$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: g9ABmJoQewkqEVWY3KxaoildhwrVFcsXcCpOCVi5NCg= Subject key identifier: 9E:09:C6:3B:15:0C:02:86:68:A4:D4:60:54:96:DA:A5:A3:D4:55:FA Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 4E8C319F75FC50A0F176462799151C39F7C5225B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 88 Signing time: Sat 10 Oct 2026 20:19:55 +0000 Manifest this update: Sat 10 Oct 2026 20:14:55 +0000 Manifest next update: Tue 13 Oct 2026 20:56:55 +0000 Files and hashes: 1: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: gRdPObmAdrMCxnMvux8aCQmAZSFPh4nNu2ipkSfnMsY=) 2: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 3: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 4: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 5: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 6: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 7: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 8: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 9: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:31:9f:75:fc:50:a0:f1:76:46:27:99:15:1c:39:f7:c5:22:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Oct 10 20:14:55 2026 GMT Not After : Oct 13 20:56:55 2026 GMT Subject: CN=9E09C63B150C028668A4D4605496DAA5A3D455FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:9e:f7:73:d7:5b:30:23:ef:93:54:0a:85: 65:87:48:5e:c8:60:cc:f2:0d:d5:fd:ad:9f:bb:0f: 46:4d:75:c4:5d:af:17:36:86:71:7c:f0:e0:ca:14: da:66:26:57:2c:ad:6b:2a:8e:8c:18:76:70:6d:56: 85:57:ae:68:8c:65:f4:ae:20:c8:02:55:72:e1:90: f0:bf:ca:2f:83:52:56:25:c3:42:ca:65:47:a9:60: 92:73:28:e3:31:61:09:1b:6b:e6:58:85:cb:42:1a: 2b:33:4b:2b:71:1e:eb:24:d7:d4:39:40:6c:99:d5: bc:81:20:4b:73:1c:7b:55:79:c9:13:b4:b1:f8:19: 70:f5:1b:78:be:94:0e:fe:21:7b:4a:43:05:26:a7: ee:55:e9:46:4a:5a:ce:29:5d:26:fb:75:61:bd:1b: 98:dd:a3:92:5b:22:b7:c7:6e:b4:09:62:da:88:15: 41:85:1f:2d:cb:54:a2:f5:65:13:bc:7f:80:0e:45: 88:7f:7c:a0:4c:d3:9e:6b:04:ad:51:f8:89:a0:46: a1:da:66:85:f4:56:3b:a2:a7:60:55:f2:24:72:f1: 65:65:03:93:54:2d:b6:cc:ec:36:db:ff:f0:a2:b2: a0:d6:06:ef:2e:e0:28:74:7a:6e:b7:4c:21:a6:c6: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:09:C6:3B:15:0C:02:86:68:A4:D4:60:54:96:DA:A5:A3:D4:55:FA X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:60:b7:aa:7d:b3:9a:5a:0a:df:4f:01:56:cd:07:a2:71: 2f:c8:19:17:59:4f:e4:77:ff:0b:3d:98:f0:bd:91:b1:30:6a: 74:9a:95:f0:30:b8:04:7e:ef:29:4f:d5:3d:da:d9:33:fd:04: 99:29:d0:54:a6:29:8d:c5:b0:05:1e:da:ed:1d:46:d4:1e:a7: 43:3e:1a:4f:f4:ac:a3:63:76:1c:c2:b7:ff:0b:24:9c:3e:3a: 58:24:c3:92:76:4b:26:73:f0:cf:76:3f:b7:30:b7:22:32:6e: da:dc:a8:cd:3c:f3:1a:94:23:09:67:af:c8:6f:74:a8:b2:ef: fb:45:79:b4:f7:96:9b:20:42:8c:10:4f:d6:b1:7b:f5:67:12: 31:62:44:96:b2:cd:42:bc:90:ce:94:ba:0e:b9:1b:89:6a:50: 56:ca:a8:37:4d:f7:ce:05:06:fe:e0:bb:07:05:4a:ba:5d:46: 1c:af:cb:95:ef:f9:72:99:0c:1d:80:dc:c6:89:ce:42:dc:13: 5a:f0:af:b6:04:c7:d9:1f:f4:49:de:c9:4c:ae:fd:1c:3c:df: 24:20:92:93:f2:01:9a:a9:ad:b6:bb:dc:cf:55:9d:5c:c3:f6: 5f:5e:65:e7:5e:90:cf:fd:84:10:98:1e:05:80:54:e7:db:c8: 4c:f7:f6:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTowxn3X8UKDxdkYnmRUcOffFIlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjEwMTAyMDE0NTVaFw0yNjEwMTMyMDU2NTVaMDMxMTAvBgNV BAMTKDlFMDlDNjNCMTUwQzAyODY2OEE0RDQ2MDU0OTZEQUE1QTNENDU1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGHp73c9dbMCPvk1QKhWWHSF7I YMzyDdX9rZ+7D0ZNdcRdrxc2hnF88ODKFNpmJlcsrWsqjowYdnBtVoVXrmiMZfSu IMgCVXLhkPC/yi+DUlYlw0LKZUepYJJzKOMxYQkba+ZYhctCGiszSytxHusk19Q5 QGyZ1byBIEtzHHtVeckTtLH4GXD1G3i+lA7+IXtKQwUmp+5V6UZKWs4pXSb7dWG9 G5jdo5JbIrfHbrQJYtqIFUGFHy3LVKL1ZRO8f4AORYh/fKBM055rBK1R+ImgRqHa ZoX0Vjuip2BV8iRy8WVlA5NULbbM7Dbb//CisqDWBu8u4Ch0em63TCGmxio5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUngnGOxUMAoZopNRgVJbapaPUVfowHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmVgt6p9s5pa Ct9PAVbNB6JxL8gZF1lP5Hf/Cz2Y8L2RsTBqdJqV8DC4BH7vKU/VPdrZM/0EmSnQ VKYpjcWwBR7a7R1G1B6nQz4aT/Sso2N2HMK3/wsknD46WCTDknZLJnPwz3Y/tzC3 IjJu2tyozTzzGpQjCWevyG90qLLv+0V5tPeWmyBCjBBP1rF79WcSMWJElrLNQryQ zpS6DrkbiWpQVsqoN033zgUG/uC7BwVKul1GHK/Lle/5cpkMHYDcxonOQtwTWvCv tgTH2R/0Sd7JTK79HDzfJCCSk/IBmqmttrvcz1WdXMP2X15l516Qz/2EEJgeBYBU 59vITPf29A== -----END CERTIFICATE-----Generated at Mon Oct 12 21:07:48 2026 by rpki-client