$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: Iv4PbtpUHCOy9kosSI5ZNMLVk1V2AFisWcukzmjUxtg= Subject key identifier: DD:33:F7:01:0C:91:05:4E:77:17:4D:70:60:BD:93:25:69:78:C8:9C Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 576D1C6F1A56B58D809D0950F518D4B11CB7A871 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: CD Signing time: Fri 09 Oct 2026 16:53:35 +0000 Manifest this update: Fri 09 Oct 2026 16:48:35 +0000 Manifest next update: Mon 12 Oct 2026 23:02:35 +0000 Files and hashes: 1: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 2: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 3: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 4: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 5: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: SFUfrVnMuM2vZE3MalquHNUz/ZKOJNQLQBUzcy42v9Q=) 6: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 23:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6d:1c:6f:1a:56:b5:8d:80:9d:09:50:f5:18:d4:b1:1c:b7:a8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Oct 9 16:48:35 2026 GMT Not After : Oct 12 23:02:35 2026 GMT Subject: CN=DD33F7010C91054E77174D7060BD93256978C89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:0d:2a:5f:f1:c8:9a:b1:06:73:8f:bf:1e: 3d:a1:64:48:71:d0:97:d9:d2:cd:95:82:e4:be:41: 20:12:cc:19:a9:6b:3a:ab:65:e4:f3:9e:ea:c9:59: f3:86:c8:1b:65:15:50:a5:0e:6e:32:f9:fa:06:96: 69:2e:9c:0a:35:b9:ec:61:78:48:59:6c:98:35:12: d8:75:d5:12:41:26:71:47:2e:14:56:da:51:34:c8: 19:b9:28:50:d0:6f:b0:69:3c:80:28:e2:bc:ac:42: 56:68:a4:34:db:46:e5:0e:8f:9f:c3:a6:35:86:59: 56:e0:6c:7c:c9:41:6e:4f:4c:7c:e1:c3:37:cb:04: 50:7a:35:0d:1b:3f:ca:c8:e7:05:38:46:16:6d:82: ea:3e:b1:e6:a5:1c:57:02:93:a4:d7:40:7b:64:4f: f6:a3:ce:56:fa:6e:4c:2b:86:28:01:2c:09:50:e3: f9:2a:03:3c:d8:72:4c:ca:21:eb:10:75:19:0d:7f: d4:d0:d4:63:a4:58:6f:6f:6e:4c:8a:fa:32:62:91: 20:3f:9c:a3:25:1d:2f:56:87:35:ce:a2:fb:24:70: 34:1a:00:5d:d4:f9:f4:ce:28:7f:8b:e7:ef:7b:d2: 1b:c6:55:01:a9:39:f9:33:d6:f4:02:48:7c:98:fe: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:F7:01:0C:91:05:4E:77:17:4D:70:60:BD:93:25:69:78:C8:9C X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:25:27:88:d2:fd:94:eb:32:28:13:7a:0b:42:51:25:cf:07: ea:67:24:8f:df:e1:3e:1f:d9:5b:c7:82:6c:05:6b:a4:d9:3a: 1d:63:db:4d:1c:3c:38:93:6d:ea:d2:f5:42:e0:9e:04:bf:fe: 95:a5:e4:b0:63:01:70:bc:20:ee:11:86:5d:a4:81:f3:b2:c4: 77:c1:25:7e:17:e4:22:7b:81:16:46:61:42:d3:aa:61:f4:92: bf:c7:ca:4d:95:dd:eb:3c:71:1c:33:1b:7e:86:90:70:d3:77: 45:4b:20:1a:7c:60:ca:2b:aa:bc:e4:b0:fd:69:ff:c2:1a:4f: f4:b7:6a:ee:3f:f4:54:15:91:24:38:c5:5e:4e:64:52:38:0c: 65:24:ef:e1:c8:ba:66:8c:98:0b:b4:03:f7:25:26:88:d0:ee: 45:33:71:20:8d:31:22:87:47:09:36:25:10:c4:cc:7e:33:1a: 9d:63:e5:55:53:e1:ae:69:50:51:4d:8c:e0:50:10:9c:b8:47: a9:33:e3:27:aa:c1:cb:78:40:b1:68:67:72:3e:66:6f:f1:13: 14:61:ec:c2:26:46:75:6f:cf:ba:ba:e6:08:71:05:bd:02:1f: 88:4c:26:20:a6:e6:83:cd:75:0b:20:3d:68:80:c9:34:f3:1a: bb:17:9b:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV20cbxpWtY2AnQlQ9RjUsRy3qHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjEwMDkxNjQ4MzVaFw0yNjEwMTIyMzAyMzVaMDMxMTAvBgNV BAMTKEREMzNGNzAxMEM5MTA1NEU3NzE3NEQ3MDYwQkQ5MzI1Njk3OEM4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIQ0qX/HImrEGc4+/Hj2hZEhx 0JfZ0s2VguS+QSASzBmpazqrZeTznurJWfOGyBtlFVClDm4y+foGlmkunAo1uexh eEhZbJg1Eth11RJBJnFHLhRW2lE0yBm5KFDQb7BpPIAo4rysQlZopDTbRuUOj5/D pjWGWVbgbHzJQW5PTHzhwzfLBFB6NQ0bP8rI5wU4RhZtguo+sealHFcCk6TXQHtk T/ajzlb6bkwrhigBLAlQ4/kqAzzYckzKIesQdRkNf9TQ1GOkWG9vbkyK+jJikSA/ nKMlHS9WhzXOovskcDQaAF3U+fTOKH+L5+970hvGVQGpOfkz1vQCSHyY/lSfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3TP3AQyRBU53F01wYL2TJWl4yJwwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCUniNL9lOsy KBN6C0JRJc8H6mckj9/hPh/ZW8eCbAVrpNk6HWPbTRw8OJNt6tL1QuCeBL/+laXk sGMBcLwg7hGGXaSB87LEd8ElfhfkInuBFkZhQtOqYfSSv8fKTZXd6zxxHDMbfoaQ cNN3RUsgGnxgyiuqvOSw/Wn/whpP9Ldq7j/0VBWRJDjFXk5kUjgMZSTv4ci6ZoyY C7QD9yUmiNDuRTNxII0xIodHCTYlEMTMfjManWPlVVPhrmlQUU2M4FAQnLhHqTPj J6rBy3hAsWhncj5mb/ETFGHswiZGdW/PurrmCHEFvQIfiEwmIKbmg811CyA9aIDJ NPMauxebpg== -----END CERTIFICATE-----Generated at Sun Oct 11 10:55:59 2026 by rpki-client