$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: wGbeh6IIgXds66krmwm+hz+6DDcAqtH+N+8y6aUUDcU= Subject key identifier: F3:01:EA:89:F6:97:06:FD:8C:0D:9C:FC:E5:46:43:32:F3:64:5D:28 Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 67B5F48394A84053FB8FE68BEDCE81F5F2203B00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 11:52:32 +0000 Manifest this update: Thu 08 Oct 2026 11:47:32 +0000 Manifest next update: Sun 11 Oct 2026 17:45:32 +0000 Files and hashes: 1: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: hDQrkOOqBUde3dLDT6L374pEcCIjxiAAdgYwLj2tCOc=) 2: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 3: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b5:f4:83:94:a8:40:53:fb:8f:e6:8b:ed:ce:81:f5:f2:20:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Oct 8 11:47:32 2026 GMT Not After : Oct 11 17:45:32 2026 GMT Subject: CN=F301EA89F69706FD8C0D9CFCE5464332F3645D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:0f:a4:c8:25:13:76:15:58:77:14:96:53: f0:23:e7:2f:98:2c:aa:78:eb:8a:f4:3d:09:c1:e1: 97:58:4d:07:c3:70:d4:c0:a1:e4:f9:1a:f2:0f:6e: e6:be:71:67:27:14:e4:16:05:9c:62:20:d0:a9:52: b8:c6:c3:7d:90:87:23:5f:b7:c6:28:89:58:c2:fd: 9c:c2:e5:a3:05:19:43:6d:d0:fb:59:29:cd:89:8c: a8:91:e6:ac:1a:6a:cf:1e:a8:80:a9:ab:7f:4f:97: c9:9c:0e:30:d2:93:fd:ca:60:3a:12:96:66:71:59: 87:1b:5c:01:32:86:b9:58:b3:36:cf:e8:3e:4d:ab: 84:24:53:6a:16:cd:4a:2f:02:a6:03:f2:d7:eb:3b: e4:58:d5:08:3f:fb:1c:99:67:ff:11:ff:17:e8:15: c9:82:16:0d:79:5c:1d:e4:56:a7:59:fc:8a:b0:37: d3:c9:4c:7b:72:a5:8f:c2:fe:e2:cd:12:99:3c:c8: 0a:a8:dc:6e:63:3a:18:ea:7e:ec:77:ca:cb:55:bf: 30:57:f0:51:41:6d:dd:9a:2c:41:e2:f9:df:23:e0: 4b:a1:fc:e8:d6:58:cb:d1:ba:7b:81:8b:f6:bf:e3: fd:3a:8c:79:ea:22:30:52:90:66:bb:65:34:a3:43: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:01:EA:89:F6:97:06:FD:8C:0D:9C:FC:E5:46:43:32:F3:64:5D:28 X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c8:8d:ff:57:46:79:af:4f:1f:87:2b:d6:e4:f8:97:24:9f: 6b:0e:fe:63:b6:8e:54:e3:48:f4:f6:17:18:75:4a:9f:9c:fd: 3c:84:9b:8b:0e:30:b3:39:01:64:93:40:84:43:99:99:50:fb: 28:2e:d3:1e:92:5a:53:1b:03:56:82:e5:38:b0:33:35:36:65: 39:38:49:90:34:1d:18:4a:20:2b:36:ca:72:90:1c:9a:a2:86: 3d:32:4b:98:09:74:6a:5c:60:4a:6b:a9:75:fb:66:21:00:37: 02:49:15:b5:da:a6:e2:c1:4e:e3:3e:8e:7d:d7:80:63:4c:f1: 05:df:ac:1f:ce:af:37:33:f1:ca:ed:c3:ee:1b:53:b3:75:f5: 21:fa:71:4d:15:7a:59:a9:8d:3f:93:30:39:0f:ed:1b:6c:75: 07:d3:d5:6d:5b:3f:eb:b7:f5:5f:bd:fe:8a:91:eb:fa:c7:7e: 6a:08:38:2c:2b:db:c5:03:57:63:d0:38:8d:3b:4c:70:b6:31: 44:a1:83:b4:67:da:1c:b2:a7:d9:a1:05:30:67:0b:0a:5a:41: 7a:0c:15:4c:73:c4:2f:44:fe:a8:43:95:d3:c0:3c:ff:a6:cd: 78:b0:d4:ac:da:c0:43:4a:62:e9:27:cd:f3:c3:17:4b:7b:19: 08:3e:3a:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ7X0g5SoQFP7j+aL7c6B9fIgOwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjEwMDgxMTQ3MzJaFw0yNjEwMTExNzQ1MzJaMDMxMTAvBgNV BAMTKEYzMDFFQTg5RjY5NzA2RkQ4QzBEOUNGQ0U1NDY0MzMyRjM2NDVEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV+w+kyCUTdhVYdxSWU/Aj5y+Y LKp464r0PQnB4ZdYTQfDcNTAoeT5GvIPbua+cWcnFOQWBZxiINCpUrjGw32QhyNf t8YoiVjC/ZzC5aMFGUNt0PtZKc2JjKiR5qwaas8eqICpq39Pl8mcDjDSk/3KYDoS lmZxWYcbXAEyhrlYszbP6D5Nq4QkU2oWzUovAqYD8tfrO+RY1Qg/+xyZZ/8R/xfo FcmCFg15XB3kVqdZ/IqwN9PJTHtypY/C/uLNEpk8yAqo3G5jOhjqfux3ystVvzBX 8FFBbd2aLEHi+d8j4Euh/OjWWMvRunuBi/a/4/06jHnqIjBSkGa7ZTSjQ2Q/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8wHqifaXBv2MDZz85UZDMvNkXSgwHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMiN/1dGea9P H4cr1uT4lySfaw7+Y7aOVONI9PYXGHVKn5z9PISbiw4wszkBZJNAhEOZmVD7KC7T HpJaUxsDVoLlOLAzNTZlOThJkDQdGEogKzbKcpAcmqKGPTJLmAl0alxgSmupdftm IQA3AkkVtdqm4sFO4z6OfdeAY0zxBd+sH86vNzPxyu3D7htTs3X1IfpxTRV6WamN P5MwOQ/tG2x1B9PVbVs/67f1X73+ipHr+sd+agg4LCvbxQNXY9A4jTtMcLYxRKGD tGfaHLKn2aEFMGcLClpBegwVTHPEL0T+qEOV08A8/6bNeLDUrNrAQ0pi6SfN88MX S3sZCD46kQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:11:41 2026 by rpki-client