$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: 1rrBDNY27YS0ryGCGFnzEt8bBnXy2reiyiHcjqOsrBY= Subject key identifier: D0:1F:EC:02:0A:8E:69:C8:8B:99:54:AA:D7:0B:54:77:2C:37:B0:C5 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 2918F2754A3A3F6C67D208963B3C820B87FAAFF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: C3 Signing time: Mon 28 Sep 2026 14:55:51 +0000 Manifest this update: Mon 28 Sep 2026 14:50:51 +0000 Manifest next update: Thu 01 Oct 2026 19:24:51 +0000 Files and hashes: 1: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 2: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 3: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: zTb/Jz2q/yOScq2eIl5LRfY8RbCjNGgXvFDewjnW9Uw=) 4: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:18:f2:75:4a:3a:3f:6c:67:d2:08:96:3b:3c:82:0b:87:fa:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Sep 28 14:50:51 2026 GMT Not After : Oct 1 19:24:51 2026 GMT Subject: CN=D01FEC020A8E69C88B9954AAD70B54772C37B0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:5f:f1:39:74:76:dd:e9:4e:c5:33:c3:83: 97:a0:ab:5e:c2:52:6d:62:09:bf:2e:8d:a8:a9:c9: f6:e2:70:3e:34:c8:62:87:9a:4e:a9:58:8d:50:7a: 11:91:d2:c3:97:d3:bc:11:ea:5b:67:9c:19:17:88: 72:7d:84:a8:b5:19:5c:c4:c7:63:7f:85:0b:4a:47: f0:63:ab:58:15:68:97:92:69:61:a6:7e:94:ea:27: 09:af:95:f0:41:c2:59:32:a6:12:8d:4e:29:6b:78: 4b:af:dd:76:73:8e:d6:02:ec:b6:1c:f4:7f:59:45: 7b:99:9e:63:5c:66:19:70:f2:da:1c:38:0d:04:fe: ee:95:9d:8c:24:b8:20:f0:b9:98:88:57:96:28:70: b1:61:8b:67:c9:8b:24:6f:46:9a:27:88:60:26:9d: 22:e2:73:33:b1:a4:4c:07:01:c5:aa:06:ed:9d:24: c7:cb:06:19:a7:dd:53:69:13:4b:71:58:15:dc:2b: 08:df:fb:51:59:db:b9:64:d5:e5:e2:4d:34:95:28: 70:1a:51:86:41:ef:86:0e:73:e5:4a:4b:14:80:d2: c2:f0:59:4a:a1:4f:ff:55:4a:fd:37:b5:e6:1a:5f: 65:57:f1:c3:38:44:8e:7e:4b:ac:8e:4a:b4:56:78: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1F:EC:02:0A:8E:69:C8:8B:99:54:AA:D7:0B:54:77:2C:37:B0:C5 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:32:f5:1d:31:ac:7f:e0:44:e5:37:8e:50:e8:e4:eb:9d:9f: 43:3d:05:e1:ab:47:e3:24:af:f7:ea:48:cb:04:99:4f:b2:72: 8a:b9:f0:02:da:8c:dc:3a:a9:c7:b5:09:9e:b7:e2:20:33:69: ac:26:d2:54:ea:d0:f4:85:0f:3d:86:43:35:a8:90:71:f6:d3: e1:8d:a8:bc:3a:71:80:d9:73:94:ea:4e:23:6b:aa:4c:5a:cb: 83:ba:5b:d5:6c:69:c9:c0:1e:8f:b6:79:68:6a:95:e3:90:20: e4:a3:ce:a9:9c:d9:a1:4c:18:17:26:d1:7c:44:c2:75:ec:06: f9:3d:9a:33:04:74:8d:4d:ab:e6:7a:1a:2f:4f:6d:4c:64:ff: 78:ce:79:57:83:1b:0f:16:a6:ef:50:e4:95:e8:70:da:f9:42: c5:08:b1:3a:a5:41:dc:a9:99:8f:29:d6:08:8e:71:c0:6e:ec: 0d:26:0f:03:89:48:86:30:f3:f5:54:fa:18:1e:35:24:a2:22: 8d:99:a0:a4:69:90:cc:4d:81:3a:23:f7:cb:cb:84:43:e4:70: ce:63:57:f8:bd:4a:cc:01:24:c0:30:45:69:54:7b:99:6c:7f: 4d:56:be:d2:95:2a:5e:58:86:2e:ad:35:13:93:ab:77:6e:00: 6e:9f:75:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKRjydUo6P2xn0giWOzyCC4f6r/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA5MjgxNDUwNTFaFw0yNjEwMDExOTI0NTFaMDMxMTAvBgNV BAMTKEQwMUZFQzAyMEE4RTY5Qzg4Qjk5NTRBQUQ3MEI1NDc3MkMzN0IwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5l/xOXR23elOxTPDg5egq17C Um1iCb8ujaipyfbicD40yGKHmk6pWI1QehGR0sOX07wR6ltnnBkXiHJ9hKi1GVzE x2N/hQtKR/Bjq1gVaJeSaWGmfpTqJwmvlfBBwlkyphKNTilreEuv3XZzjtYC7LYc 9H9ZRXuZnmNcZhlw8tocOA0E/u6VnYwkuCDwuZiIV5YocLFhi2fJiyRvRponiGAm nSLiczOxpEwHAcWqBu2dJMfLBhmn3VNpE0txWBXcKwjf+1FZ27lk1eXiTTSVKHAa UYZB74YOc+VKSxSA0sLwWUqhT/9VSv03teYaX2VX8cM4RI5+S6yOSrRWeBsvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0B/sAgqOaciLmVSq1wtUdyw3sMUwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzzL1HTGsf+BE 5TeOUOjk652fQz0F4atH4ySv9+pIywSZT7JyirnwAtqM3Dqpx7UJnrfiIDNprCbS VOrQ9IUPPYZDNaiQcfbT4Y2ovDpxgNlzlOpOI2uqTFrLg7pb1WxpycAej7Z5aGqV 45Ag5KPOqZzZoUwYFybRfETCdewG+T2aMwR0jU2r5noaL09tTGT/eM55V4MbDxam 71Dklehw2vlCxQixOqVB3KmZjynWCI5xwG7sDSYPA4lIhjDz9VT6GB41JKIijZmg pGmQzE2BOiP3y8uEQ+RwzmNX+L1KzAEkwDBFaVR7mWx/TVa+0pUqXliGLq01E5Or d24Abp91MA== -----END CERTIFICATE-----Generated at Mon Sep 28 18:22:45 2026 by rpki-client