$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: aY37RsHmto7nDMpHT4Y2mi2d/tE+ld3NvWmLfHTUfHo= Subject key identifier: ED:EB:B6:4D:35:08:8D:20:01:D2:5A:BE:14:CB:F3:76:A8:A9:65:4E Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 51B63E7608376C34DBC144489A18B80D879A533C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 97 Signing time: Wed 07 Oct 2026 01:45:38 +0000 Manifest this update: Wed 07 Oct 2026 01:40:38 +0000 Manifest next update: Sat 10 Oct 2026 02:53:38 +0000 Files and hashes: 1: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 2: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 3: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 4: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 5: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 6: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 7: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 8: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 9: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 10: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: DMwGiHLAPtM0sBsZimX/BQcT4GXNEAL9u92INsV22fc=) 11: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 12: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 13: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 14: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 15: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 16: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 17: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 18: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 19: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 20: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 21: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 22: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 23: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 24: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:3e:76:08:37:6c:34:db:c1:44:48:9a:18:b8:0d:87:9a:53:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Oct 7 01:40:38 2026 GMT Not After : Oct 10 02:53:38 2026 GMT Subject: CN=EDEBB64D35088D2001D25ABE14CBF376A8A9654E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:69:98:11:81:9d:ed:b8:d6:8c:c9:18:2a: 49:9d:49:b8:92:a1:27:57:be:fb:1d:0b:36:66:58: c3:24:92:fb:d2:c2:6b:d9:ab:ce:35:42:d8:88:e3: db:44:9a:ea:e4:4b:3e:75:85:56:62:24:67:6d:ff: 21:31:5b:11:66:89:e1:fc:2e:4c:28:7f:bc:1b:f9: 90:ab:8e:91:44:09:90:23:11:dd:19:63:49:54:02: dd:b2:42:9f:10:44:58:b8:c7:9b:aa:73:59:9c:c4: dd:d3:6f:92:89:ee:0f:b1:d7:f5:6c:83:9e:5a:87: 0d:a5:6f:76:a9:89:ba:03:90:5d:4b:c4:5a:64:3c: 71:65:12:51:3d:e6:ac:b8:89:4a:ec:c2:ed:8a:55: 13:5a:24:54:f5:be:07:48:95:41:11:a9:a0:c5:ce: ac:8d:7e:2e:0a:c9:8e:63:b6:22:8f:ad:28:d9:a2: 19:89:48:a6:f8:b5:f4:03:58:b9:3b:a3:51:34:83: 47:fa:5f:9f:90:46:43:e0:45:71:57:fe:ac:c7:93: 79:11:30:90:2a:4d:d6:27:66:48:78:18:2c:c4:c5: 7d:86:5f:47:e2:a0:6e:c0:ec:fd:74:d2:0b:07:2e: 85:15:19:54:b7:f7:38:9c:bd:81:fb:6d:83:b6:f7: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:B6:4D:35:08:8D:20:01:D2:5A:BE:14:CB:F3:76:A8:A9:65:4E X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:92:14:01:08:dd:f7:55:fc:60:11:12:14:30:c5:e7:20:dc: d2:61:ed:3b:d6:19:53:71:67:be:07:7e:2e:b4:e9:f7:6f:f9: 0c:bd:ed:a5:ba:6b:d0:f7:fb:85:78:89:73:9f:45:63:e6:32: 1c:86:c9:36:44:ab:df:b5:75:40:85:e0:88:4e:64:0f:d0:e0: d9:ca:ff:c0:df:97:02:01:db:b9:43:25:e6:05:4d:e0:92:db: 36:ee:ef:c4:e8:1a:dc:ae:2c:aa:c5:4c:8c:71:d4:19:e5:93: 98:60:bc:b8:8b:14:6e:43:38:5a:20:35:23:9d:8e:27:fd:88: 23:40:35:7f:cc:02:48:17:b3:6b:e0:46:29:1c:91:a3:3a:ac: 62:a2:f1:fd:47:63:0c:81:21:d0:2b:32:b9:04:39:ef:6d:71: 47:b4:01:ad:c3:79:1d:52:ec:f9:51:36:5b:ae:3b:e9:4a:3c: 3c:ee:47:d7:24:86:1b:dc:16:b3:75:f9:b8:65:08:e5:0d:78: 7d:71:6d:f4:26:58:c4:d9:15:62:2b:d7:63:2c:fa:71:c2:a7: 1a:86:ec:dc:84:e3:60:f9:5f:de:9e:b5:ba:78:e0:1c:fd:f8: eb:fa:a0:81:02:68:94:78:0d:26:d6:94:ba:7b:49:67:39:1b: 09:f4:cf:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUbY+dgg3bDTbwURImhi4DYeaUzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjEwMDcwMTQwMzhaFw0yNjEwMTAwMjUzMzhaMDMxMTAvBgNV BAMTKEVERUJCNjREMzUwODhEMjAwMUQyNUFCRTE0Q0JGMzc2QThBOTY1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdR2mYEYGd7bjWjMkYKkmdSbiS oSdXvvsdCzZmWMMkkvvSwmvZq841QtiI49tEmurkSz51hVZiJGdt/yExWxFmieH8 Lkwof7wb+ZCrjpFECZAjEd0ZY0lUAt2yQp8QRFi4x5uqc1mcxN3Tb5KJ7g+x1/Vs g55ahw2lb3apiboDkF1LxFpkPHFlElE95qy4iUrswu2KVRNaJFT1vgdIlUERqaDF zqyNfi4KyY5jtiKPrSjZohmJSKb4tfQDWLk7o1E0g0f6X5+QRkPgRXFX/qzHk3kR MJAqTdYnZkh4GCzExX2GX0fioG7A7P100gsHLoUVGVS39zicvYH7bYO294NpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7eu2TTUIjSAB0lq+FMvzdqipZU4wHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJIUAQjd91X8 YBESFDDF5yDc0mHtO9YZU3Fnvgd+LrTp92/5DL3tpbpr0Pf7hXiJc59FY+YyHIbJ NkSr37V1QIXgiE5kD9Dg2cr/wN+XAgHbuUMl5gVN4JLbNu7vxOga3K4sqsVMjHHU GeWTmGC8uIsUbkM4WiA1I52OJ/2II0A1f8wCSBeza+BGKRyRozqsYqLx/UdjDIEh 0CsyuQQ5721xR7QBrcN5HVLs+VE2W6476Uo8PO5H1ySGG9wWs3X5uGUI5Q14fXFt 9CZYxNkVYivXYyz6ccKnGobs3ITjYPlf3p61unjgHP346/qggQJolHgNJtaUuntJ ZzkbCfTP/A== -----END CERTIFICATE-----Generated at Thu Oct 8 13:23:48 2026 by rpki-client