$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: Vz+Wew/VPbccLvf7AIjr55LcIxLA5Uh6LA/TWh8I+bY= Subject key identifier: 0F:98:B6:ED:74:1D:E9:B6:95:18:37:6E:D7:37:AD:64:41:F8:74:6E Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 397E760748A73797C19FCF148FFC7A244A77BDC0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: A7 Signing time: Fri 09 Oct 2026 02:43:01 +0000 Manifest this update: Fri 09 Oct 2026 02:38:01 +0000 Manifest next update: Mon 12 Oct 2026 14:26:01 +0000 Files and hashes: 1: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=) 2: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: m1z+6mMvlqsFlvYjXCSxkBh3enwUZSY/8rQBv1uVoOQ=) 3: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) 4: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 5: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 6: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 7: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=) 8: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 14:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7e:76:07:48:a7:37:97:c1:9f:cf:14:8f:fc:7a:24:4a:77:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: Oct 9 02:38:01 2026 GMT Not After : Oct 12 14:26:01 2026 GMT Subject: CN=0F98B6ED741DE9B69518376ED737AD6441F8746E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:5c:4d:6c:02:b7:89:c1:cb:4a:85:f3:73: 19:67:1f:27:d9:62:7a:49:e7:de:b0:3d:b2:94:b6: bf:31:a8:6a:a5:e7:d9:0b:09:d4:2f:03:dd:65:28: f6:67:53:df:f8:a1:71:99:e2:cc:0d:19:bd:d8:99: 15:f2:03:f2:0b:07:e4:d2:66:a9:cf:ca:c5:4e:6e: a2:73:04:b2:f3:b5:6b:0b:04:27:ab:5d:17:6a:9c: b7:31:35:98:35:20:ac:2b:62:d9:aa:14:bb:2a:20: 28:17:4b:8f:53:cf:64:95:86:4f:c1:d3:25:db:d0: 66:a1:07:d6:7b:73:98:a3:d9:9b:e4:ff:d3:44:1c: 51:b0:cb:4b:79:ed:06:00:61:76:dc:25:fe:bb:b1: df:93:05:71:23:89:37:e1:cc:0b:59:54:ef:90:5a: 01:cc:e0:48:d0:f2:97:6b:fa:2b:01:9e:ea:f9:e7: fc:ec:e2:78:3d:df:34:42:f0:fb:fd:34:11:49:1f: ee:6a:80:c7:8f:c2:f7:14:df:53:d4:fc:26:3d:1b: 6d:98:48:36:e1:74:a7:06:25:d2:07:3d:c0:dc:9b: 58:ab:4b:7c:24:2c:87:de:6b:8d:75:ee:28:96:dc: 1b:cc:af:69:5d:d2:5c:59:7f:4b:43:0a:1e:60:44: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:B6:ED:74:1D:E9:B6:95:18:37:6E:D7:37:AD:64:41:F8:74:6E X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bd:f5:4c:c1:59:59:6b:a1:4a:4c:37:fc:d9:12:b3:98:a0: b0:5f:b1:04:50:2c:05:fa:af:15:35:e5:5c:0b:8d:b6:95:9f: fc:6f:3e:4b:d7:a2:43:2e:9b:a2:21:b3:95:16:f0:79:af:f2: a1:44:f5:63:c2:5f:87:35:c0:4e:af:c3:8e:93:4f:68:b9:a5: a3:a0:31:7a:6a:5e:cd:ec:be:8e:72:5c:d9:67:06:fc:99:f3: ec:23:e8:41:17:e9:8f:f7:8c:46:f8:23:1e:87:d4:42:07:3a: db:2e:00:23:e8:aa:21:b0:21:d4:19:39:2b:a2:64:01:4e:ae: 53:f2:cc:3d:d8:f2:5c:8f:d0:31:32:2d:49:e2:25:2c:1d:d7: 6a:05:56:22:c2:2f:c5:ff:00:e1:ab:3b:82:3a:54:86:39:02: 43:06:5e:8d:31:5a:f5:7c:a7:48:6a:7d:62:86:7e:bf:ab:83: 96:29:17:8a:9d:e7:0b:b2:55:f0:b0:3d:12:a8:1e:50:c9:12: 28:7c:db:6c:bf:74:97:89:7d:b8:2b:1a:67:91:2b:ea:30:16: 8b:d7:8c:c0:cc:4e:f3:ee:75:8b:34:32:75:bc:67:c4:73:48: e3:bc:2a:d6:31:29:20:29:9b:9e:a5:9b:e9:d3:89:34:e5:96: 3e:27:ec:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOX52B0inN5fBn88Uj/x6JEp3vcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjEwMDkwMjM4MDFaFw0yNjEwMTIxNDI2MDFaMDMxMTAvBgNV BAMTKDBGOThCNkVENzQxREU5QjY5NTE4Mzc2RUQ3MzdBRDY0NDFGODc0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LVxNbAK3icHLSoXzcxlnHyfZ YnpJ596wPbKUtr8xqGql59kLCdQvA91lKPZnU9/4oXGZ4swNGb3YmRXyA/ILB+TS ZqnPysVObqJzBLLztWsLBCerXRdqnLcxNZg1IKwrYtmqFLsqICgXS49Tz2SVhk/B 0yXb0GahB9Z7c5ij2Zvk/9NEHFGwy0t57QYAYXbcJf67sd+TBXEjiTfhzAtZVO+Q WgHM4EjQ8pdr+isBnur55/zs4ng93zRC8Pv9NBFJH+5qgMePwvcU31PU/CY9G22Y SDbhdKcGJdIHPcDcm1irS3wkLIfea4117iiW3BvMr2ld0lxZf0tDCh5gRAkBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD5i27XQd6baVGDdu1zetZEH4dG4wHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq731TMFZWWuh Skw3/NkSs5igsF+xBFAsBfqvFTXlXAuNtpWf/G8+S9eiQy6boiGzlRbwea/yoUT1 Y8JfhzXATq/DjpNPaLmlo6Axempezey+jnJc2WcG/Jnz7CPoQRfpj/eMRvgjHofU Qgc62y4AI+iqIbAh1Bk5K6JkAU6uU/LMPdjyXI/QMTItSeIlLB3XagVWIsIvxf8A 4as7gjpUhjkCQwZejTFa9XynSGp9YoZ+v6uDlikXip3nC7JV8LA9EqgeUMkSKHzb bL90l4l9uCsaZ5Er6jAWi9eMwMxO8+51izQydbxnxHNI47wq1jEpICmbnqWb6dOJ NOWWPifsfA== -----END CERTIFICATE-----Generated at Sat Oct 10 08:03:14 2026 by rpki-client