$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft File: EACB7B50F338DF2794EBA3F618C7233B2283E644.mft (raw, json) Hash identifier: 51WVDse6ouSE6M5Pcs9ORahdEGy0phUVa6bkYTjR6a0= Subject key identifier: 5D:B3:79:0F:99:BB:E4:F9:A8:44:4E:B0:A6:09:BE:F8:09:9A:98:C0 Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 4ADC5CD7E42D56B6DF86FAB635C92BA71F218200 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft Manifest number: 0B38 Signing time: Fri 25 Sep 2026 13:47:47 +0000 Manifest this update: Fri 25 Sep 2026 13:42:47 +0000 Manifest next update: Tue 29 Sep 2026 00:49:47 +0000 Files and hashes: 1: AS17623.roa (hash: ok0SVNffWIUl+8bljlGbmUGi8UJwBf/riL8wEf8lmtc=) 2: AS135061.roa (hash: nxBwVTRQeGzN5n3l5G/G5VC41BPbCHTVYRHW042BCJI=) 3: AS138421.roa (hash: J9yMxI6USC+ksSFB2Qwi+mpP/CqZ/DZx2XXXcFz1maw=) 4: EACB7B50F338DF2794EBA3F618C7233B2283E644.crl (hash: xaAASz44Z8J3/WPAgE2r/JplZ8K60YNogsVTq03ACAI=) 5: AS17622.roa (hash: LqBUIvzi65+1/O4FTw1ICN87DYCS8XRFtqIAicnVMBQ=) 6: AS17816.roa (hash: KPds3CefqCxiErf/THYatUvwdimjh2SQJqBDe0yEgBk=) 7: AS136958.roa (hash: itcr1ClEzj1IhHty+wJhgdKhy54GDFiyT6kZBJqI/Ks=) 8: AS17621.roa (hash: nigGl1ZWAK68Hn1+1KJUhGoGrt0TdRUFEwhwOHn5ArI=) 9: AS140717.roa (hash: rfEwRyW7PARyZuu3TKBv4tlT8bMGb5eRco7yTFvzC1w=) 10: AS4837.roa (hash: zHaMAYve+2PCnEtXqQ8K96TcAw9reFXkvjJIWnT3c5A=) 11: AS140979.roa (hash: w40fw02i0MoyGm66OaSz+GodX4Pac//xvh+HdgKfrOo=) 12: AS9929.roa (hash: ue6kwGp/3TwHl25DS4+DughTQyLpyqCnwXQt8FaG17Y=) 13: AS134543.roa (hash: MELig0IcX+ocQa+yzUyUoz5isjH3xHJmJR07ZrXFGNo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 00:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dc:5c:d7:e4:2d:56:b6:df:86:fa:b6:35:c9:2b:a7:1f:21:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Sep 25 13:42:47 2026 GMT Not After : Sep 29 00:49:47 2026 GMT Subject: CN=5DB3790F99BBE4F9A8444EB0A609BEF8099A98C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:38:26:df:1b:84:c9:ab:ea:ca:dc:0b:67: 13:e1:dd:fc:6f:fb:f2:0a:b7:d7:cd:60:cd:f8:bc: ce:c8:3d:74:7b:e6:e3:3f:8b:cd:85:1b:41:d0:99: 3c:44:35:b7:6a:8b:dc:bb:7c:f2:a7:9e:38:52:b6: 7a:b4:49:0f:83:b7:3a:ce:4f:5f:07:f6:5a:b7:8c: 63:76:5e:8c:55:16:64:b0:09:e5:4d:0b:ee:7b:24: e0:03:d3:25:1e:a8:3b:b1:d8:d2:4d:5f:c7:ff:a7: 2f:0d:5e:1a:73:c2:2d:9f:ca:14:83:6e:21:ea:1e: 40:fd:21:8c:f0:19:61:8e:78:6a:76:37:e3:cc:ee: 25:f2:57:63:06:b0:52:dd:43:7c:de:1d:37:d6:21: 15:dc:1e:40:ed:5a:9b:b4:54:c7:b7:ad:39:10:dd: 37:49:4f:02:36:9a:c8:8e:c1:e3:6d:47:41:aa:6f: 