$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json) Hash identifier: Ncj8/I7BCsPPD3RsZX0Vk3vqW4mTQRtN9MqRaI7o8Rc= Subject key identifier: 48:8D:13:2F:42:89:D4:29:5D:0B:D8:50:8C:27:EE:04:60:0B:6D:BC Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 689868C9F45A84647D01AE921F8C694B772E36D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft Manifest number: 8E Signing time: Mon 28 Sep 2026 12:25:45 +0000 Manifest this update: Mon 28 Sep 2026 12:20:45 +0000 Manifest next update: Thu 01 Oct 2026 23:38:45 +0000 Files and hashes: 1: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=) 2: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: H7LtYu/4johTSeYCWV0Fxkg3ba6zBZQnlLDyF+V/OL0=) 3: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=) 4: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=) 5: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:98:68:c9:f4:5a:84:64:7d:01:ae:92:1f:8c:69:4b:77:2e:36:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: Sep 28 12:20:45 2026 GMT Not After : Oct 1 23:38:45 2026 GMT Subject: CN=488D132F4289D4295D0BD8508C27EE04600B6DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:d1:13:0e:2e:c8:51:68:aa:e4:a8:50:05: a8:8c:fe:24:a2:9a:7c:07:7e:3c:1c:74:7b:fc:48: 9d:4b:25:08:d5:cd:08:31:97:34:5a:2a:ea:99:58: 58:5e:df:31:76:3b:30:9f:fb:e9:70:82:67:91:a2: 6e:e9:18:71:d7:a3:0f:12:89:d7:f3:d6:c3:bd:82: a4:94:42:b0:83:f6:49:b4:74:14:2a:cc:37:5f:c4: a9:95:28:e3:a2:6b:c5:49:66:e2:a5:17:2e:64:53: 20:1d:eb:3e:a5:e1:0d:e4:24:a0:5c:5a:6a:4b:d8: ee:c4:40:39:2a:62:1e:21:02:8e:02:47:ff:4f:d9: 98:b9:7d:a3:96:91:6b:de:4a:5f:b7:09:59:ae:5a: 13:a2:5e:21:1b:fc:3b:3c:df:da:90:38:5e:20:92: cf:c6:04:0b:b1:5d:d3:f8:33:3b:1a:2c:50:c6:4f: d9:8c:60:a6:09:15:b8:b6:1d:cf:d5:5b:63:8a:85: b7:1d:a8:c7:83:80:9d:b2:fc:5e:ec:24:a7:d2:fb: 61:da:37:c4:7f:ef:86:ac:41:e4:78:71:92:25:3f: 1b:9a:8b:e5:3d:11:ed:16:54:a8:42:05:a8:26:53: e0:ea:3f:5a:78:fc:b8:6b:2c:a8:f3:2c:cd:31:87: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:13:2F:42:89:D4:29:5D:0B:D8:50:8C:27:EE:04:60:0B:6D:BC X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:24:d6:fe:c1:be:f4:20:a4:6a:6a:6f:07:33:8b:ef:39: 16:c9:68:b0:40:45:96:00:7d:25:43:95:1c:c0:69:1f:5f:4e: 4a:85:59:54:2f:ea:af:79:9e:17:e9:8b:87:9e:60:1f:be:f3: 54:b7:83:ad:f6:f0:63:3f:96:6e:a9:f6:6c:af:12:48:16:bc: fb:63:23:cd:a1:03:cc:78:88:01:4a:4b:f7:fe:dd:82:00:7e: 34:1a:96:a0:df:0a:55:a3:86:1d:96:a6:c6:12:78:9c:fb:11: 1d:8b:90:97:09:c0:5c:75:80:2a:36:ff:3e:77:02:70:22:af: 1e:e7:44:7d:39:23:10:02:5a:eb:c7:db:ee:13:1a:96:ce:b6: ac:5f:24:a0:1a:33:24:d8:38:02:3b:33:45:15:ca:bb:68:d3: 44:5f:e8:4e:b7:6d:ea:28:a9:36:f3:75:bf:52:9f:67:eb:3a: fd:2a:17:7d:29:ea:9f:0a:9a:94:45:f6:99:d2:99:e5:72:5a: e6:52:32:7b:61:c5:9d:fd:02:1d:4e:dc:7a:a3:c6:6e:71:01: 03:93:7f:11:c0:57:33:26:cd:9d:f5:d4:e5:84:70:a4:6c:43: 6d:a1:ab:f2:04:cb:d8:cc:64:4e:ca:ee:e1:24:2c:a7:3c:95: ed:ef:62:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaJhoyfRahGR9Aa6SH4xpS3cuNtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjA5MjgxMjIwNDVaFw0yNjEwMDEyMzM4NDVaMDMxMTAvBgNV BAMTKDQ4OEQxMzJGNDI4OUQ0Mjk1RDBCRDg1MDhDMjdFRTA0NjAwQjZEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeNETDi7IUWiq5KhQBaiM/iSi mnwHfjwcdHv8SJ1LJQjVzQgxlzRaKuqZWFhe3zF2OzCf++lwgmeRom7pGHHXow8S idfz1sO9gqSUQrCD9km0dBQqzDdfxKmVKOOia8VJZuKlFy5kUyAd6z6l4Q3kJKBc WmpL2O7EQDkqYh4hAo4CR/9P2Zi5faOWkWveSl+3CVmuWhOiXiEb/Ds839qQOF4g ks/GBAuxXdP4MzsaLFDGT9mMYKYJFbi2Hc/VW2OKhbcdqMeDgJ2y/F7sJKfS+2Ha N8R/74asQeR4cZIlPxuai+U9Ee0WVKhCBagmU+DqP1p4/LhrLKjzLM0xh5uVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSI0TL0KJ1CldC9hQjCfuBGALbbwwHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE1NTI0MzMyMjM0MzQyNTkvMC9BNjg3RUEzMEZEOUU5 NUIwQkI0NjZEQURGMEUyN0FGOThGMjE3Q0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMck1v7BvvQg pGpqbwczi+85FslosEBFlgB9JUOVHMBpH19OSoVZVC/qr3meF+mLh55gH77zVLeD rfbwYz+Wbqn2bK8SSBa8+2MjzaEDzHiIAUpL9/7dggB+NBqWoN8KVaOGHZamxhJ4 nPsRHYuQlwnAXHWAKjb/PncCcCKvHudEfTkjEAJa68fb7hMals62rF8koBozJNg4 AjszRRXKu2jTRF/oTrdt6iipNvN1v1KfZ+s6/SoXfSnqnwqalEX2mdKZ5XJa5lIy e2HFnf0CHU7ceqPGbnEBA5N/EcBXMybNnfXU5YRwpGxDbaGr8gTL2MxkTsru4SQs pzyV7e9iQA== -----END CERTIFICATE-----Generated at Wed Sep 30 20:04:13 2026 by rpki-client