$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: DstwBxH1VTgIozAQK5e35S/UZqlJTZWpqjhk3b8redM= Subject key identifier: 48:03:85:6B:8F:F3:C6:32:BE:C7:01:8F:6F:FF:33:CD:8A:2D:B1:BB Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 541A0995CE0835AA23F670D1B79A07633E3E388F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 0146 Signing time: Tue 27 Oct 2026 00:44:11 +0000 Manifest this update: Tue 27 Oct 2026 00:39:11 +0000 Manifest next update: Fri 30 Oct 2026 07:03:11 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 2: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 3: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: /YOHmfq2dXX3/rT56vVWDtWE0wAQTLfVTyNeZBUsSZg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 07:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1a:09:95:ce:08:35:aa:23:f6:70:d1:b7:9a:07:63:3e:3e:38:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Oct 27 00:39:11 2026 GMT Not After : Oct 30 07:03:11 2026 GMT Subject: CN=4803856B8FF3C632BEC7018F6FFF33CD8A2DB1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:0b:36:65:f5:e6:4d:9b:02:aa:27:56:e7: ae:21:2d:87:be:1b:ef:52:cd:22:8d:01:9f:39:3a: db:22:af:0f:3b:a1:1b:9d:99:7a:69:f7:3d:3d:7c: 93:d8:c6:63:fa:46:66:12:af:6a:98:f7:3f:d1:aa: d7:6f:f6:99:b6:9e:1c:0d:30:35:b6:8b:d2:70:ec: 5c:6c:85:f1:ab:2e:ef:a9:3a:65:dd:e4:a1:7b:50: c3:1b:5a:b0:ca:f5:2b:71:17:81:63:42:8a:ab:ae: 5b:45:9f:a5:6c:4d:9b:2a:1a:7d:83:1f:71:71:e6: 34:62:21:cf:e2:65:58:2c:1e:02:fa:0c:54:0a:f4: 41:14:ef:dc:0b:50:1c:f7:b4:43:72:0e:85:ac:a3: 1a:a0:57:c4:89:7c:55:a2:f4:ff:b3:e4:59:ff:08: 4c:61:5f:1c:00:6f:b1:30:8f:44:40:d7:a2:ac:ae: 0e:9b:9a:2a:30:2e:95:62:3a:d8:7e:e2:a7:10:36: 99:26:79:35:7d:45:28:e5:12:3c:4c:d1:77:54:d5: df:d5:35:73:3b:1e:ad:33:1f:5c:ce:a8:8a:a6:f2: 18:ab:9d:b1:74:c3:a1:2c:fc:72:d9:13:99:f9:74: 1b:6a:00:f6:1a:e0:8d:42:37:f8:3c:a3:d1:e2:dc: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:85:6B:8F:F3:C6:32:BE:C7:01:8F:6F:FF:33:CD:8A:2D:B1:BB X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:f2:e0:fe:3d:e5:17:90:6c:f0:f3:ae:bb:a6:c4:82:3e: 4d:20:ff:a8:7e:07:ba:e5:84:49:18:1f:88:62:3f:8f:26:e8: 4f:b3:e4:34:c3:a4:33:97:2c:64:8a:43:ff:37:cf:ff:af:e9: d4:ef:55:17:02:e4:2b:04:c4:6f:00:a8:da:ea:9b:33:59:d5: f5:26:e2:07:b3:dd:df:15:28:f7:af:95:2a:c0:68:8d:ec:22: 4f:c9:c6:1a:20:a9:41:98:de:18:8f:5c:1b:29:b1:7a:e7:31: 0d:a4:40:62:4a:9d:7e:7d:58:a1:66:1d:ee:2b:05:c4:b8:ff: bf:fa:5f:eb:e2:eb:59:68:86:6f:86:33:ad:3b:c2:79:a8:a6: 56:b1:c2:c2:02:f4:cd:67:05:77:fe:b2:87:39:84:4e:b3:ad: ca:e3:dd:40:bc:91:f7:a3:9e:83:95:79:92:60:79:bb:c8:df: 27:e9:36:52:1c:e7:f8:ec:c9:81:8d:91:26:23:b4:ac:ca:36: 54:21:1e:af:b7:6b:7a:b9:96:aa:11:89:a1:0a:32:8a:f9:a8: 00:1d:27:09:9a:09:e8:64:95:f2:1a:cd:2b:21:1b:97:f5:bb: f9:81:75:63:20:75:e7:df:c0:2a:16:a7:05:96:bd:95:de:38: 47:18:93:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVBoJlc4INaoj9nDRt5oHYz4+OI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjEwMjcwMDM5MTFaFw0yNjEwMzAwNzAzMTFaMDMxMTAvBgNV BAMTKDQ4MDM4NTZCOEZGM0M2MzJCRUM3MDE4RjZGRkYzM0NEOEEyREIxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJQs2ZfXmTZsCqidW564hLYe+ G+9SzSKNAZ85Otsirw87oRudmXpp9z09fJPYxmP6RmYSr2qY9z/Rqtdv9pm2nhwN MDW2i9Jw7FxshfGrLu+pOmXd5KF7UMMbWrDK9StxF4FjQoqrrltFn6VsTZsqGn2D H3Fx5jRiIc/iZVgsHgL6DFQK9EEU79wLUBz3tENyDoWsoxqgV8SJfFWi9P+z5Fn/ CExhXxwAb7Ewj0RA16Ksrg6bmiowLpViOth+4qcQNpkmeTV9RSjlEjxM0XdU1d/V NXM7Hq0zH1zOqIqm8hirnbF0w6Es/HLZE5n5dBtqAPYa4I1CN/g8o9Hi3KPPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSAOFa4/zxjK+xwGPb/8zzYotsbswHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz/y4P495ReQ bPDzrrumxII+TSD/qH4HuuWESRgfiGI/jyboT7PkNMOkM5csZIpD/zfP/6/p1O9V FwLkKwTEbwCo2uqbM1nV9SbiB7Pd3xUo96+VKsBojewiT8nGGiCpQZjeGI9cGymx eucxDaRAYkqdfn1YoWYd7isFxLj/v/pf6+LrWWiGb4YzrTvCeaimVrHCwgL0zWcF d/6yhzmETrOtyuPdQLyR96Oeg5V5kmB5u8jfJ+k2Uhzn+OzJgY2RJiO0rMo2VCEe r7drermWqhGJoQoyivmoAB0nCZoJ6GSV8hrNKyEbl/W7+YF1YyB159/AKhanBZa9 ld44RxiT5A== -----END CERTIFICATE-----Generated at Wed Oct 28 10:30:18 2026 by rpki-client