$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: WX3X/nDzEMsTru8ZZCAIhs8JHqjSHXvVqSqBIcdNNPk= Subject key identifier: 6B:BC:31:3D:C6:7A:D9:55:61:3F:D9:1B:17:47:FD:B6:0A:4E:C2:13 Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 7B834D7DDE6AF8E7C3C0D58A9DBAD59DDE1E7E18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: D0 Signing time: Tue 13 Oct 2026 12:58:02 +0000 Manifest this update: Tue 13 Oct 2026 12:53:02 +0000 Manifest next update: Fri 16 Oct 2026 15:37:02 +0000 Files and hashes: 1: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=) 2: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: xoNPBJC30uL+9trcjg8EN3HjOuXs5pKAl1U4VGnNJc8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:83:4d:7d:de:6a:f8:e7:c3:c0:d5:8a:9d:ba:d5:9d:de:1e:7e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Oct 13 12:53:02 2026 GMT Not After : Oct 16 15:37:02 2026 GMT Subject: CN=6BBC313DC67AD955613FD91B1747FDB60A4EC213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:90:61:e0:4a:70:35:a9:bb:54:73:7a:5d: 56:6e:49:91:e1:18:e9:f4:0b:65:1f:ea:c2:05:ba: de:2f:19:00:52:88:12:90:2b:22:24:32:79:fb:ea: be:be:e6:8c:4a:ae:61:c0:d2:c0:07:00:6c:22:32: ce:f5:ff:bb:b0:32:03:c1:75:a0:84:f2:1a:9c:29: d5:68:a8:79:fc:a6:b3:bc:7e:34:12:f6:3f:9d:83: 4b:9c:68:8b:7e:80:6b:3d:9b:eb:05:02:b0:ed:fc: 72:18:f5:ef:ce:84:60:a6:32:cd:39:59:8d:94:56: fb:2e:cf:0b:ea:a1:a0:43:01:31:08:eb:17:ab:4e: ee:54:8b:fd:91:51:5a:b1:ae:53:ee:d2:c3:9d:ed: 9d:88:51:80:69:09:79:40:1b:a5:88:ec:3f:9c:64: 35:11:14:be:5f:73:48:be:ea:f4:a7:de:2a:fd:9a: ff:49:1d:40:77:b6:ba:28:1d:4a:19:be:d7:98:69: ba:db:f5:6d:03:bd:b4:80:76:bc:9e:f2:cd:d8:38: 2e:1b:89:1b:c4:b6:7c:f9:4c:37:f9:a6:8b:36:2c: 50:e2:35:c9:fe:49:67:45:5f:42:95:a9:69:c5:db: 04:4a:0c:dd:c0:50:98:9d:0d:13:3f:2f:36:4f:34: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:31:3D:C6:7A:D9:55:61:3F:D9:1B:17:47:FD:B6:0A:4E:C2:13 X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ab:e3:92:c9:37:ee:9c:4c:88:49:79:dd:49:74:15:00:d4: 4b:f0:75:e2:c8:cd:41:7b:7e:c4:3a:13:fd:54:75:8d:a2:97: 0c:8e:81:82:e3:51:c2:2d:26:94:f2:19:d4:b7:3c:bd:14:80: a9:e5:2f:27:a6:05:db:9f:16:96:0a:70:01:71:90:7b:51:15: b1:a5:b6:3e:0c:e9:08:12:9c:04:a1:39:58:1f:05:9d:ab:d2: 1f:d5:5e:39:9c:f6:28:c4:39:3a:9c:3e:b8:63:e6:b4:5a:3d: b5:6e:4d:7c:2f:e0:61:03:be:de:97:80:46:36:19:f6:29:40: 39:90:5c:af:fe:ba:88:a5:db:d7:37:11:bc:bf:1d:d8:81:ec: 4d:a5:63:5f:6f:8a:13:0a:20:da:56:2a:ba:7c:24:6e:c2:0b: be:8a:30:8c:a7:02:49:92:b9:44:35:05:4b:87:07:f3:2a:7a: f9:a0:da:8f:9c:df:23:36:34:6a:c3:cf:34:23:03:da:40:e5: 81:46:8a:c7:6f:fa:2d:9f:8a:63:29:9a:65:c2:62:7e:68:bc: f2:f7:4e:04:7e:0f:0b:e9:7b:47:81:e8:5e:b8:2a:9c:1f:46: f8:7c:aa:39:0f:56:4b:53:41:da:59:fb:fc:5f:83:27:1e:70: 21:02:24:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe4NNfd5q+OfDwNWKnbrVnd4efhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjEwMTMxMjUzMDJaFw0yNjEwMTYxNTM3MDJaMDMxMTAvBgNV BAMTKDZCQkMzMTNEQzY3QUQ5NTU2MTNGRDkxQjE3NDdGREI2MEE0RUMyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXNZBh4EpwNam7VHN6XVZuSZHh GOn0C2Uf6sIFut4vGQBSiBKQKyIkMnn76r6+5oxKrmHA0sAHAGwiMs71/7uwMgPB daCE8hqcKdVoqHn8prO8fjQS9j+dg0ucaIt+gGs9m+sFArDt/HIY9e/OhGCmMs05 WY2UVvsuzwvqoaBDATEI6xerTu5Ui/2RUVqxrlPu0sOd7Z2IUYBpCXlAG6WI7D+c ZDURFL5fc0i+6vSn3ir9mv9JHUB3trooHUoZvteYabrb9W0DvbSAdrye8s3YOC4b iRvEtnz5TDf5pos2LFDiNcn+SWdFX0KVqWnF2wRKDN3AUJidDRM/LzZPNMg7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa7wxPcZ62VVhP9kbF0f9tgpOwhMwHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKvjksk37pxM iEl53Ul0FQDUS/B14sjNQXt+xDoT/VR1jaKXDI6BguNRwi0mlPIZ1Lc8vRSAqeUv J6YF258WlgpwAXGQe1EVsaW2PgzpCBKcBKE5WB8FnavSH9VeOZz2KMQ5Opw+uGPm tFo9tW5NfC/gYQO+3peARjYZ9ilAOZBcr/66iKXb1zcRvL8d2IHsTaVjX2+KEwog 2lYqunwkbsILvoowjKcCSZK5RDUFS4cH8yp6+aDaj5zfIzY0asPPNCMD2kDlgUaK x2/6LZ+KYymaZcJifmi88vdOBH4PC+l7R4HoXrgqnB9G+HyqOQ9WS1NB2ln7/F+D Jx5wIQIksA== -----END CERTIFICATE-----Generated at Tue Oct 13 20:45:21 2026 by rpki-client