$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json) Hash identifier: UjoFoWL5L8fcNbueO4Jp/WKkT6XjfYP4XJXE7q3eGNk= Subject key identifier: 20:DC:5B:60:7B:FE:73:36:57:4D:38:23:F3:15:98:CF:B3:44:AB:84 Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Certificate serial: 54E783B8F40E9B6AD81828A8921617B8AD8FA6C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft Manifest number: 90 Signing time: Mon 12 Oct 2026 08:41:49 +0000 Manifest this update: Mon 12 Oct 2026 08:36:49 +0000 Manifest next update: Thu 15 Oct 2026 09:22:49 +0000 Files and hashes: 1: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=) 2: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=) 3: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=) 4: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=) 5: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: 6wBdl4N3mTc67ddg50KmCwusg20UpT0rkCNBlPc43S8=) 6: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=) 7: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=) 8: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=) 9: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=) 10: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=) 11: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=) 12: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e7:83:b8:f4:0e:9b:6a:d8:18:28:a8:92:16:17:b8:ad:8f:a6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Validity Not Before: Oct 12 08:36:49 2026 GMT Not After : Oct 15 09:22:49 2026 GMT Subject: CN=20DC5B607BFE7336574D3823F31598CFB344AB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:71:8c:27:0a:57:ee:f5:3a:93:0b:30:fb: 73:e7:b5:46:f6:eb:18:64:97:fd:8c:1e:a6:8b:e1: 37:f5:23:7f:0b:33:54:b2:a5:1c:c6:0e:ee:18:d0: ab:58:bd:c3:83:3d:12:12:66:f0:97:53:e3:e7:09: dc:52:35:0a:15:d1:79:75:34:8f:b2:ea:4d:0c:f2: 8b:9e:b7:dc:a7:65:93:49:55:24:6b:56:b8:9d:42: 4a:e7:fc:ed:0f:f4:e8:1d:d7:38:f2:33:9e:41:22: c9:8c:9a:40:9b:f0:d3:df:b0:b6:9e:9a:5a:bf:a2: f4:83:1d:04:3f:a5:ce:c1:0e:8b:02:84:85:d3:64: 32:de:5d:94:cc:7d:21:40:34:22:bb:ed:2f:20:55: eb:8d:b9:b6:ce:00:be:68:14:87:0a:e9:82:8f:dc: ee:1b:84:56:dc:01:e8:dc:05:a9:a7:90:e3:7a:1d: e5:46:bd:67:ae:29:1e:d9:1e:5e:eb:4b:65:64:21: 26:ee:55:3f:27:3e:b5:53:40:86:e5:ce:be:13:cd: c1:c8:d7:11:54:e6:47:e1:68:85:0d:2e:e9:2a:a4: 66:68:f9:63:dc:92:ac:02:bb:16:b3:f1:94:82:33: 7d:76:15:18:c5:bb:f3:9a:9d:21:d5:cd:c4:a4:fa: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:5B:60:7B:FE:73:36:57:4D:38:23:F3:15:98:CF:B3:44:AB:84 X509v3 Authority Key Identifier: keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d3:ed:25:a8:61:69:98:2c:8b:c0:6d:93:50:34:e4:dc:0f: 11:40:ad:bb:5d:41:d8:45:bd:04:8c:33:20:98:1e:05:7b:ee: 88:86:00:dd:eb:fd:8f:6f:62:fc:b0:08:90:95:eb:06:4b:27: 1a:6a:48:93:14:31:20:6c:11:72:63:90:ad:bb:d0:b5:c2:ae: 6b:af:df:1d:96:76:29:a2:63:a9:fe:93:99:54:a5:f2:e3:c8: 2a:ee:3b:ef:a2:87:39:a2:05:63:72:05:ca:30:d2:1c:4c:e8: 4d:9e:e9:3f:58:f7:4f:ab:0c:11:08:29:89:a8:10:67:3d:a4: b6:d3:63:02:87:af:74:16:5f:59:a0:6d:a5:2e:73:ef:83:83: a5:2e:1a:49:4c:0f:51:b2:88:2e:63:a2:aa:75:b0:d1:32:55: 78:67:82:a9:7d:de:df:dd:cd:03:b6:87:cb:f2:4b:3b:15:61: 3d:7b:83:b7:04:17:32:05:9f:0f:90:6b:24:c5:11:8f:d1:73: 4b:4e:d4:51:26:8d:ba:55:ee:76:8e:86:6f:12:78:1b:2c:bc: 20:6f:c4:62:91:f1:03:c7:fc:a4:ed:a5:2b:ec:c2:cd:17:c6: 1b:8e:4b:b7:85:1c:ae:47:ec:9e:65:c5:1d:47:30:67:c2:bd: c5:00:e5:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVOeDuPQOm2rYGCiokhYXuK2PpsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2 NTZCRjVDMDAeFw0yNjEwMTIwODM2NDlaFw0yNjEwMTUwOTIyNDlaMDMxMTAvBgNV BAMTKDIwREM1QjYwN0JGRTczMzY1NzREMzgyM0YzMTU5OENGQjM0NEFCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFHGMJwpX7vU6kwsw+3PntUb2 6xhkl/2MHqaL4Tf1I38LM1SypRzGDu4Y0KtYvcODPRISZvCXU+PnCdxSNQoV0Xl1 NI+y6k0M8ouet9ynZZNJVSRrVridQkrn/O0P9Ogd1zjyM55BIsmMmkCb8NPfsLae mlq/ovSDHQQ/pc7BDosChIXTZDLeXZTMfSFANCK77S8gVeuNubbOAL5oFIcK6YKP 3O4bhFbcAejcBamnkON6HeVGvWeuKR7ZHl7rS2VkISbuVT8nPrVTQIblzr4TzcHI 1xFU5kfhaIUNLukqpGZo+WPckqwCuxaz8ZSCM312FRjFu/OanSHVzcSk+vyBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUINxbYHv+czZXTTgj8xWYz7NEq4QwHwYDVR0j BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2ODAwMjM4OTE5MDI0ODEvMC8zMjAxODhCM0ZBMzhE QTBGNDE5MkY3MjAxQUQ3RDM3NzY1NkJGNUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNPtJahhaZgs i8Btk1A05NwPEUCtu11B2EW9BIwzIJgeBXvuiIYA3ev9j29i/LAIkJXrBksnGmpI kxQxIGwRcmOQrbvQtcKua6/fHZZ2KaJjqf6TmVSl8uPIKu4776KHOaIFY3IFyjDS HEzoTZ7pP1j3T6sMEQgpiagQZz2kttNjAoevdBZfWaBtpS5z74ODpS4aSUwPUbKI LmOiqnWw0TJVeGeCqX3e393NA7aHy/JLOxVhPXuDtwQXMgWfD5BrJMURj9FzS07U USaNulXudo6GbxJ4Gyy8IG/EYpHxA8f8pO2lK+zCzRfGG45Lt4UcrkfsnmXFHUcw Z8K9xQDl6Q== -----END CERTIFICATE-----Generated at Mon Oct 12 14:37:18 2026 by rpki-client