$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: lrfhfyXUtqcrCXiDN3T0Lraa4C7C0AT7cQRJHSrI/v8= Subject key identifier: E4:06:11:DC:51:B4:AC:54:EA:DE:19:6D:28:44:F5:5D:67:2F:58:01 Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 4A426808B72911030A3F00FEF4FBE4E6D206A3BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: E4 Signing time: Mon 26 Oct 2026 14:23:45 +0000 Manifest this update: Mon 26 Oct 2026 14:18:45 +0000 Manifest next update: Fri 30 Oct 2026 00:45:45 +0000 Files and hashes: 1: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: WRwBwH7O+NHKw7lCZ2HrfvyCL/B9eZklrX0lqcjXky8=) 2: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:42:68:08:b7:29:11:03:0a:3f:00:fe:f4:fb:e4:e6:d2:06:a3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Oct 26 14:18:45 2026 GMT Not After : Oct 30 00:45:45 2026 GMT Subject: CN=E40611DC51B4AC54EADE196D2844F55D672F5801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:6c:ea:07:cc:20:ae:58:55:4b:1a:08:bf: b7:75:b4:aa:60:f5:79:14:37:66:d2:37:af:25:09: eb:4f:36:9c:0d:d1:7b:09:a6:f8:df:55:15:a3:95: 66:fe:e0:12:be:3c:f0:a5:34:8d:7c:2e:6c:d4:87: 91:b6:a1:f5:f6:ee:7a:d1:49:fb:de:3f:4d:32:7c: 7c:e8:62:5e:ee:94:23:a3:eb:30:6f:29:21:2c:c3: 67:ab:bb:81:88:4f:d6:96:80:13:68:c8:6f:54:9a: 91:f1:fa:73:c7:8a:1a:cf:b0:d2:43:56:0b:07:9e: e8:94:5c:00:1c:0d:13:6b:26:89:49:8b:9a:41:b5: 37:ee:4b:8a:e5:f6:32:6b:23:d2:2b:06:d7:72:45: 1e:11:84:a9:0e:06:90:f7:23:92:17:f3:e5:24:45: 04:25:9b:b8:ae:2b:fb:60:a6:31:17:cb:92:48:25: 07:23:61:78:5e:79:cb:2c:c4:d3:72:ca:43:f3:6a: b7:85:64:30:30:aa:ac:54:fd:bd:f1:ca:5f:f3:24: 2a:af:12:59:8a:e7:28:37:8f:0a:2d:b2:0a:91:71: 43:4c:85:32:be:37:17:0d:f4:ed:7c:53:8f:27:4c: 0e:e0:9e:72:43:72:7e:d6:d9:a7:d0:82:18:d3:79: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:06:11:DC:51:B4:AC:54:EA:DE:19:6D:28:44:F5:5D:67:2F:58:01 X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1b:7a:c6:64:95:4c:96:09:a8:d6:99:34:02:d2:55:3a:2f: f5:6f:ba:5b:06:5c:e0:29:63:94:b2:43:4a:d5:b2:b8:e9:f9: 2c:26:72:76:4b:d5:94:17:63:85:83:43:18:de:ac:f5:1d:e1: 70:1e:ef:41:92:76:cf:aa:14:d1:2a:05:f6:55:24:0b:fe:ef: 2b:d9:70:1f:3b:cf:67:83:e5:d2:4d:c3:e7:d3:3d:a4:7f:42: c3:b3:88:02:95:2c:9e:5c:f2:77:cb:28:0b:5e:4e:12:c8:2f: 44:61:be:66:5a:34:e9:ee:2f:01:0e:e5:93:25:37:08:5a:10: 6a:c6:d3:4d:a7:f8:04:07:fe:db:4a:0f:8a:c6:52:77:9b:d6: b0:96:4f:9d:08:04:f2:6a:1d:ac:80:76:95:54:6e:d0:98:5a: 6f:f4:c1:24:88:40:1f:53:c6:8f:02:06:05:c2:7d:39:02:2c: 79:40:46:4b:d1:c7:3b:2a:23:3e:8e:db:a4:4b:7f:49:f4:98: 19:b0:27:11:60:a5:41:75:b8:ef:04:b6:c2:b5:9d:55:30:14: be:ae:94:85:c3:78:c9:20:28:a2:80:af:7d:34:87:34:c1:7d: c6:51:42:d9:ee:a7:0a:b9:bf:bf:72:6e:75:29:42:26:8a:62: 6d:be:ea:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSkJoCLcpEQMKPwD+9Pvk5tIGo7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjEwMjYxNDE4NDVaFw0yNjEwMzAwMDQ1NDVaMDMxMTAvBgNV BAMTKEU0MDYxMURDNTFCNEFDNTRFQURFMTk2RDI4NDRGNTVENjcyRjU4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mmzqB8wgrlhVSxoIv7d1tKpg 9XkUN2bSN68lCetPNpwN0XsJpvjfVRWjlWb+4BK+PPClNI18LmzUh5G2ofX27nrR SfveP00yfHzoYl7ulCOj6zBvKSEsw2eru4GIT9aWgBNoyG9UmpHx+nPHihrPsNJD VgsHnuiUXAAcDRNrJolJi5pBtTfuS4rl9jJrI9IrBtdyRR4RhKkOBpD3I5IX8+Uk RQQlm7iuK/tgpjEXy5JIJQcjYXheecssxNNyykPzareFZDAwqqxU/b3xyl/zJCqv ElmK5yg3jwotsgqRcUNMhTK+NxcN9O18U48nTA7gnnJDcn7W2afQghjTeU35AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5AYR3FG0rFTq3hltKET1XWcvWAEwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERt6xmSVTJYJ qNaZNALSVTov9W+6WwZc4CljlLJDStWyuOn5LCZydkvVlBdjhYNDGN6s9R3hcB7v QZJ2z6oU0SoF9lUkC/7vK9lwHzvPZ4Pl0k3D59M9pH9Cw7OIApUsnlzyd8soC15O EsgvRGG+Zlo06e4vAQ7lkyU3CFoQasbTTaf4BAf+20oPisZSd5vWsJZPnQgE8mod rIB2lVRu0Jhab/TBJIhAH1PGjwIGBcJ9OQIseUBGS9HHOyojPo7bpEt/SfSYGbAn EWClQXW47wS2wrWdVTAUvq6UhcN4ySAoooCvfTSHNMF9xlFC2e6nCrm/v3JudSlC Jopibb7qiQ== -----END CERTIFICATE-----Generated at Tue Oct 27 02:11:34 2026 by rpki-client