$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: rGrMtqwLmDluJL2hIxZRQM7XhrWehTJp+D/amV8l0No= Subject key identifier: B3:D8:18:87:22:13:9D:C8:6D:C3:DF:D4:03:9B:39:8F:28:43:D8:D9 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 645BCEBBAB1B7472AABF2F7AFCFEC015AB035133 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 013C Signing time: Fri 16 Oct 2026 20:33:04 +0000 Manifest this update: Fri 16 Oct 2026 20:28:04 +0000 Manifest next update: Tue 20 Oct 2026 04:36:04 +0000 Files and hashes: 1: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 2: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 3: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: hrr1ARt5fifdCTJCyZSUwTgnPcYjnse/sXkHVJL+PFI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 04:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:ce:bb:ab:1b:74:72:aa:bf:2f:7a:fc:fe:c0:15:ab:03:51:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Oct 16 20:28:04 2026 GMT Not After : Oct 20 04:36:04 2026 GMT Subject: CN=B3D8188722139DC86DC3DFD4039B398F2843D8D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:1f:0f:ef:e0:40:2f:ae:22:23:1e:4b:23: ad:3f:77:fe:1d:f0:13:77:69:88:18:ff:77:2a:8d: 13:17:52:11:aa:ba:2b:5d:9b:de:7d:f3:0a:de:e7: 9e:bf:a5:52:97:91:1a:db:95:b0:b0:8f:0a:2f:da: 3d:8e:2f:0a:43:cd:44:11:d6:6d:a9:9b:f1:81:bf: e4:61:de:6c:d0:a0:e8:9c:c1:5b:10:52:c7:4a:48: 61:4c:83:80:6e:f4:49:cf:2d:5c:58:11:74:47:8f: b3:73:2c:e6:41:7c:e5:9c:fd:af:b0:7e:1f:0c:d3: 2d:2b:39:44:f2:6f:57:9d:8f:be:a7:59:2f:64:44: 34:cf:64:0e:c6:29:a6:85:90:c1:f8:a2:0b:aa:15: 9e:24:d1:25:0c:30:01:34:45:03:75:e9:63:78:83: 86:0c:82:74:25:81:38:92:cb:8b:bb:f6:1b:b0:e3: 43:ab:11:a5:a2:36:1d:b8:e3:ff:22:bf:5a:cd:13: 71:f5:5a:39:30:45:57:3d:dc:bc:4f:2d:e7:4f:17: cc:13:4f:e2:1d:ea:37:65:f7:5a:f2:e2:1b:d7:a5: 74:5a:ef:9e:ea:d9:22:cb:8a:70:c9:17:a6:f4:14: e2:ab:b6:a7:cd:67:11:4e:87:63:5b:92:67:88:85: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:18:87:22:13:9D:C8:6D:C3:DF:D4:03:9B:39:8F:28:43:D8:D9 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6f:1f:f6:9a:72:80:68:bb:c8:66:12:6e:1b:89:a4:a5:ca: dd:48:b7:01:18:ba:2e:90:26:38:20:dc:77:b8:63:8d:d6:f1: 78:79:f8:5a:b1:d1:53:a3:e2:1d:ae:c8:c5:6f:24:5d:ac:e7: a8:25:f4:66:b6:11:99:7d:49:20:b9:94:5a:78:6e:1b:da:a9: 83:88:bb:f8:91:65:a9:e5:ea:f3:9c:0b:21:f3:2a:00:53:a1: b7:b6:f9:55:5a:ca:16:3c:92:7f:45:8f:94:5a:a9:a4:da:c8: b9:2a:57:c5:90:e7:86:07:8d:b0:e1:6f:dc:f0:5e:9c:ba:02: 3b:cb:af:ee:0c:12:2e:a5:af:fb:8f:5c:82:ce:de:ea:1b:2f: 29:87:b3:6d:15:35:71:ce:b1:da:04:30:5b:df:b4:bd:0d:6e: 16:9d:c3:a1:67:42:de:0d:6b:6f:2c:27:e9:c8:4e:44:22:55: 13:74:c4:f5:ad:24:54:09:bf:d6:65:31:24:56:b9:24:c7:73: 9a:99:dc:1d:4e:57:e9:80:45:c4:78:b8:1d:ce:4b:ee:32:e0: 09:e2:bd:d2:bc:be:c4:d9:8b:15:c1:ca:fa:a7:39:1c:ea:87: 93:2c:e9:28:20:82:88:f1:eb:90:9b:9a:f2:f2:53:15:79:d6: bd:5e:6e:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZFvOu6sbdHKqvy96/P7AFasDUTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjEwMTYyMDI4MDRaFw0yNjEwMjAwNDM2MDRaMDMxMTAvBgNV BAMTKEIzRDgxODg3MjIxMzlEQzg2REMzREZENDAzOUIzOThGMjg0M0Q4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRh8P7+BAL64iIx5LI60/d/4d 8BN3aYgY/3cqjRMXUhGquitdm9598wre556/pVKXkRrblbCwjwov2j2OLwpDzUQR 1m2pm/GBv+Rh3mzQoOicwVsQUsdKSGFMg4Bu9EnPLVxYEXRHj7NzLOZBfOWc/a+w fh8M0y0rOUTyb1edj76nWS9kRDTPZA7GKaaFkMH4oguqFZ4k0SUMMAE0RQN16WN4 g4YMgnQlgTiSy4u79huw40OrEaWiNh244/8iv1rNE3H1WjkwRVc93LxPLedPF8wT T+Id6jdl91ry4hvXpXRa757q2SLLinDJF6b0FOKrtqfNZxFOh2NbkmeIhf+dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs9gYhyITnchtw9/UA5s5jyhD2NkwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa28f9ppygGi7 yGYSbhuJpKXK3Ui3ARi6LpAmOCDcd7hjjdbxeHn4WrHRU6PiHa7IxW8kXaznqCX0 ZrYRmX1JILmUWnhuG9qpg4i7+JFlqeXq85wLIfMqAFOht7b5VVrKFjySf0WPlFqp pNrIuSpXxZDnhgeNsOFv3PBenLoCO8uv7gwSLqWv+49cgs7e6hsvKYezbRU1cc6x 2gQwW9+0vQ1uFp3DoWdC3g1rbywn6chORCJVE3TE9a0kVAm/1mUxJFa5JMdzmpnc HU5X6YBFxHi4Hc5L7jLgCeK90ry+xNmLFcHK+qc5HOqHkyzpKCCCiPHrkJua8vJT FXnWvV5uyQ== -----END CERTIFICATE-----Generated at Sun Oct 18 14:41:07 2026 by rpki-client