$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json) Hash identifier: pDwe26Ik/heUlb3wPV2AsLFgeISrFzCv6EbShyLEsUc= Subject key identifier: 77:DC:C3:42:73:9A:3D:92:5D:E9:A7:6D:1D:A3:F5:AF:3C:7E:2F:3B Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Certificate serial: 4803A6ACA8EB594FDDCFF91A81C1630213AEB143 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft Manifest number: 0149 Signing time: Tue 27 Oct 2026 05:39:23 +0000 Manifest this update: Tue 27 Oct 2026 05:34:23 +0000 Manifest next update: Fri 30 Oct 2026 08:58:23 +0000 Files and hashes: 1: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=) 2: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: iJspB1w//CU+akFwwmZOGhlYShdXukVzY7ldWE4LCtE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:03:a6:ac:a8:eb:59:4f:dd:cf:f9:1a:81:c1:63:02:13:ae:b1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Validity Not Before: Oct 27 05:34:23 2026 GMT Not After : Oct 30 08:58:23 2026 GMT Subject: CN=77DCC342739A3D925DE9A76D1DA3F5AF3C7E2F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:fd:d2:d6:ae:bd:90:d0:d6:97:8c:3c:9c: c9:4b:a5:73:76:46:d1:25:62:d7:c8:21:b0:0b:20: b1:0a:fa:60:c3:00:e4:42:32:c5:b1:f7:f3:41:6a: 52:f2:b8:f0:45:c4:b9:02:25:ff:0a:b6:05:8c:9a: 64:d2:0e:19:8a:20:dc:65:1e:41:ee:6e:18:b5:1c: 3b:26:1f:9e:45:fd:83:82:1b:47:79:65:f5:50:cb: 02:74:a9:19:0f:c5:ea:8f:21:55:37:aa:e9:98:65: d7:3c:e8:49:a8:5d:7a:ec:50:4e:c1:a3:f4:a3:2a: f0:2e:46:7a:59:db:74:32:67:bf:38:3f:fc:2d:a7: 11:49:02:08:5c:5c:9c:f5:6f:e2:f6:5b:7d:65:83: 07:b3:06:bf:4e:56:51:c3:a0:9a:1b:0e:fb:bc:a9: b3:7c:4e:4d:f4:4b:b0:c6:53:16:31:80:c9:d1:75: b0:f1:92:3d:0e:56:a3:8b:dd:b4:6e:14:f1:2b:73: c8:f4:fd:b9:9e:0e:41:62:9a:dc:40:35:c6:57:df: d0:8d:7c:43:dc:2d:70:86:37:81:d0:66:20:36:99: dd:03:e9:79:4b:b3:c4:e1:81:e6:60:d8:7b:9b:5c: d9:75:aa:fa:04:76:26:3f:4c:0d:19:85:0f:18:35: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:C3:42:73:9A:3D:92:5D:E9:A7:6D:1D:A3:F5:AF:3C:7E:2F:3B X509v3 Authority Key Identifier: keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b8:74:4f:94:c9:ac:e7:d6:2d:da:db:8e:67:cb:e2:af:40: 1b:aa:1b:cd:c2:d7:94:16:24:31:ad:61:85:54:5d:81:c5:ff: 6e:d5:0d:15:c9:43:cb:14:6b:11:96:a7:59:6d:32:1f:04:9a: a9:ad:6c:d7:79:f3:39:23:69:10:a2:11:40:6b:8b:20:3a:e4: 5e:4c:40:8e:54:c4:be:71:a8:84:6f:97:a3:57:af:f4:c7:6c: f2:7c:d4:c1:c8:60:eb:66:b6:17:0c:ae:b1:c7:0a:1f:b9:51: 8b:4f:a5:e9:68:70:45:28:a6:d1:2e:45:ea:d3:f4:1b:87:43: f8:d1:c6:24:9a:6f:f7:46:06:7e:a9:86:c4:26:c7:c2:45:5b: 64:a3:08:a1:01:e3:d4:54:a7:9f:66:38:71:cd:c0:52:55:ed: b6:29:77:c4:8e:7b:a6:c3:88:a0:4d:73:1e:da:98:aa:d6:c5: 91:9f:f5:3c:36:95:6b:42:a1:2b:58:9c:cf:58:1c:d7:39:39: c9:7f:15:7e:cf:aa:2e:be:62:16:84:78:af:4b:05:98:b2:fc: 21:18:d6:68:ce:b5:df:54:ac:7c:e3:44:4f:83:7b:33:3a:a9: c6:18:8c:b3:f5:14:ee:8d:7d:d9:2f:60:2e:b1:51:05:c5:c3: f3:a1:45:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSAOmrKjrWU/dz/kagcFjAhOusUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4 MEU5RThENTAeFw0yNjEwMjcwNTM0MjNaFw0yNjEwMzAwODU4MjNaMDMxMTAvBgNV BAMTKDc3RENDMzQyNzM5QTNEOTI1REU5QTc2RDFEQTNGNUFGM0M3RTJGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2q/3S1q69kNDWl4w8nMlLpXN2 RtElYtfIIbALILEK+mDDAORCMsWx9/NBalLyuPBFxLkCJf8KtgWMmmTSDhmKINxl HkHubhi1HDsmH55F/YOCG0d5ZfVQywJ0qRkPxeqPIVU3qumYZdc86EmoXXrsUE7B o/SjKvAuRnpZ23QyZ784P/wtpxFJAghcXJz1b+L2W31lgwezBr9OVlHDoJobDvu8 qbN8Tk30S7DGUxYxgMnRdbDxkj0OVqOL3bRuFPErc8j0/bmeDkFimtxANcZX39CN fEPcLXCGN4HQZiA2md0D6XlLs8ThgeZg2HubXNl1qvoEdiY/TA0ZhQ8YNX4PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd9zDQnOaPZJd6adtHaP1rzx+LzswHwYDVR0j BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1 NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerh0T5TJrOfW LdrbjmfL4q9AG6obzcLXlBYkMa1hhVRdgcX/btUNFclDyxRrEZanWW0yHwSaqa1s 13nzOSNpEKIRQGuLIDrkXkxAjlTEvnGohG+Xo1ev9Mds8nzUwchg62a2FwyusccK H7lRi0+l6WhwRSim0S5F6tP0G4dD+NHGJJpv90YGfqmGxCbHwkVbZKMIoQHj1FSn n2Y4cc3AUlXttil3xI57psOIoE1zHtqYqtbFkZ/1PDaVa0KhK1icz1gc1zk5yX8V fs+qLr5iFoR4r0sFmLL8IRjWaM6131SsfONET4N7MzqpxhiMs/UU7o192S9gLrFR BcXD86FFMQ== -----END CERTIFICATE-----Generated at Wed Oct 28 18:28:26 2026 by rpki-client