$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft File: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json) Hash identifier: PB3uRnke9drFgj2/JSkS6BI5BfP5k5l+IlajJrx6WNQ= Subject key identifier: 77:3B:17:3C:7A:23:30:2C:BA:76:74:A5:24:27:21:E0:FA:F3:F8:1C Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Certificate serial: 0AD21EC94854AA27589106202D28D310FCAFC8B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft Manifest number: 8C Signing time: Sun 11 Oct 2026 14:58:53 +0000 Manifest this update: Sun 11 Oct 2026 14:53:53 +0000 Manifest next update: Wed 14 Oct 2026 18:17:53 +0000 Files and hashes: 1: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=) 2: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=) 3: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: cMz+T/Ocal1YXE86YwLs6FtcPODIdMQFsT4v36NprQo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 18:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:1e:c9:48:54:aa:27:58:91:06:20:2d:28:d3:10:fc:af:c8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Validity Not Before: Oct 11 14:53:53 2026 GMT Not After : Oct 14 18:17:53 2026 GMT Subject: CN=773B173C7A23302CBA7674A5242721E0FAF3F81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:e8:54:27:75:6f:56:e9:d5:ab:7e:8b:d5: 4b:cd:3c:f2:3e:67:7d:61:eb:dd:ae:77:02:f3:8a: 25:f0:8d:09:69:d2:a5:94:2e:21:65:0e:02:79:8b: 71:ed:a5:95:a1:7a:09:3b:fe:9c:98:0c:c2:f8:2a: 8e:e3:1c:34:d2:1b:5b:65:5a:2c:7e:8d:76:fd:f8: 3c:2e:83:b6:1e:3e:ed:ff:b6:78:f5:69:fb:68:8e: 01:3c:5a:70:05:81:73:e6:a4:43:28:17:90:c6:43: 7b:90:1f:39:a4:63:b5:9c:fa:6c:c0:b1:64:b9:97: ef:63:92:fc:3f:84:5d:9d:d6:7c:fc:05:fd:28:83: 95:31:6d:54:52:7f:89:8c:77:89:12:46:c1:d9:77: 4c:e7:e9:5a:2e:4b:93:cf:6b:5e:f4:d7:5b:44:72: 90:65:25:0b:44:39:46:04:28:ce:2e:e2:16:b2:83: 5f:f5:25:6b:dc:f8:15:5f:c4:3c:6b:d8:2f:e5:1f: 7b:aa:33:bc:d3:a4:0c:70:1d:f4:cc:3b:27:3f:1a: 02:9b:a7:4a:72:d6:78:0a:7c:a4:05:b0:1f:e9:12: f9:8d:80:b2:d5:5b:34:09:43:ea:4c:b6:a5:fc:04: e3:cc:f2:bc:76:96:96:fa:b2:53:b8:22:53:97:ee: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:17:3C:7A:23:30:2C:BA:76:74:A5:24:27:21:E0:FA:F3:F8:1C X509v3 Authority Key Identifier: keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bd:f3:34:f8:76:5c:fa:9f:17:02:60:c8:6a:75:ac:98:83: df:a2:37:5e:1b:6a:9b:7a:e8:cf:b3:ec:b7:d9:7c:09:1c:86: 95:0f:38:57:df:3d:5f:94:0f:96:ab:c6:13:46:ee:42:82:18: 47:0d:82:35:71:55:25:ec:6f:01:2d:86:7d:91:13:26:4c:23: a9:15:bb:66:3b:8a:8d:55:c2:04:d1:e7:60:bd:59:a2:71:23: 51:01:cb:a7:43:1c:48:e8:a3:b0:aa:58:af:f7:da:43:86:b6: 3c:e3:a1:e5:20:e7:f9:70:45:a2:06:2a:46:b0:18:b9:68:7a: 05:52:c2:4e:b2:d7:5d:07:15:3b:cf:f7:b1:5c:72:6c:03:31: 97:80:75:2c:60:52:d0:71:26:80:6e:c7:a5:30:f0:04:ae:39: 1a:fa:76:7d:aa:e9:d5:6f:86:31:87:c3:f4:df:42:72:00:bf: a1:af:25:f7:7c:96:fb:3a:33:46:07:fd:80:f4:b8:aa:7b:74: 55:bc:84:e7:6a:5b:25:76:10:56:6c:4c:c0:70:d0:35:1b:1d: b2:a2:10:07:47:57:ca:0c:e0:57:dd:46:9d:0f:76:13:1b:4e: 56:78:09:79:f4:ed:bd:87:b2:d9:78:b9:de:fa:22:4e:41:9d: 43:34:97:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCtIeyUhUqidYkQYgLSjTEPyvyLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjBDREUwMDAwMTEwLwYDVQQFEyhEMEVBMEFBOEMz NDZGRTY3M0M2ODY3RjJCOUNBMDY4MTlGNThDNDcyMB4XDTI2MTAxMTE0NTM1M1oX DTI2MTAxNDE4MTc1M1owMzExMC8GA1UEAxMoNzczQjE3M0M3QTIzMzAyQ0JBNzY3 NEE1MjQyNzIxRTBGQUYzRjgxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTU6FQndW9W6dWrfovVS8088j5nfWHr3a53AvOKJfCNCWnSpZQuIWUOAnmL ce2llaF6CTv+nJgMwvgqjuMcNNIbW2VaLH6Ndv34PC6Dth4+7f+2ePVp+2iOATxa cAWBc+akQygXkMZDe5AfOaRjtZz6bMCxZLmX72OS/D+EXZ3WfPwF/SiDlTFtVFJ/ iYx3iRJGwdl3TOfpWi5Lk89rXvTXW0RykGUlC0Q5RgQozi7iFrKDX/Ula9z4FV/E PGvYL+Ufe6ozvNOkDHAd9Mw7Jz8aApunSnLWeAp8pAWwH+kS+Y2AstVbNAlD6ky2 pfwE48zyvHaWlvqyU7giU5fuwU8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBR3Oxc8 eiMwLLp2dKUkJyHg+vP4HDAfBgNVHSMEGDAWgBTQ6gqow0b+ZzxoZ/K5ygaBn1jE cjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzIyMTk3ODgxNDIxODQxLzAvRDBFQTBB QThDMzQ2RkU2NzNDNjg2N0YyQjlDQTA2ODE5RjU4QzQ3Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvME9vS3FNTkdf bWM4YUdmeXVjb0dnWjlZeEhJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjMyMjE5Nzg4 MTQyMTg0MS8wL0QwRUEwQUE4QzM0NkZFNjczQzY4NjdGMkI5Q0EwNjgxOUY1OEM0 NzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA6vfM0+HZc+p8XAmDIanWsmIPfojdeG2qbeujPs+y32XwJ HIaVDzhX3z1flA+Wq8YTRu5CghhHDYI1cVUl7G8BLYZ9kRMmTCOpFbtmO4qNVcIE 0edgvVmicSNRAcunQxxI6KOwqliv99pDhrY846HlIOf5cEWiBipGsBi5aHoFUsJO stddBxU7z/exXHJsAzGXgHUsYFLQcSaAbselMPAErjka+nZ9qunVb4Yxh8P030Jy AL+hryX3fJb7OjNGB/2A9Liqe3RVvITnalsldhBWbEzAcNA1Gx2yohAHR1fKDOBX 3UadD3YTG05WeAl59O29h7LZeLne+iJOQZ1DNJdm -----END CERTIFICATE-----Generated at Tue Oct 13 08:06:54 2026 by rpki-client