$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: pSIhMJZnSogyLuULMJ8neorAYEJjQxV8+t0lBxQcqLU= Subject key identifier: 5A:92:77:92:E2:53:70:B3:9E:53:8E:28:1A:43:C0:C5:73:B5:CF:AA Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 0F3DE1BABB60F75B5EF69651475E9906353B4550 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 06:28:38 +0000 Manifest this update: Wed 14 Oct 2026 06:23:38 +0000 Manifest next update: Sat 17 Oct 2026 10:13:38 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: JYqh9F1VlEESNFp+E2oGh8wfD/HBnxKJlxwUYutLMyE=) 3: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3d:e1:ba:bb:60:f7:5b:5e:f6:96:51:47:5e:99:06:35:3b:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Oct 14 06:23:38 2026 GMT Not After : Oct 17 10:13:38 2026 GMT Subject: CN=5A927792E25370B39E538E281A43C0C573B5CFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:3f:2b:17:35:c3:9a:23:3a:8b:7c:6f:25: d7:e0:44:a1:3e:20:f1:d0:bf:ef:c5:a4:a8:6c:a5: e7:e9:4d:41:24:3a:98:96:f0:aa:da:0b:50:08:24: 5f:6b:d8:47:e3:33:44:10:aa:ca:27:9d:74:f5:7a: 0d:9f:e6:04:21:65:67:1c:9b:78:28:1e:81:f4:8a: 22:2e:34:42:de:cd:dd:76:ae:e6:a1:ee:23:b8:e0: 4a:a6:7d:d1:68:41:9a:1a:dd:69:ff:4b:96:a8:7f: 7f:9a:e4:89:49:6f:18:e7:e4:2c:1f:87:2c:25:7f: cc:91:e7:ed:77:39:78:ed:f0:84:a3:1a:d9:7d:70: 3d:e1:6d:ec:34:67:14:30:8c:ca:11:76:88:5c:0d: 37:58:c7:5e:ae:95:1c:5a:b2:24:d9:a0:0e:8e:1f: 8c:3e:10:e6:2d:3c:5d:f0:f4:60:39:35:38:2f:34: aa:b4:a4:a1:1c:94:a1:c3:b0:c0:ca:38:62:46:5f: 42:a0:c5:c0:56:f1:af:70:be:00:20:44:01:ab:15: e5:fc:26:c5:a6:6f:8d:d4:d7:75:37:f6:5c:86:91: 07:5d:26:cd:92:c5:96:65:aa:55:1b:59:09:41:60: 3b:4f:3c:d7:62:bd:68:78:f1:11:94:03:7e:52:ab: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:92:77:92:E2:53:70:B3:9E:53:8E:28:1A:43:C0:C5:73:B5:CF:AA X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:cc:d0:dd:c9:43:05:89:d8:45:4b:60:ef:41:30:e1:ae: 23:98:fd:f3:48:df:72:a4:6b:c2:1c:f7:50:28:21:ca:67:e1: d5:08:5d:51:04:8d:6a:05:ab:0a:dc:40:1f:75:15:32:3c:72: 38:40:31:d3:ef:15:3c:9f:42:3c:34:cc:06:78:5c:e1:c7:65: 81:bc:03:e0:86:81:f3:55:ab:aa:cb:f5:fd:00:55:9d:26:d8: 4a:7f:68:e1:88:a3:df:03:d8:e0:19:20:51:d0:91:9d:32:74: 03:67:f7:4f:a5:8d:cd:9b:d4:e4:b5:5d:07:6e:8e:e2:8b:00: e1:00:b4:db:d2:c9:28:d6:b6:c3:b7:4a:2e:99:e1:55:cc:6d: 7d:af:04:25:3a:a1:a4:66:2d:ca:62:50:9d:48:18:a8:4b:f5: de:14:cc:6b:fe:45:cc:04:f0:0b:1e:e5:ce:38:bf:bf:b9:46: 77:46:53:0c:f2:d2:41:30:26:dc:c5:12:88:00:27:ac:15:81: be:5e:c1:30:ac:7f:7d:0d:45:f3:45:18:08:96:29:12:c6:93: b2:a5:05:9c:5e:6d:6a:46:44:14:8f:7c:32:88:05:f6:0b:e6: a7:89:a3:6c:33:e6:ba:26:6b:01:e9:08:a9:f9:8b:68:44:e9: 54:6e:e0:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDz3hurtg91te9pZRR16ZBjU7RVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjEwMTQwNjIzMzhaFw0yNjEwMTcxMDEzMzhaMDMxMTAvBgNV BAMTKDVBOTI3NzkyRTI1MzcwQjM5RTUzOEUyODFBNDNDMEM1NzNCNUNGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdT8rFzXDmiM6i3xvJdfgRKE+ IPHQv+/FpKhspefpTUEkOpiW8KraC1AIJF9r2EfjM0QQqsonnXT1eg2f5gQhZWcc m3goHoH0iiIuNELezd12ruah7iO44EqmfdFoQZoa3Wn/S5aof3+a5IlJbxjn5Cwf hywlf8yR5+13OXjt8ISjGtl9cD3hbew0ZxQwjMoRdohcDTdYx16ulRxasiTZoA6O H4w+EOYtPF3w9GA5NTgvNKq0pKEclKHDsMDKOGJGX0KgxcBW8a9wvgAgRAGrFeX8 JsWmb43U13U39lyGkQddJs2SxZZlqlUbWQlBYDtPPNdivWh48RGUA35SqwIXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWpJ3kuJTcLOeU44oGkPAxXO1z6owHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8vM0N3JQwWJ 2EVLYO9BMOGuI5j980jfcqRrwhz3UCghymfh1QhdUQSNagWrCtxAH3UVMjxyOEAx 0+8VPJ9CPDTMBnhc4cdlgbwD4IaB81Wrqsv1/QBVnSbYSn9o4Yij3wPY4BkgUdCR nTJ0A2f3T6WNzZvU5LVdB26O4osA4QC029LJKNa2w7dKLpnhVcxtfa8EJTqhpGYt ymJQnUgYqEv13hTMa/5FzATwCx7lzji/v7lGd0ZTDPLSQTAm3MUSiAAnrBWBvl7B MKx/fQ1F80UYCJYpEsaTsqUFnF5takZEFI98MogF9gvmp4mjbDPmuiZrAekIqfmL aETpVG7gXg== -----END CERTIFICATE-----Generated at Wed Oct 14 18:46:49 2026 by rpki-client