$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: fjfmZvv6IfPUi/uIcS/klj35EuRSvo8KgcLI08O7wGs= Subject key identifier: 6C:86:43:C5:E3:92:5B:CD:08:0A:B1:F5:67:5B:ED:B4:F7:70:C9:E7 Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 22B16B199ABAE7B78BC244514585B46CFB78FC34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 07:21:46 +0000 Manifest this update: Mon 12 Oct 2026 07:16:46 +0000 Manifest next update: Thu 15 Oct 2026 13:49:46 +0000 Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: x/DjfVJ6rmk0rZJlSRt4sdp7TMf6zmT2fPXyWI8sNlA=) 2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 13:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b1:6b:19:9a:ba:e7:b7:8b:c2:44:51:45:85:b4:6c:fb:78:fc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: Oct 12 07:16:46 2026 GMT Not After : Oct 15 13:49:46 2026 GMT Subject: CN=6C8643C5E3925BCD080AB1F5675BEDB4F770C9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:16:59:c4:d2:fc:90:ee:03:10:f4:9e:6f: 3e:1b:03:ab:36:30:d2:57:c4:c1:7e:ad:07:0b:b2: 05:d6:0f:40:33:a9:ad:f5:9e:ef:a3:55:ea:92:d1: 07:b4:5f:87:36:51:eb:e7:4c:4a:09:5d:15:01:5f: 11:7f:73:ae:3a:e5:43:b2:eb:28:88:f8:a5:ce:30: 05:2e:97:d6:67:bd:b0:17:db:29:49:17:84:6b:0d: 36:0d:39:98:81:5d:5b:23:b2:d5:e8:06:8b:5c:db: 07:47:70:cc:5a:69:62:5f:07:5b:33:cd:72:c5:4c: b4:df:e7:3a:81:8a:1a:92:1e:f6:d1:64:0b:af:ce: d8:40:44:f8:a9:7e:aa:aa:d3:f1:b5:01:28:06:8b: 5d:71:1b:8a:2a:bc:4f:a6:c2:57:8a:a0:98:b6:71: ea:02:84:9e:0b:78:f3:c2:87:c1:99:88:90:8f:43: fd:17:c3:29:2d:39:97:b3:9f:7b:dd:f9:69:92:69: 38:d7:33:18:19:aa:1e:16:50:2c:6a:b6:85:43:9d: f8:7d:fd:7c:2f:75:a2:60:e2:5c:1e:78:03:0e:69: 8b:a2:11:1e:21:22:ee:53:22:81:5a:ae:62:2e:20: 0f:b9:63:47:73:75:b5:2d:ca:b3:5e:e7:27:5b:be: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:43:C5:E3:92:5B:CD:08:0A:B1:F5:67:5B:ED:B4:F7:70:C9:E7 X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d0:bb:23:d3:18:f7:5b:bf:02:12:a5:5e:36:ae:a0:7b:b0: 92:43:d7:47:01:ce:83:38:a8:0e:0f:03:3e:43:20:b9:99:f7: 74:d3:af:e3:e7:36:32:35:ab:54:de:f9:7e:38:05:e0:7c:e3: 00:21:ef:de:3c:a0:09:85:96:a1:61:39:64:cb:14:9b:3c:01: 5a:c8:f4:12:ec:06:52:c7:83:bf:2f:48:2c:1c:60:34:01:43: d1:a0:87:77:dc:f5:19:97:6c:d1:d4:fd:ed:70:fa:1f:d1:f9: d3:25:f0:b7:4c:25:0a:b0:63:d5:75:0b:2a:3f:96:26:37:a3: 9c:36:e1:ba:7d:78:39:ae:e7:5e:1d:5f:6e:35:0b:1d:0b:75: 89:d0:fc:8d:ed:b1:13:6b:4d:45:e0:9f:b8:d9:5c:26:a6:64: f6:1b:97:e1:4d:f0:6f:38:3d:f9:d9:aa:28:59:64:08:82:82: 23:30:33:7e:57:5e:20:73:55:df:cc:1e:2e:40:26:84:16:53: 6a:e9:93:78:b8:97:32:9c:62:7a:64:79:79:d9:b5:0b:1b:dc: c9:9b:b9:df:1c:6c:c1:10:03:82:09:0a:f4:c9:3c:b2:11:d5: 97:9c:25:45:16:39:54:0f:ce:04:f3:15:c0:a4:c1:f1:e8:a8: 32:93:98:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIrFrGZq657eLwkRRRYW0bPt4/DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjEwMTIwNzE2NDZaFw0yNjEwMTUxMzQ5NDZaMDMxMTAvBgNV BAMTKDZDODY0M0M1RTM5MjVCQ0QwODBBQjFGNTY3NUJFREI0Rjc3MEM5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlBZZxNL8kO4DEPSebz4bA6s2 MNJXxMF+rQcLsgXWD0Azqa31nu+jVeqS0Qe0X4c2UevnTEoJXRUBXxF/c6465UOy 6yiI+KXOMAUul9ZnvbAX2ylJF4RrDTYNOZiBXVsjstXoBotc2wdHcMxaaWJfB1sz zXLFTLTf5zqBihqSHvbRZAuvzthARPipfqqq0/G1ASgGi11xG4oqvE+mwleKoJi2 ceoChJ4LePPCh8GZiJCPQ/0XwyktOZezn3vd+WmSaTjXMxgZqh4WUCxqtoVDnfh9 /XwvdaJg4lweeAMOaYuiER4hIu5TIoFarmIuIA+5Y0dzdbUtyrNe5ydbvutBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbIZDxeOSW80ICrH1Z1vttPdwyecwHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNC7I9MY91u/ AhKlXjauoHuwkkPXRwHOgzioDg8DPkMguZn3dNOv4+c2MjWrVN75fjgF4HzjACHv 3jygCYWWoWE5ZMsUmzwBWsj0EuwGUseDvy9ILBxgNAFD0aCHd9z1GZds0dT97XD6 H9H50yXwt0wlCrBj1XULKj+WJjejnDbhun14Oa7nXh1fbjULHQt1idD8je2xE2tN ReCfuNlcJqZk9huX4U3wbzg9+dmqKFlkCIKCIzAzfldeIHNV38weLkAmhBZTaumT eLiXMpxiemR5edm1CxvcyZu53xxswRADggkK9Mk8shHVl5wlRRY5VA/OBPMVwKTB 8eioMpOYuA== -----END CERTIFICATE-----Generated at Wed Oct 14 05:18:41 2026 by rpki-client