$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json) Hash identifier: 00MgBu0e+O2h1qN90SBs+rg1dGYOwZY0FrJpUMVekAo= Subject key identifier: 3A:DD:20:B6:97:8C:D0:85:67:F4:03:0B:25:DE:F7:DE:E1:C9:20:FE Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Certificate serial: 3A43E158322C0C6C769268FAF6E291F06A94C50D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft Manifest number: BB Signing time: Wed 30 Sep 2026 22:33:34 +0000 Manifest this update: Wed 30 Sep 2026 22:28:34 +0000 Manifest next update: Sun 04 Oct 2026 05:10:34 +0000 Files and hashes: 1: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=) 2: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=) 3: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=) 4: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: uiPVBPEbZuqPyK+ZGQLrmm++3o9zVAHiEBz6F/tnBMk=) 5: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=) 6: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 05:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:43:e1:58:32:2c:0c:6c:76:92:68:fa:f6:e2:91:f0:6a:94:c5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Validity Not Before: Sep 30 22:28:34 2026 GMT Not After : Oct 4 05:10:34 2026 GMT Subject: CN=3ADD20B6978CD08567F4030B25DEF7DEE1C920FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:dc:b5:f7:2c:46:93:7a:59:3c:dd:4c:07: e3:fb:05:e3:56:66:43:93:0a:fd:7b:a4:5f:88:6f: af:34:f5:fd:5b:3f:96:73:30:e5:61:c0:3c:78:6f: 9c:00:f3:54:48:e0:f3:c3:9a:47:66:a0:19:a6:a5: 0d:3a:f7:17:f3:40:d3:9a:1e:43:8f:98:fe:bd:25: bb:ec:c8:97:6d:4f:0e:d0:78:43:29:d5:fc:bf:bd: df:4a:78:1b:91:07:d7:3e:40:ba:b6:de:ee:54:e3: 79:7b:0b:1d:db:09:c5:b4:7c:b2:bc:29:c4:e5:51: 5e:38:9b:41:e2:e6:22:1d:bd:b7:a9:74:e4:46:c6: 2d:65:e1:b8:4d:77:80:82:37:db:2e:44:57:4d:02: 69:bc:ff:3c:07:7e:c8:bc:d3:8f:b7:13:06:ff:15: 71:f3:33:ab:91:77:37:66:30:57:a4:d9:27:0e:b3: 70:35:06:c7:c8:f5:68:ea:1b:16:5b:af:0b:e2:40: 06:a1:df:d1:ad:2b:c8:ca:9d:b3:9b:98:fa:0d:4d: 79:73:7a:86:15:05:e5:81:49:09:af:a3:5c:c4:1e: 11:bb:7b:ee:3a:b5:ad:16:de:86:ff:5d:05:fb:31: bb:48:9d:5a:c0:c0:f8:4c:2b:03:3b:ef:d9:2c:98: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DD:20:B6:97:8C:D0:85:67:F4:03:0B:25:DE:F7:DE:E1:C9:20:FE X509v3 Authority Key Identifier: keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:52:cb:34:97:fb:77:9e:38:cc:27:cd:5e:34:7f:a1:4b:b2: bb:45:26:90:f6:a7:14:81:86:89:80:01:09:1a:e4:50:83:d5: 42:bc:18:b1:db:b7:b8:00:a2:2e:f5:e3:40:70:cb:31:78:ca: 08:00:86:52:c2:a4:69:ee:5a:e5:fb:a5:fd:cd:12:a8:5e:03: d6:b5:d6:3d:b6:06:cc:fb:1b:33:ab:9d:9e:93:51:24:77:be: 6e:34:ed:6a:94:6d:d7:c4:6d:76:f0:b3:18:f0:03:48:96:e5: 40:61:65:16:1f:0f:c1:bb:c9:e8:a5:e6:0e:ae:0f:9b:78:9e: 22:3c:2e:7f:97:a6:48:9b:27:d0:cb:5f:2e:49:a2:79:6b:f1: b9:1d:1d:b9:dc:fd:5a:1c:5d:ed:64:15:91:e6:ac:3d:4a:33: c8:00:bd:b8:8e:e1:10:b9:b1:79:cd:1d:1c:20:42:7b:8a:c3: 5c:a8:16:31:c5:54:c5:d9:27:bd:92:b2:48:c5:12:f9:ce:d8: 3c:bf:d9:93:8c:6a:79:b2:27:39:7a:69:c7:13:80:45:fa:b2: bc:34:aa:14:31:fe:65:9a:20:d4:de:db:24:37:03:64:63:0d: 50:e0:a3:cd:14:23:70:d9:d8:fe:87:06:59:b5:8f:85:5e:f3: 25:96:89:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOkPhWDIsDGx2kmj69uKR8GqUxQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZB NkY0MTE0NTAeFw0yNjA5MzAyMjI4MzRaFw0yNjEwMDQwNTEwMzRaMDMxMTAvBgNV BAMTKDNBREQyMEI2OTc4Q0QwODU2N0Y0MDMwQjI1REVGN0RFRTFDOTIwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoddy19yxGk3pZPN1MB+P7BeNW ZkOTCv17pF+Ib6809f1bP5ZzMOVhwDx4b5wA81RI4PPDmkdmoBmmpQ069xfzQNOa HkOPmP69JbvsyJdtTw7QeEMp1fy/vd9KeBuRB9c+QLq23u5U43l7Cx3bCcW0fLK8 KcTlUV44m0Hi5iIdvbepdORGxi1l4bhNd4CCN9suRFdNAmm8/zwHfsi804+3Ewb/ FXHzM6uRdzdmMFek2ScOs3A1BsfI9WjqGxZbrwviQAah39GtK8jKnbObmPoNTXlz eoYVBeWBSQmvo1zEHhG7e+46ta0W3ob/XQX7MbtInVrAwPhMKwM779ksmPg3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOt0gtpeM0IVn9AMLJd733uHJIP4wHwYDVR0j BBgwFoAUxfc9rMX2VsCNjSxd7HJWz6b0EUUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0ODg4NTY0OTU1NTQ1Ny8wL0M1RjczREFDQzVGNjU2QzA4RDhEMkM1REVDNzI1 NkNGQTZGNDExNDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZBNkY0MTE0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NDg4ODU2NDk1NTU0NTcvMC9DNUY3M0RBQ0M1RjY1 NkMwOEQ4RDJDNURFQzcyNTZDRkE2RjQxMTQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlLLNJf7d544 zCfNXjR/oUuyu0UmkPanFIGGiYABCRrkUIPVQrwYsdu3uACiLvXjQHDLMXjKCACG UsKkae5a5ful/c0SqF4D1rXWPbYGzPsbM6udnpNRJHe+bjTtapRt18RtdvCzGPAD SJblQGFlFh8PwbvJ6KXmDq4Pm3ieIjwuf5emSJsn0MtfLkmieWvxuR0dudz9Whxd 7WQVkeasPUozyAC9uI7hELmxec0dHCBCe4rDXKgWMcVUxdknvZKySMUS+c7YPL/Z k4xqebInOXppxxOARfqyvDSqFDH+ZZog1N7bJDcDZGMNUOCjzRQjcNnY/ocGWbWP hV7zJZaJvg== -----END CERTIFICATE-----Generated at Fri Oct 2 20:38:28 2026 by rpki-client