$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: h/jbUQWevDxExtb3qCMmwk5bEtnH4l19cJED79RAvQw= Subject key identifier: 5C:CD:C1:D6:E9:1F:D4:88:B7:2A:67:EA:66:E1:6D:50:A2:B4:A3:D4 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 3165B3664CF611329268EBB91804C7AF3ED5F289 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 013B Signing time: Thu 15 Oct 2026 01:06:02 +0000 Manifest this update: Thu 15 Oct 2026 01:01:02 +0000 Manifest next update: Sun 18 Oct 2026 10:10:02 +0000 Files and hashes: 1: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: FCfJimqGdw47RlMeTD/btT8B9/Xv2Rgo90Q495Q6GfE=) 2: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 3: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 4: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 5: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 10:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:65:b3:66:4c:f6:11:32:92:68:eb:b9:18:04:c7:af:3e:d5:f2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Oct 15 01:01:02 2026 GMT Not After : Oct 18 10:10:02 2026 GMT Subject: CN=5CCDC1D6E91FD488B72A67EA66E16D50A2B4A3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:de:4e:b5:d2:e9:29:25:67:21:e5:7e:34: b0:d1:92:e1:0e:01:7a:2a:8e:66:e5:12:9b:8d:30: 05:9a:4c:8e:82:ab:75:06:75:08:a5:da:59:7d:6f: 29:6f:ac:00:ec:9c:7d:c9:5c:44:08:a1:06:89:d8: f0:21:24:59:8f:85:52:8b:4b:9d:6e:45:fa:ca:ff: 1f:37:13:a2:1c:61:4b:01:96:4d:84:96:02:9d:dd: 79:e5:eb:05:e8:42:a7:d2:64:77:cc:67:17:28:1f: ab:15:a4:f0:af:bc:8f:6d:91:92:d8:b1:62:a1:30: 77:e0:b2:2a:f9:fb:82:2a:9e:af:cd:bf:f7:84:36: 50:fa:50:f3:81:c4:0a:d7:46:48:d6:ed:b4:32:95: ef:60:44:a7:e1:4d:ed:ef:fb:8c:a9:08:04:7a:87: fc:40:6a:6a:90:12:42:13:a7:81:08:73:ad:d7:86: 94:b4:00:6b:fb:9a:8e:f7:62:32:33:84:04:1f:21: 9d:e1:bd:35:be:aa:28:8a:b7:40:27:94:99:38:8b: be:06:37:c5:51:11:44:f8:4f:37:55:7b:c6:df:06: 50:a2:72:6e:40:39:d8:32:99:bc:f3:d4:d7:5f:65: 50:53:08:71:73:37:0a:cf:aa:6c:72:63:8c:4b:9a: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:C1:D6:E9:1F:D4:88:B7:2A:67:EA:66:E1:6D:50:A2:B4:A3:D4 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c0:4b:3e:39:c6:e9:bf:18:21:42:ab:79:1e:64:7e:a6:3d: da:e5:47:7f:6b:b8:4c:7f:f7:94:f6:14:94:f0:87:c5:86:23: af:0f:71:7d:64:05:65:6e:f3:55:cf:b8:b5:76:e5:4d:94:03: 99:8d:d7:fc:83:9d:66:5d:c8:a2:33:e0:63:9e:7f:57:cf:48: cb:75:f0:9a:fc:19:c2:98:f8:25:24:ce:77:37:50:fa:02:45: 37:ca:e8:e0:fc:3c:9a:5d:18:3f:5e:2a:5f:fc:0e:be:95:35: dd:00:81:23:3b:45:4d:67:d0:c2:7d:c0:31:dc:0b:a9:cb:9e: 7d:22:8d:f1:17:dc:ff:e5:1e:93:7f:d3:88:86:64:03:d3:2b: bf:d4:a1:87:58:0d:7d:c8:a1:00:02:a0:89:f3:a4:16:65:e1: 74:49:42:97:9b:ca:cd:38:cb:87:95:e3:94:fb:de:ae:df:d8: ce:93:52:29:84:40:d0:09:a4:8c:2a:da:31:b6:83:71:c2:f2: 48:35:3b:5a:aa:47:34:80:1b:f9:84:74:fe:e8:12:2b:c5:44: 25:79:c5:a2:9a:ab:6f:f8:ae:3a:3e:16:bf:f5:8c:4a:c7:95: bc:0c:19:89:89:df:50:97:35:f7:4f:cc:3e:6b:d6:56:e8:19: f2:33:a7:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMWWzZkz2ETKSaOu5GATHrz7V8okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjEwMTUwMTAxMDJaFw0yNjEwMTgxMDEwMDJaMDMxMTAvBgNV BAMTKDVDQ0RDMUQ2RTkxRkQ0ODhCNzJBNjdFQTY2RTE2RDUwQTJCNEEzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MN5OtdLpKSVnIeV+NLDRkuEO AXoqjmblEpuNMAWaTI6Cq3UGdQil2ll9bylvrADsnH3JXEQIoQaJ2PAhJFmPhVKL S51uRfrK/x83E6IcYUsBlk2ElgKd3Xnl6wXoQqfSZHfMZxcoH6sVpPCvvI9tkZLY sWKhMHfgsir5+4Iqnq/Nv/eENlD6UPOBxArXRkjW7bQyle9gRKfhTe3v+4ypCAR6 h/xAamqQEkITp4EIc63XhpS0AGv7mo73YjIzhAQfIZ3hvTW+qiiKt0AnlJk4i74G N8VREUT4TzdVe8bfBlCicm5AOdgymbzz1NdfZVBTCHFzNwrPqmxyY4xLmiw5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXM3B1ukf1Ii3KmfqZuFtUKK0o9QwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcBLPjnG6b8Y IUKreR5kfqY92uVHf2u4TH/3lPYUlPCHxYYjrw9xfWQFZW7zVc+4tXblTZQDmY3X /IOdZl3IojPgY55/V89Iy3XwmvwZwpj4JSTOdzdQ+gJFN8ro4Pw8ml0YP14qX/wO vpU13QCBIztFTWfQwn3AMdwLqcuefSKN8Rfc/+Uek3/TiIZkA9Mrv9Shh1gNfcih AAKgifOkFmXhdElCl5vKzTjLh5XjlPvert/YzpNSKYRA0AmkjCraMbaDccLySDU7 WqpHNIAb+YR0/ugSK8VEJXnFopqrb/iuOj4Wv/WMSseVvAwZiYnfUJc190/MPmvW VugZ8jOnWw== -----END CERTIFICATE-----Generated at Thu Oct 15 12:43:26 2026 by rpki-client