$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json) Hash identifier: GIZvdsVBiU2rN9ekUAJFYtntSGt3WvmRQl1698AVVqs= Subject key identifier: 00:FD:E3:A0:36:DE:B3:91:2B:46:82:9C:F4:2C:23:B7:48:A2:DD:B4 Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Certificate serial: 3CA1FA98A4F3D971CE502DC15DA769C5C0733986 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft Manifest number: C0 Signing time: Mon 26 Oct 2026 18:23:55 +0000 Manifest this update: Mon 26 Oct 2026 18:18:55 +0000 Manifest next update: Fri 30 Oct 2026 02:11:55 +0000 Files and hashes: 1: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=) 2: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: 1dbQi7wIkdPLD9N7Idr7r2ru0/F+KPR5jRBvLIkVmHg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a1:fa:98:a4:f3:d9:71:ce:50:2d:c1:5d:a7:69:c5:c0:73:39:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Validity Not Before: Oct 26 18:18:55 2026 GMT Not After : Oct 30 02:11:55 2026 GMT Subject: CN=00FDE3A036DEB3912B46829CF42C23B748A2DDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:f7:fc:c8:8f:ce:26:79:bd:98:1d:7b:b4: ba:99:fd:45:98:cf:86:55:58:60:5f:68:56:76:43: 15:68:ed:84:72:d2:9c:b5:56:f4:52:85:45:8c:37: 1e:6e:8d:83:2f:7c:5d:0d:3f:0b:34:34:e7:89:89: df:69:9d:b4:f7:8a:b5:42:e2:10:aa:c9:f5:a8:69: a1:97:5e:3a:15:a9:fd:ef:a9:41:62:14:24:40:b6: 50:91:23:0f:48:0f:94:ce:9d:ab:c8:cf:84:db:89: 36:5d:48:9f:c6:67:6a:01:2d:43:51:99:c0:ef:c8: fb:19:64:3b:a1:03:1a:1d:d1:c4:d7:d6:69:04:a3: 6b:cd:7d:f3:a5:91:04:82:4a:ff:30:ae:b9:e8:4c: d0:7c:38:39:af:84:38:de:bc:3b:3b:48:d2:9e:bc: cd:86:e4:49:1c:95:15:32:2d:ba:c8:49:50:94:46: 7b:d6:f7:7d:40:00:45:93:94:ab:f7:0c:30:82:6a: eb:0d:e5:64:d8:a4:32:80:5a:4e:ac:fc:b3:05:9a: 04:93:88:e1:3c:fa:14:94:75:78:03:ef:9a:d9:dc: 01:a7:bf:90:2b:c0:82:2d:be:ed:40:2f:88:b2:17: c2:33:6f:4e:a8:e0:79:eb:be:b4:b9:fa:c2:ef:31: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:E3:A0:36:DE:B3:91:2B:46:82:9C:F4:2C:23:B7:48:A2:DD:B4 X509v3 Authority Key Identifier: keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:22:f5:df:e9:c8:c5:c7:5c:24:15:cd:d3:60:53:fb:b8:86: 3f:80:5a:be:b1:3f:a3:c2:ae:cc:2d:dd:cd:df:f9:78:ef:46: 8f:21:da:55:0b:23:c3:c1:44:9d:95:5e:b2:e7:58:1b:b8:2f: ae:75:4a:ff:dc:ab:58:4c:c8:0f:0b:4d:b5:88:80:84:3b:62: ef:1c:5c:23:92:e8:75:d2:6c:c7:c1:77:7a:78:92:90:ef:c5: 4c:4f:3c:8c:13:35:dd:9f:54:21:2c:dc:60:f6:f8:75:f9:f7: 44:18:6a:c9:76:75:b0:9b:06:fb:ae:d9:da:ce:7c:1d:2f:4c: 1d:82:17:a7:24:72:53:46:1c:42:a3:33:35:aa:c0:0f:9b:b3: d9:02:fd:75:56:74:cd:ff:72:da:da:0d:08:66:19:ca:63:29: de:9a:10:45:68:8d:76:93:b5:9c:0e:93:be:76:8b:65:30:6d: dc:c2:bc:ac:55:a3:a7:58:1b:c9:e2:c1:fc:49:1a:bb:50:0e: 01:8b:f2:4e:b2:6e:2d:a4:5f:ec:61:48:ab:d8:78:46:96:f9: 15:4d:c5:d0:67:06:8f:32:a6:ac:fc:a5:e9:6d:3a:57:2c:96: 26:68:5a:85:3d:76:cb:e9:a2:0b:64:a7:70:58:7a:11:27:b4: e6:37:e3:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPKH6mKTz2XHOUC3BXadpxcBzOYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNF MEQ1MDg4RDAeFw0yNjEwMjYxODE4NTVaFw0yNjEwMzAwMjExNTVaMDMxMTAvBgNV BAMTKDAwRkRFM0EwMzZERUIzOTEyQjQ2ODI5Q0Y0MkMyM0I3NDhBMkREQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJRff8yI/OJnm9mB17tLqZ/UWY z4ZVWGBfaFZ2QxVo7YRy0py1VvRShUWMNx5ujYMvfF0NPws0NOeJid9pnbT3irVC 4hCqyfWoaaGXXjoVqf3vqUFiFCRAtlCRIw9ID5TOnavIz4TbiTZdSJ/GZ2oBLUNR mcDvyPsZZDuhAxod0cTX1mkEo2vNffOlkQSCSv8wrrnoTNB8ODmvhDjevDs7SNKe vM2G5EkclRUyLbrISVCURnvW931AAEWTlKv3DDCCausN5WTYpDKAWk6s/LMFmgST iOE8+hSUdXgD75rZ3AGnv5ArwIItvu1AL4iyF8Izb06o4HnrvrS5+sLvMeaPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAP3joDbes5ErRoKc9Cwjt0ii3bQwHwYDVR0j BBgwFoAUlGGS22tjFk1/trV+6cRCnODVCI0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk4MTQ3MzM2MTUyNjc4NS8wLzk0NjE5MkRCNkI2MzE2NEQ3RkI2QjU3RUU5QzQ0 MjlDRTBENTA4OEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5ODE0NzMzNjE1MjY3ODUvMC85NDYxOTJEQjZCNjMx NjREN0ZCNkI1N0VFOUM0NDI5Q0UwRDUwODhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSL13+nIxcdc JBXN02BT+7iGP4BavrE/o8KuzC3dzd/5eO9GjyHaVQsjw8FEnZVesudYG7gvrnVK /9yrWEzIDwtNtYiAhDti7xxcI5LoddJsx8F3eniSkO/FTE88jBM13Z9UISzcYPb4 dfn3RBhqyXZ1sJsG+67Z2s58HS9MHYIXpyRyU0YcQqMzNarAD5uz2QL9dVZ0zf9y 2toNCGYZymMp3poQRWiNdpO1nA6TvnaLZTBt3MK8rFWjp1gbyeLB/Ekau1AOAYvy TrJuLaRf7GFIq9h4Rpb5FU3F0GcGjzKmrPyl6W06VyyWJmhahT12y+miC2SncFh6 ESe05jfjUA== -----END CERTIFICATE-----Generated at Tue Oct 27 23:09:11 2026 by rpki-client