$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json) Hash identifier: P0eSUYER7pP3WX6cuLZqQsAVXQXzL3YgZGFIqevh1eo= Subject key identifier: 51:E0:AE:68:BB:61:65:AF:4D:CF:A5:8E:9C:8D:C1:E0:5F:FE:83:AE Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Certificate serial: 50D72A0FE91F33E2B323EF13533AA9B0776F837B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft Manifest number: 02F3 Signing time: Mon 19 Oct 2026 13:18:56 +0000 Manifest this update: Mon 19 Oct 2026 13:13:56 +0000 Manifest next update: Thu 22 Oct 2026 18:00:56 +0000 Files and hashes: 1: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: Ece+dJzsHaEXeuf/Xa8H3TDt6GKHI57B5F4HK01+To4=) 2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=) 3: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d7:2a:0f:e9:1f:33:e2:b3:23:ef:13:53:3a:a9:b0:77:6f:83:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Validity Not Before: Oct 19 13:13:56 2026 GMT Not After : Oct 22 18:00:56 2026 GMT Subject: CN=51E0AE68BB6165AF4DCFA58E9C8DC1E05FFE83AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:fe:84:52:f3:39:a8:f6:94:c8:14:4e:55: db:f3:97:8b:20:08:5d:5c:66:f1:de:d9:19:c1:9f: c2:b1:02:14:c3:62:9f:76:b4:72:f9:54:07:ba:18: 5a:18:21:28:78:10:7d:f3:a9:2d:c8:5f:da:aa:de: 10:35:6a:82:e2:8b:6d:20:a9:47:3b:16:9f:a9:d9: f2:bd:79:6d:2a:ef:f5:c0:36:c7:98:5e:0a:04:13: c9:87:9d:89:b5:f1:e9:3b:8a:02:eb:df:be:5b:a5: 16:bd:27:dd:4d:86:9c:3c:0c:2f:95:73:aa:e8:69: 33:fd:c0:44:d7:f4:87:0a:dc:96:c0:61:d1:3c:74: 24:ac:f4:ef:ae:f6:a8:b7:c2:d9:c4:39:61:27:3e: 8e:f6:2d:a3:01:5b:b7:fa:2c:b0:4f:4d:99:2b:f7: 6d:d3:ac:74:68:7c:ea:f5:81:0e:71:fc:e8:54:1e: 50:75:c7:39:6b:68:4a:06:96:4d:f5:8c:4e:42:3a: 15:02:55:db:ac:7e:60:6a:c0:7e:00:2c:4b:45:53: c5:5e:04:e2:c0:ed:78:23:2b:51:7a:36:63:da:b6: 13:be:14:85:32:8d:72:14:29:01:b1:b4:82:c0:33: b7:8b:3a:b1:92:4d:7d:3a:38:2c:49:8e:59:bd:14: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:AE:68:BB:61:65:AF:4D:CF:A5:8E:9C:8D:C1:E0:5F:FE:83:AE X509v3 Authority Key Identifier: keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0a:c9:4d:81:70:37:22:8c:12:5c:86:c4:36:e4:7b:c9:24: 4e:12:fd:e9:81:fe:47:ab:6d:83:b5:89:94:f4:b0:d0:2b:8c: 24:9a:98:41:17:75:fa:b7:25:09:97:8f:22:b2:10:b5:89:31: 0b:95:74:e9:41:4d:5e:4d:cd:3e:5d:2a:0c:52:c2:71:8d:64: 62:bc:37:ee:b8:49:8a:79:9a:c5:f2:b0:96:4f:bb:c8:08:e4: 71:d5:46:9a:a9:14:d7:db:e3:c0:89:22:90:21:08:a5:62:51: be:eb:db:61:de:db:5b:93:fc:92:8e:59:ca:26:2d:18:46:fe: f1:93:ad:a3:72:75:c2:20:73:60:23:c2:81:ff:5f:f1:62:48: ef:5e:40:85:76:47:71:42:7f:b0:9b:aa:6a:26:fb:6c:2a:e2: 09:fb:a7:dc:51:ce:69:a2:c9:04:8a:04:6e:00:3a:d7:f3:38: e5:d9:2e:25:e8:79:cf:71:63:f1:83:ab:c0:17:65:d9:a6:3d: 28:c4:9d:71:9a:99:81:8f:d1:93:74:b3:83:25:7b:cb:8a:4e: 15:dc:82:da:f4:16:15:64:7b:e8:81:9c:ee:86:67:ee:d7:60: b7:c6:03:d0:ce:94:c6:6e:ba:8f:e9:e9:c2:c3:83:7b:5d:4d: 56:9e:b4:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUNcqD+kfM+KzI+8TUzqpsHdvg3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg0QzlFNjcxRUFE NDY0RTA0NjIzQkIwNDNGRDYyRTdCQTJBNzdFREQ0MB4XDTI2MTAxOTEzMTM1NloX DTI2MTAyMjE4MDA1NlowMzExMC8GA1UEAxMoNTFFMEFFNjhCQjYxNjVBRjREQ0ZB NThFOUM4REMxRTA1RkZFODNBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKG6/oRS8zmo9pTIFE5V2/OXiyAIXVxm8d7ZGcGfwrECFMNin3a0cvlUB7oY WhghKHgQffOpLchf2qreEDVqguKLbSCpRzsWn6nZ8r15bSrv9cA2x5heCgQTyYed ibXx6TuKAuvfvlulFr0n3U2GnDwML5VzquhpM/3ARNf0hwrclsBh0Tx0JKz07672 qLfC2cQ5YSc+jvYtowFbt/ossE9NmSv3bdOsdGh86vWBDnH86FQeUHXHOWtoSgaW TfWMTkI6FQJV26x+YGrAfgAsS0VTxV4E4sDteCMrUXo2Y9q2E74UhTKNchQpAbG0 gsAzt4s6sZJNfTo4LEmOWb0UX0kCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRR4K5o u2Flr03PpY6cjcHgX/6DrjAfBgNVHSMEGDAWgBRMnmcerUZOBGI7sEP9Yue6Knft 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzEvNEM5RTY3 MUVBRDQ2NEUwNDYyM0JCMDQzRkQ2MkU3QkEyQTc3RURENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvVEo1bkhxMUdU Z1JpTzdCRF9XTG51aXAzN2RRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8xLzRDOUU2NzFFQUQ0NjRFMDQ2MjNCQjA0M0ZENjJFN0JBMkE3N0VE RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCQCslNgXA3IowSXIbENuR7ySROEv3pgf5Hq22DtYmU9LDQ K4wkmphBF3X6tyUJl48ishC1iTELlXTpQU1eTc0+XSoMUsJxjWRivDfuuEmKeZrF 8rCWT7vICORx1UaaqRTX2+PAiSKQIQilYlG+69th3ttbk/ySjlnKJi0YRv7xk62j cnXCIHNgI8KB/1/xYkjvXkCFdkdxQn+wm6pqJvtsKuIJ+6fcUc5poskEigRuADrX 8zjl2S4l6HnPcWPxg6vAF2XZpj0oxJ1xmpmBj9GTdLODJXvLik4V3ILa9BYVZHvo gZzuhmfu12C3xgPQzpTGbrqP6enCw4N7XU1WnrTJ -----END CERTIFICATE-----Generated at Mon Oct 19 23:12:15 2026 by rpki-client