$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: dhuzh/chf0MqNruEKrcUu59whRQlp5rIpL5oU498wHA= Subject key identifier: 6A:BA:1B:04:87:01:75:27:5F:2B:16:BD:E6:78:A7:70:CE:90:EB:36 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 34E055AFA97DE53ABEE855E60EABC2455598BEB1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 0142 Signing time: Wed 28 Oct 2026 11:30:45 +0000 Manifest this update: Wed 28 Oct 2026 11:25:45 +0000 Manifest next update: Sat 31 Oct 2026 22:37:45 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: 6MB2p0JN71ScFHolKg48poDrDCQFvGIvI3OTUJqGHBo=) 2: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) 3: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 10:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e0:55:af:a9:7d:e5:3a:be:e8:55:e6:0e:ab:c2:45:55:98:be:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Oct 28 11:25:45 2026 GMT Not After : Oct 31 22:37:45 2026 GMT Subject: CN=6ABA1B04870175275F2B16BDE678A770CE90EB36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:6e:ba:f2:4d:b6:1c:76:36:8b:d8:16:6e: 53:8d:ef:86:d0:3a:28:46:a7:f4:f9:a4:9d:c0:47: 3b:6b:b7:b0:fb:27:e7:e8:26:a1:71:cd:5d:7e:0d: cd:5c:4c:af:dc:6c:93:dc:5f:33:8a:18:8c:98:21: 89:65:ee:4b:49:d5:c5:ad:00:d0:df:3f:e5:78:e0: c3:fe:38:e0:d6:ac:d5:e6:86:45:4d:bc:1a:5c:86: f1:a9:cb:4f:a4:66:a4:62:db:d6:1e:7d:75:af:e5: d1:d5:1d:f4:1f:81:58:3c:68:c8:0a:ef:ea:87:82: a2:37:b3:42:7f:02:4a:95:2b:f5:d9:b5:28:38:73: 9a:ae:e9:99:c6:d8:71:5c:de:97:00:61:7b:93:2c: c0:a6:1f:73:b7:87:72:c3:6e:06:5a:48:2b:33:16: 72:52:52:a3:d7:45:d7:f2:1a:5e:28:ff:68:51:51: db:63:81:14:a4:1c:61:c2:a0:17:4f:c2:de:1e:40: 5e:ae:e5:0d:62:da:ae:a0:a8:38:b2:43:ab:6e:64: b8:d4:4b:9a:58:45:27:7f:ad:33:d3:7d:81:d1:f9: d3:47:66:87:79:c9:68:97:ad:48:81:87:7a:c7:ac: 26:b1:b5:3f:ca:6e:84:c6:74:e8:02:12:77:68:3b: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BA:1B:04:87:01:75:27:5F:2B:16:BD:E6:78:A7:70:CE:90:EB:36 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:32:d7:bf:b5:e8:95:f9:20:59:de:52:15:cc:2e:9e:4e:59: 15:81:20:85:48:95:22:47:32:79:b5:72:45:22:fa:1e:0d:4d: f7:f8:54:ad:40:83:6f:47:2e:dc:73:15:4f:63:d4:ab:95:47: 8d:cd:ed:ca:b8:e3:a6:c0:5b:3b:cb:4b:5a:3d:be:95:cf:07: aa:6f:de:c4:69:b7:43:96:8e:80:b7:1a:d5:4c:ad:32:db:15: 66:4d:e8:57:da:98:ec:f0:f9:22:a2:3d:b1:52:b9:59:44:a4: 41:db:d7:c8:0f:11:59:f4:5d:c9:fe:a4:0b:1d:bd:ed:84:c7: 6e:b4:b5:a5:c7:f5:a9:da:d7:0b:5d:e9:2c:c1:ae:0c:69:cd: 4b:de:5a:f4:1a:3e:57:61:c6:cf:4a:54:2c:b9:8c:23:59:0f: 39:a6:36:41:ae:6c:96:fb:9d:42:63:e3:1c:88:88:06:c6:6f: d7:0b:e7:0c:05:6e:68:30:6c:ee:80:7f:b4:f3:30:fe:74:12: 18:24:4f:60:fb:4b:ff:63:52:f1:f0:0d:2a:12:a6:91:7f:5f: ec:5f:53:fb:e1:23:e7:1a:21:fb:71:32:ac:ac:a1:cb:d3:9e: e1:43:36:61:58:40:f2:30:09:30:36:a4:ce:da:99:db:c5:69: d9:6d:26:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNOBVr6l95Tq+6FXmDqvCRVWYvrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjEwMjgxMTI1NDVaFw0yNjEwMzEyMjM3NDVaMDMxMTAvBgNV BAMTKDZBQkExQjA0ODcwMTc1Mjc1RjJCMTZCREU2NzhBNzcwQ0U5MEVCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesm668k22HHY2i9gWblON74bQ OihGp/T5pJ3ARztrt7D7J+foJqFxzV1+Dc1cTK/cbJPcXzOKGIyYIYll7ktJ1cWt ANDfP+V44MP+OODWrNXmhkVNvBpchvGpy0+kZqRi29YefXWv5dHVHfQfgVg8aMgK 7+qHgqI3s0J/AkqVK/XZtSg4c5qu6ZnG2HFc3pcAYXuTLMCmH3O3h3LDbgZaSCsz FnJSUqPXRdfyGl4o/2hRUdtjgRSkHGHCoBdPwt4eQF6u5Q1i2q6gqDiyQ6tuZLjU S5pYRSd/rTPTfYHR+dNHZod5yWiXrUiBh3rHrCaxtT/KboTGdOgCEndoO7IhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUarobBIcBdSdfKxa95nincM6Q6zYwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDLXv7Xolfkg Wd5SFcwunk5ZFYEghUiVIkcyebVyRSL6Hg1N9/hUrUCDb0cu3HMVT2PUq5VHjc3t yrjjpsBbO8tLWj2+lc8Hqm/exGm3Q5aOgLca1UytMtsVZk3oV9qY7PD5IqI9sVK5 WUSkQdvXyA8RWfRdyf6kCx297YTHbrS1pcf1qdrXC13pLMGuDGnNS95a9Bo+V2HG z0pULLmMI1kPOaY2Qa5slvudQmPjHIiIBsZv1wvnDAVuaDBs7oB/tPMw/nQSGCRP YPtL/2NS8fANKhKmkX9f7F9T++Ej5xoh+3EyrKyhy9Oe4UM2YVhA8jAJMDakztqZ 28Vp2W0mxg== -----END CERTIFICATE-----Generated at Wed Oct 28 22:17:13 2026 by rpki-client