$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json) Hash identifier: jH+Y0AYojZ3UQSsrZvOWOMEh7m8cmtz9aFqwQc5a+2I= Subject key identifier: 64:85:43:1D:50:09:C0:2C:65:F0:87:BF:BB:59:30:B3:41:74:5A:6F Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 52BED0ED98F4A8441F5BD7298AC07D0C6DD97CB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft Manifest number: CB Signing time: Sat 26 Sep 2026 11:48:46 +0000 Manifest this update: Sat 26 Sep 2026 11:43:46 +0000 Manifest next update: Tue 29 Sep 2026 12:01:46 +0000 Files and hashes: 1: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=) 2: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=) 3: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=) 4: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=) 5: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=) 6: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=) 7: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=) 8: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (hash: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=) 9: 3130332e3231332e3136302e302f31392d3139203d3e203633363437.roa (hash: Q1hWstIlbWyYLHeSa+nYYB06fwRTOhKBBOWA+/njAAw=) 10: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=) 11: 3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (hash: 95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=) 12: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=) 13: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=) 14: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=) 15: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=) 16: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=) 17: 3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (hash: 5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=) 18: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=) 19: 3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (hash: Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=) 20: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=) 21: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=) 22: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=) 23: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=) 24: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=) 25: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=) 26: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=) 27: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=) 28: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=) 29: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=) 30: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=) 31: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=) 32: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=) 33: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=) 34: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (hash: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=) 35: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=) 36: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=) 37: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=) 38: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=) 39: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=) 40: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=) 41: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=) 42: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=) 43: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: