$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: q5BoTpV8UOj+sqj73FhJwOYznXsPiazYhsWcVYZCXvc= Subject key identifier: AC:D0:7B:08:BE:50:1A:69:D7:E7:FA:29:7C:11:2F:FD:CC:0B:66:25 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 6CC024F6DF68FFE80E1CB48ABA4C7C9510BCC0C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 08:31:42 +0000 Manifest this update: Sat 03 Oct 2026 08:26:42 +0000 Manifest next update: Tue 06 Oct 2026 17:37:42 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: H6VzjApaG7r6fkvLBiPgJ1rSxGOBKR+Co7zYqgL6LvE=) 2: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 3: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c0:24:f6:df:68:ff:e8:0e:1c:b4:8a:ba:4c:7c:95:10:bc:c0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Oct 3 08:26:42 2026 GMT Not After : Oct 6 17:37:42 2026 GMT Subject: CN=ACD07B08BE501A69D7E7FA297C112FFDCC0B6625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:ce:08:7b:70:20:54:d8:9d:3e:99:b3:a3: eb:aa:83:58:d2:ce:28:a2:b4:40:b9:d6:f7:ce:d2: 7f:d5:60:d8:c0:f1:ba:a8:6b:b3:69:e6:4c:06:4c: 34:63:52:33:80:2e:9e:a7:ce:f9:ea:0e:ad:35:97: 58:87:23:3f:8b:f7:83:67:a7:a6:7c:e0:b6:61:4f: fc:94:1f:8f:49:c8:64:a8:cf:1c:ea:9f:c8:8c:52: 2f:27:83:32:67:41:02:0c:ff:80:fc:d3:2b:a5:d5: 7e:0f:05:85:89:f8:50:0a:27:d5:ae:57:e7:8a:b6: 7f:be:45:cb:29:02:e7:44:ec:2f:db:41:98:ae:b2: ee:74:ff:9c:a8:89:37:12:06:03:34:66:17:01:a4: d3:de:0f:c0:52:a1:b0:86:95:46:2a:4d:70:4f:f0: 48:ae:e2:88:85:4b:c9:0e:90:22:10:dc:00:9b:97: 1b:8f:e9:d5:53:67:b0:3f:e4:db:11:fd:a5:45:9f: 4a:b6:f7:a0:de:7a:c6:19:4d:b2:64:a2:91:8a:a0: 51:b9:c0:2f:9b:ab:dd:cf:b1:c9:cb:37:f1:72:bf: 39:5d:88:35:46:02:b0:3a:30:a2:3c:30:4d:fb:5a: 63:0e:a1:88:f6:a0:01:17:40:73:34:34:e5:42:5d: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D0:7B:08:BE:50:1A:69:D7:E7:FA:29:7C:11:2F:FD:CC:0B:66:25 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fd:2e:76:bb:7a:31:00:71:43:4e:35:0b:f8:5e:17:a2:fc: b7:95:0f:7a:f4:1d:18:8d:60:2e:38:a4:c3:24:93:45:30:3c: 08:d2:00:70:d5:69:c1:ed:98:07:d8:ab:e3:90:ed:9d:d8:a6: 0a:b5:79:e6:43:d3:01:fb:43:34:e1:78:7b:6a:2f:a5:a9:81: 46:d8:33:e6:1a:1f:7e:d6:81:f6:45:76:c2:24:db:dc:f4:68: 08:e4:45:98:09:2c:7c:7e:7f:11:1f:a1:a6:0a:1d:2d:4d:61: f4:8c:c5:b3:99:7d:5d:81:01:8d:c3:05:68:0b:74:24:71:37: ca:5b:fa:22:6e:7f:bb:cf:c9:72:59:d9:49:2b:aa:56:99:b9: a1:c6:d6:e5:56:b6:d4:0a:b5:35:14:fb:49:83:10:44:71:81: 0a:eb:9f:78:35:4d:a3:b8:ad:69:a5:1d:cd:8f:47:d7:13:dc: bb:dd:c4:4b:a6:f5:aa:b7:86:86:f3:90:3e:a2:62:99:d0:aa: 23:b6:6d:ed:a4:3e:4f:62:92:71:97:83:f0:b7:25:cb:5f:38: f4:de:67:5b:ea:69:ed:ed:64:f3:d9:fb:cc:71:ce:58:2c:a6: fd:5b:d6:f3:b3:53:92:a7:59:6b:ea:e2:f4:56:6a:d1:10:0f: cd:c8:64:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbMAk9t9o/+gOHLSKukx8lRC8wMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjEwMDMwODI2NDJaFw0yNjEwMDYxNzM3NDJaMDMxMTAvBgNV BAMTKEFDRDA3QjA4QkU1MDFBNjlEN0U3RkEyOTdDMTEyRkZEQ0MwQjY2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7I84Ie3AgVNidPpmzo+uqg1jS ziiitEC51vfO0n/VYNjA8bqoa7Np5kwGTDRjUjOALp6nzvnqDq01l1iHIz+L94Nn p6Z84LZhT/yUH49JyGSozxzqn8iMUi8ngzJnQQIM/4D80yul1X4PBYWJ+FAKJ9Wu V+eKtn++RcspAudE7C/bQZiusu50/5yoiTcSBgM0ZhcBpNPeD8BSobCGlUYqTXBP 8Eiu4oiFS8kOkCIQ3ACblxuP6dVTZ7A/5NsR/aVFn0q296DeesYZTbJkopGKoFG5 wC+bq93PscnLN/FyvzldiDVGArA6MKI8ME37WmMOoYj2oAEXQHM0NOVCXdr3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrNB7CL5QGmnX5/opfBEv/cwLZiUwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP0udrt6MQBx Q041C/heF6L8t5UPevQdGI1gLjikwySTRTA8CNIAcNVpwe2YB9ir45DtndimCrV5 5kPTAftDNOF4e2ovpamBRtgz5hofftaB9kV2wiTb3PRoCORFmAksfH5/ER+hpgod LU1h9IzFs5l9XYEBjcMFaAt0JHE3ylv6Im5/u8/JclnZSSuqVpm5ocbW5Va21Aq1 NRT7SYMQRHGBCuufeDVNo7itaaUdzY9H1xPcu93ES6b1qreGhvOQPqJimdCqI7Zt 7aQ+T2KScZeD8Lcly1849N5nW+pp7e1k89n7zHHOWCym/VvW87NTkqdZa+ri9FZq 0RAPzchkrg== -----END CERTIFICATE-----Generated at Sat Oct 3 17:57:34 2026 by rpki-client