$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: JG2b4Be6DUx2/UKLo5RqNfQAKbi6HNFJRk5r96g0+jc= Subject key identifier: 90:99:6B:B2:70:96:55:A0:A1:61:B8:E3:0E:7D:65:C5:42:66:BE:95 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 57F8475AEC354D4B7B4E97332AB0822B5C188C31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: DE Signing time: Fri 25 Sep 2026 21:27:54 +0000 Manifest this update: Fri 25 Sep 2026 21:22:54 +0000 Manifest next update: Tue 29 Sep 2026 06:50:54 +0000 Files and hashes: 1: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 2: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) 3: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 4: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: kO8w/8tYyuOpfcKYnHZngnWuIxzqX/ueHS8xAPojdfg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 06:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f8:47:5a:ec:35:4d:4b:7b:4e:97:33:2a:b0:82:2b:5c:18:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Sep 25 21:22:54 2026 GMT Not After : Sep 29 06:50:54 2026 GMT Subject: CN=90996BB2709655A0A161B8E30E7D65C54266BE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:07:62:4c:2a:3d:74:dd:5a:89:0f:f3:1a: ca:06:2d:ee:58:13:7e:93:14:84:a9:fc:e6:03:22: 7c:cb:e0:14:00:39:f5:c6:1c:12:ec:60:bc:9b:31: d2:b7:c9:02:29:5b:8c:7b:80:60:dc:66:df:16:ef: 40:f9:26:57:16:ea:47:04:02:f3:66:5c:57:61:52: 9b:91:73:f1:f6:e3:f5:f3:4f:ff:19:ce:ff:da:bc: 8a:27:96:51:03:05:a2:43:f1:1b:cc:a6:52:d3:21: 48:a3:d1:3d:89:07:85:a1:b6:65:77:36:85:35:c9: a4:51:f4:64:88:58:7c:3d:86:c7:a1:73:01:78:08: dd:90:09:02:af:2a:f1:e8:9e:58:7d:b7:85:de:db: 67:f8:17:58:76:b3:50:31:aa:3a:3f:f2:06:3f:d8: 65:2b:bb:38:fb:e6:53:33:1e:87:19:c9:aa:bd:8f: 13:43:8d:b4:53:71:c7:fd:a2:09:4f:08:75:3f:42: bb:98:f3:9c:3f:c8:8a:e8:e6:55:6a:d1:1a:64:cf: 6c:f5:68:eb:ee:bd:84:5b:12:09:eb:85:fb:7a:a5: ad:54:62:e4:b2:b1:44:09:4f:ca:ca:81:64:1c:bf: 4c:eb:a6:41:6b:e6:b9:d4:3a:67:02:30:1d:b4:a6: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:6B:B2:70:96:55:A0:A1:61:B8:E3:0E:7D:65:C5:42:66:BE:95 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:12:0c:b5:a4:e3:a8:c6:cd:8d:0f:af:43:a0:28:52:7a: 7b:82:71:f4:a2:cc:c3:96:37:b5:28:f1:e6:4e:5f:45:b4:cd: ef:02:5f:b5:d0:48:74:80:74:a3:4e:a4:a0:0d:d2:23:0e:1f: df:23:23:37:6c:bc:df:68:7f:33:23:b7:a0:48:82:43:6f:ef: 82:42:0b:a2:64:49:80:fa:b5:51:e2:50:e0:f4:3b:be:53:14: a1:1d:8b:77:c3:d8:14:8e:1a:9e:f3:3c:d7:fd:9a:96:0b:e5: 94:14:67:1e:4c:d7:da:f0:a5:15:4b:31:5a:fa:fa:3a:d5:e7: 79:65:58:f9:59:1b:c9:16:e7:bb:52:bc:a4:b5:c8:b9:41:b5: 70:6b:b2:72:72:d9:d2:df:aa:1b:59:7b:e2:71:b3:e2:cd:77: 83:81:fc:ee:3c:0f:87:23:8b:df:71:c9:26:99:22:39:4e:26: 83:e0:0d:73:e6:b4:fc:23:23:b0:83:70:f1:d8:85:ca:f1:80: 9b:bf:cf:7f:bb:69:58:75:2e:a7:33:ca:98:b0:21:96:0c:42: 89:30:6f:64:68:e2:54:4b:5a:46:29:cc:0d:1c:29:a1:0e:93: 3f:98:15:cc:bc:a0:a1:67:d8:9f:25:1e:95:76:34:1e:2a:ae: 8a:aa:20:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV/hHWuw1TUt7TpczKrCCK1wYjDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA5MjUyMTIyNTRaFw0yNjA5MjkwNjUwNTRaMDMxMTAvBgNV BAMTKDkwOTk2QkIyNzA5NjU1QTBBMTYxQjhFMzBFN0Q2NUM1NDI2NkJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YAdiTCo9dN1aiQ/zGsoGLe5Y E36TFISp/OYDInzL4BQAOfXGHBLsYLybMdK3yQIpW4x7gGDcZt8W70D5JlcW6kcE AvNmXFdhUpuRc/H24/XzT/8Zzv/avIonllEDBaJD8RvMplLTIUij0T2JB4WhtmV3 NoU1yaRR9GSIWHw9hsehcwF4CN2QCQKvKvHonlh9t4Xe22f4F1h2s1Axqjo/8gY/ 2GUruzj75lMzHocZyaq9jxNDjbRTccf9oglPCHU/QruY85w/yIro5lVq0Rpkz2z1 aOvuvYRbEgnrhft6pa1UYuSysUQJT8rKgWQcv0zrpkFr5rnUOmcCMB20ptbBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkJlrsnCWVaChYbjjDn1lxUJmvpUwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoUSDLWk46jG zY0Pr0OgKFJ6e4Jx9KLMw5Y3tSjx5k5fRbTN7wJftdBIdIB0o06koA3SIw4f3yMj N2y832h/MyO3oEiCQ2/vgkILomRJgPq1UeJQ4PQ7vlMUoR2Ld8PYFI4anvM81/2a lgvllBRnHkzX2vClFUsxWvr6OtXneWVY+VkbyRbnu1K8pLXIuUG1cGuycnLZ0t+q G1l74nGz4s13g4H87jwPhyOL33HJJpkiOU4mg+ANc+a0/CMjsINw8diFyvGAm7/P f7tpWHUupzPKmLAhlgxCiTBvZGjiVEtaRinMDRwpoQ6TP5gVzLygoWfYnyUelXY0 Hiquiqogrw== -----END CERTIFICATE-----Generated at Sun Sep 27 17:24:24 2026 by rpki-client