$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json) Hash identifier: wdVnUJ0EO8Ar9iMnx9zadIPLuK3iSfrbZs07EfSrqyY= Subject key identifier: 89:C0:E8:99:5B:34:FA:08:F7:3D:A1:3E:54:99:97:86:12:53:F2:A1 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 5FF1773221377E4C9EFFDAEFF8B1FF9240A381B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft Manifest number: 024A Signing time: Sun 27 Sep 2026 16:45:05 +0000 Manifest this update: Sun 27 Sep 2026 16:40:05 +0000 Manifest next update: Wed 30 Sep 2026 22:23:05 +0000 Files and hashes: 1: 3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa (hash: dNjRVPUi8SeJi6wfWA5kpGRV6M0Yhi+9BNbX7d5K6RM=) 2: 3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa (hash: VhRwOwc2/6uy/9jZXno2xQ/IEWxs3AJLgM3zUgVetRc=) 3: 3130312e3233322e3232382e302f32322d3234203d3e20323034373635.roa (hash: ELull7wYpAhnMMP1UUEW0JriulkO97jfKNOmPBLe3Ao=) 4: 3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (hash: 5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=) 5: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (hash: /0sg8ccLTkO3g1ldJzbTiAFtKDlkkCPb7uCa7Ysudpo=) 6: 3231312e3134392e33332e302f32342d3234203d3e20313937363436.roa (hash: R0/2iTeh2DLPcz2gqCFDzilBADOZ6v71FJD7uxFPFJQ=) 7: 3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa (hash: 3MZhZdqFlGUXrs41Ixg9lETuk2pcfcfoIp+5TjNL/f0=) 8: 3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa (hash: E1+jSIF+26ZCWmYBRLcZrk43sgfcRZnSJXfTb4Ao+zI=) 9: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: ZVXqKPYmowSGz4oruVtJVHzm2cMtveZB4sAY/fgVwqI=) 10: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (hash: sCJBIczjSjKHwYg4tr7Vt4b9W/CSWx+cTZb6kw5fUgI=) 11: 3132332e39382e302e302f32342d3234203d3e20313937353430.roa (hash: f8C6VLPJ6OvFB09dBz6mz+VP2ro/1UGGvxqqWBCcEq8=) 12: 3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa (hash: Igedmkrmmt6w/coBrWoPE5I/S4pHWuUb36wo85gMF2M=) 13: 3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (hash: re30P74Bbm0hmGv2RhIcziLM8r3Wt2LJElxw1K1ooLg=) 14: 3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa (hash: Jf0nSP1QjgiNIQhdrUFTjytdDY0TmEhyfIpVa+7R0NI=) 15: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (hash: zXlo1VA9iQTDPz3KGS73pe5bQ11qgiCZzBV45rhkKNM=) 16: 3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa (hash: Im2H24Yr/6b3QfJrulqbSm/zgWvML9X71XNr/4p53L0=) 17: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (hash: Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=) 18: 3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa (hash: 5SXjckLKgvKsrKMfCX5zCQiw9HEgb8VVY5iiv+S/LGU=) 19: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (hash: j47sMbHM1m2pa9sdXpdOqe2ulNU6K+ubDOp951xAJ40=) 20: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (hash: cTF/1P0hKocHB9czSD+ya7E09e6MNaALbBW1WrMk3qw=) 21: 3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (hash: JOuDarRFxX6hedZ9d+aM+Mp8ReI4i452AlyZanVV94A=) 22: 3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (hash: Jh9N6MjH+92KExvSY1br25KQHKZt03whAcPmQQtTsZM=) 23: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (hash: zL0Dm0mURydYd7+TsCOqL5DQfpsmBMxpHIw7pKf+HsM=) 24: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (hash: zu7A0YqOUsStSCL9XmMvV8JI6as35lqa/fkbIpxCsuU=) 25: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (hash: 7V36+GTIj9SXQJg7tLFnRoq+tkYB8vWy1KKimX7T6e4=) 26: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (hash: