$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json) Hash identifier: IftsahLHFDz0oAuxNWN6IgEgLQAyHLdxe2rQEGvW/Lk= Subject key identifier: CA:69:70:56:60:64:C1:39:EE:FA:12:45:35:29:D6:F5:77:34:58:8C Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 29F2C8F81CA1C77CBAFE7E044815F998DB71A828 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft Manifest number: A7 Signing time: Fri 09 Oct 2026 16:43:34 +0000 Manifest this update: Fri 09 Oct 2026 16:38:34 +0000 Manifest next update: Tue 13 Oct 2026 02:15:34 +0000 Files and hashes: 1: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=) 2: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=) 3: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=) 4: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=) 5: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=) 6: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=) 7: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=) 8: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=) 9: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=) 10: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=) 11: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=) 12: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: a0ahPYOGWxdueHGMI4vEB2/ZYQKkHHy8b3NTUXQAAzc=) 13: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=) 14: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=) 15: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=) 16: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=) 17: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=) 18: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=) 19: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=) 20: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=) 21: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 16:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f2:c8:f8:1c:a1:c7:7c:ba:fe:7e:04:48:15:f9:98:db:71:a8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Oct 9 16:38:34 2026 GMT Not After : Oct 13 02:15:34 2026 GMT Subject: CN=CA6970566064C139EEFA12453529D6F57734588C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:a0:13:8e:a6:23:e0:0c:c5:29:d1:75:47: 71:fc:38:ff:aa:d3:8b:4f:c1:45:26:34:41:d2:3a: b6:d3:60:49:0b:9f:87:47:40:5a:3d:5c:66:45:56: ff:b9:77:7b:bd:b5:70:74:4b:17:71:4e:86:e6:2a: 4c:f0:4d:31:62:24:04:87:eb:77:9f:f5:dd:7a:30: 49:72:1c:68:d0:ef:26:07:dd:4b:a1:46:cd:a8:69: f2:5a:08:15:f9:84:fd:9e:70:27:24:cb:44:b1:a7: 8d:46:db:1d:ae:a6:ff:05:bd:e7:6d:a9:6c:eb:bb: 37:fa:5b:64:a7:fa:cf:f3:41:b1:52:b7:7d:fd:fc: 8b:ca:7f:8e:c7:43:b0:88:a6:46:45:af:97:ee:ab: e6:3e:54:7a:7e:d6:51:3c:02:e9:90:c2:a1:ca:10: 2c:69:2a:d8:15:63:e5:ac:31:0b:cf:9b:e3:1b:46: 89:42:30:9b:e8:f8:40:9f:88:e3:05:13:d8:d0:33: ab:80:c7:02:99:23:f6:6b:03:e9:d5:81:04:b9:1a: 1b:0c:09:1b:ac:0c:af:fe:42:b3:13:4d:5e:28:9d: 32:2d:e6:f2:c6:99:73:4c:61:e1:de:d6:bc:d9:de: 78:7d:8d:ed:25:c7:32:4c:e3:82:56:6d:2c:30:fb: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:70:56:60:64:C1:39:EE:FA:12:45:35:29:D6:F5:77:34:58:8C X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b7:ca:ff:02:e4:f1:ff:0c:9c:43:f3:b1:6b:3f:1a:b5:23: d2:f0:5f:f4:56:cb:ce:31:c3:a2:0d:b9:f2:76:5a:d0:81:77: bb:39:81:55:ce:e7:75:9f:67:68:d7:e1:cf:30:33:d9:dd:38: 96:ef:64:c6:50:df:e9:0c:eb:4a:58:7b:af:31:9d:ac:7d:ce: 75:94:ae:99:a5:97:73:62:06:8e:76:3a:e5:03:aa:89:b3:7e: c0:b9:51:7d:c5:2b:88:bf:13:72:5e:fd:01:d0:fa:8b:4b:69: ae:1f:37:40:26:e8:ef:af:1a:d6:94:82:bc:2e:ea:8d:96:4b: f4:d3:31:00:42:be:0a:ea:1a:24:ce:8c:50:27:ad:33:8e:40: a4:0e:74:73:05:38:91:cb:ae:9a:2d:ad:3b:80:b5:27:09:68: 5a:08:1d:97:1f:3b:12:22:a4:ba:d3:e8:bb:9c:aa:c6:83:85: c5:03:5c:9b:64:1e:d5:a0:6d:65:c0:8a:5e:90:e8:99:ce:26: 84:a3:ad:35:96:37:00:76:9f:8f:eb:c8:62:bc:43:93:cc:59: 88:ca:24:6f:84:7a:c0:40:d5:da:3a:0a:88:df:10:f9:6a:1d: 1d:d0:21:d6:2f:ce:50:2a:1c:95:6b:17:90:31:7f:b4:81:01: f0:1b:4e:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKfLI+Byhx3y6/n4ESBX5mNtxqCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjEwMDkxNjM4MzRaFw0yNjEwMTMwMjE1MzRaMDMxMTAvBgNV BAMTKENBNjk3MDU2NjA2NEMxMzlFRUZBMTI0NTM1MjlENkY1NzczNDU4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6aATjqYj4AzFKdF1R3H8OP+q 04tPwUUmNEHSOrbTYEkLn4dHQFo9XGZFVv+5d3u9tXB0SxdxTobmKkzwTTFiJASH 63ef9d16MElyHGjQ7yYH3UuhRs2oafJaCBX5hP2ecCcky0Sxp41G2x2upv8Fvedt qWzruzf6W2Sn+s/zQbFSt339/IvKf47HQ7CIpkZFr5fuq+Y+VHp+1lE8AumQwqHK ECxpKtgVY+WsMQvPm+MbRolCMJvo+ECfiOMFE9jQM6uAxwKZI/ZrA+nVgQS5GhsM CRusDK/+QrMTTV4onTIt5vLGmXNMYeHe1rzZ3nh9je0lxzJM44JWbSww+wrhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUymlwVmBkwTnu+hJFNSnW9Xc0WIwwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzNTQwMzY4Njk0NjQwODUvMC9CNTE0ODY0NkYyQzQ1 MTg2NEUyMDY5NkU0RjFDOTI2QTA5OEJDOEQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbfK/wLk8f8M nEPzsWs/GrUj0vBf9FbLzjHDog258nZa0IF3uzmBVc7ndZ9naNfhzzAz2d04lu9k xlDf6QzrSlh7rzGdrH3OdZSumaWXc2IGjnY65QOqibN+wLlRfcUriL8Tcl79AdD6 i0tprh83QCbo768a1pSCvC7qjZZL9NMxAEK+CuoaJM6MUCetM45ApA50cwU4kcuu mi2tO4C1JwloWggdlx87EiKkutPou5yqxoOFxQNcm2Qe1aBtZcCKXpDomc4mhKOt NZY3AHafj+vIYrxDk8xZiMokb4R6wEDV2joKiN8Q+WodHdAh1i/OUCoclWsXkDF/ tIEB8BtOTg== -----END CERTIFICATE-----Generated at Fri Oct 9 22:40:56 2026 by rpki-client