$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: XzgFlmjJ33W9lsH8Djm1XZaRkJnmQEIxNZk0ltGVTy4= Subject key identifier: 9F:A7:3A:C9:52:3C:F7:1F:E7:6D:2E:0B:A6:8E:3B:22:DE:A5:47:E7 Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 217C1BC3E1095ABA42DE9371861FEEBB427C20C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: CD Signing time: Sun 11 Oct 2026 05:50:20 +0000 Manifest this update: Sun 11 Oct 2026 05:45:20 +0000 Manifest next update: Wed 14 Oct 2026 10:38:20 +0000 Files and hashes: 1: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 2: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) 3: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) 4: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 5: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 6: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 7: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 8: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) 9: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 10: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 11: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: Zina/a7UnCJblcLp08rdKYoO2DORIbkdeNq6VufQqSg=) 12: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 13: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 14: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) 15: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 10:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7c:1b:c3:e1:09:5a:ba:42:de:93:71:86:1f:ee:bb:42:7c:20:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: Oct 11 05:45:20 2026 GMT Not After : Oct 14 10:38:20 2026 GMT Subject: CN=9FA73AC9523CF71FE76D2E0BA68E3B22DEA547E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:a8:ff:54:27:d3:43:36:30:ed:f6:56:da: 4c:a3:6b:83:06:fb:22:cb:86:d3:41:3a:1f:3c:c3: 7c:6a:42:b1:75:ac:f7:bd:29:ca:b0:1c:cb:65:43: a1:0b:a7:41:50:96:04:62:10:73:ea:39:16:24:ac: 79:10:36:40:6f:00:d7:32:ef:a9:df:16:f3:45:b4: 44:03:a8:87:42:76:1b:40:42:98:93:6f:93:f7:1e: 7f:ed:0f:4c:70:9e:b7:e4:0e:84:d1:25:12:78:5b: e2:17:bc:0b:e0:79:80:9a:6a:de:3b:65:62:8e:e7: 31:34:d3:ac:85:ea:6c:0f:7e:e4:f1:f8:53:ec:bf: 09:33:77:9b:89:69:4d:18:03:00:15:1c:e3:65:37: 98:4b:a0:9c:a6:a8:e0:2b:54:0f:2c:61:6d:e3:61: 2e:a0:71:09:80:d1:49:8c:ed:2d:fb:54:17:e2:43: 6a:ac:aa:ea:1f:a7:a0:32:1a:4f:2b:96:f6:ba:c2: 30:e5:ec:04:7e:92:40:b9:5a:01:7e:40:00:9b:5a: 64:a0:b9:eb:f4:1c:2b:26:ca:2e:17:da:15:6c:53: 3f:6c:dc:a2:2e:00:a6:6c:15:54:1d:2b:66:bc:bc: bb:09:b9:6a:89:2b:8f:57:d0:e7:91:24:3f:dd:04: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A7:3A:C9:52:3C:F7:1F:E7:6D:2E:0B:A6:8E:3B:22:DE:A5:47:E7 X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:77:37:ff:7c:7b:64:d4:8f:00:63:7c:ae:cf:36:7c:21:49: e1:53:93:c5:3e:66:d6:60:8f:b9:1b:36:c8:e6:25:fd:b2:24: b6:94:1b:a2:6b:ba:8d:ef:aa:ce:96:f7:32:f2:4d:31:b3:2a: 9b:01:53:78:35:08:91:93:d1:a2:53:77:9c:bd:b3:63:11:bc: 5b:db:39:ba:32:20:cd:6d:da:21:44:f0:49:49:e1:25:40:de: 49:96:9e:b1:87:db:7c:eb:b8:65:1f:65:98:ae:36:df:44:d4: 9b:1b:64:f6:e7:90:6f:c8:fd:7d:53:dd:4c:7f:4e:18:a8:29: ce:d8:99:e7:0f:63:d1:af:2f:c9:dd:1f:cb:22:5f:fa:c5:6e: db:dc:ea:23:64:73:46:33:71:66:7a:39:9b:61:63:f4:a7:73: b2:83:e8:34:59:05:c4:49:d5:9b:5f:d5:36:76:61:63:44:9f: 9e:33:bd:42:14:69:4f:a8:da:28:8f:f3:a6:b9:2d:db:4f:7a: 0d:92:cb:1b:e6:48:89:29:9e:95:45:40:1e:03:70:80:0e:6d: 77:dc:51:df:a2:b3:b8:43:80:6c:1a:7e:66:40:53:f8:4b:95: ca:6a:5e:c8:ad:17:09:69:a4:a0:df:e7:ec:77:fa:e8:b4:54: fe:12:69:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIXwbw+EJWrpC3pNxhh/uu0J8IMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjEwMTEwNTQ1MjBaFw0yNjEwMTQxMDM4MjBaMDMxMTAvBgNV BAMTKDlGQTczQUM5NTIzQ0Y3MUZFNzZEMkUwQkE2OEUzQjIyREVBNTQ3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZc6j/VCfTQzYw7fZW2kyja4MG +yLLhtNBOh88w3xqQrF1rPe9KcqwHMtlQ6ELp0FQlgRiEHPqORYkrHkQNkBvANcy 76nfFvNFtEQDqIdCdhtAQpiTb5P3Hn/tD0xwnrfkDoTRJRJ4W+IXvAvgeYCaat47 ZWKO5zE006yF6mwPfuTx+FPsvwkzd5uJaU0YAwAVHONlN5hLoJymqOArVA8sYW3j YS6gcQmA0UmM7S37VBfiQ2qsquofp6AyGk8rlva6wjDl7AR+kkC5WgF+QACbWmSg uev0HCsmyi4X2hVsUz9s3KIuAKZsFVQdK2a8vLsJuWqJK49X0OeRJD/dBBZFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn6c6yVI89x/nbS4Lpo47It6lR+cwHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXc3/3x7ZNSP AGN8rs82fCFJ4VOTxT5m1mCPuRs2yOYl/bIktpQbomu6je+qzpb3MvJNMbMqmwFT eDUIkZPRolN3nL2zYxG8W9s5ujIgzW3aIUTwSUnhJUDeSZaesYfbfOu4ZR9lmK42 30TUmxtk9ueQb8j9fVPdTH9OGKgpztiZ5w9j0a8vyd0fyyJf+sVu29zqI2RzRjNx Zno5m2Fj9KdzsoPoNFkFxEnVm1/VNnZhY0SfnjO9QhRpT6jaKI/zprkt2096DZLL G+ZIiSmelUVAHgNwgA5td9xR36KzuEOAbBp+ZkBT+EuVympeyK0XCWmkoN/n7Hf6 6LRU/hJpIA== -----END CERTIFICATE-----Generated at Tue Oct 13 12:59:26 2026 by rpki-client