$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: ig9f3ZORAf1WFaMcuXxDk67F0EMhLxlcy8eEoP9kFCo= Subject key identifier: 25:A9:DE:EB:F7:79:32:9D:C4:3C:20:3D:F7:64:0E:85:50:23:7A:DF Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 6C8C005C8164305C596D0301420E2E96746E42B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: CE Signing time: Sat 10 Oct 2026 15:19:46 +0000 Manifest this update: Sat 10 Oct 2026 15:14:46 +0000 Manifest next update: Tue 13 Oct 2026 23:58:46 +0000 Files and hashes: 1: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) 2: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: wbOJrEpdFdAB6+svWYwSPmu8ihFburLfoGKtyoX16ro=) 3: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) 4: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8c:00:5c:81:64:30:5c:59:6d:03:01:42:0e:2e:96:74:6e:42:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: Oct 10 15:14:46 2026 GMT Not After : Oct 13 23:58:46 2026 GMT Subject: CN=25A9DEEBF779329DC43C203DF7640E8550237ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:c4:6e:a2:86:ec:93:fd:93:21:28:b8:0f: 7f:5b:d6:94:66:98:9e:b1:29:b4:2e:59:fa:de:cb: 66:4f:60:90:33:39:7d:c8:f7:68:5a:3b:98:c8:ea: 35:f1:b4:8e:86:97:27:81:b2:b7:c6:19:81:b2:f6: 8f:2b:d7:39:d8:da:1d:21:fb:fd:e6:14:d1:af:c3: aa:43:9c:3b:9c:7b:c6:cd:35:84:85:ee:2a:d1:a7: 8c:62:35:f6:14:b8:67:8c:5f:a7:2f:d2:9b:02:78: 90:37:31:ae:34:17:ad:65:20:b8:80:2a:22:a7:8b: 38:99:5e:a0:d8:1c:e8:8e:4f:1e:ed:e1:f8:cb:40: cf:4e:51:7c:ba:04:07:aa:1f:28:40:6b:36:c3:74: 42:f5:ce:aa:6b:35:fe:9c:c9:ab:0c:c4:cf:df:82: 8b:8b:69:73:93:50:e3:34:d4:45:84:d4:a7:aa:86: 2d:2e:1c:ff:5e:48:98:25:3e:fa:cc:5b:ed:fc:1b: 72:58:57:56:0e:81:b8:9f:22:5b:6f:b2:55:b0:f8: b9:1c:59:47:8f:f8:f4:42:83:52:62:bc:50:0b:85: a7:b9:f0:7e:31:c5:79:1f:6f:d8:4b:c4:12:e4:be: a5:46:58:97:e1:ba:c5:2b:18:68:2c:58:c1:40:5d: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:DE:EB:F7:79:32:9D:C4:3C:20:3D:F7:64:0E:85:50:23:7A:DF X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:75:27:08:8c:43:48:a1:8f:ae:4f:a8:e0:e2:3e:e0:fa: ee:6f:8e:50:ca:7a:47:6d:da:77:fe:e2:65:33:30:b1:a5:bd: cd:57:63:44:ed:49:fc:57:91:52:de:bb:76:6a:62:4b:e1:c7: 85:3c:34:0d:51:62:8c:48:5a:41:b1:8d:9b:ed:e4:6a:29:97: 5e:ba:d6:c7:eb:fd:d5:21:f0:84:80:f0:1b:e9:22:be:70:7e: 03:e9:0f:8e:25:d5:ac:db:5a:8b:05:4d:90:0f:c2:6e:b7:40: 0f:b8:99:89:a1:c2:b0:30:bb:54:2f:00:d8:8d:cf:46:0e:cf: 1c:9e:0e:cd:b6:03:c9:a8:bc:7c:eb:88:04:52:ef:73:0d:ed: 5f:0f:f0:9e:68:a3:4b:61:12:bb:b4:10:c8:59:f4:d9:a9:59: 80:24:f5:ef:6d:73:2b:8e:80:59:ea:2c:a5:13:61:34:fa:d6: f6:34:02:40:9e:b0:88:6d:ee:58:b1:da:82:e5:cb:29:12:8f: 4e:61:2d:59:cd:f0:1f:b0:e7:72:9a:16:61:59:72:44:41:bb: 0a:45:8d:a8:7b:27:da:b5:e6:db:bb:8d:06:d5:6c:3f:1e:ae: 6d:97:4b:a2:17:2c:52:a0:7c:5a:d5:cd:0c:ba:ee:9c:1b:1b: a6:b6:e7:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbIwAXIFkMFxZbQMBQg4ulnRuQrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjEwMTAxNTE0NDZaFw0yNjEwMTMyMzU4NDZaMDMxMTAvBgNV BAMTKDI1QTlERUVCRjc3OTMyOURDNDNDMjAzREY3NjQwRTg1NTAyMzdBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgosRuoobsk/2TISi4D39b1pRm mJ6xKbQuWfrey2ZPYJAzOX3I92haO5jI6jXxtI6GlyeBsrfGGYGy9o8r1znY2h0h +/3mFNGvw6pDnDuce8bNNYSF7irRp4xiNfYUuGeMX6cv0psCeJA3Ma40F61lILiA KiKniziZXqDYHOiOTx7t4fjLQM9OUXy6BAeqHyhAazbDdEL1zqprNf6cyasMxM/f gouLaXOTUOM01EWE1Keqhi0uHP9eSJglPvrMW+38G3JYV1YOgbifIltvslWw+Lkc WUeP+PRCg1JivFALhae58H4xxXkfb9hLxBLkvqVGWJfhusUrGGgsWMFAXSYlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJane6/d5Mp3EPCA992QOhVAjet8wHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdt1JwiMQ0ih j65PqODiPuD67m+OUMp6R23ad/7iZTMwsaW9zVdjRO1J/FeRUt67dmpiS+HHhTw0 DVFijEhaQbGNm+3kaimXXrrWx+v91SHwhIDwG+kivnB+A+kPjiXVrNtaiwVNkA/C brdAD7iZiaHCsDC7VC8A2I3PRg7PHJ4OzbYDyai8fOuIBFLvcw3tXw/wnmijS2ES u7QQyFn02alZgCT1721zK46AWeospRNhNPrW9jQCQJ6wiG3uWLHaguXLKRKPTmEt Wc3wH7DncpoWYVlyREG7CkWNqHsn2rXm27uNBtVsPx6ubZdLohcsUqB8WtXNDLru nBsbprbnDg== -----END CERTIFICATE-----Generated at Sun Oct 11 15:04:11 2026 by rpki-client