$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: jp4Vt1VHlWTVYn+4h7dqO6dRB33XXxXqoZFrCuE0sNo= Subject key identifier: 3B:50:17:0A:C3:AE:42:1B:FD:93:E8:AF:2A:C4:D9:36:72:E9:99:30 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 0433F94B828DF2F45F8F1756B5726EFB7ED1AB85 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: CC Signing time: Fri 09 Oct 2026 21:28:49 +0000 Manifest this update: Fri 09 Oct 2026 21:23:49 +0000 Manifest next update: Tue 13 Oct 2026 08:48:49 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: BGH7qW3y2OhK50KC3/tYh2M9KqV2TqjGXSyIRnFEQZg=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 02:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:33:f9:4b:82:8d:f2:f4:5f:8f:17:56:b5:72:6e:fb:7e:d1:ab:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Oct 9 21:23:49 2026 GMT Not After : Oct 13 08:48:49 2026 GMT Subject: CN=3B50170AC3AE421BFD93E8AF2AC4D93672E99930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:c0:cf:e5:76:e9:60:0c:eb:f4:42:f8:8e: 7b:e2:ef:0a:56:5d:ee:9e:ec:8a:49:bc:48:e1:12: f3:8b:9a:e5:24:e7:d3:78:75:eb:54:f8:5c:bf:63: 61:94:a6:17:72:08:75:ee:c9:92:d5:7e:5a:ff:21: 5c:0f:90:88:ec:be:8c:ee:06:31:31:05:bc:71:f8: 42:5d:e7:fd:e1:96:59:6a:35:a6:31:d9:1b:a6:ba: 6a:8b:11:03:3d:62:38:9b:64:da:ef:77:8d:47:9c: 6f:31:0b:0e:06:c2:2b:ff:15:20:86:25:98:60:14: 4e:d4:62:b2:6d:19:44:bc:b4:76:d3:0b:d0:c8:96: 01:39:6e:15:94:8d:89:86:81:fd:51:04:3c:e0:6c: 7e:63:87:8d:93:1e:2e:e9:ff:88:f0:6e:15:68:67: 06:5f:36:66:00:b0:41:3c:a9:91:be:97:4f:b2:fc: 04:4a:28:d4:46:52:bd:23:8c:fc:1c:92:4d:d5:d2: ee:c6:a4:ca:87:82:48:63:2a:37:a7:29:95:f6:fd: f1:fa:ea:6d:41:a5:c8:dd:f8:81:9b:1d:b9:4d:a2: c3:6d:f7:a0:d4:fa:88:15:e2:af:2c:2b:af:14:de: d6:fb:02:25:d6:a9:47:c2:85:fd:3a:d2:75:38:15: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:17:0A:C3:AE:42:1B:FD:93:E8:AF:2A:C4:D9:36:72:E9:99:30 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b1:9f:a4:90:c3:c2:6b:e0:82:2c:62:10:85:cd:f4:02:c0: 66:e3:7d:a8:11:97:fd:f7:a0:e3:9f:4f:10:5a:06:e4:ea:aa: b0:9c:9e:b0:a1:2d:4e:e7:30:cf:20:88:eb:87:8a:00:40:b6: b9:ea:ca:b2:55:b7:9e:b4:10:6e:a4:ae:5b:f4:81:f8:8e:7b: af:42:b0:49:f6:f3:4a:22:dc:8f:7c:b9:66:e3:a1:b1:b2:d3: b8:b0:40:52:e5:4a:af:0a:3d:35:1b:49:df:3c:36:6f:f9:39: 2d:b5:c8:ae:c4:32:91:19:7d:55:e4:e8:76:27:25:6a:4f:86: 24:d6:b4:6a:05:e7:5f:7b:14:57:2e:9f:1a:49:b9:5e:36:ad: c3:4b:db:1d:e8:d7:3c:4d:e1:0f:b4:8d:a8:2d:a2:12:08:31: 90:72:48:03:5f:36:6d:0e:0d:70:59:35:ee:13:c4:af:82:d5: e9:db:32:91:a1:a8:b4:5c:2d:c2:d5:95:14:9d:24:fe:ac:cd: 1a:ed:e4:6a:65:8e:1e:78:eb:62:65:7f:a9:55:2b:2c:c4:27: 0c:43:9a:3f:a7:21:6d:32:54:9a:8e:09:82:6f:f1:cf:6b:91: fe:4f:70:29:d9:44:f1:d3:73:52:5a:d6:6f:4d:88:9f:dd:44: 76:60:aa:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBDP5S4KN8vRfjxdWtXJu+37Rq4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjEwMDkyMTIzNDlaFw0yNjEwMTMwODQ4NDlaMDMxMTAvBgNV BAMTKDNCNTAxNzBBQzNBRTQyMUJGRDkzRThBRjJBQzREOTM2NzJFOTk5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31MDP5XbpYAzr9EL4jnvi7wpW Xe6e7IpJvEjhEvOLmuUk59N4detU+Fy/Y2GUphdyCHXuyZLVflr/IVwPkIjsvozu BjExBbxx+EJd5/3hlllqNaYx2RumumqLEQM9YjibZNrvd41HnG8xCw4Gwiv/FSCG JZhgFE7UYrJtGUS8tHbTC9DIlgE5bhWUjYmGgf1RBDzgbH5jh42THi7p/4jwbhVo ZwZfNmYAsEE8qZG+l0+y/ARKKNRGUr0jjPwckk3V0u7GpMqHgkhjKjenKZX2/fH6 6m1Bpcjd+IGbHblNosNt96DU+ogV4q8sK68U3tb7AiXWqUfChf060nU4FQqfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO1AXCsOuQhv9k+ivKsTZNnLpmTAwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbGfpJDDwmvg gixiEIXN9ALAZuN9qBGX/feg459PEFoG5OqqsJyesKEtTucwzyCI64eKAEC2uerK slW3nrQQbqSuW/SB+I57r0KwSfbzSiLcj3y5ZuOhsbLTuLBAUuVKrwo9NRtJ3zw2 b/k5LbXIrsQykRl9VeTodiclak+GJNa0agXnX3sUVy6fGkm5Xjatw0vbHejXPE3h D7SNqC2iEggxkHJIA182bQ4NcFk17hPEr4LV6dsykaGotFwtwtWVFJ0k/qzNGu3k amWOHnjrYmV/qVUrLMQnDEOaP6chbTJUmo4Jgm/xz2uR/k9wKdlE8dNzUlrWb02I n91EdmCqRg== -----END CERTIFICATE-----Generated at Sun Oct 11 13:00:19 2026 by rpki-client