OurBqEuTgiGAWJq/dPtjZPilx1VSogQvNjuiJv4v8tk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 12:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:be:d0:ed:98:f4:a8:44:1f:5b:d7:29:8a:c0:7d:0c:6d:d9:7c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Sep 26 11:43:46 2026 GMT Not After : Sep 29 12:01:46 2026 GMT Subject: CN=6485431D5009C02C65F087BFBB5930B341745A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:9b:d8:b2:6c:bd:d8:eb:0d:42:ab:7f:1d: d0:ae:0a:30:0e:3c:b5:4e:11:64:dd:fa:43:24:61: a7:ad:c2:ca:07:a2:7e:e2:d8:5f:49:d2:6c:3d:2f: 82:7a:fc:d8:ac:12:cd:07:6e:3d:bd:07:8c:c2:e4: a5:09:a1:ba:f4:61:c4:d6:24:23:50:f5:fd:70:74: 5b:a1:87:ea:b8:f6:82:a3:4e:48:4d:9d:2c:08:c4: c7:02:29:74:73:1f:6b:09:29:4d:94:be:b2:dc:d6: 94:e2:cc:17:53:b7:5e:37:ca:b0:ad:55:56:96:98: ea:f1:16:c1:9d:67:ba:91:be:a7:cd:11:90:42:1e: 91:ef:d0:e2:2f:32:03:44:ee:9b:0d:46:96:e4:cc: 0e:5f:af:45:8a:89:c6:e9:48:e6:fb:62:91:8e:cd: f8:68:65:15:9b:64:9a:82:0f:e6:7b:14:69:c8:bf: 83:a1:24:24:f8:a2:6b:e8:82:c8:d1:05:e8:88:75: 1b:80:ae:9a:74:ea:b0:1d:9c:c0:2c:d2:30:c0:37: c1:ce:c1:1a:d8:da:b1:3e:0b:1d:f4:83:2f:9d:0b: f2:6c:03:29:3e:73:3a:c8:f8:1b:bc:4e:7f:a9:a1: cc:43:5d:ae:86:3a:b9:2d:99:37:15:32:1c:f7:83: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:43:1D:50:09:C0:2C:65:F0:87:BF:BB:59:30:B3:41:74:5A:6F X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:6d:03:ef:06:e8:d2:29:da:85:db:14:f2:17:65:df:41: e5:83:55:6b:ae:9d:48:e0:f3:be:60:76:39:2e:39:c6:b8:46: 6b:4a:a8:b5:73:ae:8f:db:d4:94:2a:2f:7c:27:b4:49:4d:41: 63:c9:ca:c4:44:a4:19:b5:fe:d4:94:40:1e:c3:b6:48:c0:08: b8:7f:a1:57:29:9f:d8:64:30:4a:df:13:75:70:35:c8:13:ee: b3:9e:50:b5:07:03:be:c2:e4:1a:41:8c:74:42:77:45:af:5c: cd:bf:ab:48:e3:3f:ff:85:20:7f:d0:71:5c:00:bb:0f:fd:88: 09:f9:8f:a4:cf:94:67:21:72:62:25:cf:bf:8a:94:3c:ee:92: 43:d1:c5:60:83:75:95:8f:e8:ea:90:56:3d:00:6b:b6:b5:ed: dc:5f:97:e7:82:69:d7:12:45:df:f8:42:10:9e:fa:ae:ba:9b: 3c:8b:38:9c:ea:42:08:7c:33:32:db:95:ed:ab:8a:b7:15:1d: da:26:a0:af:f6:f5:78:f9:3c:f5:95:ab:f6:4d:5f:cc:ea:68: 56:78:21:68:f5:64:46:0d:13:e0:e8:bd:9e:25:06:6e:19:36: ad:86:6b:25:4f:b5:66:3a:03:2c:fd:6b:ef:44:51:ed:07:81: 6e:c4:2c:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUr7Q7Zj0qEQfW9cpisB9DG3ZfLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA5MjYxMTQzNDZaFw0yNjA5MjkxMjAxNDZaMDMxMTAvBgNV BAMTKDY0ODU0MzFENTAwOUMwMkM2NUYwODdCRkJCNTkzMEIzNDE3NDVBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfJvYsmy92OsNQqt/HdCuCjAO PLVOEWTd+kMkYaetwsoHon7i2F9J0mw9L4J6/NisEs0Hbj29B4zC5KUJobr0YcTW JCNQ9f1wdFuhh+q49oKjTkhNnSwIxMcCKXRzH2sJKU2UvrLc1pTizBdTt143yrCt VVaWmOrxFsGdZ7qRvqfNEZBCHpHv0OIvMgNE7psNRpbkzA5fr0WKicbpSOb7YpGO zfhoZRWbZJqCD+Z7FGnIv4OhJCT4omvogsjRBeiIdRuArpp06rAdnMAs0jDAN8HO wRrY2rE+Cx30gy+dC/JsAyk+czrI+Bu8Tn+pocxDXa6GOrktmTcVMhz3gxWhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZIVDHVAJwCxl8Ie/u1kws0F0Wm8wHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC9DMUM0OEY5NTkzRDZB MTlEQkQzRkFDQTlDNkVGQTVCNTVBRDNGMzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhattA+8G6NIp 2oXbFPIXZd9B5YNVa66dSODzvmB2OS45xrhGa0qotXOuj9vUlCovfCe0SU1BY8nK xESkGbX+1JRAHsO2SMAIuH+hVymf2GQwSt8TdXA1yBPus55QtQcDvsLkGkGMdEJ3 Ra9czb+rSOM//4Ugf9BxXAC7D/2ICfmPpM+UZyFyYiXPv4qUPO6SQ9HFYIN1lY/o 6pBWPQBrtrXt3F+X54Jp1xJF3/hCEJ76rrqbPIs4nOpCCHwzMtuV7auKtxUd2iag r/b1ePk89ZWr9k1fzOpoVnghaPVkRg0T4Oi9niUGbhk2rYZrJU+1ZjoDLP1r70RR 7QeBbsQsww== -----END CERTIFICATE-----Generated at Sun Sep 27 08:33:41 2026 by rpki-client