$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: KqhkXcL3CuYtwqrmpDfym3S8DzsRByJYPtniqqeU5nI= Subject key identifier: 21:B3:E6:05:69:10:52:D5:84:DD:20:90:EE:B9:71:09:8E:C4:BB:4B Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 43B357E3E5EB8A983B92736CFD8DA923A45FD124 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 8A Signing time: Fri 09 Oct 2026 04:03:04 +0000 Manifest this update: Fri 09 Oct 2026 03:58:04 +0000 Manifest next update: Mon 12 Oct 2026 07:57:04 +0000 Files and hashes: 1: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: 1711HyuRTtNkwvifzYgtgiYYJqiCRtoDYcQVaBAECuk=) 2: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 3: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 4: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 5: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 6: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 7: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 8: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b3:57:e3:e5:eb:8a:98:3b:92:73:6c:fd:8d:a9:23:a4:5f:d1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Oct 9 03:58:04 2026 GMT Not After : Oct 12 07:57:04 2026 GMT Subject: CN=21B3E605691052D584DD2090EEB971098EC4BB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:53:3b:85:07:b9:96:7a:b2:f7:7d:63:cf: 14:c2:50:1f:af:a4:b7:31:69:01:d9:60:26:10:80: 24:1f:06:eb:71:4d:08:cc:09:e3:b1:e2:dd:ef:5e: 8c:1a:4b:fc:18:e0:bd:ba:f5:66:09:e4:59:68:fc: 87:00:09:74:6f:2e:53:08:40:89:d2:b5:f1:cb:01: 04:42:4a:37:e3:d6:69:52:2d:5c:17:0f:ca:28:16: 83:82:b4:d3:1e:93:18:aa:21:71:22:4f:78:f2:4d: 6a:59:24:ae:86:a7:12:50:4a:ca:2f:ca:22:22:d0: 61:69:9a:8a:1f:e0:e1:b4:f4:e5:9c:4d:cf:b2:9d: a5:97:d4:1d:b9:57:f1:fe:31:5f:39:7a:33:9d:c3: 31:7e:5d:21:5b:85:42:88:0c:b4:e0:65:0c:96:da: ea:ad:a9:12:b9:03:1e:09:70:05:58:0f:0c:7a:c9: e7:73:62:a5:07:45:4c:fb:22:1f:0e:c7:94:4b:d0: 7c:06:5a:62:cf:97:1c:65:85:5f:77:cd:e7:8e:c3: 78:75:02:08:4e:b1:f7:91:22:1e:53:91:61:34:98: 34:05:a3:c6:97:2b:9e:f8:8f:36:af:1e:c6:f2:2a: 68:dc:e6:c3:6d:5e:8e:fb:61:0f:54:e2:46:f2:33: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B3:E6:05:69:10:52:D5:84:DD:20:90:EE:B9:71:09:8E:C4:BB:4B X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f9:73:65:a7:15:54:93:05:64:0a:18:d1:ab:43:ea:fe:a5: bf:a0:40:9a:18:3b:71:2a:8c:ba:6d:6f:50:d8:f4:74:e5:ab: df:26:22:d3:1b:44:60:2a:03:93:27:28:d0:3b:49:6f:b4:5a: 7c:23:5c:52:ba:cd:f6:d1:05:c2:5b:a9:e4:c6:61:2f:e8:f0: 60:17:17:b5:97:44:06:a2:ad:97:b1:81:d9:d3:72:74:02:ac: 17:00:43:e4:49:35:fd:4c:82:f8:2e:b5:35:28:b2:48:f7:1d: f9:05:06:03:1d:d9:3a:bd:7d:63:72:e3:cb:f9:86:c5:ef:62: de:f4:b2:62:41:2a:f7:33:2a:e7:11:85:29:e7:2f:7f:07:e8: ad:70:0d:79:ac:65:1b:6b:0d:3d:db:2c:cd:ee:6e:34:c1:1d: 30:05:af:53:b6:8a:2d:16:75:28:5f:cf:58:80:3f:e4:d4:e3: 6b:77:b1:93:89:72:16:46:47:b6:ea:60:eb:a6:9b:b3:ba:5d: 18:c5:c3:9e:7f:b4:da:da:6e:1d:24:da:8b:a6:3e:40:51:00: 44:74:80:38:91:b3:df:05:94:63:47:be:4f:15:1b:04:92:60: e4:ff:4c:d7:f7:54:76:5b:bc:0a:ad:58:6f:81:ec:52:29:6f: 53:c4:b1:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ7NX4+Xripg7knNs/Y2pI6Rf0SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjEwMDkwMzU4MDRaFw0yNjEwMTIwNzU3MDRaMDMxMTAvBgNV BAMTKDIxQjNFNjA1NjkxMDUyRDU4NEREMjA5MEVFQjk3MTA5OEVDNEJCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJFM7hQe5lnqy931jzxTCUB+v pLcxaQHZYCYQgCQfButxTQjMCeOx4t3vXowaS/wY4L269WYJ5Flo/IcACXRvLlMI QInStfHLAQRCSjfj1mlSLVwXD8ooFoOCtNMekxiqIXEiT3jyTWpZJK6GpxJQSsov yiIi0GFpmoof4OG09OWcTc+ynaWX1B25V/H+MV85ejOdwzF+XSFbhUKIDLTgZQyW 2uqtqRK5Ax4JcAVYDwx6yedzYqUHRUz7Ih8Ox5RL0HwGWmLPlxxlhV93zeeOw3h1 AghOsfeRIh5TkWE0mDQFo8aXK574jzavHsbyKmjc5sNtXo77YQ9U4kbyM/1pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIbPmBWkQUtWE3SCQ7rlxCY7Eu0swHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPlzZacVVJMF ZAoY0atD6v6lv6BAmhg7cSqMum1vUNj0dOWr3yYi0xtEYCoDkyco0DtJb7RafCNc UrrN9tEFwlup5MZhL+jwYBcXtZdEBqKtl7GB2dNydAKsFwBD5Ek1/UyC+C61NSiy SPcd+QUGAx3ZOr19Y3Ljy/mGxe9i3vSyYkEq9zMq5xGFKecvfwforXANeaxlG2sN Pdssze5uNMEdMAWvU7aKLRZ1KF/PWIA/5NTja3exk4lyFkZHtupg66abs7pdGMXD nn+02tpuHSTai6Y+QFEARHSAOJGz3wWUY0e+TxUbBJJg5P9M1/dUdlu8Cq1Yb4Hs UilvU8SxDQ== -----END CERTIFICATE-----Generated at Sun Oct 11 09:28:32 2026 by rpki-client