$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: HyyoyD70mP49JEqwD78nZ8J9t3QnDMyAYX7VC/5gRW4= Subject key identifier: 24:69:5D:46:7C:3B:AD:E0:0E:83:86:AC:2C:D2:B4:52:D7:CB:91:3E Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 4D18056A5D2F723635EA56BD6E8B1FBAC967014C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: D5 Signing time: Sun 25 Oct 2026 15:22:42 +0000 Manifest this update: Sun 25 Oct 2026 15:17:42 +0000 Manifest next update: Wed 28 Oct 2026 22:43:42 +0000 Files and hashes: 1: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) 2: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: q9/AAvW0jQ7/8/55qWnuCOz2PjdHH/m0zdWNGwwFaW0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 21:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:18:05:6a:5d:2f:72:36:35:ea:56:bd:6e:8b:1f:ba:c9:67:01:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Oct 25 15:17:42 2026 GMT Not After : Oct 28 22:43:42 2026 GMT Subject: CN=24695D467C3BADE00E8386AC2CD2B452D7CB913E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:42:92:a0:48:7b:47:cb:de:2f:04:ae:8a: 92:20:45:8b:ee:bf:b3:10:24:78:8a:66:d3:23:4c: 1a:9d:ee:b2:0c:a1:37:c9:d2:e5:1f:c6:62:03:32: d4:c9:ec:a4:d9:34:fd:88:e0:fd:ee:09:33:b2:d1: 9e:b2:52:b0:bc:a2:5b:6a:78:c6:e6:d2:f8:f9:77: 7d:21:24:72:92:77:64:af:d4:0d:49:ef:47:f4:ea: be:dd:31:cc:a2:84:91:aa:86:1a:1e:55:df:27:8d: 45:a4:9d:9e:ea:6b:46:b2:23:68:3d:03:cc:79:99: a8:91:12:95:8a:d7:35:84:18:6f:b8:00:35:da:a3: a9:a9:7e:fc:b1:ef:70:ae:24:34:4e:76:14:39:f9: 7b:d7:1e:43:6a:50:7a:db:c4:9f:b9:b1:46:10:6c: b2:5d:db:b4:e1:43:05:35:36:f0:8c:c3:b2:85:20: 6f:ef:ad:fb:f8:3e:b7:96:66:3a:a5:9b:5b:03:2a: 2e:0a:29:a5:62:39:d3:ea:71:4a:25:06:d9:af:9b: 14:ff:d2:e8:f6:56:41:79:05:d9:2c:05:df:2b:c4: 5f:97:74:a4:9c:6d:8e:18:f2:03:06:fa:2a:90:0c: 00:67:82:2a:a8:cc:a2:82:66:64:86:39:57:9d:38: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:5D:46:7C:3B:AD:E0:0E:83:86:AC:2C:D2:B4:52:D7:CB:91:3E X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:54:95:04:84:d3:c8:53:59:0f:90:4e:bb:8b:ce:53:cb:19: ff:42:ed:1c:ef:49:5e:a5:d7:dd:18:0d:6e:a2:5c:13:7b:22: 0d:4f:c0:0f:c8:26:36:cb:f4:5c:d2:49:26:d7:e5:cb:22:82: d5:e2:0d:3e:52:4e:c4:c1:b4:4d:e0:3c:79:08:3d:1f:29:ea: e2:85:a8:61:d4:36:2b:95:57:3c:c4:7c:c2:b9:9f:95:9d:e4: d0:bd:ba:5f:91:4b:e7:50:35:f3:88:48:4e:c4:b4:6c:15:a5: 13:d3:80:8b:ff:f9:70:5b:44:e8:12:4c:0b:7e:2c:6e:bc:ae: 53:27:f1:6f:2f:22:b6:8e:b0:dd:94:9d:b3:2a:cc:88:9e:98: 7f:d9:96:ce:08:5f:c0:85:89:2d:24:e6:eb:92:3b:4e:da:d1: b7:90:c6:51:d5:be:21:74:44:29:c1:5c:88:62:38:1e:89:3a: 53:f1:04:0e:e0:67:70:3c:46:56:f2:0d:f1:0e:7c:10:ea:33: f2:30:ab:25:ca:6c:10:61:74:fe:19:9e:3d:72:df:f3:5e:d1: e2:2a:55:fa:8c:42:b1:85:7b:df:18:61:db:4e:1d:18:9a:0d: bb:2a:25:67:a5:a7:2f:e0:65:aa:f8:73:45:3c:e8:c5:9f:cf: 8f:20:ed:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTRgFal0vcjY16la9bosfuslnAUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjEwMjUxNTE3NDJaFw0yNjEwMjgyMjQzNDJaMDMxMTAvBgNV BAMTKDI0Njk1RDQ2N0MzQkFERTAwRTgzODZBQzJDRDJCNDUyRDdDQjkxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKt0KSoEh7R8veLwSuipIgRYvu v7MQJHiKZtMjTBqd7rIMoTfJ0uUfxmIDMtTJ7KTZNP2I4P3uCTOy0Z6yUrC8oltq eMbm0vj5d30hJHKSd2Sv1A1J70f06r7dMcyihJGqhhoeVd8njUWknZ7qa0ayI2g9 A8x5maiREpWK1zWEGG+4ADXao6mpfvyx73CuJDROdhQ5+XvXHkNqUHrbxJ+5sUYQ bLJd27ThQwU1NvCMw7KFIG/vrfv4PreWZjqlm1sDKi4KKaViOdPqcUolBtmvmxT/ 0uj2VkF5BdksBd8rxF+XdKScbY4Y8gMG+iqQDABngiqozKKCZmSGOVedODFtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJGldRnw7reAOg4asLNK0UtfLkT4wHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1SVBITTyFNZ D5BOu4vOU8sZ/0LtHO9JXqXX3RgNbqJcE3siDU/AD8gmNsv0XNJJJtflyyKC1eIN PlJOxMG0TeA8eQg9Hynq4oWoYdQ2K5VXPMR8wrmflZ3k0L26X5FL51A184hITsS0 bBWlE9OAi//5cFtE6BJMC34sbryuUyfxby8ito6w3ZSdsyrMiJ6Yf9mWzghfwIWJ LSTm65I7TtrRt5DGUdW+IXREKcFciGI4Hok6U/EEDuBncDxGVvIN8Q58EOoz8jCr JcpsEGF0/hmePXLf817R4ipV+oxCsYV73xhh204dGJoNuyolZ6WnL+BlqvhzRTzo xZ/PjyDtug== -----END CERTIFICATE-----Generated at Mon Oct 26 00:44:42 2026 by rpki-client