$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: 66wOpkOg32iO2puaAoY6k2hd7/XvVUz+xxeESL+6oVU= Subject key identifier: E9:DD:D8:78:78:85:AD:9C:6E:62:E2:88:5C:CF:CC:EC:FB:1A:0B:17 Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 7FEDA88E9F4387637B424663A0CA65722DA3A3E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: BF Signing time: Sun 27 Sep 2026 00:39:32 +0000 Manifest this update: Sun 27 Sep 2026 00:34:32 +0000 Manifest next update: Wed 30 Sep 2026 08:23:32 +0000 Files and hashes: 1: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 2: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 3: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) 4: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 5: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 6: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: mMwrjHrRELSOqdUKLC+fBbHK5eNSsd5nQdz17ttvR5I=) 7: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ed:a8:8e:9f:43:87:63:7b:42:46:63:a0:ca:65:72:2d:a3:a3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Sep 27 00:34:32 2026 GMT Not After : Sep 30 08:23:32 2026 GMT Subject: CN=E9DDD8787885AD9C6E62E2885CCFCCECFB1A0B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:69:93:b5:76:55:3a:38:90:2d:2b:97:49: de:1b:63:d4:be:d3:f0:80:e2:ac:b7:8b:92:b1:74: 26:52:ef:8e:14:b7:56:14:15:bf:ce:ca:3f:e8:2d: 04:e7:75:b9:a3:94:91:f5:f0:8c:0e:50:28:00:b0: f1:68:c4:99:ad:06:a8:85:c3:40:1c:93:6c:c4:9d: a6:af:6b:e1:8a:0f:91:7a:ce:76:5d:3d:13:d7:db: 0a:b8:9f:50:ee:7a:b2:b1:43:85:04:62:d2:96:aa: db:6c:47:ff:dd:8b:4c:27:a7:9a:e0:53:19:cd:35: 53:17:2c:02:29:14:cd:bb:d8:4c:fe:7a:b9:0c:d8: 93:a8:cf:d9:d2:cd:16:a6:ce:39:37:5f:bf:94:a6: 27:53:8c:94:38:af:70:fb:e5:42:a3:1a:43:f6:3d: d1:77:44:2a:77:04:e2:60:57:85:6e:c2:ec:30:2e: bf:0a:89:11:19:1b:50:87:ae:18:5f:b6:97:4b:8a: 91:01:4a:0d:b5:0a:43:bd:4c:3e:73:bc:bb:16:b7: f7:d6:e8:b1:6c:ee:d0:25:d2:bd:8d:6e:e0:9f:4f: 77:16:94:0c:e1:76:bd:c6:1d:56:f0:5d:c5:f3:0d: 66:85:2c:56:2c:29:52:27:e6:b6:99:d5:4d:86:ca: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DD:D8:78:78:85:AD:9C:6E:62:E2:88:5C:CF:CC:EC:FB:1A:0B:17 X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:c6:d5:2d:cf:30:03:55:d1:ac:27:72:7b:ce:e2:98:98: 2a:01:5d:2e:63:6b:0d:d0:6c:da:ae:0d:71:02:26:73:0e:11: 14:93:8c:70:5f:ba:f5:ab:ac:f4:83:69:d7:47:0a:d0:fe:b3: 9f:18:0f:a2:32:e4:31:2a:e8:4a:63:b0:27:71:fa:9e:31:71: 30:03:47:f3:4a:c3:41:96:6e:3e:95:38:03:96:36:2b:03:40: 24:23:c6:20:d1:f8:ef:1d:71:9d:60:42:c5:92:31:c5:79:dd: 1b:37:fc:1a:de:d2:a3:f8:6f:0f:51:fb:90:47:c6:38:a3:ba: 14:d3:bb:44:a4:3b:94:c3:7d:df:64:d3:86:54:83:13:9f:37: dd:bd:40:79:8c:64:57:ff:1b:82:64:d1:43:50:ac:28:88:55: 6d:68:e4:24:9e:58:1e:fc:dd:63:6b:0a:04:13:56:66:ab:56: 8f:84:7d:6a:e1:68:d4:ab:01:c1:4d:91:46:a8:6b:22:ff:80: 33:6a:13:93:29:1c:01:f5:5b:01:9a:a8:b3:13:d6:a5:94:40: 49:f4:6f:1f:6c:d1:0f:48:3c:bc:75:f0:1e:5e:ef:47:a9:fc: 10:61:74:df:20:fd:d0:af:ed:a1:11:08:9a:44:69:31:cb:ea: 67:eb:2e:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf+2ojp9Dh2N7QkZjoMplci2jo+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA5MjcwMDM0MzJaFw0yNjA5MzAwODIzMzJaMDMxMTAvBgNV BAMTKEU5REREODc4Nzg4NUFEOUM2RTYyRTI4ODVDQ0ZDQ0VDRkIxQTBCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MmmTtXZVOjiQLSuXSd4bY9S+ 0/CA4qy3i5KxdCZS744Ut1YUFb/Oyj/oLQTndbmjlJH18IwOUCgAsPFoxJmtBqiF w0Ack2zEnaava+GKD5F6znZdPRPX2wq4n1DuerKxQ4UEYtKWqttsR//di0wnp5rg UxnNNVMXLAIpFM272Ez+erkM2JOoz9nSzRamzjk3X7+UpidTjJQ4r3D75UKjGkP2 PdF3RCp3BOJgV4VuwuwwLr8KiREZG1CHrhhftpdLipEBSg21CkO9TD5zvLsWt/fW 6LFs7tAl0r2NbuCfT3cWlAzhdr3GHVbwXcXzDWaFLFYsKVIn5raZ1U2GytbTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6d3YeHiFrZxuYuKIXM/M7PsaCxcwHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3DG1S3PMANV 0awncnvO4piYKgFdLmNrDdBs2q4NcQImcw4RFJOMcF+69aus9INp10cK0P6znxgP ojLkMSroSmOwJ3H6njFxMANH80rDQZZuPpU4A5Y2KwNAJCPGINH47x1xnWBCxZIx xXndGzf8Gt7So/hvD1H7kEfGOKO6FNO7RKQ7lMN932TThlSDE5833b1AeYxkV/8b gmTRQ1CsKIhVbWjkJJ5YHvzdY2sKBBNWZqtWj4R9auFo1KsBwU2RRqhrIv+AM2oT kykcAfVbAZqosxPWpZRASfRvH2zRD0g8vHXwHl7vR6n8EGF03yD90K/toREImkRp McvqZ+su9g== -----END CERTIFICATE-----Generated at Mon Sep 28 21:57:35 2026 by rpki-client