$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: 2jA3SiOJH2HGUxYYxC9CfZzMm9eKSL5chDNUlXXr8f4= Subject key identifier: 3F:13:88:E8:04:35:97:A5:55:67:20:05:BD:71:B5:3B:3F:92:66:4E Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 01EFD825B0E40E38E672D449C454BB81D8151CEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 98 Signing time: Fri 09 Oct 2026 02:58:01 +0000 Manifest this update: Fri 09 Oct 2026 02:53:01 +0000 Manifest next update: Mon 12 Oct 2026 09:41:01 +0000 Files and hashes: 1: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 2: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: H91kszVFYo0LSyu4rgK826LgzrBvPkZpU5NvACnW3F8=) 3: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 4: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 5: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 6: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 7: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 8: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 9: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 10: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 11: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 12: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 13: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 14: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 15: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 16: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 17: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 18: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 19: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 20: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 21: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 22: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 23: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 24: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ef:d8:25:b0:e4:0e:38:e6:72:d4:49:c4:54:bb:81:d8:15:1c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Oct 9 02:53:01 2026 GMT Not After : Oct 12 09:41:01 2026 GMT Subject: CN=3F1388E8043597A555672005BD71B53B3F92664E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:20:37:6c:2c:66:24:70:b7:24:d8:bb:ba: 57:ea:0c:55:b1:7e:bc:74:68:ea:be:52:51:30:3c: 65:6b:71:d0:c0:0e:3d:d2:4e:a6:d1:71:dd:8f:3c: 11:38:be:a5:5c:cf:46:4a:77:c5:54:6d:8c:30:67: d9:9f:18:e4:bb:d1:af:3d:6d:d2:df:b9:34:20:b9: 0f:cc:8a:97:33:5f:dd:7b:4b:70:06:f2:6b:59:10: 0d:50:9f:41:f8:29:77:eb:60:bd:2a:04:51:70:27: aa:a2:72:0b:e8:30:8a:6a:14:ec:b6:be:dc:99:c3: 1f:12:6c:73:2b:c3:3a:af:c7:b5:da:54:6b:38:3d: 58:4d:c1:13:3d:e1:ab:8a:bc:74:c4:66:a7:d0:6f: e5:84:a8:c6:b3:21:c6:49:d3:24:86:db:ff:25:cb: cc:49:bc:b0:30:de:96:73:42:8f:19:56:81:ed:bd: 52:a2:7c:5e:3d:84:a3:cf:5a:84:2f:ba:41:89:31: 26:7f:28:78:ce:0c:fc:ca:3a:cd:cf:8d:d5:98:8a: b4:42:b8:20:29:0b:44:88:02:c6:0b:79:ed:ab:85: 17:d7:b0:29:e3:04:7b:24:16:c6:b5:14:63:c2:e9: bb:c0:45:3f:8f:49:a2:eb:bd:27:98:fa:fc:8e:e4: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:88:E8:04:35:97:A5:55:67:20:05:BD:71:B5:3B:3F:92:66:4E X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c7:6f:43:74:cc:8f:37:ff:47:58:c0:8a:fd:1e:36:5c:a0: 21:15:80:3a:5e:a9:23:d6:f4:11:3c:5e:22:7a:ad:db:d6:d0: 96:da:85:7e:da:f0:43:16:a7:1f:4d:ff:b5:cc:b5:8b:48:0b: c7:30:14:0b:d0:a5:ab:24:ed:32:b7:7d:d7:ff:3c:1e:c3:33: 37:60:db:ae:b1:55:57:14:a5:21:d1:76:4f:91:4a:c3:6d:c2: 4a:8a:51:55:5a:1f:9c:5a:73:57:0b:f3:d0:31:f7:2c:1b:87: 01:a7:37:d5:ca:9a:54:15:dc:6a:11:b7:80:5d:8b:78:66:93: f4:f2:cd:b6:bf:3a:de:f6:d1:26:30:ab:29:ad:84:1d:46:69: ee:93:a3:08:4b:17:25:92:f4:3b:4a:18:3e:01:0f:d0:48:5e: 56:7d:ec:fb:ea:f8:ea:98:66:f3:37:bd:e5:53:4b:e2:c7:81: ef:fa:ef:22:47:d7:4b:a2:e4:b9:ac:30:ec:fe:df:97:8c:57: 5a:e4:f7:35:43:5f:c6:7d:d7:d9:de:1c:54:3f:f0:86:95:a7: d0:78:ff:f1:c6:57:b1:b3:44:4d:a2:ac:5d:66:cb:b3:02:54: ff:56:72:9b:f0:6e:c0:53:2c:16:b2:1d:17:11:04:2d:5c:f5: 21:a3:bd:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAe/YJbDkDjjmctRJxFS7gdgVHO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjEwMDkwMjUzMDFaFw0yNjEwMTIwOTQxMDFaMDMxMTAvBgNV BAMTKDNGMTM4OEU4MDQzNTk3QTU1NTY3MjAwNUJENzFCNTNCM0Y5MjY2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTSA3bCxmJHC3JNi7ulfqDFWx frx0aOq+UlEwPGVrcdDADj3STqbRcd2PPBE4vqVcz0ZKd8VUbYwwZ9mfGOS70a89 bdLfuTQguQ/MipczX917S3AG8mtZEA1Qn0H4KXfrYL0qBFFwJ6qicgvoMIpqFOy2 vtyZwx8SbHMrwzqvx7XaVGs4PVhNwRM94auKvHTEZqfQb+WEqMazIcZJ0ySG2/8l y8xJvLAw3pZzQo8ZVoHtvVKifF49hKPPWoQvukGJMSZ/KHjODPzKOs3PjdWYirRC uCApC0SIAsYLee2rhRfXsCnjBHskFsa1FGPC6bvART+PSaLrvSeY+vyO5PqBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPxOI6AQ1l6VVZyAFvXG1Oz+SZk4wHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcdvQ3TMjzf/ R1jAiv0eNlygIRWAOl6pI9b0ETxeInqt29bQltqFftrwQxanH03/tcy1i0gLxzAU C9ClqyTtMrd91/88HsMzN2DbrrFVVxSlIdF2T5FKw23CSopRVVofnFpzVwvz0DH3 LBuHAac31cqaVBXcahG3gF2LeGaT9PLNtr863vbRJjCrKa2EHUZp7pOjCEsXJZL0 O0oYPgEP0EheVn3s++r46phm8ze95VNL4seB7/rvIkfXS6Lkuaww7P7fl4xXWuT3 NUNfxn3X2d4cVD/whpWn0Hj/8cZXsbNETaKsXWbLswJU/1Zym/BuwFMsFrIdFxEE LVz1IaO9rA== -----END CERTIFICATE-----Generated at Sat Oct 10 17:43:36 2026 by rpki-client