$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json) Hash identifier: e4YGsLfzUR6DXcuxJqaWbX732FiVYqxmSEuKqcU/UiA= Subject key identifier: F5:33:08:BA:D8:0A:C4:3A:5A:1E:FB:9D:03:C7:58:5A:BD:2F:6D:BB Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 4A8DE3194266115F4912505DCEF79A8641B14E20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft Manifest number: CA Signing time: Sat 26 Sep 2026 11:33:44 +0000 Manifest this update: Sat 26 Sep 2026 11:28:44 +0000 Manifest next update: Tue 29 Sep 2026 22:20:44 +0000 Files and hashes: 1: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=) 2: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=) 3: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=) 4: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=) 5: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=) 6: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=) 7: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=) 8: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=) 9: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=) 10: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=) 11: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=) 12: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: IaY1XeG6AA0O0PrPgR8SpywPd4NNFQWTIqvY7nqCcCw=) 13: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8d:e3:19:42:66:11:5f:49:12:50:5d:ce:f7:9a:86:41:b1:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Sep 26 11:28:44 2026 GMT Not After : Sep 29 22:20:44 2026 GMT Subject: CN=F53308BAD80AC43A5A1EFB9D03C7585ABD2F6DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:ca:ac:c8:4a:a0:28:d0:02:a4:cf:99:b9: ab:e7:84:42:b6:aa:f9:73:dc:5b:a6:4d:54:44:de: 62:ea:15:57:ad:b4:45:45:d7:fb:b6:6c:a5:87:80: 00:57:83:c3:f7:76:4b:7d:ae:a0:96:21:34:1b:85: 10:a4:ea:1e:3d:a7:38:59:4f:06:6a:6c:25:0c:bf: 83:b0:bc:02:83:a5:35:f9:d1:e4:c1:6a:5b:9d:3d: d6:13:eb:1e:15:83:fd:8d:30:b8:6d:2f:f5:5d:d8: 3d:77:92:6f:9e:42:f0:b0:8d:f1:3b:ce:16:15:96: 70:f0:57:76:bc:75:2c:d3:94:88:5a:e3:f2:84:f4: 81:da:9c:13:74:27:f8:7b:6e:06:27:65:a8:bd:cc: 89:c8:c4:b8:ec:03:dd:33:52:fd:f5:e4:ca:1d:37: 94:ad:2b:c6:99:43:3d:9a:8c:5e:68:55:bb:2e:71: 10:ba:df:ca:5f:c4:c9:df:3a:13:e3:da:f9:e7:be: 5b:c4:d7:93:3f:c0:0e:3c:a9:ee:14:b4:92:09:da: b8:e2:03:21:50:1b:cc:f6:2d:1a:c5:44:b2:0d:43: bb:c8:c0:24:2c:52:74:f2:c8:8d:20:81:8b:01:66: fa:12:52:4c:3b:c2:23:b5:40:6d:5d:aa:a2:18:d1: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:33:08:BA:D8:0A:C4:3A:5A:1E:FB:9D:03:C7:58:5A:BD:2F:6D:BB X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e2:be:f9:0c:96:30:06:06:ae:16:e0:62:d8:1d:2a:f8:76: fd:bb:45:46:c3:2e:29:34:a5:48:c5:2c:7f:78:40:4c:f0:60: 1b:0f:84:33:c3:c6:32:66:6c:af:48:3a:9e:ab:0a:fe:21:c8: 3d:f9:00:c3:a7:24:26:2b:11:fb:0b:e2:54:4d:02:fd:7c:fa: e6:73:d3:6a:30:d7:77:82:13:33:bd:78:40:aa:c7:b9:45:a9: cd:d3:c1:d6:e6:0f:e3:c0:e9:a3:76:4d:33:85:f3:e5:56:bd: 40:9f:c1:70:28:f0:aa:af:9c:11:20:a8:98:4a:c0:23:fd:73: 4c:1d:48:1f:f2:aa:41:3e:ec:e2:a3:b0:89:fd:12:2c:3b:fe: fa:72:71:1c:d9:fe:ad:85:6c:94:68:58:17:32:6a:31:0b:e3: 72:dd:bb:d8:36:3b:8e:83:16:5b:ac:d6:70:b3:34:00:40:9c: 07:11:0c:4e:2d:39:5b:43:b4:8d:47:24:6f:cb:c0:4d:a3:16: 2d:78:18:13:b0:e1:db:dd:9d:97:f3:8e:5c:b1:af:cf:34:62: 31:11:7f:32:b4:4f:66:ea:09:6c:fc:46:9d:15:80:26:80:1f: 03:36:97:74:9b:c7:7c:b0:94:71:d5:72:ce:63:f1:40:ed:fc: b9:0c:09:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSo3jGUJmEV9JElBdzveahkGxTiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA5MjYxMTI4NDRaFw0yNjA5MjkyMjIwNDRaMDMxMTAvBgNV BAMTKEY1MzMwOEJBRDgwQUM0M0E1QTFFRkI5RDAzQzc1ODVBQkQyRjZEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPMqsyEqgKNACpM+ZuavnhEK2 qvlz3FumTVRE3mLqFVettEVF1/u2bKWHgABXg8P3dkt9rqCWITQbhRCk6h49pzhZ TwZqbCUMv4OwvAKDpTX50eTBaludPdYT6x4Vg/2NMLhtL/Vd2D13km+eQvCwjfE7 zhYVlnDwV3a8dSzTlIha4/KE9IHanBN0J/h7bgYnZai9zInIxLjsA90zUv315Mod N5StK8aZQz2ajF5oVbsucRC638pfxMnfOhPj2vnnvlvE15M/wA48qe4UtJIJ2rji AyFQG8z2LRrFRLINQ7vIwCQsUnTyyI0ggYsBZvoSUkw7wiO1QG1dqqIY0XIJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9TMIutgKxDpaHvudA8dYWr0vbbswHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0OTg4NjM2MDA4OTM5NTQvMC82MDFBOUE4QTNCNTA1 QTVFRTIyODMyNDNGN0FCRTdBNkY1NEVEQzRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+K++QyWMAYG rhbgYtgdKvh2/btFRsMuKTSlSMUsf3hATPBgGw+EM8PGMmZsr0g6nqsK/iHIPfkA w6ckJisR+wviVE0C/Xz65nPTajDXd4ITM714QKrHuUWpzdPB1uYP48Dpo3ZNM4Xz 5Va9QJ/BcCjwqq+cESComErAI/1zTB1IH/KqQT7s4qOwif0SLDv++nJxHNn+rYVs lGhYFzJqMQvjct272DY7joMWW6zWcLM0AECcBxEMTi05W0O0jUckb8vATaMWLXgY E7Dh292dl/OOXLGvzzRiMRF/MrRPZuoJbPxGnRWAJoAfAzaXdJvHfLCUcdVyzmPx QO38uQwJhA== -----END CERTIFICATE-----Generated at Sun Sep 27 22:14:29 2026 by rpki-client