$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: iHj6CWEWXUr895rr9oEWDptjSL8iIyh+BE7SbsvYILQ= Subject key identifier: D7:55:52:32:12:E0:C9:BC:E4:76:5B:DC:E1:90:1D:50:92:38:FB:C2 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 2270D2F52DAC2491D4D6738FBFA9400DE994384D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 87 Signing time: Thu 08 Oct 2026 15:22:37 +0000 Manifest this update: Thu 08 Oct 2026 15:17:37 +0000 Manifest next update: Sun 11 Oct 2026 20:17:37 +0000 Files and hashes: 1: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: iy6L5l59dDgwK1pX2vKpKwR4vTcKE5EDDqRyDAOmRx4=) 2: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 3: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 4: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 5: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 6: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 7: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 8: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 9: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:70:d2:f5:2d:ac:24:91:d4:d6:73:8f:bf:a9:40:0d:e9:94:38:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Oct 8 15:17:37 2026 GMT Not After : Oct 11 20:17:37 2026 GMT Subject: CN=D755523212E0C9BCE4765BDCE1901D509238FBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:69:ab:27:8b:6e:07:21:05:18:9a:55:db: b2:05:84:4c:2c:58:4a:23:34:d7:c6:63:f1:31:e0: 8f:82:64:b8:d8:e7:70:d8:5f:61:c9:4e:7f:df:8a: 1f:33:13:4e:31:7c:d9:7f:cf:77:40:a1:11:09:2d: 38:aa:b6:b5:3b:6c:b3:4f:8c:18:26:89:78:78:bd: bc:b0:21:d5:98:3d:94:f2:6d:66:27:4b:bf:df:3c: f6:a6:2d:85:4c:5c:71:ea:d2:c2:75:e5:e1:1e:ed: 2c:49:19:c4:e3:46:cc:aa:b7:2d:8b:75:7b:e6:fb: d7:c0:45:c8:fc:67:fd:31:b2:70:b5:d4:25:9d:cb: c8:99:ec:2d:6d:a6:92:72:8d:7b:f7:6c:89:97:08: 72:02:57:a1:c3:44:a4:66:50:4d:95:78:50:4f:9f: 49:4a:66:00:ad:e6:2e:22:ae:8f:27:8b:32:35:0a: 4a:2c:35:fc:08:f7:9c:6c:46:04:1b:9b:46:4c:6a: 4d:30:e8:a8:08:96:5c:58:64:11:7e:0b:6a:b4:eb: 0b:d0:3b:73:d2:d7:1d:7c:6a:af:68:42:f6:d6:2c: 9f:92:e1:4c:a4:60:76:d9:f6:91:97:2d:ce:3b:bd: 45:96:cf:c7:ea:9a:25:f0:f1:05:77:f8:45:bf:7d: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:52:32:12:E0:C9:BC:E4:76:5B:DC:E1:90:1D:50:92:38:FB:C2 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:61:42:0b:20:bb:c7:06:c4:27:43:bb:62:b0:23:c3:31:a5: 89:bd:13:51:56:42:3c:48:a0:6f:2c:f1:c2:45:1d:75:c7:59: 24:1b:d1:23:a9:75:a5:4c:3e:c4:80:87:13:0c:67:1a:8c:08: 2a:58:f3:77:7c:8f:68:c2:0f:2d:34:7e:c6:cc:94:f6:06:a2: f3:75:31:c6:13:f4:94:f0:3b:ba:b1:88:02:5b:09:c4:33:99: 56:55:d0:9b:36:d7:47:a4:64:ff:f0:d7:37:4b:c0:98:e8:55: 1f:db:be:e0:46:4b:af:d4:9c:3a:dc:91:9f:90:b5:5a:10:cc: c6:89:ec:6f:24:8d:65:82:8b:3a:23:16:f4:af:e8:ff:02:68: 96:17:97:f6:a4:1e:69:84:55:82:b4:d8:fd:5b:4f:ea:74:10: 7d:03:de:1f:6f:00:e0:ce:ec:07:11:2c:ad:50:58:25:bf:ba: 15:e0:78:73:25:a4:24:c9:19:e4:3b:0b:91:bd:d5:fc:f6:d2: 5d:ad:d4:52:ef:da:b4:55:49:09:1e:aa:d8:5d:dc:d1:65:7b: 90:89:c3:7c:bd:7e:1d:30:68:f9:eb:04:66:c3:0f:8e:aa:6e: e9:5b:0f:2b:15:39:7a:c1:22:4c:6c:0c:c1:c4:81:4d:f6:83: f3:74:01:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUInDS9S2sJJHU1nOPv6lADemUOE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjEwMDgxNTE3MzdaFw0yNjEwMTEyMDE3MzdaMDMxMTAvBgNV BAMTKEQ3NTU1MjMyMTJFMEM5QkNFNDc2NUJEQ0UxOTAxRDUwOTIzOEZCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOammrJ4tuByEFGJpV27IFhEws WEojNNfGY/Ex4I+CZLjY53DYX2HJTn/fih8zE04xfNl/z3dAoREJLTiqtrU7bLNP jBgmiXh4vbywIdWYPZTybWYnS7/fPPamLYVMXHHq0sJ15eEe7SxJGcTjRsyqty2L dXvm+9fARcj8Z/0xsnC11CWdy8iZ7C1tppJyjXv3bImXCHICV6HDRKRmUE2VeFBP n0lKZgCt5i4iro8nizI1CkosNfwI95xsRgQbm0ZMak0w6KgIllxYZBF+C2q06wvQ O3PS1x18aq9oQvbWLJ+S4UykYHbZ9pGXLc47vUWWz8fqmiXw8QV3+EW/fZVfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU11VSMhLgybzkdlvc4ZAdUJI4+8IwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2FCCyC7xwbE J0O7YrAjwzGlib0TUVZCPEigbyzxwkUddcdZJBvRI6l1pUw+xICHEwxnGowIKljz d3yPaMIPLTR+xsyU9gai83UxxhP0lPA7urGIAlsJxDOZVlXQmzbXR6Rk//DXN0vA mOhVH9u+4EZLr9ScOtyRn5C1WhDMxonsbySNZYKLOiMW9K/o/wJolheX9qQeaYRV grTY/VtP6nQQfQPeH28A4M7sBxEsrVBYJb+6FeB4cyWkJMkZ5DsLkb3V/PbSXa3U Uu/atFVJCR6q2F3c0WV7kInDfL1+HTBo+esEZsMPjqpu6VsPKxU5esEiTGwMwcSB TfaD83QB/A== -----END CERTIFICATE-----Generated at Sat Oct 10 20:59:06 2026 by rpki-client