$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json) Hash identifier: h98izBT9we9ignXB59rIFp1ZJZatMf5BMBgqHT9xH5g= Subject key identifier: 7C:FC:B8:E1:76:8C:C3:AE:D9:7E:52:72:5C:CF:79:B5:55:CA:0A:86 Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Certificate serial: 3E38D9657C321E47A32A99AF56B189C217978B39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft Manifest number: 87 Signing time: Fri 09 Oct 2026 18:03:40 +0000 Manifest this update: Fri 09 Oct 2026 17:58:40 +0000 Manifest next update: Mon 12 Oct 2026 18:58:40 +0000 Files and hashes: 1: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: xysONMob7OJMr+mM242TKZFQqstDFBRdnX9DaEih4Ng=) 2: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=) 3: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 18:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:38:d9:65:7c:32:1e:47:a3:2a:99:af:56:b1:89:c2:17:97:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Validity Not Before: Oct 9 17:58:40 2026 GMT Not After : Oct 12 18:58:40 2026 GMT Subject: CN=7CFCB8E1768CC3AED97E52725CCF79B555CA0A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:64:04:cb:77:37:e1:93:8c:83:24:5c:f0: a6:4b:08:09:5d:b3:f9:3c:e0:ad:4f:b6:a4:c2:55: cb:75:df:af:32:1b:f3:a8:34:dc:b7:bb:39:80:0f: bf:60:96:59:09:6e:98:fe:d7:95:a0:9d:af:59:2f: 49:4c:cf:11:fe:0f:f5:d6:ff:f9:14:14:c2:b5:55: b8:ce:54:16:09:b2:23:8c:53:a7:0d:00:b9:f6:15: 49:ab:d4:46:1f:94:67:f3:3e:0a:3b:9c:f4:4c:62: 70:01:f5:cf:40:51:cd:cb:ba:e8:e7:db:ff:01:cb: 16:95:22:d6:85:77:60:2a:18:a1:cc:9d:8d:44:49: 21:00:0a:18:38:8c:2e:15:6e:d8:0e:78:85:d9:2e: 84:76:a6:b8:d7:5a:51:15:63:96:e0:ae:a7:58:75: 03:2a:41:ba:eb:3b:5b:8b:12:fc:41:87:97:71:aa: ec:5d:7e:49:56:17:cd:4c:8f:cd:5a:4a:c5:6a:38: a7:74:f8:9f:dd:fb:5b:47:df:f8:ad:1c:9b:27:67: 00:04:1d:ca:71:ab:4f:55:e4:ea:eb:f5:72:e3:77: b7:09:98:e3:9a:c2:34:a3:e4:7c:b2:cc:68:81:df: d5:03:60:c3:7b:40:7c:f3:73:ae:9b:76:c5:a6:b8: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FC:B8:E1:76:8C:C3:AE:D9:7E:52:72:5C:CF:79:B5:55:CA:0A:86 X509v3 Authority Key Identifier: keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:08:b3:71:e3:87:32:4e:6c:6e:04:74:e3:6b:9e:9c:66:1b: da:67:80:cf:cd:14:aa:09:49:a8:88:38:94:29:62:10:8e:60: 62:b5:16:5b:bf:14:1f:dd:a7:b3:65:5d:93:2c:17:7f:17:03: 8c:5e:31:f0:04:49:fd:d6:91:8c:4d:d4:8d:ff:42:03:5b:0f: 17:8d:1e:d6:6e:1a:7c:80:22:e6:23:fe:59:04:0e:2e:a0:04: 95:07:ed:36:54:9a:1e:4c:27:74:95:85:85:35:00:4c:b4:14: a9:dc:1e:e6:28:2e:7c:e9:bc:23:ea:a4:96:0e:8e:58:9b:17: 04:e9:34:30:22:64:f7:92:0b:7a:a3:1c:10:84:cc:1b:47:12: d0:7d:96:0f:b2:e1:c1:fd:69:fe:13:c0:66:0d:1c:3f:f1:ae: c8:ad:3d:21:c6:b9:80:e3:7b:71:d2:6c:56:f5:40:76:05:2f: 21:95:3b:f1:5d:a2:e2:77:02:f1:9a:6c:f3:e1:92:ec:8b:68: 55:2b:a8:05:c7:e2:6c:5a:9b:8d:44:3d:6d:4d:b2:f3:da:74: 66:2e:ab:99:01:b4:de:de:d4:01:b5:44:b7:58:b5:4e:e0:05: b1:e1:89:be:d6:6f:5d:40:65:b6:87:5f:6e:8d:3e:47:07:bf: ac:93:c3:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPjjZZXwyHkejKpmvVrGJwheXizkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB MTlBODE4QzAeFw0yNjEwMDkxNzU4NDBaFw0yNjEwMTIxODU4NDBaMDMxMTAvBgNV BAMTKDdDRkNCOEUxNzY4Q0MzQUVEOTdFNTI3MjVDQ0Y3OUI1NTVDQTBBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkGQEy3c34ZOMgyRc8KZLCAld s/k84K1PtqTCVct1368yG/OoNNy3uzmAD79gllkJbpj+15Wgna9ZL0lMzxH+D/XW //kUFMK1VbjOVBYJsiOMU6cNALn2FUmr1EYflGfzPgo7nPRMYnAB9c9AUc3Luujn 2/8ByxaVItaFd2AqGKHMnY1ESSEAChg4jC4VbtgOeIXZLoR2prjXWlEVY5bgrqdY dQMqQbrrO1uLEvxBh5dxquxdfklWF81Mj81aSsVqOKd0+J/d+1tH3/itHJsnZwAE Hcpxq09V5Orr9XLjd7cJmOOawjSj5HyyzGiB39UDYMN7QHzzc66bdsWmuJ5tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfPy44XaMw67ZflJyXM95tVXKCoYwHwYDVR0j BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3 MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTkzMTA5MDg3NjgyODEvMC9BMEM5OThCRkNDQUU4 OTQ2MzUzRUE3MzkxMkNCNzE1NkExOUE4MThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgizceOHMk5s bgR042uenGYb2meAz80UqglJqIg4lCliEI5gYrUWW78UH92ns2VdkywXfxcDjF4x 8ARJ/daRjE3Ujf9CA1sPF40e1m4afIAi5iP+WQQOLqAElQftNlSaHkwndJWFhTUA TLQUqdwe5igufOm8I+qklg6OWJsXBOk0MCJk95ILeqMcEITMG0cS0H2WD7Lhwf1p /hPAZg0cP/GuyK09Ica5gON7cdJsVvVAdgUvIZU78V2i4ncC8Zps8+GS7ItoVSuo BcfibFqbjUQ9bU2y89p0Zi6rmQG03t7UAbVEt1i1TuAFseGJvtZvXUBltodfbo0+ Rwe/rJPDMg== -----END CERTIFICATE-----Generated at Sun Oct 11 08:58:26 2026 by rpki-client