$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json) Hash identifier: 6g5J3olwZsDv7qYJQcJD8PA8tWe09vXzirNBdJRMgsA= Subject key identifier: 2A:18:F0:81:1E:15:03:94:1E:AE:C8:FB:3A:6C:23:67:30:E1:EA:7B Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62 Certificate serial: 4A883923F1F7C457EABC4F753E174CDDE9AAE2B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft Manifest number: 0825 Signing time: Mon 26 Oct 2026 17:48:52 +0000 Manifest this update: Mon 26 Oct 2026 17:43:52 +0000 Manifest next update: Thu 29 Oct 2026 21:49:52 +0000 Files and hashes: 1: AS132203.roa (hash: 2XZz3qWvSDB6ogBJnYcBVVHFqJbc5hsKimkPTUG8el8=) 2: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: kq66BVAhXARQuv4XoXi0RDHZaw3aJhbt7k3xy6a4pQg=) 3: AS38283.roa (hash: wzq7Q/F28BufSB7DnXTGE2BYqXO8ubck3B1YG2/y+oI=) 4: AS45090.roa (hash: 18tqS1uzdrlInSOjuJigFhPGTiT5pGoL2FAb/5wTImE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 21:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:39:23:f1:f7:c4:57:ea:bc:4f:75:3e:17:4c:dd:e9:aa:e2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62 Validity Not Before: Oct 26 17:43:52 2026 GMT Not After : Oct 29 21:49:52 2026 GMT Subject: CN=2A18F0811E1503941EAEC8FB3A6C236730E1EA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:bc:55:63:6d:b5:b6:a6:4c:e6:92:3f:63: b2:c5:b3:e8:65:57:c0:ae:1c:f9:ad:3e:b0:24:7a: ac:bc:61:ae:cf:3a:97:61:5b:38:c8:85:cc:0c:c1: 10:31:18:6c:4c:da:2c:0a:b4:e4:e2:0b:73:49:a1: e9:a0:c0:8f:2e:79:89:e2:9f:20:d2:5a:4e:fc:37: 2d:33:19:d2:35:54:19:ca:e1:52:ae:bf:44:da:01: 56:eb:cc:f9:e5:09:0e:48:bc:50:27:23:c5:7a:af: 36:dd:bd:c7:9f:05:7e:47:bc:07:7c:17:c2:ed:ad: 9c:77:43:42:b6:96:4c:07:67:20:57:2c:78:7c:92: 79:ad:fb:e8:6f:51:ea:f1:75:f2:79:4a:68:b0:b1: 94:5b:1b:13:ef:17:ac:42:e6:a8:ef:43:b1:ee:47: 6f:d5:ad:cd:9d:86:ea:20:a0:21:b5:6f:04:0d:11: c7:d7:8a:4c:e0:50:9b:b6:49:30:1b:80:ba:5a:9c: 2f:cf:e3:31:0b:aa:ab:74:7c:3c:ea:dd:f3:37:f7: 43:f6:8d:d9:43:db:58:06:e6:16:74:38:a0:71:db: ad:40:db:0a:0b:90:d8:3a:63:fd:5d:35:5f:d5:65: 32:7e:cc:c5:f2:37:dd:a2:fb:5f:21:bd:e8:76:4d: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:18:F0:81:1E:15:03:94:1E:AE:C8:FB:3A:6C:23:67:30:E1:EA:7B X509v3 Authority Key Identifier: keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c4:90:b5:8b:48:22:ca:2a:0e:57:6a:73:9d:04:dc:ba:d7: f7:e3:d1:21:d7:41:42:42:f5:6e:a7:66:36:5c:c0:19:f4:cb: 15:91:2b:43:8d:bd:6e:a1:a3:09:82:55:5d:30:71:0b:3a:72: 29:a7:d0:2e:04:6c:d3:93:94:24:26:ff:eb:7d:7e:90:98:f8: d6:e1:ed:97:b2:57:79:81:9a:7e:ef:ec:b7:92:71:c1:11:e6: d7:0a:57:5c:3d:d8:a4:e5:d2:84:fc:c7:dc:23:98:3e:e3:a0: af:fe:6d:c5:6d:9c:3f:6f:65:0f:02:cc:5b:86:78:5c:f8:f2: 64:27:2b:a6:53:63:6d:7c:33:ee:e2:84:8a:16:63:23:08:2c: 55:ed:eb:16:75:f4:1f:b8:28:11:cd:48:01:fa:2c:42:19:94: ea:e5:27:b7:4b:81:84:4f:1b:8b:53:18:4b:f3:b7:18:b9:5a: 2d:37:cf:36:fc:b4:1f:e7:03:af:7f:64:e2:2a:ba:46:91:b5: ae:54:46:24:34:45:9a:f8:90:81:7f:6b:97:46:ee:96:66:f5: 63:47:07:0f:b8:c0:fc:a6:a5:a7:9f:43:58:5a:5c:2d:66:7b: 84:d4:ee:a9:42:64:ba:e7:6c:f0:03:03:6e:df:70:81:db:90: 24:06:cb:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSog5I/H3xFfqvE91PhdM3emq4rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw Rjk1NkI2MjAeFw0yNjEwMjYxNzQzNTJaFw0yNjEwMjkyMTQ5NTJaMDMxMTAvBgNV BAMTKDJBMThGMDgxMUUxNTAzOTQxRUFFQzhGQjNBNkMyMzY3MzBFMUVBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7rxVY221tqZM5pI/Y7LFs+hl V8CuHPmtPrAkeqy8Ya7POpdhWzjIhcwMwRAxGGxM2iwKtOTiC3NJoemgwI8ueYni nyDSWk78Ny0zGdI1VBnK4VKuv0TaAVbrzPnlCQ5IvFAnI8V6rzbdvcefBX5HvAd8 F8LtrZx3Q0K2lkwHZyBXLHh8knmt++hvUerxdfJ5SmiwsZRbGxPvF6xC5qjvQ7Hu R2/Vrc2dhuogoCG1bwQNEcfXikzgUJu2STAbgLpanC/P4zELqqt0fDzq3fM390P2 jdlD21gG5hZ0OKBx261A2woLkNg6Y/1dNV/VZTJ+zMXyN92i+18hveh2TY9/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKhjwgR4VA5Qersj7OmwjZzDh6nswHwYDVR0j BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMC80Rjk0QTVGMzZGODY2 RjIxMTgwNzc1REZGRjM4Mjc5OTBGOTU2QjYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcSQtYtIIsoq Dldqc50E3LrX9+PRIddBQkL1bqdmNlzAGfTLFZErQ429bqGjCYJVXTBxCzpyKafQ LgRs05OUJCb/631+kJj41uHtl7JXeYGafu/st5JxwRHm1wpXXD3YpOXShPzH3COY PuOgr/5txW2cP29lDwLMW4Z4XPjyZCcrplNjbXwz7uKEihZjIwgsVe3rFnX0H7go Ec1IAfosQhmU6uUnt0uBhE8bi1MYS/O3GLlaLTfPNvy0H+cDr39k4iq6RpG1rlRG JDRFmviQgX9rl0bulmb1Y0cHD7jA/Kalp59DWFpcLWZ7hNTuqUJkuuds8AMDbt9w gduQJAbL+g== -----END CERTIFICATE-----Generated at Tue Oct 27 17:45:06 2026 by rpki-client