$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft File: 823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json) Hash identifier: TIrg73pHXZGcxF7UPqi5akQKi0x6P3nStin3rDeaYCc= Subject key identifier: EC:20:B1:92:BE:09:0A:5C:17:AC:65:8E:78:03:BF:A0:BD:30:F9:4E Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 3F2B724C0629A8A1C30D99178374EB079FF06E12 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft Manifest number: 85 Signing time: Sun 11 Oct 2026 16:10:43 +0000 Manifest this update: Sun 11 Oct 2026 16:05:43 +0000 Manifest next update: Wed 14 Oct 2026 19:28:43 +0000 Files and hashes: 1: 323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (hash: RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=) 2: 323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (hash: 9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=) 3: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (hash: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs=) 4: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=) 5: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (hash: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA=) 6: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (hash: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk=) 7: 323430323a663134303a666631343a3a2f34382d3438203d3e2034383337.roa (hash: 5YFwBo/iyC0NCYe2fUQRMepGEYQTAVopWqjxpwpGlYs=) 8: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: yxJEbMDpgqulpr16dibIuPITmLjMDjK5uBCjlBOHs7w=) 9: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=) 10: 323430323a663134303a666630333a3a2f34382d3438203d3e203338323833.roa (hash: JPasNsDug0W5Rn92K6EqWBzIP/Agm6A9fVDgf+UVINo=) 11: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (hash: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2b:72:4c:06:29:a8:a1:c3:0d:99:17:83:74:eb:07:9f:f0:6e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Oct 11 16:05:43 2026 GMT Not After : Oct 14 19:28:43 2026 GMT Subject: CN=EC20B192BE090A5C17AC658E7803BFA0BD30F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:4f:f7:75:2f:9e:ee:ad:50:53:cf:ce:76: 83:a0:27:47:85:6e:3d:37:56:c1:1e:f7:87:f3:50: a4:15:1c:c9:cf:4b:a8:30:43:04:6f:c7:c6:86:76: 64:c9:d5:fd:db:dd:dd:6c:e4:08:f6:f4:d1:4c:fc: ab:05:97:a6:fb:05:96:b0:01:e0:3c:8f:ca:28:90: 2f:14:aa:92:fa:81:10:fd:c2:ca:c3:b2:f3:36:1d: c8:14:f2:1f:bd:63:88:fd:ec:52:6a:1a:97:91:bf: 7a:0d:ac:3a:b0:a6:bf:5e:18:34:66:a4:9c:cd:13: 99:1a:eb:b6:01:56:b7:1a:70:b6:4c:fe:04:13:a1: b1:b9:3b:82:b3:9a:f6:a1:71:1d:a6:2e:5b:e2:3f: 59:e7:66:52:9e:02:5a:31:16:31:2a:b9:a7:b4:20: 91:5e:90:49:c7:8e:bb:bc:18:4d:69:0d:eb:dd:97: e3:ce:38:70:5e:ec:30:32:a3:33:c7:79:ad:e4:7d: ea:fb:e8:d8:26:68:34:30:79:8e:a1:d6:bb:42:ad: 26:9a:a9:2d:a9:46:13:e1:b0:3c:7a:05:9e:b4:34: c7:b2:1d:a5:73:6e:8a:17:7b:b8:5c:dc:d0:4c:7e: 59:93:41:56:75:fc:6d:30:53:57:30:b7:07:4a:d8: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:20:B1:92:BE:09:0A:5C:17:AC:65:8E:78:03:BF:A0:BD:30:F9:4E X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5c:0d:d1:15:5c:b4:31:a0:b4:54:82:c7:a1:d4:85:fe:86: 01:0e:57:6d:c7:18:7b:9c:56:4f:4a:10:de:86:68:41:46:8f: e8:c6:35:ae:17:2e:69:e3:53:18:af:81:b9:19:d7:fe:71:e5: e0:eb:fb:1a:75:58:7a:f1:8c:dd:23:cc:28:04:fe:f8:17:98: 3f:dd:0f:43:7b:ab:b8:85:3d:8d:97:d2:0d:97:3b:0f:86:28: 6a:cd:c4:34:69:1c:6e:45:77:42:44:f6:62:8b:02:97:87:25: 27:08:f4:c2:69:d7:70:96:fb:94:f5:46:41:ce:4a:6f:3d:90: b9:fc:5e:fe:67:de:e9:11:1c:92:7d:b6:e5:d5:73:63:bf:ae: f1:ec:f6:8d:c8:92:6f:50:13:83:ce:64:5e:12:8c:ba:1c:63: 1e:86:64:47:a0:12:d1:47:1d:21:6d:9c:e3:ea:d8:cd:c8:a4: ee:8f:79:c1:23:94:b4:e6:97:5b:64:12:c5:5c:1e:7f:fc:31: 6f:84:e6:ed:55:42:65:1e:33:41:df:e7:56:ea:a6:37:fa:19: 8a:7a:cf:36:54:1d:eb:25:0e:8b:cc:29:a8:04:d3:7b:58:9d: ec:f7:ca:aa:96:79:40:d6:cc:55:61:36:e8:bf:39:bf:d3:48: 2b:7b:1f:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPytyTAYpqKHDDZkXg3TrB5/wbhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjEwMTExNjA1NDNaFw0yNjEwMTQxOTI4NDNaMDMxMTAvBgNV BAMTKEVDMjBCMTkyQkUwOTBBNUMxN0FDNjU4RTc4MDNCRkEwQkQzMEY5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFU/3dS+e7q1QU8/OdoOgJ0eF bj03VsEe94fzUKQVHMnPS6gwQwRvx8aGdmTJ1f3b3d1s5Aj29NFM/KsFl6b7BZaw AeA8j8ookC8UqpL6gRD9wsrDsvM2HcgU8h+9Y4j97FJqGpeRv3oNrDqwpr9eGDRm pJzNE5ka67YBVrcacLZM/gQTobG5O4KzmvahcR2mLlviP1nnZlKeAloxFjEquae0 IJFekEnHjru8GE1pDevdl+POOHBe7DAyozPHea3kfer76NgmaDQweY6h1rtCrSaa qS2pRhPhsDx6BZ60NMeyHaVzbooXe7hc3NBMflmTQVZ1/G0wU1cwtwdK2KY5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7CCxkr4JClwXrGWOeAO/oL0w+U4wHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMi84MjNBOUQyNDgwMkFC MTAwMjYwOTVEOTI5NTJCRUM5MzYxMjBDOUYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1wN0RVctDGg tFSCx6HUhf6GAQ5XbccYe5xWT0oQ3oZoQUaP6MY1rhcuaeNTGK+BuRnX/nHl4Ov7 GnVYevGM3SPMKAT++BeYP90PQ3uruIU9jZfSDZc7D4Yoas3ENGkcbkV3QkT2YosC l4clJwj0wmnXcJb7lPVGQc5Kbz2Qufxe/mfe6REckn225dVzY7+u8ez2jciSb1AT g85kXhKMuhxjHoZkR6AS0UcdIW2c4+rYzcik7o95wSOUtOaXW2QSxVwef/wxb4Tm 7VVCZR4zQd/nVuqmN/oZinrPNlQd6yUOi8wpqATTe1id7PfKqpZ5QNbMVWE26L85 v9NIK3sf1Q== -----END CERTIFICATE-----Generated at Sun Oct 11 19:29:05 2026 by rpki-client