$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: 6TuwwTO/sYWi2kYv6J/YK6YGT3gPQuUI+BZv4nQYq0g= Subject key identifier: 05:0E:D2:5E:5F:A4:D5:CE:12:82:B5:95:28:2F:61:45:79:7A:68:F6 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 48F9FEE480D69051E68A0740409C124D2FAD980E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 0140 Signing time: Sun 25 Oct 2026 12:02:33 +0000 Manifest this update: Sun 25 Oct 2026 11:57:33 +0000 Manifest next update: Wed 28 Oct 2026 19:54:33 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: z/iWMkdKRgNhsJ20mSlOJHMtFNrFfAkGXt5AxYvGKBs=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 19:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f9:fe:e4:80:d6:90:51:e6:8a:07:40:40:9c:12:4d:2f:ad:98:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Oct 25 11:57:33 2026 GMT Not After : Oct 28 19:54:33 2026 GMT Subject: CN=050ED25E5FA4D5CE1282B595282F6145797A68F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:0b:c2:bc:1a:16:0a:d3:ab:0d:c9:15:31: de:1b:74:f1:0e:b2:97:85:bf:8e:2e:a6:32:a2:e9: 4a:cc:b1:43:b6:83:4b:2e:fe:2b:3a:32:2a:57:cf: 9b:ca:d9:f0:09:e4:a3:a0:d1:74:ee:95:c8:eb:76: 85:0e:14:87:5e:2e:2e:bf:38:bb:0b:3e:15:c5:c2: 82:0b:82:05:cf:2c:fa:11:91:ee:f5:58:e2:1e:3d: d3:b2:89:d2:2c:1a:95:68:e4:86:1c:92:85:db:ef: 05:a2:26:24:44:e5:c4:c5:90:75:9b:67:e1:ef:45: b8:f0:6a:5d:4e:68:c9:8c:c4:9b:39:cb:b2:d8:c3: 16:cd:f5:13:03:bc:7f:cc:fb:aa:56:20:14:08:03: 8a:33:39:f8:d0:a6:89:1d:1a:92:09:2d:2d:f2:f6: d6:08:9f:c8:8b:7e:2c:13:82:ab:b4:9a:e1:84:f1: 51:a4:2c:b0:cb:ff:70:32:36:93:eb:12:0b:5a:02: 33:a2:c8:f8:75:89:b3:a4:bd:25:76:dd:15:19:4b: ef:8e:22:1b:62:62:cc:b9:a5:40:d7:9b:c5:1f:da: da:b5:dd:32:ff:4e:e4:26:4a:6d:a6:e0:62:51:66: 5b:e8:36:f9:ea:22:39:d4:c5:be:5c:ac:31:96:35: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:D2:5E:5F:A4:D5:CE:12:82:B5:95:28:2F:61:45:79:7A:68:F6 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:ea:61:0e:85:db:ff:b5:5f:3a:22:6f:85:c0:5a:19:bd: ee:04:1a:9a:db:80:4a:24:48:9c:71:f5:a3:1b:c8:34:c6:d7: 09:32:8a:a6:a2:fa:1f:12:06:5c:59:28:94:35:05:fd:3f:53: 51:11:5f:6c:48:11:16:46:04:a9:73:3d:41:7e:0e:2e:b6:51: 2a:f8:e1:7c:e4:fc:82:20:e9:5a:80:cd:0b:ea:de:77:2a:cc: 73:de:0e:3f:1b:75:3e:60:94:82:ff:78:36:3b:06:86:25:25: 11:2d:2e:c0:95:05:e3:d1:7f:7a:2a:b2:d2:d2:6a:50:ec:8a: 87:37:db:a3:85:71:f2:26:cd:2c:58:9c:6a:b5:ed:7b:91:08: f5:ef:dd:cf:57:83:4a:95:df:6b:08:37:b0:1f:b1:0f:7f:29: 1b:b5:b9:3b:c9:fd:59:8d:ab:94:70:cc:5f:ab:c7:28:50:1a: 35:b2:7a:a1:2e:c6:56:e0:ac:2f:a0:85:b3:a2:fd:b4:d5:22: e7:2c:e9:a0:45:5c:35:f0:f6:e1:8f:42:5d:f3:d9:47:a4:5c: c1:bc:60:ae:5b:93:81:c4:de:ac:8a:99:49:f1:f3:44:fc:26: ec:84:a0:53:40:99:a1:74:37:0b:9d:71:6b:9e:ec:15:24:2f: d3:4e:56:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSPn+5IDWkFHmigdAQJwSTS+tmA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjEwMjUxMTU3MzNaFw0yNjEwMjgxOTU0MzNaMDMxMTAvBgNV BAMTKDA1MEVEMjVFNUZBNEQ1Q0UxMjgyQjU5NTI4MkY2MTQ1Nzk3QTY4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fwvCvBoWCtOrDckVMd4bdPEO speFv44upjKi6UrMsUO2g0su/is6MipXz5vK2fAJ5KOg0XTulcjrdoUOFIdeLi6/ OLsLPhXFwoILggXPLPoRke71WOIePdOyidIsGpVo5IYckoXb7wWiJiRE5cTFkHWb Z+HvRbjwal1OaMmMxJs5y7LYwxbN9RMDvH/M+6pWIBQIA4ozOfjQpokdGpIJLS3y 9tYIn8iLfiwTgqu0muGE8VGkLLDL/3AyNpPrEgtaAjOiyPh1ibOkvSV23RUZS++O IhtiYsy5pUDXm8Uf2tq13TL/TuQmSm2m4GJRZlvoNvnqIjnUxb5crDGWNVR7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBQ7SXl+k1c4SgrWVKC9hRXl6aPYwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyrqYQ6F2/+1 Xzoib4XAWhm97gQamtuASiRInHH1oxvINMbXCTKKpqL6HxIGXFkolDUF/T9TURFf bEgRFkYEqXM9QX4OLrZRKvjhfOT8giDpWoDNC+redyrMc94OPxt1PmCUgv94NjsG hiUlES0uwJUF49F/eiqy0tJqUOyKhzfbo4Vx8ibNLFicarXte5EI9e/dz1eDSpXf awg3sB+xD38pG7W5O8n9WY2rlHDMX6vHKFAaNbJ6oS7GVuCsL6CFs6L9tNUi5yzp oEVcNfD24Y9CXfPZR6RcwbxgrluTgcTerIqZSfHzRPwm7ISgU0CZoXQ3C51xa57s FSQv005WJA== -----END CERTIFICATE-----Generated at Tue Oct 27 13:06:04 2026 by rpki-client