$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: Oj5OcNkr2oQrdgpCeJpb9aklhPKs8TozGR8Qdckfpss= Subject key identifier: 57:B7:16:60:96:38:E2:2B:44:CA:CE:F4:63:39:65:5E:1A:EE:7C:7C Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 571A4D9D8597270CBEC64CFD11CD610A51AB336B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 0140 Signing time: Sun 25 Oct 2026 19:12:54 +0000 Manifest this update: Sun 25 Oct 2026 19:07:54 +0000 Manifest next update: Thu 29 Oct 2026 07:04:54 +0000 Files and hashes: 1: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 2: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: R4xV5wo/M7AWnmS6FclAyKOEYynn1k0ltTPhcSTGFAw=) 3: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1a:4d:9d:85:97:27:0c:be:c6:4c:fd:11:cd:61:0a:51:ab:33:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Oct 25 19:07:54 2026 GMT Not After : Oct 29 07:04:54 2026 GMT Subject: CN=57B716609638E22B44CACEF46339655E1AEE7C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:10:47:38:0a:e3:d3:b0:50:e2:07:73:1b: cf:9d:c9:06:78:91:b1:1a:10:78:77:4a:6f:d7:56: 50:ad:aa:91:4c:d5:5e:f1:d6:a5:cd:38:eb:34:88: 7f:c5:e3:36:37:41:ba:69:34:52:a0:e4:44:de:0c: 90:51:db:78:f1:82:cc:0c:53:91:78:fb:92:d6:4d: d7:8f:d2:c3:9e:ea:07:21:d0:0e:f4:18:57:85:0d: 34:bb:80:59:b9:18:0f:5d:a3:4d:f7:52:89:e7:35: 8e:de:52:67:e2:ae:19:9d:50:55:ee:e4:51:13:3c: f8:31:f1:ee:20:2c:c1:87:53:a8:b4:08:dc:de:0c: 3d:f7:69:d2:8e:cb:de:aa:de:25:e0:2c:31:75:4a: 61:7d:30:d0:c0:c4:4c:f0:ac:8b:8f:03:d1:f0:a2: ff:16:0b:11:9e:0e:2d:bd:52:f1:3b:e4:e2:70:82: ea:52:19:39:0e:b9:3c:1d:fc:c3:6e:70:cf:ad:94: de:2a:1a:48:34:49:4f:d7:c5:87:dd:19:ae:76:8c: 17:4b:9b:e5:03:74:9b:78:f9:1e:c3:0c:63:e8:61: e2:12:f8:f0:cd:31:21:67:88:bc:b1:31:f6:cd:22: c6:5b:87:5f:35:8d:26:18:76:fa:a0:67:df:a8:3a: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B7:16:60:96:38:E2:2B:44:CA:CE:F4:63:39:65:5E:1A:EE:7C:7C X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3a:ad:76:89:13:e2:4a:90:06:77:89:28:7a:ec:60:83:a8: 10:cc:02:4c:49:4b:7b:87:33:ee:8b:d6:bf:ea:5f:d6:71:77: 79:5b:b7:99:a8:9d:45:f1:6a:7b:de:bc:6e:30:02:fd:f0:30: b1:6e:e8:66:a7:94:ff:54:b4:c6:5e:4c:f1:7a:33:70:2a:2d: f7:4b:52:86:86:0b:df:57:4c:6a:05:c9:de:c1:c1:f0:ea:32: 44:47:8a:81:3e:2d:65:93:d9:8f:87:e6:9c:99:76:3c:b4:c8: 6d:a6:35:ad:52:03:2f:3d:c8:b2:ff:bb:c6:59:9a:8f:3f:6b: 17:2f:a9:92:f3:b2:9c:42:77:38:5e:4b:b7:ab:a5:45:66:21: 04:d4:99:0c:49:f8:68:54:df:dd:64:7c:a6:b3:d2:57:33:e2: c8:1d:2b:d1:bc:2d:6e:be:7e:28:b3:1f:eb:ae:87:6d:f9:53: 3d:64:09:c3:88:9a:e1:04:cd:3f:60:a3:4d:74:60:6f:48:1b: 21:68:76:96:fa:31:c2:90:d6:cf:80:9d:22:21:4d:01:83:68: d4:8c:4e:1c:4d:d8:2c:16:9c:bf:fe:e2:4a:94:33:08:76:3d: 60:65:26:a0:4d:2e:d1:9a:14:de:5c:7c:90:a4:81:a8:e5:a4: dd:19:63:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVxpNnYWXJwy+xkz9Ec1hClGrM2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjEwMjUxOTA3NTRaFw0yNjEwMjkwNzA0NTRaMDMxMTAvBgNV BAMTKDU3QjcxNjYwOTYzOEUyMkI0NENBQ0VGNDYzMzk2NTVFMUFFRTdDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM3BBHOArj07BQ4gdzG8+dyQZ4 kbEaEHh3Sm/XVlCtqpFM1V7x1qXNOOs0iH/F4zY3QbppNFKg5ETeDJBR23jxgswM U5F4+5LWTdeP0sOe6gch0A70GFeFDTS7gFm5GA9do033UonnNY7eUmfirhmdUFXu 5FETPPgx8e4gLMGHU6i0CNzeDD33adKOy96q3iXgLDF1SmF9MNDAxEzwrIuPA9Hw ov8WCxGeDi29UvE75OJwgupSGTkOuTwd/MNucM+tlN4qGkg0SU/XxYfdGa52jBdL m+UDdJt4+R7DDGPoYeIS+PDNMSFniLyxMfbNIsZbh181jSYYdvqgZ9+oOj4vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV7cWYJY44itEys70YzllXhrufHwwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjqtdokT4kqQ BneJKHrsYIOoEMwCTElLe4cz7ovWv+pf1nF3eVu3maidRfFqe968bjAC/fAwsW7o ZqeU/1S0xl5M8XozcCot90tShoYL31dMagXJ3sHB8OoyREeKgT4tZZPZj4fmnJl2 PLTIbaY1rVIDLz3Isv+7xlmajz9rFy+pkvOynEJ3OF5Lt6ulRWYhBNSZDEn4aFTf 3WR8prPSVzPiyB0r0bwtbr5+KLMf666HbflTPWQJw4ia4QTNP2CjTXRgb0gbIWh2 lvoxwpDWz4CdIiFNAYNo1IxOHE3YLBacv/7iSpQzCHY9YGUmoE0u0ZoU3lx8kKSB qOWk3Rljnw== -----END CERTIFICATE-----Generated at Tue Oct 27 18:15:49 2026 by rpki-client