$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft File: 185BC8F795FC60E163D641A01BAA510BF953C375.mft (raw, json) Hash identifier: j8rRe7pC0NqjGlI+kchT9pV9h0sqzSeAkEnqmp2OOYk= Subject key identifier: D1:C9:58:05:78:69:F4:5A:5C:0D:CC:77:2C:4F:DC:6E:44:0B:50:F8 Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75 Certificate issuer: /CN=185BC8F795FC60E163D641A01BAA510BF953C375 Certificate serial: 14696E3832122D2B624B8ECE4286FE5F1140ABEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft Manifest number: 44 Signing time: Sun 25 Oct 2026 23:58:05 +0000 Manifest this update: Sun 25 Oct 2026 23:53:05 +0000 Manifest next update: Thu 29 Oct 2026 10:43:05 +0000 Files and hashes: 1: 323430373a396263303a3a2f33322d3332203d3e203539303734.roa (hash: 0pw/Avjlv0JZ+GRAb03h4Z1CFfbUDynRCBE0Zi80CPE=) 2: 3130332e3131332e362e302f32332d3233203d3e203539303734.roa (hash: KUsSAkShXoN2ZS8RDBR5OOTRYENeDdoP3xwlA+umfuc=) 3: 3130332e3131332e352e302f32342d3234203d3e203539303734.roa (hash: voPM/XkF1ytAgEyvZaM7EZ0FoFoyhdT1uaThV1LU6xg=) 4: 185BC8F795FC60E163D641A01BAA510BF953C375.crl (hash: 4uEXQ1+LtTWL2m/zLr0ikolUZi6mnaWzmIoy44BhLVk=) 5: 3130332e3136392e36322e302f32332d3233203d3e203539303734.roa (hash: 7Df55ih/ns70tuHbU22icrVvR/efHAQ00CQYLJ+Aims=) 6: 3130332e3131332e342e302f32342d3234203d3e203539303734.roa (hash: MPI8BXVCyX2qdi9aUwFESJdWF4nM8gGhkSy9VqMiPSo=) 7: 323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa (hash: XPRCCZsT1P5a73kfa0XZLO8NAMJJOtMoz7/y88FSMOQ=) 8: 323430343a373234303a3a2f33332d3333203d3e203539303734.roa (hash: jF+3cfaIQDjY1LGgIryQymJzgh2wmDFMt+nwkp9/pCU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:69:6e:38:32:12:2d:2b:62:4b:8e:ce:42:86:fe:5f:11:40:ab:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375 Validity Not Before: Oct 25 23:53:05 2026 GMT Not After : Oct 29 10:43:05 2026 GMT Subject: CN=D1C958057869F45A5C0DCC772C4FDC6E440B50F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:c4:5c:d1:b5:d1:48:d3:43:63:be:9d:16: ec:25:6d:56:ba:83:ef:f1:53:23:49:5c:09:1e:d3: 0a:fb:7d:8c:b1:6a:a9:c2:ff:67:10:e9:82:7b:fa: 96:03:43:fc:ea:87:20:f4:97:50:7f:59:73:7b:5d: 8f:55:72:95:82:67:81:fb:41:26:56:e9:01:3b:bb: 37:af:77:0d:32:91:f3:a3:db:ff:8e:a7:49:ec:4b: a6:89:2f:92:d7:d5:5f:4b:57:2f:7c:41:ae:fa:e0: 71:d8:1e:1f:7e:29:3c:60:45:67:b7:e4:dd:06:88: a1:7a:bd:cd:82:bf:31:16:5e:05:0c:d8:0a:ad:cb: a8:ec:19:ea:31:25:73:62:8c:3a:0b:17:c4:8e:81: 69:f5:f0:ac:31:fa:72:6f:50:0f:db:00:9a:7d:b0: 74:f2:bc:59:ab:99:c0:9b:30:c8:4b:ed:ad:65:6f: 55:9b:48:b5:b0:3b:46:02:77:e2:4a:b0:16:e1:41: da:89:6f:7d:6f:57:dc:6d:a8:5b:8e:fb:22:a2:71: a1:9a:4d:f9:7c:93:d0:82:0e:41:d8:a1:9d:f3:50: a7:c0:19:83:b5:d3:20:05:09:6c:ec:a4:c9:32:b9: 