$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json) Hash identifier: 2QYrTUtCH64Q+4sYlLi21VEtFe1rqKlxGjP4dZzXFM8= Subject key identifier: 54:BB:1F:4C:F1:2F:C7:9B:F3:A2:FE:E5:AB:86:71:C6:35:43:5C:56 Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Certificate serial: 4DEF5CFF7604A7E594DD115EDC710D9A884A4DD9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft Manifest number: 84 Signing time: Mon 28 Sep 2026 09:15:39 +0000 Manifest this update: Mon 28 Sep 2026 09:10:39 +0000 Manifest next update: Thu 01 Oct 2026 15:59:39 +0000 Files and hashes: 1: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: ybA9bgXHQgk5WwZNxYRskYZy37B5u4tdjeMhWWZ6btM=) 2: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=) 3: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=) 4: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ef:5c:ff:76:04:a7:e5:94:dd:11:5e:dc:71:0d:9a:88:4a:4d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Validity Not Before: Sep 28 09:10:39 2026 GMT Not After : Oct 1 15:59:39 2026 GMT Subject: CN=54BB1F4CF12FC79BF3A2FEE5AB8671C635435C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:d3:8c:ee:66:ab:b3:ab:d1:29:e1:2d:35: be:10:1e:aa:e5:1d:b7:c4:a3:26:50:59:2d:bd:68: df:60:1e:23:18:18:a4:e1:40:c6:50:29:c2:77:89: 0c:4b:e4:7b:0c:82:a8:56:ed:62:20:2b:5b:10:c9: dc:c9:1c:a3:ac:7b:a1:a3:a7:99:bf:68:17:59:9a: 91:32:ea:84:08:32:aa:01:01:8f:52:6f:46:a1:52: 7e:66:44:74:48:64:80:5b:c1:5b:72:14:43:5e:2f: 78:bd:a7:ea:40:da:b6:4b:ae:f6:a3:4b:b8:bb:23: a0:da:18:9d:e2:b0:f1:1f:f9:1c:4f:e6:ca:e4:ed: 05:39:9b:13:0b:19:c0:76:df:64:79:4f:b6:b4:6b: 0c:f1:1b:76:0b:fc:b2:54:53:d2:5b:ed:76:c9:d9: 86:c0:73:2f:a0:7a:a0:a5:de:b8:4d:7b:22:d8:8e: 88:3e:89:8f:1d:2e:af:5b:10:d9:11:b1:15:a5:fb: 6f:ac:f5:46:21:09:dc:e4:5b:55:20:33:c4:91:7b: 3d:60:65:48:b4:32:38:05:b4:5e:f7:45:01:31:72: 23:e6:3b:70:76:40:28:1d:dc:1e:e7:0d:28:39:d9: 9a:51:b8:e1:4d:32:c8:cf:52:22:67:a9:b9:f9:c1: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:1F:4C:F1:2F:C7:9B:F3:A2:FE:E5:AB:86:71:C6:35:43:5C:56 X509v3 Authority Key Identifier: keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:da:5d:9e:79:18:f9:eb:25:69:51:23:eb:d2:de:12:f8:83: a7:31:e7:07:95:2c:2f:65:ed:c8:27:d4:67:d7:83:01:f7:dc: e2:74:01:ac:f4:69:a9:54:21:10:e0:c3:55:5c:38:93:a2:70: 78:81:3f:ab:3f:34:ea:1d:e0:23:d0:16:da:32:3f:0d:e1:11: 13:35:1e:2f:0f:ec:42:dd:82:d3:44:91:12:c7:88:9c:d8:f8: a7:01:19:ae:91:8c:ce:03:1d:ce:f8:45:15:5f:e8:8c:d3:03: 3f:73:21:cf:95:ff:98:e0:85:77:77:46:c8:bd:b5:7d:c6:e8: eb:43:50:62:ba:2e:17:47:42:7d:38:a5:0d:70:df:65:fe:3d: c7:ee:b4:ea:ab:be:0b:0e:32:a8:6c:56:b8:e0:26:2d:9d:92: f6:60:4a:6e:9a:62:e6:12:49:0c:e0:ec:a6:ac:98:95:41:bf: 9f:b5:7b:b3:bd:e7:e7:3b:87:0f:4c:93:85:13:f5:5a:e3:6d: 44:ae:c9:3d:94:7a:1c:17:80:6d:a0:b2:05:17:1e:ff:fe:44: 69:64:46:32:de:06:7a:39:d2:ac:64:01:3f:c4:46:08:4c:fa: 4a:fd:07:39:11:1b:9e:49:a5:6a:b2:d0:09:d9:d6:fb:ef:9e: c7:cf:d0:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTe9c/3YEp+WU3RFe3HENmohKTdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5 OEY4NjQyRTAeFw0yNjA5MjgwOTEwMzlaFw0yNjEwMDExNTU5MzlaMDMxMTAvBgNV BAMTKDU0QkIxRjRDRjEyRkM3OUJGM0EyRkVFNUFCODY3MUM2MzU0MzVDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqN9OM7mars6vRKeEtNb4QHqrl HbfEoyZQWS29aN9gHiMYGKThQMZQKcJ3iQxL5HsMgqhW7WIgK1sQydzJHKOse6Gj p5m/aBdZmpEy6oQIMqoBAY9Sb0ahUn5mRHRIZIBbwVtyFENeL3i9p+pA2rZLrvaj S7i7I6DaGJ3isPEf+RxP5srk7QU5mxMLGcB232R5T7a0awzxG3YL/LJUU9Jb7XbJ 2YbAcy+geqCl3rhNeyLYjog+iY8dLq9bENkRsRWl+2+s9UYhCdzkW1UgM8SRez1g ZUi0MjgFtF73RQExciPmO3B2QCgd3B7nDSg52ZpRuOFNMsjPUiJnqbn5wY67AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVLsfTPEvx5vzov7lq4ZxxjVDXFYwHwYDVR0j BBgwFoAU//lvixPJNqwZettDjifE6Zj4ZC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ1Nzc0MTMwNjQyOTQ2My8wL0ZGRjk2RjhCMTNDOTM2QUMxOTdBREI0MzhFMjdD NEU5OThGODY0MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NTc3NDEzMDY0Mjk0NjMvMC9GRkY5NkY4QjEzQzkz NkFDMTk3QURCNDM4RTI3QzRFOTk4Rjg2NDJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNpdnnkY+esl aVEj69LeEviDpzHnB5UsL2XtyCfUZ9eDAffc4nQBrPRpqVQhEODDVVw4k6JweIE/ qz806h3gI9AW2jI/DeEREzUeLw/sQt2C00SREseInNj4pwEZrpGMzgMdzvhFFV/o jNMDP3Mhz5X/mOCFd3dGyL21fcbo60NQYrouF0dCfTilDXDfZf49x+606qu+Cw4y qGxWuOAmLZ2S9mBKbppi5hJJDODspqyYlUG/n7V7s73n5zuHD0yThRP1WuNtRK7J PZR6HBeAbaCyBRce//5EaWRGMt4GejnSrGQBP8RGCEz6Sv0HOREbnkmlarLQCdnW +++ex8/QCg== -----END CERTIFICATE-----Generated at Tue Sep 29 11:32:34 2026 by rpki-client