$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: by0DAL9UiYtdmgO5HkKLiQ3/MU1KvY1yVj1IsHTpzqo= Subject key identifier: 59:EC:77:59:D8:55:78:BC:63:80:F7:DC:F9:A1:AF:D4:59:2A:0D:1F Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 1763F216D284E471524487F0A7152FC9E1B93872 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 82 Signing time: Sun 27 Sep 2026 15:10:03 +0000 Manifest this update: Sun 27 Sep 2026 15:05:03 +0000 Manifest next update: Wed 30 Sep 2026 22:55:03 +0000 Files and hashes: 1: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 2: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: hSMww3SVkjkLe16O12MbPT7Qp3ihU2j0laSt4MN91eU=) 3: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 4: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 5: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 6: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 7: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 8: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 9: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 10: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 11: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 12: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 13: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 14: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) 15: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 16: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 17: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 18: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 19: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 20: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 21: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 22: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 23: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 22:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:63:f2:16:d2:84:e4:71:52:44:87:f0:a7:15:2f:c9:e1:b9:38:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Sep 27 15:05:03 2026 GMT Not After : Sep 30 22:55:03 2026 GMT Subject: CN=59EC7759D85578BC6380F7DCF9A1AFD4592A0D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:7e:7f:ee:08:83:47:c0:29:6b:47:9a:63: fe:a5:25:c5:ff:d3:5c:8e:9c:88:54:2a:57:f5:c7: df:60:c9:57:40:74:fc:e5:18:00:96:44:cc:17:c8: 23:c3:a8:70:95:51:f6:05:44:3c:89:d5:8e:69:bb: 0f:c8:98:36:d2:9c:c3:f2:14:a1:53:e5:8e:e9:c7: fd:f0:cd:55:29:d6:a3:44:b9:d9:df:df:34:4b:6c: 29:a5:f0:19:1d:5c:5f:11:b9:02:60:cf:f8:8c:47: d0:02:2e:01:66:8c:e1:e8:b4:f1:49:7b:cc:b6:3c: 2a:5a:71:3c:66:c9:03:49:0e:c6:a8:eb:e2:72:09: 5f:a9:37:3a:cc:4d:ec:7f:e5:e8:12:4f:46:1b:af: 90:c1:46:d5:be:df:8b:54:d4:17:9c:5e:fb:f9:de: d3:05:44:d3:8c:76:08:fb:0c:99:09:fb:15:6a:d2: 0e:19:49:1f:ed:b3:8e:ba:01:0e:3f:1f:94:c4:5a: 1a:0c:74:be:43:81:ae:32:b9:23:e9:90:c0:8b:c1: bc:f9:79:f8:b0:e5:82:31:92:62:cf:d0:ca:b3:24: 88:54:fa:41:49:7e:3a:db:2e:87:c7:24:14:f4:b4: b9:81:62:6a:11:46:46:ea:97:76:1d:71:e0:09:4a: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:77:59:D8:55:78:BC:63:80:F7:DC:F9:A1:AF:D4:59:2A:0D:1F X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:9b:98:80:ce:12:a7:01:b5:44:eb:87:c6:1b:12:4f:9d: 51:cf:68:3e:ca:71:2d:35:f5:c3:25:7c:e6:c1:c3:b1:f0:06: 14:27:7d:83:8c:3c:05:0d:c0:d5:cc:78:db:bf:3a:25:02:fb: bc:64:0f:d8:74:95:8a:74:18:c5:4e:d4:89:8f:76:f3:b9:50: ad:45:5f:d6:99:2a:bf:24:ae:ef:ca:aa:3b:64:43:e6:0f:0b: f3:da:73:49:2c:44:8b:f8:f0:48:93:61:ca:fd:cd:6b:30:96: 98:a2:3b:a4:86:cc:ae:cc:3a:ff:f0:79:ae:33:6d:ee:c8:cf: 2c:16:7c:91:f0:da:b9:86:23:c5:7f:5e:bb:80:9c:c2:ce:a9: f8:c5:10:db:22:38:e7:1f:55:53:25:9e:57:a7:a7:61:9f:9b: 1e:06:6f:86:eb:48:b5:ad:1e:ad:88:b9:e6:a1:b9:fb:4e:73: da:b7:fb:71:b2:ef:e6:32:13:43:c8:23:31:7e:f3:f2:cc:ea: 71:3d:a5:5a:cd:8b:46:20:da:aa:15:02:93:03:64:7e:e8:d7: 41:0f:94:ee:89:d7:9d:c4:fa:78:b6:f9:ae:a1:92:c8:9d:cc: 20:ff:74:00:6d:7c:8d:65:ea:20:d7:f3:57:39:a0:c2:3a:12: e9:5d:c4:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF2PyFtKE5HFSRIfwpxUvyeG5OHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA5MjcxNTA1MDNaFw0yNjA5MzAyMjU1MDNaMDMxMTAvBgNV BAMTKDU5RUM3NzU5RDg1NTc4QkM2MzgwRjdEQ0Y5QTFBRkQ0NTkyQTBEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVGn5/7giDR8Apa0eaY/6lJcX/ 01yOnIhUKlf1x99gyVdAdPzlGACWRMwXyCPDqHCVUfYFRDyJ1Y5puw/ImDbSnMPy FKFT5Y7px/3wzVUp1qNEudnf3zRLbCml8BkdXF8RuQJgz/iMR9ACLgFmjOHotPFJ e8y2PCpacTxmyQNJDsao6+JyCV+pNzrMTex/5egST0Ybr5DBRtW+34tU1BecXvv5 3tMFRNOMdgj7DJkJ+xVq0g4ZSR/ts466AQ4/H5TEWhoMdL5Dga4yuSPpkMCLwbz5 efiw5YIxkmLP0MqzJIhU+kFJfjrbLofHJBT0tLmBYmoRRkbql3YdceAJSn2hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWex3WdhVeLxjgPfc+aGv1FkqDR8wHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5ObmIDOEqcB tUTrh8YbEk+dUc9oPspxLTX1wyV85sHDsfAGFCd9g4w8BQ3A1cx42786JQL7vGQP 2HSVinQYxU7UiY9287lQrUVf1pkqvySu78qqO2RD5g8L89pzSSxEi/jwSJNhyv3N azCWmKI7pIbMrsw6//B5rjNt7sjPLBZ8kfDauYYjxX9eu4Ccws6p+MUQ2yI45x9V UyWeV6enYZ+bHgZvhutIta0erYi55qG5+05z2rf7cbLv5jITQ8gjMX7z8szqcT2l Ws2LRiDaqhUCkwNkfujXQQ+U7onXncT6eLb5rqGSyJ3MIP90AG18jWXqINfzVzmg wjoS6V3Eug== -----END CERTIFICATE-----Generated at Mon Sep 28 21:33:49 2026 by rpki-client