$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft File: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json) Hash identifier: 6JieE023R0T0+83E9Mr0d/7WiSVcWhrCv/Bsho0m7XE= Subject key identifier: 44:81:7A:19:FE:DE:8D:30:03:6B:17:8B:55:B0:D1:98:B9:80:7C:A1 Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Certificate serial: 21E3711851E1C095D1D5878A3316E6E36081FA23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft Manifest number: CA Signing time: Sun 18 Oct 2026 19:15:10 +0000 Manifest this update: Sun 18 Oct 2026 19:10:10 +0000 Manifest next update: Wed 21 Oct 2026 20:45:10 +0000 Files and hashes: 1: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=) 2: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=) 3: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=) 4: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=) 5: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=) 6: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=) 7: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=) 8: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=) 9: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: sEvtgYdA8pqWpSYDbunCjLNMFr5uQTqJZS5Oocc0I9s=) 10: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=) 11: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 20:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e3:71:18:51:e1:c0:95:d1:d5:87:8a:33:16:e6:e3:60:81:fa:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Validity Not Before: Oct 18 19:10:10 2026 GMT Not After : Oct 21 20:45:10 2026 GMT Subject: CN=44817A19FEDE8D30036B178B55B0D198B9807CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:7b:31:84:1e:b1:63:80:e3:cc:16:4d:df: 08:12:ed:a4:56:52:f0:af:b4:08:ab:75:bc:2d:5b: 74:d6:06:30:64:b3:b0:b1:63:33:0c:b4:48:b9:0d: 52:49:fa:ee:4a:15:21:d9:18:7b:4d:8a:29:0f:e4: a2:6d:07:a4:71:74:79:7e:3a:ab:6f:d9:30:0a:95: 93:dc:5d:45:07:d5:10:f8:3e:e1:5c:cb:82:d8:f3: 4a:1b:5a:74:cd:46:55:de:96:5c:01:30:7d:e9:98: 72:09:ee:b6:f1:d5:6d:10:2c:74:81:30:de:e0:fd: 46:35:2b:3f:22:e1:5b:ff:21:a2:54:68:64:f5:dc: c2:4c:50:a8:5a:fe:61:f7:ec:83:89:5c:42:9a:9b: c9:57:ac:d2:d7:8b:28:d1:00:60:c3:53:61:31:69: 06:d6:e5:6b:8e:80:78:fd:c1:af:fe:8f:73:56:a2: bf:6b:e4:d5:fc:b1:ce:f4:09:38:69:c9:ce:a5:a0: 2d:f7:b9:48:d4:d8:79:68:f8:f0:4f:c2:92:8c:0b: 9a:a7:87:a0:54:ad:1f:29:93:e8:55:a5:cc:e2:db: 12:7e:d7:08:c3:51:3b:05:2c:df:5f:33:cb:9b:d1: fd:fb:b8:04:63:48:69:b9:b4:23:0e:3a:03:0a:f6: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:7A:19:FE:DE:8D:30:03:6B:17:8B:55:B0:D1:98:B9:80:7C:A1 X509v3 Authority Key Identifier: keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:e3:a2:e9:a3:e3:87:35:56:fc:5e:a4:b4:67:52:11:6a: 33:b5:30:96:cc:c5:60:a8:3a:01:51:01:64:54:ff:3b:dd:83: d7:13:e9:b6:fa:b8:fd:4e:7e:fa:83:43:31:b3:92:3f:0e:df: 6c:3f:06:b0:db:21:4c:83:03:ed:66:9b:db:6a:a7:59:95:62: 9f:27:1d:c5:d7:1f:f1:a9:f2:61:cf:09:c2:c2:96:86:ac:12: a2:5e:38:2c:89:4e:48:23:99:bd:c8:31:fb:07:1e:e7:32:cf: 8a:a1:b2:7a:7d:9c:78:67:3b:bf:3c:ad:dc:a0:c1:ec:4f:4c: 66:45:f6:a5:55:2f:f4:ac:19:4b:51:c0:2c:49:ad:d2:11:7c: 1a:8d:81:74:50:f2:c5:c0:94:cf:9a:28:58:34:a4:fa:de:59: 2f:77:fc:05:06:c8:4f:95:05:23:f5:67:4e:de:cc:c8:2a:76: a2:31:6e:f8:3f:08:a2:63:24:e2:f0:3f:ed:5a:38:9a:3b:8a: 57:53:bd:1a:82:15:71:b5:cb:22:64:03:5b:a3:65:c2:1c:0f: 7c:cf:e3:81:b1:6b:d5:18:ed:5e:61:61:c9:ce:d6:7b:a7:49: ba:cc:60:b3:dd:2c:d5:84:a1:41:1c:c2:46:57:3b:0f:f3:ab: 74:97:ff:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIeNxGFHhwJXR1YeKMxbm42CB+iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw RTVEMzE3MjAeFw0yNjEwMTgxOTEwMTBaFw0yNjEwMjEyMDQ1MTBaMDMxMTAvBgNV BAMTKDQ0ODE3QTE5RkVERThEMzAwMzZCMTc4QjU1QjBEMTk4Qjk4MDdDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvXsxhB6xY4DjzBZN3wgS7aRW UvCvtAirdbwtW3TWBjBks7CxYzMMtEi5DVJJ+u5KFSHZGHtNiikP5KJtB6RxdHl+ Oqtv2TAKlZPcXUUH1RD4PuFcy4LY80obWnTNRlXellwBMH3pmHIJ7rbx1W0QLHSB MN7g/UY1Kz8i4Vv/IaJUaGT13MJMUKha/mH37IOJXEKam8lXrNLXiyjRAGDDU2Ex aQbW5WuOgHj9wa/+j3NWor9r5NX8sc70CThpyc6loC33uUjU2Hlo+PBPwpKMC5qn h6BUrR8pk+hVpczi2xJ+1wjDUTsFLN9fM8ub0f37uARjSGm5tCMOOgMK9v/XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURIF6Gf7ejTADaxeLVbDRmLmAfKEwHwYDVR0j BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3 NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5ODk0MDk1OTc0ODkxNTMvMC9CMEQxMjRBN0RBNzFG MUM3NDY2RUI5RTA3MTBFNzQ2ODBFNUQzMTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa7joumj44c1 VvxepLRnUhFqM7UwlszFYKg6AVEBZFT/O92D1xPptvq4/U5++oNDMbOSPw7fbD8G sNshTIMD7Wab22qnWZVinycdxdcf8anyYc8JwsKWhqwSol44LIlOSCOZvcgx+wce 5zLPiqGyen2ceGc7vzyt3KDB7E9MZkX2pVUv9KwZS1HALEmt0hF8Go2BdFDyxcCU z5ooWDSk+t5ZL3f8BQbIT5UFI/VnTt7MyCp2ojFu+D8IomMk4vA/7Vo4mjuKV1O9 GoIVcbXLImQDW6NlwhwPfM/jgbFr1RjtXmFhyc7We6dJusxgs90s1YShQRzCRlc7 D/OrdJf/kg== -----END CERTIFICATE-----Generated at Mon Oct 19 04:04:14 2026 by rpki-client