$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json) Hash identifier: 5rDt/zMeTfXumLtYZm565IAFediOhPNoCO1Nh8iYwzc= Subject key identifier: E4:37:03:CD:19:9F:63:51:D6:0B:09:A3:DD:55:5A:F4:A9:DC:AE:A0 Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 1AA4AF50636A80E82CF2F1AF5A4F109109ECFA3A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft Manifest number: A2 Signing time: Mon 28 Sep 2026 13:00:45 +0000 Manifest this update: Mon 28 Sep 2026 12:55:45 +0000 Manifest next update: Thu 01 Oct 2026 14:11:45 +0000 Files and hashes: 1: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=) 2: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=) 3: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=) 4: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=) 5: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=) 6: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=) 7: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=) 8: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=) 9: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=) 10: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=) 11: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=) 12: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=) 13: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=) 14: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=) 15: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: eJ4WklxH4Ct4bQ5EKzxjb/ZtVMtCFuOMn2gQMJneiR0=) 16: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=) 17: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=) 18: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=) 19: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=) 20: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=) 21: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:af:50:63:6a:80:e8:2c:f2:f1:af:5a:4f:10:91:09:ec:fa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Sep 28 12:55:45 2026 GMT Not After : Oct 1 14:11:45 2026 GMT Subject: CN=E43703CD199F6351D60B09A3DD555AF4A9DCAEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:08:18:44:79:a2:5f:4a:2c:69:dc:eb:93: 38:83:21:76:73:7d:9e:e6:3f:af:44:27:d8:66:56: 7c:bc:48:53:d2:97:d9:8b:ab:8a:7d:06:7b:cd:12: 31:5f:4b:e9:05:3c:60:69:75:38:4a:e3:f3:b6:64: 8f:71:ac:3d:fc:38:22:53:8e:8f:9f:df:65:57:46: 43:bf:e8:0c:d5:73:e9:0a:ae:54:f3:7e:e6:a8:b8: c9:ca:37:a3:20:71:84:d8:6c:f4:0f:f3:0d:00:f3: 4b:9f:dd:84:54:16:0e:5e:88:34:99:54:89:92:47: a5:fe:4b:50:f4:ee:cf:64:ac:1e:ff:1a:52:1a:40: 53:00:ac:ed:ef:cc:85:1a:21:bc:8d:d1:69:ef:7b: e3:b3:55:23:5c:51:83:c2:43:99:c1:8e:fe:40:d5: 1b:89:2f:f0:1a:e4:d9:2d:f2:eb:82:c1:1c:2f:6e: b7:a5:84:7b:30:5d:9f:dd:7c:7a:ed:e0:49:0e:1e: 75:65:30:4b:36:a0:7d:1b:fb:05:68:a0:b6:fd:ff: fd:e4:04:e3:fc:20:fc:6d:e6:54:38:c7:32:7d:5d: 97:0f:04:45:18:c0:cb:69:a7:9c:c7:41:de:04:11: 7c:92:4e:df:c2:8d:59:16:35:ba:4c:b9:b8:4e:1c: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:37:03:CD:19:9F:63:51:D6:0B:09:A3:DD:55:5A:F4:A9:DC:AE:A0 X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a4:eb:0c:ef:23:95:bc:a7:f2:ea:eb:53:58:36:6b:ec:b7: 94:26:93:da:8a:7c:35:d6:6a:32:53:c8:5a:c1:ee:78:c7:75: c2:b0:96:85:27:77:de:38:d7:d7:0b:76:5a:97:24:d1:04:fa: 8a:27:90:18:2d:df:a5:c4:82:1d:a1:2f:07:42:08:da:ee:9c: 74:9a:88:23:26:00:0b:d6:b8:b5:52:24:7d:20:b5:ff:62:55: 26:ef:ac:69:77:60:9e:bf:86:01:b5:ba:97:9c:27:51:52:3c: f3:c9:54:b5:10:21:26:3a:d1:fe:ac:a3:9f:ff:73:ac:3d:ea: 3b:83:54:4c:6d:58:01:1d:8c:8a:7a:ff:3a:2f:73:96:23:ba: cf:8b:d6:a6:a4:7e:5b:14:7c:a2:a5:ae:dd:64:45:fb:78:8d: 5a:fc:a7:6d:66:1a:2d:13:49:f2:5f:17:a4:9c:40:e7:a3:a4: c0:8a:a9:a7:98:4e:27:4a:61:7b:80:30:97:fc:d3:de:91:32: 20:f2:b6:64:c2:ae:cd:4c:22:ca:52:fa:06:45:a3:bf:6c:c6: 3c:1f:a5:db:45:f0:77:f8:92:61:14:fc:97:30:16:f5:bd:f5: 95:ff:e0:16:4e:01:0c:6e:85:ad:51:f9:c5:58:19:a4:a0:e7: 81:39:48:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGqSvUGNqgOgs8vGvWk8QkQns+jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA5MjgxMjU1NDVaFw0yNjEwMDExNDExNDVaMDMxMTAvBgNV BAMTKEU0MzcwM0NEMTk5RjYzNTFENjBCMDlBM0RENTU1QUY0QTlEQ0FFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQQgYRHmiX0osadzrkziDIXZz fZ7mP69EJ9hmVny8SFPSl9mLq4p9BnvNEjFfS+kFPGBpdThK4/O2ZI9xrD38OCJT jo+f32VXRkO/6AzVc+kKrlTzfuaouMnKN6MgcYTYbPQP8w0A80uf3YRUFg5eiDSZ VImSR6X+S1D07s9krB7/GlIaQFMArO3vzIUaIbyN0Wnve+OzVSNcUYPCQ5nBjv5A 1RuJL/Aa5Nkt8uuCwRwvbrelhHswXZ/dfHrt4EkOHnVlMEs2oH0b+wVooLb9//3k BOP8IPxt5lQ4xzJ9XZcPBEUYwMtpp5zHQd4EEXySTt/CjVkWNbpMubhOHD//AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5DcDzRmfY1HWCwmj3VVa9KncrqAwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzNTQwMzY4Njk0NjQwODUvMC9CNTE0ODY0NkYyQzQ1 MTg2NEUyMDY5NkU0RjFDOTI2QTA5OEJDOEQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKTrDO8jlbyn 8urrU1g2a+y3lCaT2op8NdZqMlPIWsHueMd1wrCWhSd33jjX1wt2Wpck0QT6iieQ GC3fpcSCHaEvB0II2u6cdJqIIyYAC9a4tVIkfSC1/2JVJu+saXdgnr+GAbW6l5wn UVI888lUtRAhJjrR/qyjn/9zrD3qO4NUTG1YAR2Minr/Oi9zliO6z4vWpqR+WxR8 oqWu3WRF+3iNWvynbWYaLRNJ8l8XpJxA56OkwIqpp5hOJ0phe4Awl/zT3pEyIPK2 ZMKuzUwiylL6BkWjv2zGPB+l20Xwd/iSYRT8lzAW9b31lf/gFk4BDG6FrVH5xVgZ pKDngTlIQA== -----END CERTIFICATE-----Generated at Mon Sep 28 22:01:50 2026 by rpki-client