$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json) Hash identifier: ZhmDt6JoI3SRRrKhPbgfJJLjrpLJt8Jsa43UpZ5dDFU= Subject key identifier: D5:E7:3C:28:98:DA:9B:C2:D3:50:DA:B0:DC:81:CF:6F:0E:E1:9C:91 Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Certificate serial: 5940A398D9A7390E9A0A3CD2C60DC7CA57C35740 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft Manifest number: 89 Signing time: Wed 14 Oct 2026 02:13:26 +0000 Manifest this update: Wed 14 Oct 2026 02:08:26 +0000 Manifest next update: Sat 17 Oct 2026 02:13:26 +0000 Files and hashes: 1: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=) 2: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=) 3: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: AUrqkYDzrYNhgvN4DS9oe4D57BcUQwBaxW5Q2OQkVkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 02:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:40:a3:98:d9:a7:39:0e:9a:0a:3c:d2:c6:0d:c7:ca:57:c3:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Validity Not Before: Oct 14 02:08:26 2026 GMT Not After : Oct 17 02:13:26 2026 GMT Subject: CN=D5E73C2898DA9BC2D350DAB0DC81CF6F0EE19C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:85:d6:6e:47:0d:47:72:d5:c1:d8:7c:7f: 0b:1a:cc:4b:f6:73:9d:f8:4f:82:42:bb:f2:ff:46: 54:41:90:8e:c6:38:33:2e:c9:76:81:b1:30:01:c0: 92:a5:42:5b:4a:d9:ac:78:e9:5f:bc:0d:04:a5:bc: ba:19:bc:7d:fc:19:45:ab:b4:93:3c:c1:ce:46:46: 82:d3:c1:9f:75:b2:3a:79:3b:92:4c:ac:70:37:b6: b5:68:c3:09:ae:d8:25:0b:82:e9:29:b4:cb:8f:22: 0f:9b:46:55:7a:81:5a:95:9d:8f:07:26:87:9e:ef: 9c:3e:bf:21:c9:14:68:49:ef:5c:3f:a5:d8:8d:e2: 36:50:5e:3e:2d:a6:c5:7c:46:7d:90:7a:7a:03:01: 93:d9:31:4e:bf:63:9b:0f:94:f7:11:b7:35:39:88: c7:4c:0c:03:7f:d1:98:36:76:81:f5:6e:26:27:f8: 5f:fe:9b:db:14:cf:4f:aa:2e:f8:6b:0e:b4:90:4c: 9a:51:d2:ea:dd:e1:36:53:4e:0f:cc:36:e6:33:2e: 20:4e:a1:cb:11:5a:9e:dc:45:4e:06:29:40:fb:5e: 12:46:33:1a:81:fd:a4:b4:8b:5e:e3:8b:5a:73:fb: 3f:13:c8:7e:4e:f1:6f:33:0f:41:eb:58:92:ce:9a: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:3C:28:98:DA:9B:C2:D3:50:DA:B0:DC:81:CF:6F:0E:E1:9C:91 X509v3 Authority Key Identifier: keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b3:9f:04:6d:3f:a6:dc:6e:60:c2:57:d4:36:7d:87:8e:22: b3:f4:ed:3d:51:2b:7c:3d:20:82:3d:12:1a:38:3e:82:3b:1f: 81:5c:83:7b:73:b3:f9:bb:04:d2:1b:cb:bd:b7:70:d2:6a:44: f9:f0:86:8a:3c:c7:79:e9:92:9c:23:7b:8e:8d:1c:3c:ee:f2: 75:7e:cd:0f:6b:e9:4a:97:37:38:91:3e:f4:53:7b:71:36:3c: c8:f8:f5:14:5b:86:b6:c0:09:6d:d2:2e:9e:57:57:4f:24:96: 9f:d2:36:d2:ae:2d:9b:e9:51:81:ff:a9:d2:62:88:36:59:e5: 30:51:1c:fa:6b:5b:be:cc:ab:91:91:33:3f:40:f8:d6:bd:2e: 41:b2:e2:54:16:f7:17:16:5b:d5:69:1e:0c:09:61:60:a9:d9: dd:5b:d1:ce:9c:0e:6a:d8:fd:d8:fe:05:33:ff:65:12:e9:2b: e0:58:cd:24:5b:0a:b8:56:bd:8a:75:3f:e9:f1:17:77:cd:57: 1a:71:08:a8:81:c2:14:29:4c:36:a4:88:db:79:d2:f2:47:48: 45:32:c4:ac:b6:39:6c:61:90:64:e3:77:47:41:f8:45:0b:66: d6:42:92:48:e0:6c:46:6b:a3:ab:41:f1:4e:48:ef:4a:fd:8f: b5:9f:6b:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWUCjmNmnOQ6aCjzSxg3HylfDV0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB MTlBODE4QzAeFw0yNjEwMTQwMjA4MjZaFw0yNjEwMTcwMjEzMjZaMDMxMTAvBgNV BAMTKEQ1RTczQzI4OThEQTlCQzJEMzUwREFCMERDODFDRjZGMEVFMTlDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi+4XWbkcNR3LVwdh8fwsazEv2 c534T4JCu/L/RlRBkI7GODMuyXaBsTABwJKlQltK2ax46V+8DQSlvLoZvH38GUWr tJM8wc5GRoLTwZ91sjp5O5JMrHA3trVowwmu2CULgukptMuPIg+bRlV6gVqVnY8H Joee75w+vyHJFGhJ71w/pdiN4jZQXj4tpsV8Rn2QenoDAZPZMU6/Y5sPlPcRtzU5 iMdMDAN/0Zg2doH1biYn+F/+m9sUz0+qLvhrDrSQTJpR0urd4TZTTg/MNuYzLiBO ocsRWp7cRU4GKUD7XhJGMxqB/aS0i17ji1pz+z8TyH5O8W8zD0HrWJLOmq7FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1ec8KJjam8LTUNqw3IHPbw7hnJEwHwYDVR0j BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3 MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTkzMTA5MDg3NjgyODEvMC9BMEM5OThCRkNDQUU4 OTQ2MzUzRUE3MzkxMkNCNzE1NkExOUE4MThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrOfBG0/ptxu YMJX1DZ9h44is/TtPVErfD0ggj0SGjg+gjsfgVyDe3Oz+bsE0hvLvbdw0mpE+fCG ijzHeemSnCN7jo0cPO7ydX7ND2vpSpc3OJE+9FN7cTY8yPj1FFuGtsAJbdIunldX TySWn9I20q4tm+lRgf+p0mKINlnlMFEc+mtbvsyrkZEzP0D41r0uQbLiVBb3FxZb 1WkeDAlhYKnZ3VvRzpwOatj92P4FM/9lEukr4FjNJFsKuFa9inU/6fEXd81XGnEI qIHCFClMNqSI23nS8kdIRTLErLY5bGGQZON3R0H4RQtm1kKSSOBsRmujq0HxTkjv Sv2PtZ9rDA== -----END CERTIFICATE-----Generated at Thu Oct 15 10:50:07 2026 by rpki-client