$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: 0Bc8aTZRwO6+/HYm15UbGeyrPevwMS3J6xGCHPJKfbk= Subject key identifier: 11:CC:A3:D6:0D:0D:3D:7C:D2:5B:4E:98:87:CB:95:A8:0C:6A:16:7E Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 17B54FC2BCCDFEBCBBC178A47F1026EB81E1F177 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: CD Signing time: Mon 28 Sep 2026 17:36:09 +0000 Manifest this update: Mon 28 Sep 2026 17:31:09 +0000 Manifest next update: Fri 02 Oct 2026 01:45:09 +0000 Files and hashes: 1: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 2: 3130312e3132352e3235332e302f32342d3234203d3e20313337373032.roa (hash: opKyhsmS++FYHtfTnj/kaqOGfgLAE1EmtkYwGMmQCYc=) 3: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: hmy7wHjFDKHkt958i2IlAF397LwOsUyogvuUgFvjMsM=) 4: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b5:4f:c2:bc:cd:fe:bc:bb:c1:78:a4:7f:10:26:eb:81:e1:f1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Sep 28 17:31:09 2026 GMT Not After : Oct 2 01:45:09 2026 GMT Subject: CN=11CCA3D60D0D3D7CD25B4E9887CB95A80C6A167E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:fd:00:df:e0:13:38:d6:c1:9c:dc:94:46: 13:d4:a6:c0:87:ec:26:31:86:59:6d:fd:42:13:d7: 26:df:fb:18:13:70:7b:25:1e:31:b5:25:07:17:31: aa:0d:2f:b7:ca:9d:48:45:d2:6b:bb:a2:fe:92:bd: de:11:70:d0:ea:11:6d:3a:74:37:31:0d:a9:bd:08: 2e:d1:e4:e4:f4:b9:6c:3a:65:91:7d:fa:06:1e:df: c9:f1:89:d0:e1:38:d4:79:10:34:e7:84:c6:71:68: a0:0b:55:b9:e3:17:2e:09:5f:20:d9:16:64:71:fc: bc:b0:1d:b9:e2:09:c1:a9:d1:e8:3d:fe:1f:80:88: 59:04:b9:cb:45:26:d4:d5:14:e8:68:f4:70:82:8a: 68:3e:cd:a6:5e:aa:9c:f6:6a:63:a6:c0:11:16:b3: e8:16:44:b9:a1:82:52:1b:9b:49:c1:c7:95:47:fe: 98:6d:78:1d:da:25:dd:44:bc:94:40:ff:2f:9a:3b: b8:c9:f5:af:ee:b1:c7:88:8f:e8:22:c4:b0:24:f2: b3:53:ff:56:32:b0:95:f5:60:7c:de:27:e4:66:b8: 74:30:94:d0:20:61:07:57:4f:fb:14:de:50:2a:89: cf:b1:52:18:61:bf:67:25:2e:ed:38:5d:d1:8c:76: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:A3:D6:0D:0D:3D:7C:D2:5B:4E:98:87:CB:95:A8:0C:6A:16:7E X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4a:ff:a8:0e:96:6e:1e:b0:2d:55:36:51:ce:03:34:5f:02: e1:42:0e:0c:20:4d:38:4a:96:60:a5:da:a8:a9:a2:0d:b9:a0: 3c:33:87:12:8d:75:1e:9e:08:27:58:4a:e5:b4:54:6f:c3:3c: ef:91:88:e7:c1:f6:9f:8d:c5:df:47:e5:1c:67:2e:97:da:9f: 6f:70:f8:2f:d4:7a:42:93:bd:a4:29:f6:f1:4b:b7:21:35:7d: df:d6:f6:fc:a2:e6:69:6f:e5:6d:8c:a3:2d:b4:88:24:59:79: 6d:86:8b:d1:12:b7:0b:59:21:d3:ca:8c:9e:a5:98:2d:af:e0: c5:15:9e:60:b7:04:88:c0:53:6a:24:df:19:86:87:be:b4:c9: c6:f2:aa:89:d0:a3:34:86:39:c8:c6:53:2e:0d:d2:78:5b:f8: 1d:08:0f:87:49:9b:e4:53:7a:b0:3b:66:9e:54:76:bd:42:5c: b8:4f:41:8a:6a:00:46:33:6c:95:4f:73:83:09:f6:ad:63:0d: ef:f3:8b:4e:3b:ec:d5:2e:23:58:fe:f4:53:98:45:de:26:48: ea:2b:0d:55:f7:eb:22:6e:f8:d6:53:f8:43:12:91:b1:4e:f5: 1a:6d:30:dd:17:f6:fd:71:ad:96:8a:8a:fc:f5:21:32:15:bf: c8:58:a3:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF7VPwrzN/ry7wXikfxAm64Hh8XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA5MjgxNzMxMDlaFw0yNjEwMDIwMTQ1MDlaMDMxMTAvBgNV BAMTKDExQ0NBM0Q2MEQwRDNEN0NEMjVCNEU5ODg3Q0I5NUE4MEM2QTE2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwv0A3+ATONbBnNyURhPUpsCH 7CYxhllt/UIT1ybf+xgTcHslHjG1JQcXMaoNL7fKnUhF0mu7ov6Svd4RcNDqEW06 dDcxDam9CC7R5OT0uWw6ZZF9+gYe38nxidDhONR5EDTnhMZxaKALVbnjFy4JXyDZ FmRx/LywHbniCcGp0eg9/h+AiFkEuctFJtTVFOho9HCCimg+zaZeqpz2amOmwBEW s+gWRLmhglIbm0nBx5VH/phteB3aJd1EvJRA/y+aO7jJ9a/usceIj+gixLAk8rNT /1YysJX1YHzeJ+RmuHQwlNAgYQdXT/sU3lAqic+xUhhhv2clLu04XdGMdrPzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEcyj1g0NPXzSW06Yh8uVqAxqFn4wHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0r/qA6Wbh6w LVU2Uc4DNF8C4UIODCBNOEqWYKXaqKmiDbmgPDOHEo11Hp4IJ1hK5bRUb8M875GI 58H2n43F30flHGcul9qfb3D4L9R6QpO9pCn28Uu3ITV939b2/KLmaW/lbYyjLbSI JFl5bYaL0RK3C1kh08qMnqWYLa/gxRWeYLcEiMBTaiTfGYaHvrTJxvKqidCjNIY5 yMZTLg3SeFv4HQgPh0mb5FN6sDtmnlR2vUJcuE9BimoARjNslU9zgwn2rWMN7/OL Tjvs1S4jWP70U5hF3iZI6isNVffrIm741lP4QxKRsU71Gm0w3Rf2/XGtloqK/PUh MhW/yFijgg== -----END CERTIFICATE-----Generated at Mon Sep 28 20:21:10 2026 by rpki-client