$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: RxYtxbw+nPrTRwJ6ZW/pY2znskvjoVqSKBsokJe27SE= Subject key identifier: 7A:FA:F1:DC:F4:EA:43:DE:53:3A:5D:09:56:98:25:B7:FA:49:28:9C Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 6D0C340A05F29F543B3DA658F62B63B60EAB671A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: A3 Signing time: Wed 30 Sep 2026 15:33:12 +0000 Manifest this update: Wed 30 Sep 2026 15:28:12 +0000 Manifest next update: Sat 03 Oct 2026 20:23:12 +0000 Files and hashes: 1: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 2: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: NIplLuY8aS/FBMvdX5ZnkKLkWt2U6wbtQCU04tVTKxo=) 3: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=) 4: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 5: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=) 6: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 7: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) 8: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 05:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0c:34:0a:05:f2:9f:54:3b:3d:a6:58:f6:2b:63:b6:0e:ab:67:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: Sep 30 15:28:12 2026 GMT Not After : Oct 3 20:23:12 2026 GMT Subject: CN=7AFAF1DCF4EA43DE533A5D09569825B7FA49289C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:c1:d9:c1:b3:81:9a:b5:a2:15:9f:51:05: 86:0e:0e:5e:3f:bd:14:e8:74:bf:a5:43:34:1f:b5: e2:d3:55:72:60:39:a9:09:f2:66:f0:9a:b3:56:28: 2b:b4:e2:a5:2b:d5:54:d3:32:5a:c8:da:17:8c:98: ba:ff:ec:57:20:a5:19:e7:89:2d:e9:6d:81:40:3d: c7:ed:43:0a:6d:31:08:74:cf:3b:75:8b:5b:65:a5: 63:3c:21:f2:70:53:1e:e5:be:f5:d1:fc:32:67:06: 4d:7c:cb:d9:e8:ec:b6:c2:1b:cc:44:2d:e9:e3:9b: a1:17:a0:69:ba:19:bb:95:e1:98:4f:5e:6d:e8:e0: cf:0d:81:f1:2a:10:f5:f8:30:68:95:f8:c2:4f:db: f9:55:0c:36:31:7f:ee:b3:0f:c7:5e:88:59:4c:b4: d9:d6:51:dd:6b:10:ab:c4:8c:a5:0b:ce:ba:32:d0: b7:2f:25:32:88:03:eb:52:76:86:b9:96:6d:d6:46: c6:e3:4d:b9:09:77:f4:54:ee:99:06:81:66:28:54: 90:7b:a6:66:43:d6:d2:d3:8f:78:87:1a:95:98:d2: da:c6:0d:47:e1:a6:84:44:f6:2e:0f:17:f3:28:88: 9a:9c:81:9d:58:16:4f:41:04:32:74:fa:28:7c:ec: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:F1:DC:F4:EA:43:DE:53:3A:5D:09:56:98:25:B7:FA:49:28:9C X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b3:9c:6f:b2:aa:25:29:9e:f4:7c:c5:15:7f:bc:db:2e:06: 9c:92:73:14:77:43:b5:86:3d:1b:6d:52:72:04:d8:80:3c:a7: ed:20:07:f5:94:69:f1:52:1d:de:b5:d4:1d:fc:83:da:1e:7b: 73:26:76:3c:10:f0:da:4f:f6:ed:17:26:82:19:a7:90:b0:1a: b4:1c:27:36:78:f6:cf:8b:b3:d0:19:cc:13:0d:89:e1:5a:1e: bc:db:e0:bf:f9:3d:b2:f2:90:70:a5:70:fa:72:48:53:50:61: c4:f1:78:95:6b:7a:61:09:eb:5b:14:81:06:fb:a0:e5:df:d5: 96:d2:9a:c8:15:e8:f1:8b:52:fa:17:80:ee:e1:56:ed:62:f5: a5:40:c0:7d:54:ee:b7:83:73:9f:ef:f1:ed:7b:fa:32:14:33: 6e:1b:6d:f0:b9:13:ac:0a:5b:b1:14:33:15:94:59:b8:9a:c5: 25:58:73:28:40:16:3e:1a:3b:b8:08:0a:38:f9:60:bc:82:76: 84:61:c8:70:cd:62:71:c2:8c:bd:19:93:c6:66:68:27:9b:f3: 92:2b:d8:89:4a:ad:f7:a1:84:38:fc:0a:0b:b8:e1:6d:de:af: 82:55:7f:d6:fb:83:b6:65:01:92:09:22:cb:f2:fe:a4:15:e5: 93:4e:4a:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbQw0CgXyn1Q7PaZY9itjtg6rZxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjA5MzAxNTI4MTJaFw0yNjEwMDMyMDIzMTJaMDMxMTAvBgNV BAMTKDdBRkFGMURDRjRFQTQzREU1MzNBNUQwOTU2OTgyNUI3RkE0OTI4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIcHZwbOBmrWiFZ9RBYYODl4/ vRTodL+lQzQfteLTVXJgOakJ8mbwmrNWKCu04qUr1VTTMlrI2heMmLr/7FcgpRnn iS3pbYFAPcftQwptMQh0zzt1i1tlpWM8IfJwUx7lvvXR/DJnBk18y9no7LbCG8xE Lenjm6EXoGm6GbuV4ZhPXm3o4M8NgfEqEPX4MGiV+MJP2/lVDDYxf+6zD8deiFlM tNnWUd1rEKvEjKULzroy0LcvJTKIA+tSdoa5lm3WRsbjTbkJd/RU7pkGgWYoVJB7 pmZD1tLTj3iHGpWY0trGDUfhpoRE9i4PF/MoiJqcgZ1YFk9BBDJ0+ih87EqVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUevrx3PTqQ95TOl0JVpglt/pJKJwwHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbOcb7KqJSme 9HzFFX+82y4GnJJzFHdDtYY9G21ScgTYgDyn7SAH9ZRp8VId3rXUHfyD2h57cyZ2 PBDw2k/27RcmghmnkLAatBwnNnj2z4uz0BnMEw2J4VoevNvgv/k9svKQcKVw+nJI U1BhxPF4lWt6YQnrWxSBBvug5d/VltKayBXo8YtS+heA7uFW7WL1pUDAfVTut4Nz n+/x7Xv6MhQzbhtt8LkTrApbsRQzFZRZuJrFJVhzKEAWPho7uAgKOPlgvIJ2hGHI cM1iccKMvRmTxmZoJ5vzkivYiUqt96GEOPwKC7jhbd6vglV/1vuDtmUBkgkiy/L+ pBXlk05KJQ== -----END CERTIFICATE-----Generated at Thu Oct 1 15:39:43 2026 by rpki-client