c:99:87:d0:1e:6e:e1:aa:42:1b:f2:f3:27:19: 36:47:e1:e2:c9:0c:cf:db:4d:88:5c:26:25:97:11:2c:e3:3a: 5f:5b:cd:af:ff:42:5e:60:76:45:9e:0e:fc:46:8e:93:de:ac: 21:1a:d1:96:6b:4d:79:3a:d8:a3:c3:ca:70:1a:ae:8e:5b:23: f1:23:b4:b3:65:2e:5f:ec:66:57:0b:5c:a6:98:02:0e:c3:16: a4:bc:80:21:ef:af:1d:13:af:25:b4:0b:1a:b9:37:3c:84:e3: 36:4c:6b:09:9b:e9:fc:2c:25:a3:45:f0:7e:f4:45:e1:12:be: b5:b2:7f:85:4f:e9:66:40:40:ee:62:2c:22:aa:0b:3a:e4:dd: 8a:df:81:af:98:74:0f:27:36:ba:62:ab:fa:44:8a:4d:30:c5: 53:fb:bf:36:f0:cf:ac:e7:36:44:2d:5a:8a:ab:19:ba:c6:13: e2:e7:3b:25:5c:75:67:8e:91:90:0c:7c:e7:13:6f:2f:44:37: fe:10:76:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL4IxBzOuXAjm0b6Dv7qu871OVygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjEwMTAxMTA5MzZaFw0yNjEwMTMyMjUwMzZaMDMxMTAvBgNV BAMTKDIxRDBBQjc4RUU2REI5QkNBNzU5QjVBRUNENzlDNUI4MzBFQjJENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQ+dtFdWQiDeY7yqTN7RuBzWV NNeldDx+d9oLEoRozfwlXllVv3IfRlczZHoUHucJgMzzlqUbFISZ2WO5YYCq1TQ8 lSsEgt9JfCDvrmrtZnaG/0mVrPkMcb6/yPIEpUJRvxfuV6r320VH5wIC0j0RVuBT JojOBUDOFrfBDrCf/49irOF/OIwClnlqgxFa9Y0OD714gpDvvbkzNMJfwMw75wUR ye7Z6HFA5oEkivYOs6SA1h7/6rK5VM/od/DhPjeQbgsUiz4wo0Y2/h4CwHHnb3fD gmYufKWNOvLFH3q773VTRtBkccVh/J0BN82+tXMJXgwwyEkrnWoU3RyvxOgTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIdCreO5tubynWbWuzXnFuDDrLVIwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDHsZFT66J3g ixwAkxIIGAlbJSyGZWVhKkhQDCzfQZpaDgoYqEbfTqe1JdOXcjwa9OtGmAP2+zPA ipyZh9AebuGqQhvy8ycZNkfh4skMz9tNiFwmJZcRLOM6X1vNr/9CXmB2RZ4O/EaO k96sIRrRlmtNeTrYo8PKcBqujlsj8SO0s2UuX+xmVwtcppgCDsMWpLyAIe+vHROv JbQLGrk3PITjNkxrCZvp/Cwlo0XwfvRF4RK+tbJ/hU/pZkBA7mIsIqoLOuTdit+B r5h0Dyc2umKr+kSKTTDFU/u/NvDPrOc2RC1aiqsZusYT4uc7JVx1Z46RkAx85xNv L0Q3/hB24w== -----END CERTIFICATE-----Generated at Sat Oct 10 13:51:51 2026 by rpki-client