vHWiz6x+VBqj0f9UFCYPCsW1JK5bYID4vJQiFZNMWjU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 22:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f1:77:32:21:37:7e:4c:9e:ff:da:ef:f8:b1:ff:92:40:a3:81:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Sep 27 16:40:05 2026 GMT Not After : Sep 30 22:23:05 2026 GMT Subject: CN=89C0E8995B34FA08F73DA13E549997861253F2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:cb:ba:67:97:c1:e9:0f:22:94:01:02:d6: 83:54:7d:5a:17:34:84:a9:ba:c1:90:df:1d:04:27: fb:d1:b9:11:20:f2:89:b1:96:c0:bd:0f:63:b0:8f: 54:93:01:ff:2c:29:c2:17:eb:1c:13:94:01:12:a7: cd:c2:ef:b3:3a:cf:a6:d1:2b:ea:f4:48:9b:43:3c: 44:34:15:74:64:13:34:1b:ce:a8:76:5e:bb:b0:b9: c1:3e:cb:e1:29:79:bf:ba:63:8d:59:7a:c7:9b:ba: 81:e0:a7:1c:fb:24:cc:4d:29:5a:5f:f8:42:32:cd: 4d:24:e3:5f:d1:55:74:e7:70:e3:62:4a:b3:1b:40: 99:29:88:38:1f:3e:e4:54:be:1a:3e:cd:57:b8:59: a6:43:05:c4:2b:ec:7c:b2:f4:46:64:53:db:3d:f2: 35:2c:56:8f:9c:68:b7:89:da:57:35:8c:22:4f:db: 6c:e2:93:a8:2e:0b:ca:29:b9:ba:37:f1:c4:b2:33: 0c:71:59:bc:f3:10:6f:37:89:b0:17:8b:e8:8b:dd: 62:d0:21:e9:2a:f4:ff:b2:c0:0e:fe:fb:8b:a4:4a: 9b:67:a3:5c:cb:24:f5:d7:ba:7d:2c:2a:9c:b2:e2: 25:08:b0:73:03:2c:52:05:b6:59:89:45:ea:1b:b7: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:E8:99:5B:34:FA:08:F7:3D:A1:3E:54:99:97:86:12:53:F2:A1 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1b:08:d1:1f:d2:87:7c:a1:09:2e:fb:35:d2:c7:60:70:8c: e0:03:ed:74:c9:2a:47:9e:bd:37:19:ad:aa:69:ca:2f:5d:6e: 8c:d4:74:f4:98:02:92:5c:3b:39:eb:74:76:6e:49:44:cb:bb: 1e:3c:24:cf:a7:7d:1a:63:62:d4:c5:cd:42:9d:c2:f7:bd:d6: 74:48:1e:94:7d:e2:ff:4d:3c:70:3c:2c:04:bc:8d:d1:f1:e0: be:31:3d:50:db:d6:c5:29:24:7d:5f:97:58:75:21:49:ba:e2: 8f:dd:f2:33:d0:06:e8:87:5d:c5:c1:1b:a6:6e:d1:c5:eb:8f: c5:9c:eb:5e:f1:93:3e:7c:27:1d:6f:f7:fe:f9:e2:e5:6e:b6: ea:74:a5:94:23:15:42:e5:62:31:ba:f2:f1:24:e2:30:75:44: 4e:d7:ba:0e:67:35:31:a0:04:9a:f2:17:6e:6c:39:3a:ec:be: 50:e5:0c:7f:00:85:a1:40:f9:43:ba:3f:78:2b:0e:6b:dc:03: af:47:bf:2b:60:36:82:c5:51:4d:be:94:bd:0b:0e:97:34:4d: 09:1a:6c:05:48:e5:7e:40:cf:6c:48:1b:4c:23:e2:9d:29:f6: b0:8c:60:f4:51:f0:b3:f5:46:ae:12:9d:93:94:5a:2f:60:dd: 1a:56:34:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX/F3MiE3fkye/9rv+LH/kkCjgbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA5MjcxNjQwMDVaFw0yNjA5MzAyMjIzMDVaMDMxMTAvBgNV BAMTKDg5QzBFODk5NUIzNEZBMDhGNzNEQTEzRTU0OTk5Nzg2MTI1M0YyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhcu6Z5fB6Q8ilAEC1oNUfVoX NISpusGQ3x0EJ/vRuREg8omxlsC9D2Owj1STAf8sKcIX6xwTlAESp83C77M6z6bR K+r0SJtDPEQ0FXRkEzQbzqh2XruwucE+y+Epeb+6Y41ZesebuoHgpxz7JMxNKVpf +EIyzU0k41/RVXTncONiSrMbQJkpiDgfPuRUvho+zVe4WaZDBcQr7Hyy9EZkU9s9 8jUsVo+caLeJ2lc1jCJP22zik6guC8opubo38cSyMwxxWbzzEG83ibAXi+iL3WLQ Iekq9P+ywA7++4ukSptno1zLJPXXun0sKpyy4iUIsHMDLFIFtlmJReobtwwVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUicDomVs0+gj3PaE+VJmXhhJT8qEwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4 REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRsI0R/Sh3yh CS77NdLHYHCM4APtdMkqR569NxmtqmnKL11ujNR09JgCklw7Oet0dm5JRMu7Hjwk z6d9GmNi1MXNQp3C973WdEgelH3i/008cDwsBLyN0fHgvjE9UNvWxSkkfV+XWHUh Sbrij93yM9AG6IddxcEbpm7RxeuPxZzrXvGTPnwnHW/3/vni5W626nSllCMVQuVi Mbry8STiMHVETte6Dmc1MaAEmvIXbmw5Ouy+UOUMfwCFoUD5Q7o/eCsOa9wDr0e/ K2A2gsVRTb6UvQsOlzRNCRpsBUjlfkDPbEgbTCPinSn2sIxg9FHws/VGrhKdk5Ra L2DdGlY08Q== -----END CERTIFICATE-----Generated at Tue Sep 29 15:22:11 2026 by rpki-client