$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: 887GD/5jl9gvlnncZSLnf7I/5cvqXycJa7wtrfOYk+U= Subject key identifier: 5A:E5:14:75:4F:32:CE:11:B4:AD:C6:C5:8C:93:25:10:5A:4C:81:F6 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: BDFFEA9C3340E17B168223DADF77316200BF35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 0138 Signing time: Mon 28 Sep 2026 21:21:33 +0000 Manifest this update: Mon 28 Sep 2026 21:16:33 +0000 Manifest next update: Thu 01 Oct 2026 22:37:33 +0000 Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 2: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: Fu/qv+eeQZKVTjSYAOo6oN/g6pUT5vDsJlACrPR+BBU=) 3: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) 4: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:ff:ea:9c:33:40:e1:7b:16:82:23:da:df:77:31:62:00:bf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Sep 28 21:16:33 2026 GMT Not After : Oct 1 22:37:33 2026 GMT Subject: CN=5AE514754F32CE11B4ADC6C58C9325105A4C81F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:a9:18:38:0e:8f:80:73:c5:e8:94:8a:27: f4:ab:f5:8a:ce:d7:5c:33:7c:25:c6:fa:9c:6b:eb: ac:02:84:35:39:54:eb:9a:a4:bb:64:1d:e1:ba:cb: 43:78:48:3d:67:c2:06:d6:f8:d8:e2:e1:f0:23:f5: 43:7e:18:7b:e5:21:d5:2a:19:91:48:00:5e:d1:3e: 81:68:e2:1c:c6:7a:10:12:44:78:bc:28:41:db:7c: 92:6d:c7:a9:92:ef:3f:af:e6:81:0f:83:e0:e5:9b: 20:de:29:35:fc:f8:75:52:2f:3d:e0:96:c5:a7:6c: e8:13:4e:cf:8b:f5:70:27:e9:8a:e6:19:cb:70:bf: b9:88:b0:e7:37:84:c4:04:8a:9e:31:c5:08:fe:47: eb:a0:7d:ea:19:27:d4:c9:47:2d:ff:dd:d1:75:1c: 49:78:10:bb:c1:43:f5:68:8e:dc:ca:57:78:20:85: 63:7c:08:a9:eb:d5:51:c1:9e:75:fc:98:45:ea:dc: a9:eb:58:5b:dd:d5:56:a3:8a:24:e5:cf:71:ca:55: 3d:af:ed:60:22:bf:3f:af:99:bc:50:5f:a4:8a:ee: 1c:cf:24:25:c5:eb:3a:f7:a3:fe:e9:7f:fc:83:ce: aa:76:9c:c6:e0:25:21:29:ea:17:a8:3d:6b:60:29: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:14:75:4F:32:CE:11:B4:AD:C6:C5:8C:93:25:10:5A:4C:81:F6 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:08:60:10:c9:ff:81:be:15:f2:83:07:5a:32:93:d4:af:ae: 1f:5a:d2:ac:1f:71:a1:00:08:51:cb:e8:3e:a9:2c:d8:82:e3: 6b:9d:bd:f9:aa:4e:50:34:70:0c:ca:85:70:ee:61:ad:42:87: ee:6d:2f:9e:1a:f3:17:96:5b:56:fa:c2:e8:96:2c:1c:00:b3: d6:f2:68:92:b5:92:59:17:54:69:72:58:70:af:84:a1:0d:ec: 7e:89:6b:49:c3:b0:70:25:07:fa:e8:a6:48:e5:1e:31:d1:e0: c0:23:a6:00:85:3d:d5:4b:09:4c:2e:fb:86:19:76:4b:60:93: 4b:22:e3:12:1a:0d:db:ad:e0:9a:96:78:36:04:df:4b:e2:74: 5e:78:bf:91:aa:08:69:5c:2b:4e:26:0e:9f:03:61:20:d6:e6: ea:a4:bb:4c:e8:fa:44:56:77:9a:67:81:c3:e5:5c:01:a5:d4: e1:e6:55:03:50:df:61:06:5e:b9:4e:e5:d1:57:c6:e5:6c:36: 43:c8:6d:dc:3a:85:f5:36:14:66:07:fb:17:a0:79:de:54:94: 8d:b5:35:31:a9:3c:52:90:fb:3a:7b:41:c8:7a:b2:af:63:11: 24:75:b3:71:f4:c4:29:5d:e9:f3:04:a7:c8:a0:7d:17:1e:a1: 7f:b1:a6:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAL3/6pwzQOF7FoIj2t93MWIAvzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA5MjgyMTE2MzNaFw0yNjEwMDEyMjM3MzNaMDMxMTAvBgNV BAMTKDVBRTUxNDc1NEYzMkNFMTFCNEFEQzZDNThDOTMyNTEwNUE0QzgxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52akYOA6PgHPF6JSKJ/Sr9YrO 11wzfCXG+pxr66wChDU5VOuapLtkHeG6y0N4SD1nwgbW+Nji4fAj9UN+GHvlIdUq GZFIAF7RPoFo4hzGehASRHi8KEHbfJJtx6mS7z+v5oEPg+DlmyDeKTX8+HVSLz3g lsWnbOgTTs+L9XAn6YrmGctwv7mIsOc3hMQEip4xxQj+R+ugfeoZJ9TJRy3/3dF1 HEl4ELvBQ/VojtzKV3gghWN8CKnr1VHBnnX8mEXq3KnrWFvd1VajiiTlz3HKVT2v 7WAivz+vmbxQX6SK7hzPJCXF6zr3o/7pf/yDzqp2nMbgJSEp6heoPWtgKZqFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWuUUdU8yzhG0rcbFjJMlEFpMgfYwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwhgEMn/gb4V 8oMHWjKT1K+uH1rSrB9xoQAIUcvoPqks2ILja529+apOUDRwDMqFcO5hrUKH7m0v nhrzF5ZbVvrC6JYsHACz1vJokrWSWRdUaXJYcK+EoQ3sfolrScOwcCUH+uimSOUe MdHgwCOmAIU91UsJTC77hhl2S2CTSyLjEhoN263gmpZ4NgTfS+J0Xni/kaoIaVwr TiYOnwNhINbm6qS7TOj6RFZ3mmeBw+VcAaXU4eZVA1DfYQZeuU7l0VfG5Ww2Q8ht 3DqF9TYUZgf7F6B53lSUjbU1Mak8UpD7OntByHqyr2MRJHWzcfTEKV3p8wSnyKB9 Fx6hf7Gmtw== -----END CERTIFICATE-----Generated at Wed Sep 30 00:16:55 2026 by rpki-client