$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: FdLaeXHKkO//Mqkf45nBQcjUIsovpshvdHVNyGCf9Ww= Subject key identifier: B6:C3:48:A9:F8:6D:A0:70:C0:46:10:C7:2A:29:24:C7:14:D7:26:24 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 676B883B9489E48F1A070FB7539D2C3E629351AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 89 Signing time: Mon 12 Oct 2026 20:57:20 +0000 Manifest this update: Mon 12 Oct 2026 20:52:20 +0000 Manifest next update: Fri 16 Oct 2026 03:30:20 +0000 Files and hashes: 1: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 2: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 3: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 4: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 5: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 6: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 7: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: ++RuQS060VFW8fHrk7MO+r4GFWQ1HUgP5L7XKaJVCtM=) 8: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 9: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6b:88:3b:94:89:e4:8f:1a:07:0f:b7:53:9d:2c:3e:62:93:51:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Oct 12 20:52:20 2026 GMT Not After : Oct 16 03:30:20 2026 GMT Subject: CN=B6C348A9F86DA070C04610C72A2924C714D72624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:94:12:23:9e:fb:79:5c:ea:83:df:0e:35: c7:8f:a4:31:95:df:88:8b:38:1f:b4:cd:74:a3:25: 54:f9:82:7b:ba:22:fe:a1:46:7a:90:0d:2a:f5:14: 43:fa:89:1d:0e:c3:03:a5:b7:dc:d7:b6:b2:57:e2: 31:93:16:dd:40:e6:26:bf:d1:8c:0b:51:cb:3b:e5: 0b:d1:1a:f6:5e:2a:9f:16:c9:d7:30:86:ac:27:eb: 02:cf:4b:76:ed:11:8a:f0:93:05:93:ff:b5:49:52: 54:05:aa:61:28:5a:82:e8:95:6e:a8:8c:64:bc:50: 8e:09:a2:97:19:7c:04:4a:60:a1:52:c9:52:20:ce: ea:6d:a8:37:e2:4e:d6:fc:a7:76:4c:4d:7c:c1:c1: e9:1e:34:c3:96:bf:15:6b:70:ed:d5:2e:4c:f6:42: 24:76:93:16:19:7d:93:1e:66:1e:02:74:1c:89:60: f3:ed:bb:2f:a2:d0:31:5c:34:4a:71:28:30:be:61: f0:4c:c3:8f:ed:20:0e:97:c7:7a:3c:d3:01:19:8f: 39:bc:b5:52:1f:b6:78:9c:ec:8e:14:e6:08:5e:c8: 53:a5:89:7d:dc:6a:e3:83:44:42:36:24:82:20:db: 4b:c6:12:37:9b:3e:0e:80:10:ea:95:58:23:72:b8: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C3:48:A9:F8:6D:A0:70:C0:46:10:C7:2A:29:24:C7:14:D7:26:24 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a9:d3:cf:78:14:af:27:ca:dc:4c:00:e6:e1:7a:f3:a1:f6: 83:43:df:3d:a0:6b:36:ff:72:8b:47:5c:0f:8f:a2:50:3c:a0: 9d:64:b5:a3:1a:4f:13:2c:9e:90:66:b4:d0:6d:6e:6e:fb:d0: 72:4d:fc:b5:a6:b3:42:bd:67:e0:4c:e5:ca:21:0a:e2:2f:88: 64:90:fd:2b:54:90:75:78:4d:6d:e9:95:92:b5:f8:f6:1a:20: f2:26:3f:55:2a:61:08:97:9f:b8:39:76:7d:c3:7f:a5:fc:cc: 58:ff:29:a4:ad:dd:d7:59:2f:ff:36:96:4f:8a:be:c7:46:33: 7e:d2:d4:16:20:44:8f:f8:7e:b5:ff:86:0f:9c:40:11:01:f9: 5a:bd:f4:50:85:10:bf:ff:55:e6:e7:e2:2b:a5:3b:9b:9e:ef: 9a:26:e7:e9:ad:47:a3:e5:99:c2:5c:9e:4a:7c:08:ab:81:f4: ea:4d:e3:f6:99:50:df:fb:0a:c7:12:5c:06:d8:60:c4:9a:b1: 52:f2:7b:75:39:c2:7b:94:06:14:dc:20:f0:76:8e:fe:96:df: 25:1d:a0:4e:9b:3e:1a:b5:e3:ca:31:7a:37:3b:cf:47:00:87: 9b:53:9d:41:c1:3e:25:74:32:3a:f5:ce:92:4d:e2:8d:9a:13: 95:f7:2d:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ2uIO5SJ5I8aBw+3U50sPmKTUawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjEwMTIyMDUyMjBaFw0yNjEwMTYwMzMwMjBaMDMxMTAvBgNV BAMTKEI2QzM0OEE5Rjg2REEwNzBDMDQ2MTBDNzJBMjkyNEM3MTRENzI2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOZQSI577eVzqg98ONcePpDGV 34iLOB+0zXSjJVT5gnu6Iv6hRnqQDSr1FEP6iR0OwwOlt9zXtrJX4jGTFt1A5ia/ 0YwLUcs75QvRGvZeKp8Wydcwhqwn6wLPS3btEYrwkwWT/7VJUlQFqmEoWoLolW6o jGS8UI4JopcZfARKYKFSyVIgzuptqDfiTtb8p3ZMTXzBwekeNMOWvxVrcO3VLkz2 QiR2kxYZfZMeZh4CdByJYPPtuy+i0DFcNEpxKDC+YfBMw4/tIA6Xx3o80wEZjzm8 tVIftnic7I4U5gheyFOliX3cauODREI2JIIg20vGEjebPg6AEOqVWCNyuMOFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtsNIqfhtoHDARhDHKikkxxTXJiQwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqnTz3gUryfK 3EwA5uF686H2g0PfPaBrNv9yi0dcD4+iUDygnWS1oxpPEyyekGa00G1ubvvQck38 taazQr1n4EzlyiEK4i+IZJD9K1SQdXhNbemVkrX49hog8iY/VSphCJefuDl2fcN/ pfzMWP8ppK3d11kv/zaWT4q+x0YzftLUFiBEj/h+tf+GD5xAEQH5Wr30UIUQv/9V 5ufiK6U7m57vmibn6a1Ho+WZwlyeSnwIq4H06k3j9plQ3/sKxxJcBthgxJqxUvJ7 dTnCe5QGFNwg8HaO/pbfJR2gTps+GrXjyjF6NzvPRwCHm1OdQcE+JXQyOvXOkk3i jZoTlfctRQ== -----END CERTIFICATE-----Generated at Tue Oct 13 02:36:21 2026 by rpki-client