$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json) Hash identifier: 61mnMg2GnvkuAEUC1QkZ+rCAbL46s+x/EETv8JzHsbY= Subject key identifier: 81:7A:43:B3:0E:91:F0:19:45:A4:85:80:89:B4:1E:17:67:6C:90:B1 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 4E4C14160546C7E66B25686C88E73D4B85618670 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft Manifest number: 021A Signing time: Tue 27 Oct 2026 16:39:53 +0000 Manifest this update: Tue 27 Oct 2026 16:34:53 +0000 Manifest next update: Fri 30 Oct 2026 19:26:53 +0000 Files and hashes: 1: AS134366.roa (hash: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=) 2: AS58466.roa (hash: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk=) 3: AS59078.roa (hash: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=) 4: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: mrJ0ATg/OhSnR3XmbrMYLL3RoEtZ1Bz3Vj8+SX6hbv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:14:16:05:46:c7:e6:6b:25:68:6c:88:e7:3d:4b:85:61:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Oct 27 16:34:53 2026 GMT Not After : Oct 30 19:26:53 2026 GMT Subject: CN=817A43B30E91F01945A4858089B41E17676C90B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:be:36:ec:42:f2:bb:35:60:40:aa:e6:3a: 75:c1:30:5e:66:e3:5e:41:79:ea:16:ac:03:31:36: 33:d6:9d:d2:5c:85:b3:b6:26:35:5b:0d:43:52:3f: e0:5a:c8:4a:52:57:86:21:89:23:3a:cb:eb:b3:fb: fb:73:a7:2d:ef:ed:5f:00:4f:5b:92:cc:d4:9c:99: 08:53:28:04:e4:1d:37:b9:ff:d3:c2:dd:af:b6:e2: 01:f5:77:3b:d5:cf:59:58:6d:20:9c:3b:c9:16:c7: 46:18:2a:75:c2:cb:9c:34:4f:82:b9:4b:ee:f5:c5: 21:22:ad:ef:0e:7b:7a:0f:44:59:39:b3:b7:38:e6: f4:f7:62:ab:25:23:22:9e:d2:a7:a3:59:e6:97:c7: 1c:7f:f7:bd:39:02:30:b2:b5:79:2a:d0:d7:36:f5: 29:d2:33:36:83:23:f1:59:7c:a3:ba:80:36:d1:6d: 72:a6:09:00:1e:1d:9f:05:70:dc:c6:63:22:85:f1: 8f:b1:c4:4e:98:13:ff:1c:f4:8e:81:2c:bf:13:8c: 96:2a:ee:d0:c1:b1:a7:4c:89:fa:ee:95:fb:92:1c: cf:9c:76:c9:48:bb:c7:27:00:d6:d9:c4:9a:78:df: 89:df:4d:db:74:99:10:15:b5:33:c0:23:fd:c2:05: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:43:B3:0E:91:F0:19:45:A4:85:80:89:B4:1E:17:67:6C:90:B1 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:89:53:57:0d:0f:9d:3b:94:89:e3:12:25:89:40:3d:fe:3b: 33:cd:55:d9:b6:97:0b:a1:6e:5b:0d:1b:f2:99:fe:3d:d6:8f: db:33:b7:2e:ac:43:6c:e4:c8:67:2e:be:b0:2d:9d:50:b1:2f: 32:9d:15:aa:8b:03:aa:3e:06:95:04:92:d9:5a:1d:d0:64:27: 43:03:bf:0f:8c:90:10:97:1e:ee:87:76:fb:20:7b:1f:06:71: 58:ff:66:c3:ea:2d:67:aa:13:84:c9:88:74:0c:80:03:c1:5f: 66:45:4c:3a:f0:4b:b3:4e:09:a4:32:55:76:29:76:ad:e1:2d: 89:89:45:91:66:a9:c9:21:eb:2f:b6:0f:ce:e3:9a:e7:ec:76: 81:7b:3f:6c:2b:f4:fa:24:78:a4:4b:f1:91:c1:44:20:a4:41: 45:4a:55:f1:c0:b1:0a:a4:0b:20:72:30:5f:e9:da:f7:6c:fb: 96:ab:8a:ad:52:1d:a5:1a:8f:13:24:b7:ac:9d:5f:e1:f0:64: 6d:52:bd:0e:41:10:e2:9b:e5:81:a7:be:87:80:87:3a:40:b5: d0:89:93:08:ab:e7:12:02:99:fa:45:fc:c3:db:5a:7f:fe:21: 89:8e:f9:db:3a:55:73:94:c7:12:3c:58:2b:3a:89:16:5e:73: 2b:bc:5b:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTkwUFgVGx+ZrJWhsiOc9S4VhhnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjEwMjcxNjM0NTNaFw0yNjEwMzAxOTI2NTNaMDMxMTAvBgNV BAMTKDgxN0E0M0IzMEU5MUYwMTk0NUE0ODU4MDg5QjQxRTE3Njc2QzkwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P7427ELyuzVgQKrmOnXBMF5m 415BeeoWrAMxNjPWndJchbO2JjVbDUNSP+BayEpSV4YhiSM6y+uz+/tzpy3v7V8A T1uSzNScmQhTKATkHTe5/9PC3a+24gH1dzvVz1lYbSCcO8kWx0YYKnXCy5w0T4K5 S+71xSEire8Oe3oPRFk5s7c45vT3YqslIyKe0qejWeaXxxx/9705AjCytXkq0Nc2 9SnSMzaDI/FZfKO6gDbRbXKmCQAeHZ8FcNzGYyKF8Y+xxE6YE/8c9I6BLL8TjJYq 7tDBsadMifrulfuSHM+cdslIu8cnANbZxJp434nfTdt0mRAVtTPAI/3CBYBpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgXpDsw6R8BlFpIWAibQeF2dskLEwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4lTVw0PnTuU ieMSJYlAPf47M81V2baXC6FuWw0b8pn+PdaP2zO3LqxDbOTIZy6+sC2dULEvMp0V qosDqj4GlQSS2Vod0GQnQwO/D4yQEJce7od2+yB7HwZxWP9mw+otZ6oThMmIdAyA A8FfZkVMOvBLs04JpDJVdil2reEtiYlFkWapySHrL7YPzuOa5+x2gXs/bCv0+iR4 pEvxkcFEIKRBRUpV8cCxCqQLIHIwX+na92z7lquKrVIdpRqPEyS3rJ1f4fBkbVK9 DkEQ4pvlgae+h4CHOkC10ImTCKvnEgKZ+kX8w9taf/4hiY752zpVc5THEjxYKzqJ Fl5zK7xb+g== -----END CERTIFICATE-----Generated at Tue Oct 27 20:24:05 2026 by rpki-client