$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json) Hash identifier: dy2ek4qz7BbU4axxM4tKTS7eRcrP+w1rfCFLb5PCb8A= Subject key identifier: 77:F1:88:9E:8E:96:F1:13:4F:87:C4:C0:86:E9:29:A5:12:E2:C9:99 Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 70BC3622CE1A420999CD230135A482EDD001E95B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft Manifest number: 86 Signing time: Fri 02 Oct 2026 02:40:07 +0000 Manifest this update: Fri 02 Oct 2026 02:35:06 +0000 Manifest next update: Mon 05 Oct 2026 04:01:06 +0000 Files and hashes: 1: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=) 2: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=) 3: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=) 4: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=) 5: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=) 6: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=) 7: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=) 8: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=) 9: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: hiQLcHW5NC4XtyQtI13lULDvSJXUGsmxBWwrh47R/Ao=) 10: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=) 11: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bc:36:22:ce:1a:42:09:99:cd:23:01:35:a4:82:ed:d0:01:e9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Oct 2 02:35:06 2026 GMT Not After : Oct 5 04:01:06 2026 GMT Subject: CN=77F1889E8E96F1134F87C4C086E929A512E2C999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:25:f0:c1:c0:3c:b9:ff:0b:b0:1f:50:82: bc:ea:49:6d:2d:9b:ae:f0:d3:e6:06:e1:5a:16:0b: e6:b4:8f:9a:a6:42:39:04:1c:95:da:4a:e8:76:05: 0c:36:40:32:0b:2e:8b:55:54:3c:99:79:1a:e0:21: d3:09:54:f9:31:2b:2d:01:8d:bd:2d:20:23:96:8d: 9e:db:47:42:e4:84:2b:bb:8d:77:2a:77:43:30:95: 14:bf:f3:b7:10:9f:78:bc:92:09:45:5c:58:ad:b4: 97:88:40:11:df:49:57:eb:03:38:55:05:b0:ec:1b: 4b:d5:77:05:90:a4:b3:20:0d:10:62:c5:3c:41:a7: fb:e6:e3:de:68:67:7b:ff:2e:0f:77:99:5d:c2:2f: b2:63:d7:0d:e1:55:a0:3f:ef:f4:84:03:bd:c0:f8: 5e:a0:a5:d7:8b:c1:19:60:eb:fd:89:ca:30:9b:c3: 9d:e6:50:f4:45:05:8f:36:b5:b6:c4:54:4b:90:1a: c1:e6:21:77:b9:bb:81:85:0f:c8:bb:67:4e:f9:9e: 59:e5:a2:03:b1:7c:88:59:91:0e:b1:9a:38:ea:c9: 17:7d:8b:dc:14:3d:c8:12:bf:f3:cb:51:72:54:d8: 11:1d:91:c6:0e:cf:87:2a:9b:0f:bb:5e:f6:e7:ba: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F1:88:9E:8E:96:F1:13:4F:87:C4:C0:86:E9:29:A5:12:E2:C9:99 X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ee:46:58:84:8d:fc:0c:c8:2a:74:bd:3f:1b:dd:4d:40:2e: 50:cd:a3:55:49:4c:a3:56:d2:48:65:5a:0a:08:fd:0a:0f:26: 5d:ef:fc:fe:63:6c:03:47:62:98:94:e2:1c:50:a5:d4:42:d4: ed:90:ab:4a:c3:cb:6f:86:75:c9:bb:a3:fb:3e:36:36:bd:84: 0a:6e:28:9c:73:f0:91:3d:b2:15:b1:48:e5:2a:cb:6f:ba:95: ed:1a:6b:39:b5:df:44:c1:e5:77:91:6b:c7:2e:e4:e4:84:4f: f7:36:02:a8:04:e5:98:49:35:6c:6e:55:49:62:b1:04:dc:16: 0e:14:ac:96:65:e5:35:d8:5a:b3:48:df:08:8d:8d:cc:90:b0: e8:27:0d:21:87:e6:a0:30:5a:e9:70:db:50:60:08:7e:7e:a1: 3f:7e:45:1e:dd:e0:6a:60:df:a4:a4:d0:ed:04:b7:a2:75:27: ca:e4:e5:eb:c1:ee:da:59:fe:7b:ca:d2:da:44:18:94:1f:a2: 5a:2c:bc:5f:5d:e8:33:31:cc:f4:b3:54:51:e5:43:4f:24:b1: 25:b4:2d:28:4e:7d:6f:46:6d:1e:23:96:71:34:82:f1:97:43: b8:5f:52:bd:73:02:7e:8b:7f:20:76:e0:9e:3b:14:4d:5d:2d: 1f:9b:ae:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcLw2Is4aQgmZzSMBNaSC7dAB6VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjEwMDIwMjM1MDZaFw0yNjEwMDUwNDAxMDZaMDMxMTAvBgNV BAMTKDc3RjE4ODlFOEU5NkYxMTM0Rjg3QzRDMDg2RTkyOUE1MTJFMkM5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbISXwwcA8uf8LsB9QgrzqSW0t m67w0+YG4VoWC+a0j5qmQjkEHJXaSuh2BQw2QDILLotVVDyZeRrgIdMJVPkxKy0B jb0tICOWjZ7bR0LkhCu7jXcqd0MwlRS/87cQn3i8kglFXFittJeIQBHfSVfrAzhV BbDsG0vVdwWQpLMgDRBixTxBp/vm495oZ3v/Lg93mV3CL7Jj1w3hVaA/7/SEA73A +F6gpdeLwRlg6/2JyjCbw53mUPRFBY82tbbEVEuQGsHmIXe5u4GFD8i7Z075nlnl ogOxfIhZkQ6xmjjqyRd9i9wUPcgSv/PLUXJU2BEdkcYOz4cqmw+7Xvbnut3tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd/GIno6W8RNPh8TAhukppRLiyZkwHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMDg1ODA2NjA3NzI4ODMvMC9BQjcwRDM2RENFODcx N0QyMzg5RkZGQjlCQURDQzYwRUNEQzExN0I1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAku5GWISN/AzI KnS9PxvdTUAuUM2jVUlMo1bSSGVaCgj9Cg8mXe/8/mNsA0dimJTiHFCl1ELU7ZCr SsPLb4Z1ybuj+z42Nr2ECm4onHPwkT2yFbFI5SrLb7qV7RprObXfRMHld5Frxy7k 5IRP9zYCqATlmEk1bG5VSWKxBNwWDhSslmXlNdhas0jfCI2NzJCw6CcNIYfmoDBa 6XDbUGAIfn6hP35FHt3gamDfpKTQ7QS3onUnyuTl68Hu2ln+e8rS2kQYlB+iWiy8 X13oMzHM9LNUUeVDTySxJbQtKE59b0ZtHiOWcTSC8ZdDuF9SvXMCfot/IHbgnjsU TV0tH5uutA== -----END CERTIFICATE-----Generated at Fri Oct 2 12:27:13 2026 by rpki-client