$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: 0ulGh4/tre2klrlzd4Ni6zJYSejJXknO+utYlmZIcys= Subject key identifier: A5:32:E1:67:A3:23:EB:75:20:66:BC:C9:60:08:3B:5C:6C:46:DD:13 Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 225C2579E24ECA275E9B7D050263579EEFC5A04D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 85 Signing time: Sun 27 Sep 2026 21:45:11 +0000 Manifest this update: Sun 27 Sep 2026 21:40:11 +0000 Manifest next update: Thu 01 Oct 2026 03:59:11 +0000 Files and hashes: 1: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 2: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: PYliX/H32AFtpW9zrGFJEXlHMir53V3hy02RLiiujWI=) 3: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 4: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 5: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 6: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 7: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 8: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 03:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5c:25:79:e2:4e:ca:27:5e:9b:7d:05:02:63:57:9e:ef:c5:a0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Sep 27 21:40:11 2026 GMT Not After : Oct 1 03:59:11 2026 GMT Subject: CN=A532E167A323EB752066BCC960083B5C6C46DD13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:d7:46:18:21:84:19:69:db:2c:33:d3:c9: 48:eb:af:d9:d8:85:9d:e7:5a:f8:14:5f:ce:87:46: 20:64:e9:aa:4d:56:2d:43:f7:80:e7:50:40:83:3d: e7:59:2a:b7:22:e3:d8:bd:56:de:09:da:cc:3a:ae: 15:0b:b7:0c:51:e9:75:fc:8d:20:a7:27:9f:3b:80: 95:2b:66:d6:56:34:08:12:87:af:09:a6:50:e5:a2: 01:8a:79:dc:35:b9:e7:90:8b:03:1a:81:05:e0:f7: 0c:f9:33:76:4f:6c:d2:94:7e:18:83:6f:5c:a2:3d: 28:19:9a:63:c9:ad:32:46:92:a3:48:e6:a2:dd:82: 8f:72:a2:02:3a:03:ef:39:c4:d7:f2:77:f2:92:39: 25:08:13:cd:ef:f3:83:2a:e2:79:82:c6:22:d3:ff: 73:5e:58:10:ab:3c:13:38:ab:9f:69:7e:7d:85:4e: ea:2f:44:2f:d0:03:72:6b:21:9e:69:63:c3:6f:c4: 9e:ca:9e:a0:6f:17:17:f0:f1:0b:56:19:1e:7d:c8: b8:84:5c:86:84:9e:16:f4:87:20:7c:5b:db:03:ec: a8:5c:14:be:8d:b3:4c:20:c7:dc:73:84:a0:bd:01: 39:10:26:ee:cc:e6:2e:a7:79:55:ae:2d:64:f2:9b: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:E1:67:A3:23:EB:75:20:66:BC:C9:60:08:3B:5C:6C:46:DD:13 X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:36:c3:2a:2b:8a:48:c5:7f:c5:75:a5:3d:c6:34:b5:7a:5a: 7f:9a:ca:50:22:84:d5:25:2a:52:d8:81:5b:c0:3e:a7:ff:6a: 5e:bd:5b:e5:5e:a4:2b:c5:d7:1a:a0:d7:56:0f:f8:13:22:b4: 51:08:be:e4:af:82:b3:69:18:c6:c9:ef:14:e3:0d:f3:01:70: 61:99:81:1e:ba:a1:1c:40:03:c3:06:3b:17:38:ce:75:32:bd: 3d:a0:2d:e3:1b:af:23:88:d4:6b:3e:c3:ca:d8:0b:e6:34:9c: e4:9b:3d:c9:1f:78:fd:24:93:78:62:db:74:cb:19:f5:5e:db: 6e:5d:65:34:24:0f:20:5c:cd:5c:2e:98:c4:44:1b:6e:3c:73: da:0f:65:fe:71:95:51:1d:6c:97:b0:25:09:2a:07:88:3f:74: 1f:69:6a:e0:e0:36:66:db:82:3a:50:c5:05:35:1d:0d:6e:bf: 3e:a6:64:f3:90:5c:76:cb:d0:2b:06:d7:c9:16:1e:31:48:90: 4b:65:52:9e:4f:31:38:33:4c:8b:b3:3f:80:93:63:dd:97:3a: 3e:3c:f7:c7:b8:51:20:68:04:08:90:f4:35:a6:d3:f0:40:8d: cf:26:74:d3:ef:98:ec:46:ce:d0:55:4b:8c:81:0e:40:f0:a0: bc:ef:b6:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIlwleeJOyidem30FAmNXnu/FoE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA5MjcyMTQwMTFaFw0yNjEwMDEwMzU5MTFaMDMxMTAvBgNV BAMTKEE1MzJFMTY3QTMyM0VCNzUyMDY2QkNDOTYwMDgzQjVDNkM0NkREMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/NdGGCGEGWnbLDPTyUjrr9nY hZ3nWvgUX86HRiBk6apNVi1D94DnUECDPedZKrci49i9Vt4J2sw6rhULtwxR6XX8 jSCnJ587gJUrZtZWNAgSh68JplDlogGKedw1ueeQiwMagQXg9wz5M3ZPbNKUfhiD b1yiPSgZmmPJrTJGkqNI5qLdgo9yogI6A+85xNfyd/KSOSUIE83v84Mq4nmCxiLT /3NeWBCrPBM4q59pfn2FTuovRC/QA3JrIZ5pY8NvxJ7KnqBvFxfw8QtWGR59yLiE XIaEnhb0hyB8W9sD7KhcFL6Ns0wgx9xzhKC9ATkQJu7M5i6neVWuLWTym8jZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpTLhZ6Mj63UgZrzJYAg7XGxG3RMwHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTbDKiuKSMV/ xXWlPcY0tXpaf5rKUCKE1SUqUtiBW8A+p/9qXr1b5V6kK8XXGqDXVg/4EyK0UQi+ 5K+Cs2kYxsnvFOMN8wFwYZmBHrqhHEADwwY7FzjOdTK9PaAt4xuvI4jUaz7DytgL 5jSc5Js9yR94/SSTeGLbdMsZ9V7bbl1lNCQPIFzNXC6YxEQbbjxz2g9l/nGVUR1s l7AlCSoHiD90H2lq4OA2ZtuCOlDFBTUdDW6/PqZk85BcdsvQKwbXyRYeMUiQS2VS nk8xODNMi7M/gJNj3Zc6Pjz3x7hRIGgECJD0NabT8ECNzyZ00++Y7EbO0FVLjIEO QPCgvO+2Rg== -----END CERTIFICATE-----Generated at Tue Sep 29 10:45:42 2026 by rpki-client