9f:fd:41:f7:e9:4a:1c:1b:19:e1:5a:5a:c8:f0:93: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:58:05:78:69:F4:5A:5C:0D:CC:77:2C:4F:DC:6E:44:0B:50:F8 X509v3 Authority Key Identifier: keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:d7:d2:c5:b2:f1:f4:84:24:93:40:fb:2b:cb:c3:07:51: b9:5f:10:b9:2c:41:05:5f:9b:54:08:ec:f2:b0:77:6f:a4:fc: 44:96:56:d5:d4:72:fa:ae:3e:50:0b:0a:99:97:88:4f:7f:b8: c2:f2:2e:46:2c:87:9b:3e:10:c9:b0:27:78:83:81:7a:ba:49: 0a:1e:ae:f7:15:b5:4e:6a:82:5b:26:20:1c:df:1a:87:60:18: d2:0b:4a:43:78:69:e9:0c:0b:d3:80:0b:89:6e:7f:15:88:91: 4d:36:4b:9f:6b:40:d3:ca:3f:35:6a:ce:d3:65:0d:2e:b1:23: c7:95:3d:3c:d7:b3:9e:70:4f:d6:a8:80:0a:72:54:37:48:f7: fe:b5:d2:26:5f:94:38:db:ad:7d:08:b6:70:74:8c:b4:da:eb: 42:5b:23:b0:84:8d:71:96:8b:18:3e:0c:39:40:cb:6b:5f:ec: 88:0e:13:10:dd:8e:a0:ef:f0:13:d2:ee:62:e6:4d:92:23:99: 13:03:ce:1b:2d:77:e5:04:31:b0:5d:af:4b:d2:e3:f8:a0:d4: f6:c7:52:7a:14:da:fb:f7:c4:41:e7:3d:51:8f:4b:d0:d3:5a: 0f:a6:c5:7d:db:d0:85:66:94:73:d6:53:6c:53:ac:a1:af:63: 4e:af:ba:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFGluODISLStiS47OQob+XxFAq+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1QkM4Rjc5NUZDNjBFMTYzRDY0MUEwMUJBQTUxMEJG OTUzQzM3NTAeFw0yNjEwMjUyMzUzMDVaFw0yNjEwMjkxMDQzMDVaMDMxMTAvBgNV BAMTKEQxQzk1ODA1Nzg2OUY0NUE1QzBEQ0M3NzJDNEZEQzZFNDQwQjUwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX58Rc0bXRSNNDY76dFuwlbVa6 g+/xUyNJXAke0wr7fYyxaqnC/2cQ6YJ7+pYDQ/zqhyD0l1B/WXN7XY9VcpWCZ4H7 QSZW6QE7uzevdw0ykfOj2/+Op0nsS6aJL5LX1V9LVy98Qa764HHYHh9+KTxgRWe3 5N0GiKF6vc2CvzEWXgUM2Aqty6jsGeoxJXNijDoLF8SOgWn18Kwx+nJvUA/bAJp9 sHTyvFmrmcCbMMhL7a1lb1WbSLWwO0YCd+JKsBbhQdqJb31vV9xtqFuO+yKicaGa Tfl8k9CCDkHYoZ3zUKfAGYO10yAFCWzspMkyuZ/9QffpShwbGeFaWsjwkzfHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0clYBXhp9FpcDcx3LE/cbkQLUPgwHwYDVR0j BBgwFoAUGFvI95X8YOFj1kGgG6pRC/lTw3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NTA1MDUxMjE1NzExNDQwOS8wLzE4NUJDOEY3OTVGQzYwRTE2M0Q2NDFBMDFCQUE1 MTBCRjk1M0MzNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg1QkM4Rjc5NUZDNjBFMTYzRDY0MUEwMUJBQTUxMEJGOTUzQzM3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzUwNTA1MTIxNTcxMTQ0MDkvMC8xODVCQzhGNzk1RkM2 MEUxNjNENjQxQTAxQkFBNTEwQkY5NTNDMzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV7X0sWy8fSE JJNA+yvLwwdRuV8QuSxBBV+bVAjs8rB3b6T8RJZW1dRy+q4+UAsKmZeIT3+4wvIu RiyHmz4QybAneIOBerpJCh6u9xW1TmqCWyYgHN8ah2AY0gtKQ3hp6QwL04ALiW5/ FYiRTTZLn2tA08o/NWrO02UNLrEjx5U9PNeznnBP1qiACnJUN0j3/rXSJl+UONut fQi2cHSMtNrrQlsjsISNcZaLGD4MOUDLa1/siA4TEN2OoO/wE9LuYuZNkiOZEwPO Gy135QQxsF2vS9Lj+KDU9sdSehTa+/fEQec9UY9L0NNaD6bFfdvQhWaUc9ZTbFOs oa9jTq+6cw== -----END CERTIFICATE-----Generated at Mon Oct 26 19:45:59 2026 by rpki-client