$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: 33MYLAy6Gk9dLLy/HnL6DLiOLr+JMfP9mC1/8S4XDn8= Subject key identifier: C4:6D:10:7C:E1:C4:96:28:90:0D:A4:16:AF:CB:64:86:D2:38:C9:BF Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 4BC0427E37ED3534A83EF92FA955CCBB66E07330 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: C1 Signing time: Wed 14 Oct 2026 17:34:24 +0000 Manifest this update: Wed 14 Oct 2026 17:29:24 +0000 Manifest next update: Sat 17 Oct 2026 18:05:24 +0000 Files and hashes: 1: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 2: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 3: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 4: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 5: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 6: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: gOPRdu7H26psYz3vrDBuVD8LljlV8ZiI6gLWObe5qIU=) 7: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 8: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 9: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c0:42:7e:37:ed:35:34:a8:3e:f9:2f:a9:55:cc:bb:66:e0:73:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Oct 14 17:29:24 2026 GMT Not After : Oct 17 18:05:24 2026 GMT Subject: CN=C46D107CE1C49628900DA416AFCB6486D238C9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:14:aa:0f:29:14:bb:e3:b1:33:0a:67:00: fe:37:e0:01:82:c9:80:df:c1:12:34:40:e5:33:bb: 43:2b:a0:8c:ce:95:21:66:1d:60:9d:e3:f4:6c:67: 19:6a:1e:53:2a:a3:e0:85:c3:0f:54:18:c8:13:7b: 3c:6a:25:fd:16:f3:28:e4:b6:e1:12:a8:7e:6f:a9: a3:ec:94:6a:83:67:3d:64:9d:88:7f:c3:b3:ab:e6: 4c:a1:20:13:bf:94:bb:4e:8e:cf:84:b7:82:51:29: 43:c4:3a:fd:8d:7b:23:e7:a9:23:35:b0:02:cd:6e: 18:ef:e0:b2:87:c8:cb:de:44:79:22:08:3f:79:c5: 85:d0:d3:83:c7:fe:bd:ae:6f:55:32:66:a7:fc:ec: b4:fa:62:56:c0:91:52:f4:eb:96:34:e9:e8:d9:e9: 1f:c1:7b:3b:0a:21:2a:28:09:60:34:e3:e3:a3:2a: 75:67:4f:88:ef:b0:79:c4:56:c9:55:d2:ce:56:e1: d3:5a:06:b4:ac:50:43:8a:16:ce:f9:5a:52:b3:c0: 58:ab:0a:fc:42:3d:4d:5d:e8:e3:1b:14:8c:4c:9b: ea:04:d9:06:fc:f4:21:3a:c9:1a:fb:88:57:db:56: 66:60:9a:fe:c7:54:9d:fc:fb:3d:d2:38:ea:af:b7: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:10:7C:E1:C4:96:28:90:0D:A4:16:AF:CB:64:86:D2:38:C9:BF X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:28:3e:8a:fc:84:9e:bb:0c:ae:88:00:0b:fe:89:c6:5f:49: 08:18:6d:d8:02:a4:8e:90:c6:33:72:43:0c:34:20:e7:96:5a: af:6a:c9:e3:6b:37:0f:bf:d9:93:c1:a4:a1:84:39:dd:f0:63: 43:d8:c9:fa:f8:ae:14:51:16:c8:97:93:ab:74:a5:39:48:07: f3:9e:4f:f2:95:5b:7f:6f:68:03:2b:a2:4c:42:c1:e7:29:3e: d4:9e:91:e4:4e:3f:5d:9b:3e:38:11:82:a8:cb:5c:8a:5a:61: f4:a5:44:09:f7:1c:1e:29:47:32:d9:da:f9:6d:6f:58:67:b8: 10:83:4c:3c:54:78:fd:94:33:81:63:e3:b7:e9:d4:cc:2d:9d: 4d:03:15:a5:45:26:8f:3b:66:76:8d:27:53:56:f3:b1:d0:4e: ba:c0:b9:4f:ef:c8:1a:ec:b3:36:3b:a0:97:e2:9a:f3:b0:1d: 64:88:c0:e5:e9:a6:4b:e9:42:2a:8b:95:a8:b9:1c:46:7c:c8: a5:32:88:d2:8f:91:ac:0f:5e:39:ab:9f:56:d3:51:cc:28:60: e7:6c:1b:78:bd:e5:bc:0a:6f:44:d6:d5:d8:61:84:2f:1d:e0: 4d:c3:62:67:61:32:e9:66:58:44:f6:1d:7f:3d:35:d5:92:63: df:c8:de:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS8BCfjftNTSoPvkvqVXMu2bgczAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjEwMTQxNzI5MjRaFw0yNjEwMTcxODA1MjRaMDMxMTAvBgNV BAMTKEM0NkQxMDdDRTFDNDk2Mjg5MDBEQTQxNkFGQ0I2NDg2RDIzOEM5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vRSqDykUu+OxMwpnAP434AGC yYDfwRI0QOUzu0MroIzOlSFmHWCd4/RsZxlqHlMqo+CFww9UGMgTezxqJf0W8yjk tuESqH5vqaPslGqDZz1knYh/w7Or5kyhIBO/lLtOjs+Et4JRKUPEOv2NeyPnqSM1 sALNbhjv4LKHyMveRHkiCD95xYXQ04PH/r2ub1UyZqf87LT6YlbAkVL065Y06ejZ 6R/BezsKISooCWA04+OjKnVnT4jvsHnEVslV0s5W4dNaBrSsUEOKFs75WlKzwFir CvxCPU1d6OMbFIxMm+oE2Qb89CE6yRr7iFfbVmZgmv7HVJ38+z3SOOqvtzSxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxG0QfOHEliiQDaQWr8tkhtI4yb8wHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSg+ivyEnrsM rogAC/6Jxl9JCBht2AKkjpDGM3JDDDQg55Zar2rJ42s3D7/Zk8GkoYQ53fBjQ9jJ +viuFFEWyJeTq3SlOUgH855P8pVbf29oAyuiTELB5yk+1J6R5E4/XZs+OBGCqMtc ilph9KVECfccHilHMtna+W1vWGe4EINMPFR4/ZQzgWPjt+nUzC2dTQMVpUUmjztm do0nU1bzsdBOusC5T+/IGuyzNjugl+Ka87AdZIjA5emmS+lCKouVqLkcRnzIpTKI 0o+RrA9eOaufVtNRzChg52wbeL3lvApvRNbV2GGELx3gTcNiZ2Ey6WZYRPYdfz01 1ZJj38jeoQ== -----END CERTIFICATE-----Generated at Fri Oct 16 16:44:02 2026 by rpki-client