$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: JMROUMp+8Y/qbMVzWS9QZrEAPwgWjhnTSeZZXQp03Oc= Subject key identifier: 5B:5A:21:CC:78:74:15:15:19:31:04:68:E9:2E:57:A3:AA:5A:14:03 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 5547558622852B7FB3D5670BF482C4C209FBF868 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 0145 Signing time: Mon 12 Oct 2026 19:42:20 +0000 Manifest this update: Mon 12 Oct 2026 19:37:20 +0000 Manifest next update: Fri 16 Oct 2026 07:40:20 +0000 Files and hashes: 1: 34332e3139332e36352e302f32342d3234203d3e20313335363239.roa (hash: MwVN3taj66Ka8e6zM6DN8RrX4mecL96iDgmUhMFQ9x0=) 2: 34332e3139332e36352e302f32342d3234203d3e20313334373631.roa (hash: vtB4q26rJZnPT0HeksyyQ09N0xJbQpfDhBpPOrG+qEE=) 3: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) 4: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: uDeFHM2SNtyklVDIpR+OdDQNE+2daouPkgxRWBmrVBI=) 5: 34332e3139332e36352e302f32342d3234203d3e203130323036.roa (hash: 6m6sraX2wercPUwc5ViicNvbpVzyOKO2UCe0QtoYQwQ=) 6: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 7: 34332e3139332e36352e302f32342d3234203d3e2039383038.roa (hash: V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=) 8: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:47:55:86:22:85:2b:7f:b3:d5:67:0b:f4:82:c4:c2:09:fb:f8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Oct 12 19:37:20 2026 GMT Not After : Oct 16 07:40:20 2026 GMT Subject: CN=5B5A21CC7874151519310468E92E57A3AA5A1403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:69:56:d4:53:d8:69:18:6c:1d:af:6d:cb: 46:7f:8e:4e:15:53:b2:e7:bf:91:49:e8:53:d4:39: e8:02:69:53:9b:4b:d1:45:fd:56:30:89:c7:48:e3: cb:68:7a:de:b5:d4:d2:5f:06:7d:f0:85:be:3e:da: 33:9e:00:68:ae:56:ce:15:3e:0b:8a:71:93:ee:8e: 3a:aa:b3:b6:26:66:27:75:75:28:79:20:0c:f4:e4: 00:06:88:7a:b4:35:a8:95:c2:d1:e3:5c:dc:21:07: bb:12:c8:85:a5:0a:bd:96:19:c1:be:43:de:ba:63: 3e:1a:a7:52:2a:d5:98:45:77:72:65:92:3c:58:11: 9a:05:ad:4f:18:8a:69:f7:f1:bd:40:cf:5b:46:22: 9e:8c:26:d6:c9:c2:16:27:d3:da:ff:bc:42:f9:f6: b4:c4:a7:4e:5e:c4:05:2a:3d:f1:25:54:6d:2b:ce: 00:5f:90:ba:ad:e1:35:a9:63:cc:59:9b:d4:0b:9e: ea:7c:1b:28:5b:a2:66:68:94:4f:ac:1f:9b:ea:4e: 33:5e:8b:91:86:b8:6e:52:58:77:25:2c:75:f6:07: 07:4d:76:2f:9a:6b:0d:1d:38:80:68:65:d7:7e:5c: 78:30:b5:6e:65:31:b3:27:39:a8:0a:54:13:81:47: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5A:21:CC:78:74:15:15:19:31:04:68:E9:2E:57:A3:AA:5A:14:03 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:8a:e3:a2:09:7c:49:30:2b:4a:c9:7b:4b:09:03:fd:70:81: 44:26:2e:af:32:aa:03:de:09:71:33:ea:38:a2:ad:51:0d:5f: 28:5f:30:b2:16:0e:7c:07:41:f3:b3:c9:e3:9d:8a:79:51:4d: b9:03:9c:96:18:2e:cd:54:f7:fe:31:9b:c2:d8:73:3b:01:4c: c1:ed:c0:84:07:ac:10:14:a2:f8:00:3d:c7:df:dd:10:34:52: 81:a2:cc:03:8e:d3:de:58:ee:34:e3:18:98:c3:88:2b:69:02: ce:20:fd:36:2f:b0:34:4c:1e:2d:99:ac:2b:03:a4:3e:66:d3: 63:29:6e:3b:b1:90:b6:bd:19:42:5b:83:7a:ea:5f:4f:b5:43: 38:52:16:0b:23:15:93:45:62:59:17:17:8c:86:01:9f:52:a7: 85:58:d8:be:92:2e:98:5d:dc:c8:d8:9f:f3:b5:8b:b5:9a:ea: 5a:1c:44:92:a8:92:a5:44:64:ea:e9:5d:b2:3a:92:4a:f4:d6: ad:e3:bc:ee:cb:97:96:6c:12:7f:e9:09:bb:a9:bf:e4:d7:7e: 41:d1:94:40:94:0f:5f:87:2b:b4:4b:02:49:2b:cd:71:a0:28: 2b:c5:eb:66:bf:32:30:1a:a8:2b:d8:80:3c:a1:c6:b0:13:20: fa:5e:7b:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVUdVhiKFK3+z1WcL9ILEwgn7+GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjEwMTIxOTM3MjBaFw0yNjEwMTYwNzQwMjBaMDMxMTAvBgNV BAMTKDVCNUEyMUNDNzg3NDE1MTUxOTMxMDQ2OEU5MkU1N0EzQUE1QTE0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSGlW1FPYaRhsHa9ty0Z/jk4V U7Lnv5FJ6FPUOegCaVObS9FF/VYwicdI48toet611NJfBn3whb4+2jOeAGiuVs4V PguKcZPujjqqs7YmZid1dSh5IAz05AAGiHq0NaiVwtHjXNwhB7sSyIWlCr2WGcG+ Q966Yz4ap1Iq1ZhFd3JlkjxYEZoFrU8Yimn38b1Az1tGIp6MJtbJwhYn09r/vEL5 9rTEp05exAUqPfElVG0rzgBfkLqt4TWpY8xZm9QLnup8GyhbomZolE+sH5vqTjNe i5GGuG5SWHclLHX2BwdNdi+aaw0dOIBoZdd+XHgwtW5lMbMnOagKVBOBR66zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW1ohzHh0FRUZMQRo6S5Xo6paFAMwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1orjogl8STAr Ssl7SwkD/XCBRCYurzKqA94JcTPqOKKtUQ1fKF8wshYOfAdB87PJ452KeVFNuQOc lhguzVT3/jGbwthzOwFMwe3AhAesEBSi+AA9x9/dEDRSgaLMA47T3ljuNOMYmMOI K2kCziD9Ni+wNEweLZmsKwOkPmbTYyluO7GQtr0ZQluDeupfT7VDOFIWCyMVk0Vi WRcXjIYBn1KnhVjYvpIumF3cyNif87WLtZrqWhxEkqiSpURk6uldsjqSSvTWreO8 7suXlmwSf+kJu6m/5Nd+QdGUQJQPX4crtEsCSSvNcaAoK8XrZr8yMBqoK9iAPKHG sBMg+l57XA== -----END CERTIFICATE-----Generated at Wed Oct 14 23:14:39 2026 by rpki-client