$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: 1uunNA5PPrSrYfryu2Zyonq2oyLlb0Iz/Ahcib+Kr/c= Subject key identifier: C8:40:08:86:6F:AD:1A:CA:A9:08:EB:64:48:89:1F:35:64:08:64:07 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 71691CFD1974BB19ECD86C934C33C7E58F7AAE10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 0142 Signing time: Sun 11 Oct 2026 23:51:13 +0000 Manifest this update: Sun 11 Oct 2026 23:46:13 +0000 Manifest next update: Thu 15 Oct 2026 08:25:13 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) 2: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: 7D7unSy1zuIYWaJy3zkORoLcArR8Xu9v5YGXUuZ3LBE=) 3: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:1c:fd:19:74:bb:19:ec:d8:6c:93:4c:33:c7:e5:8f:7a:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Oct 11 23:46:13 2026 GMT Not After : Oct 15 08:25:13 2026 GMT Subject: CN=C84008866FAD1ACAA908EB6448891F3564086407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:d6:5a:8f:36:f4:11:b4:12:2b:c9:e4:a0: bf:55:35:80:1c:ac:18:9d:3c:34:fd:0c:84:bb:c9: 86:bb:62:20:ed:36:1e:f2:65:56:1e:09:66:0c:9c: 49:6a:90:cb:4f:47:90:b1:d4:6b:14:1b:b1:0c:78: 83:6c:7b:e5:34:1b:f1:d8:af:10:2d:f4:91:4a:df: 4d:08:dc:af:1c:51:0b:41:d5:3b:88:ce:d4:65:64: 2e:b4:8d:c2:35:a3:86:ad:60:f8:84:4c:df:25:e4: 9d:ff:86:06:25:4f:2f:1f:2b:71:af:76:49:7c:11: 3f:78:62:e9:8a:7b:70:6b:b3:dc:08:81:e3:2b:9e: 33:13:1a:94:6f:e1:36:6b:e2:72:77:f0:05:cf:17: bf:b4:46:91:67:60:5e:2f:e2:65:b1:e2:de:e5:d0: 52:bb:5d:31:12:97:0b:dc:b0:4e:75:5e:9c:2a:e5: b5:87:c8:a6:46:27:9f:c9:51:ef:f9:94:7e:15:76: 44:11:cb:a6:1a:58:9a:a5:d3:d1:c0:b9:77:01:2f: b0:65:5f:36:bb:94:4c:61:53:57:02:a0:17:0d:1f: 79:dc:c2:70:7a:c8:93:c0:35:07:0e:cf:a5:d3:06: b3:bf:67:91:5f:83:56:d4:32:3d:a2:b6:a1:9e:f9: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:08:86:6F:AD:1A:CA:A9:08:EB:64:48:89:1F:35:64:08:64:07 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fc:61:b1:f1:d6:25:40:4b:4b:f9:63:6d:69:e5:47:3a:92: 71:d9:45:a6:39:1a:b5:b1:eb:b7:f9:ff:85:12:30:33:93:d3: 5f:0a:28:80:49:bd:d9:28:a1:65:48:c8:b2:73:9f:65:6f:30: ff:28:dc:a1:08:60:e7:05:a1:f9:42:35:57:b1:65:cc:08:82: 11:f3:c1:2b:44:94:be:d7:34:f6:5a:c9:67:c6:d8:8f:ce:3c: 42:4d:b1:80:6c:00:a5:4a:e7:b0:9e:45:af:18:f6:a7:02:3a: af:ee:2a:a1:da:48:06:54:4d:ab:65:8f:cd:bc:00:4d:12:e2: 9c:ce:39:68:5e:26:f5:08:c9:31:c6:d2:2a:bd:b5:69:cb:51: 81:c8:7b:64:34:ab:df:19:60:4e:94:32:32:5d:33:1a:a5:7f: b3:6d:0c:48:2d:55:5a:43:c6:4e:58:cf:7d:3b:05:0b:85:a6: c3:ca:32:4a:56:ad:d6:7f:1e:50:37:da:d5:0b:19:ed:58:7b: 4a:4c:9b:89:55:66:b2:44:b3:65:71:d1:06:bb:0c:67:63:a1: e0:20:d6:a8:2b:22:57:42:3f:3f:f2:2e:f4:71:e0:0a:65:c6: 21:10:d1:ae:e0:71:08:85:a3:ad:23:53:f5:26:94:b5:66:95: c9:d3:aa:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcWkc/Rl0uxns2GyTTDPH5Y96rhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjEwMTEyMzQ2MTNaFw0yNjEwMTUwODI1MTNaMDMxMTAvBgNV BAMTKEM4NDAwODg2NkZBRDFBQ0FBOTA4RUI2NDQ4ODkxRjM1NjQwODY0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHutZajzb0EbQSK8nkoL9VNYAc rBidPDT9DIS7yYa7YiDtNh7yZVYeCWYMnElqkMtPR5Cx1GsUG7EMeINse+U0G/HY rxAt9JFK300I3K8cUQtB1TuIztRlZC60jcI1o4atYPiETN8l5J3/hgYlTy8fK3Gv dkl8ET94YumKe3Brs9wIgeMrnjMTGpRv4TZr4nJ38AXPF7+0RpFnYF4v4mWx4t7l 0FK7XTESlwvcsE51Xpwq5bWHyKZGJ5/JUe/5lH4VdkQRy6YaWJql09HAuXcBL7Bl Xza7lExhU1cCoBcNH3ncwnB6yJPANQcOz6XTBrO/Z5Ffg1bUMj2itqGe+QZ3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyEAIhm+tGsqpCOtkSIkfNWQIZAcwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfxhsfHWJUBL S/ljbWnlRzqScdlFpjkatbHrt/n/hRIwM5PTXwoogEm92SihZUjIsnOfZW8w/yjc oQhg5wWh+UI1V7FlzAiCEfPBK0SUvtc09lrJZ8bYj848Qk2xgGwApUrnsJ5Frxj2 pwI6r+4qodpIBlRNq2WPzbwATRLinM45aF4m9QjJMcbSKr21actRgch7ZDSr3xlg TpQyMl0zGqV/s20MSC1VWkPGTljPfTsFC4Wmw8oySlat1n8eUDfa1QsZ7Vh7Skyb iVVmskSzZXHRBrsMZ2Oh4CDWqCsiV0I/P/Iu9HHgCmXGIRDRruBxCIWjrSNT9SaU tWaVydOqPQ== -----END CERTIFICATE-----Generated at Tue Oct 13 12:56:27 2026 by rpki-client