12:7d:42:1d:c1:eb:cc:0f:cc:29:a7:df:1b:2d:d9: 4d:07:a3:2b:79:39:de:a4:2d:bd:dc:e9:de:06:6c: e8:3e:13:a2:d0:cd:f6:5a:84:72:35:dc:65:c9:24: f3:bc:79:7b:08:ae:15:e2:5e:eb:6b:cc:9d:b5:85: f2:6d:0a:cb:23:ae:17:3b:85:9c:a0:0c:4b:60:69: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B3:79:0F:99:BB:E4:F9:A8:44:4E:B0:A6:09:BE:F8:09:9A:98:C0 X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:11:18:9e:3c:9e:5a:6b:da:46:17:62:7b:d3:76:17:ff:c8: 30:8b:37:85:77:e6:f5:d6:1d:3d:9c:b3:35:ca:ab:6d:d5:a8: 21:2d:2a:1a:39:43:30:9c:20:42:0c:5c:b1:ab:86:5a:83:92: d8:96:e3:2b:2a:ca:62:28:2d:1b:12:03:52:d6:ba:4b:e5:4b: f1:9d:55:4b:dd:7b:db:e5:d9:74:58:78:45:88:3f:a3:8c:7d: 2a:33:a4:59:3e:7e:c8:44:85:1c:fa:82:43:c8:4a:5b:cf:f8: 53:18:07:55:e9:e3:88:55:12:01:73:4b:59:0a:b8:d1:b7:1d: 7b:c5:12:0a:4c:88:5e:ae:cc:9a:02:2d:d6:ef:5a:94:6a:30: 36:a7:d2:1b:70:ce:69:a8:eb:c2:43:e2:27:3a:da:8d:ee:f6: ff:9f:c4:f0:aa:cd:0e:61:ff:d4:56:bf:7e:fc:73:c0:f8:95: 37:49:18:65:95:db:28:91:b0:b8:f1:d4:c1:97:c1:ec:04:1e: fd:fb:79:41:59:a6:6e:2d:3e:92:73:53:e1:c4:3f:32:e2:ab: 86:a5:91:55:9f:51:fc:dd:3d:9a:5d:7d:7d:57:97:56:ed:fa: 94:1c:84:1f:12:a4:0c:a0:10:65:2d:18:1a:a5:2c:09:bc:a3: 38:eb:74:b3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUStxc1+QtVrbfhvq2Nckrpx8hggAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDkyNTEzNDI0N1oX DTI2MDkyOTAwNDk0N1owMzExMC8GA1UEAxMoNURCMzc5MEY5OUJCRTRGOUE4NDQ0 RUIwQTYwOUJFRjgwOTlBOThDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMphOCbfG4TJq+rK3AtnE+Hd/G/78gq3181gzfi8zsg9dHvm4z+LzYUbQdCZ PEQ1t2qL3Lt88qeeOFK2erRJD4O3Os5PXwf2WreMY3ZejFUWZLAJ5U0L7nsk4APT JR6oO7HY0k1fx/+nLw1eGnPCLZ/KFINuIeoeQP0hjPAZYY54anY348zuJfJXYwaw Ut1DfN4dN9YhFdweQO1am7RUx7etORDdN0lPAjaayI7B421HQapvEn1CHcHrzA/M KaffGy3ZTQejK3k53qQtvdzp3gZs6D4TotDN9lqEcjXcZckk87x5ewiuFeJe62vM nbWF8m0KyyOuFzuFnKAMS2BpePsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRds3kP mbvk+ahETrCmCb74CZqYwDAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0VBQ0I3QjUwRjMzOERGMjc5NEVCQTNGNjE4QzcyMzNCMjI4M0U2 NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBqERiePJ5aa9pGF2J703YX/8gwizeFd+b11h09nLM1yqtt 1aghLSoaOUMwnCBCDFyxq4Zag5LYluMrKspiKC0bEgNS1rpL5UvxnVVL3Xvb5dl0 WHhFiD+jjH0qM6RZPn7IRIUc+oJDyEpbz/hTGAdV6eOIVRIBc0tZCrjRtx17xRIK TIhersyaAi3W71qUajA2p9IbcM5pqOvCQ+InOtqN7vb/n8Twqs0OYf/UVr9+/HPA +JU3SRhlldsokbC48dTBl8HsBB79+3lBWaZuLT6Sc1PhxD8y4quGpZFVn1H83T2a XX19V5dW7fqUHIQfEqQMoBBlLRgapSwJvKM463Sz -----END CERTIFICATE-----Generated at Sat Sep 26 20:47:48 2026 by rpki-client