$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: PtUAl6FD0CoWVV7R6gOSNiEQr8elT499h107/N+4wCQ= Subject key identifier: 24:F8:8C:3F:EF:FA:43:68:23:76:02:94:39:42:05:8A:A6:04:43:3C Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 52E6CF3DEAF7E2ACB9F3F3D2E09B3F6CD0139151 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: CD Signing time: Sun 11 Oct 2026 10:05:29 +0000 Manifest this update: Sun 11 Oct 2026 10:00:29 +0000 Manifest next update: Wed 14 Oct 2026 21:28:29 +0000 Files and hashes: 1: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=) 2: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: /5+qzwBjWj6eStGuKpG8pdnnTBTC/CPSpzZgWSjPXRI=) 3: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=) 4: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=) 5: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 21:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e6:cf:3d:ea:f7:e2:ac:b9:f3:f3:d2:e0:9b:3f:6c:d0:13:91:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: Oct 11 10:00:29 2026 GMT Not After : Oct 14 21:28:29 2026 GMT Subject: CN=24F88C3FEFFA4368237602943942058AA604433C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:25:83:5e:45:f6:b7:f5:4b:90:8e:a6:10: ed:a1:c2:73:78:50:e6:75:c2:24:1c:5f:c9:0b:9b: 71:3c:e5:88:3b:10:79:93:62:45:03:ce:db:a3:aa: a6:02:d0:cb:ce:50:46:8c:9d:6f:c2:2a:f9:04:95: 88:06:6b:53:31:70:27:c3:24:72:ce:d9:10:ac:35: f3:d2:2d:d1:6b:e9:f7:b9:d0:de:69:3d:ac:cb:fc: 5a:0f:b0:e5:64:e8:d6:da:ad:d7:cd:4f:64:19:01: 89:20:b9:06:79:67:54:49:02:9e:92:fc:2b:c9:d2: 1a:b0:b6:fc:f1:d6:31:1f:9a:f4:fa:8d:c5:80:11: 83:a1:0f:d0:26:61:48:22:d4:06:5e:de:7d:f8:a5: b0:bb:5c:67:98:55:98:f3:d7:8b:3d:77:4f:f5:35: d6:5a:05:13:8b:c1:24:02:ed:4f:98:ae:4c:4a:0b: f0:cd:be:6f:df:37:a8:3f:c6:23:f5:9b:83:9c:05: 39:9c:18:76:35:5b:bc:c7:77:a2:db:10:92:65:cf: fc:58:09:1c:01:af:db:d0:27:78:bf:30:80:67:a9: bd:b4:b5:7c:00:7d:dc:31:46:3b:5c:4c:6c:ec:be: d7:31:87:db:e0:16:0c:45:5e:22:32:01:20:98:7e: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:8C:3F:EF:FA:43:68:23:76:02:94:39:42:05:8A:A6:04:43:3C X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2b:03:5c:f0:44:ae:75:84:15:53:bf:7c:80:8e:cd:4d:50: 95:ec:04:18:11:af:76:2a:51:72:d8:dd:78:d4:cb:24:40:dc: 95:d1:9b:2f:35:8d:7a:7b:21:57:0d:d2:76:ae:bf:77:a4:10: ab:0f:5a:ec:ec:0d:9c:00:ba:c0:1a:81:e1:28:44:f6:00:05: 85:08:77:61:58:0d:8b:ee:d5:bf:1f:47:2a:ca:8a:ac:9b:64: 4f:3c:b5:81:55:6b:9d:53:cb:4e:c4:ce:9c:7f:18:8c:38:d4: 8c:c4:4b:54:8c:57:8f:8f:a7:9c:b7:e2:db:cd:bd:d8:17:c5: f7:c5:2b:18:1f:09:a8:73:f9:ec:b5:c6:2a:64:f7:a5:5d:0a: 7a:f8:87:ac:3c:b2:5f:14:95:b6:9a:9a:c7:72:04:4b:0c:94: cc:31:08:6d:d8:07:63:61:da:12:99:18:83:f4:4a:a8:a6:63: 59:d1:ba:40:55:6c:02:34:71:c2:34:b7:1c:6f:90:6d:37:90: f9:86:ae:fd:88:ac:35:f1:9f:5d:67:ad:71:18:51:78:6e:00: 23:01:ac:e6:6a:ac:02:6c:99:1c:9b:43:61:d3:74:50:fc:9f: ca:62:f8:82:7f:c9:93:ca:5c:be:b4:32:76:34:eb:12:a2:52: cb:7f:9a:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUubPPer34qy58/PS4Js/bNATkVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjEwMTExMDAwMjlaFw0yNjEwMTQyMTI4MjlaMDMxMTAvBgNV BAMTKDI0Rjg4QzNGRUZGQTQzNjgyMzc2MDI5NDM5NDIwNThBQTYwNDQzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dCWDXkX2t/VLkI6mEO2hwnN4 UOZ1wiQcX8kLm3E85Yg7EHmTYkUDztujqqYC0MvOUEaMnW/CKvkElYgGa1MxcCfD JHLO2RCsNfPSLdFr6fe50N5pPazL/FoPsOVk6NbardfNT2QZAYkguQZ5Z1RJAp6S /CvJ0hqwtvzx1jEfmvT6jcWAEYOhD9AmYUgi1AZe3n34pbC7XGeYVZjz14s9d0/1 NdZaBROLwSQC7U+YrkxKC/DNvm/fN6g/xiP1m4OcBTmcGHY1W7zHd6LbEJJlz/xY CRwBr9vQJ3i/MIBnqb20tXwAfdwxRjtcTGzsvtcxh9vgFgxFXiIyASCYfjKRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJPiMP+/6Q2gjdgKUOUIFiqYEQzwwHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCsDXPBErnWE FVO/fICOzU1QlewEGBGvdipRctjdeNTLJEDcldGbLzWNenshVw3Sdq6/d6QQqw9a 7OwNnAC6wBqB4ShE9gAFhQh3YVgNi+7Vvx9HKsqKrJtkTzy1gVVrnVPLTsTOnH8Y jDjUjMRLVIxXj4+nnLfi28292BfF98UrGB8JqHP57LXGKmT3pV0KeviHrDyyXxSV tpqax3IESwyUzDEIbdgHY2HaEpkYg/RKqKZjWdG6QFVsAjRxwjS3HG+QbTeQ+Yau /YisNfGfXWetcRhReG4AIwGs5mqsAmyZHJtDYdN0UPyfymL4gn/Jk8pcvrQydjTr EqJSy3+aMQ== -----END CERTIFICATE-----Generated at Mon Oct 12 08:49:29 2026 by rpki-client