$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: npLOKrTyLHRasUQSd6BpbrkDO5824avtWkjbkQKladY= Subject key identifier: 25:78:33:CC:21:0F:64:C4:53:8A:44:16:23:0A:F0:94:AD:F0:7E:5D Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 2D068CAA0EFC4E550FCC400DCC4A21BBF2B5B78E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: D4 Signing time: Sun 25 Oct 2026 10:17:29 +0000 Manifest this update: Sun 25 Oct 2026 10:12:29 +0000 Manifest next update: Wed 28 Oct 2026 10:23:29 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 2: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 3: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 4: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: l2rmJRjbNdmzEccBFZk4fQwGLP5Nvj1AWf8z1E6esNQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 10:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:06:8c:aa:0e:fc:4e:55:0f:cc:40:0d:cc:4a:21:bb:f2:b5:b7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Oct 25 10:12:29 2026 GMT Not After : Oct 28 10:23:29 2026 GMT Subject: CN=257833CC210F64C4538A4416230AF094ADF07E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:5e:cb:f5:9d:5f:5a:dc:b6:12:9d:1b:2c: 44:fc:06:61:5a:e5:b2:25:b5:9b:3c:f5:b5:87:64: 76:5a:72:a5:6d:91:ab:3f:ae:6c:bb:5f:9d:b1:7b: 21:c6:ba:21:65:95:ee:90:b8:30:28:de:e4:31:f3: 43:d4:d5:36:1a:fa:7e:23:ac:cd:c6:be:97:ac:69: 22:14:ea:82:c7:fb:ab:a9:d6:c0:37:ea:dd:af:45: 5a:8e:a5:42:bb:cf:6b:d0:ba:a7:17:44:db:48:55: d1:6c:f4:21:3e:8d:4b:44:fc:f1:de:92:ed:6a:0e: 4b:a1:66:32:06:e8:43:ea:32:d8:31:97:19:1d:15: 21:de:9f:7d:04:ee:03:6d:af:10:d7:e3:e1:36:4f: 74:3a:dc:89:c4:b8:93:68:fa:aa:89:00:8b:99:d3: c3:e7:be:50:88:4c:6d:de:e2:ab:67:9a:d8:8c:62: f0:70:33:8c:de:2e:39:55:74:44:fb:3f:e9:82:31: 91:1f:3b:08:83:5e:65:a7:a5:db:40:1b:c5:e1:30: ee:dc:24:c5:d5:a1:af:f0:da:e9:82:b4:91:7b:31: d4:6f:82:37:07:eb:76:8f:6b:16:18:ee:ed:8b:b3: 3d:11:df:e9:9d:3c:45:c8:62:fe:c1:48:a2:95:f5: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:78:33:CC:21:0F:64:C4:53:8A:44:16:23:0A:F0:94:AD:F0:7E:5D X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c4:ac:af:34:90:30:9e:d8:ea:c0:70:37:93:b0:c7:b2:09: f9:d6:e5:b9:10:32:d3:dd:55:6b:97:32:14:ae:2b:ac:02:b0: c8:a5:26:99:a6:cf:fb:64:d5:50:b9:63:44:6b:ec:c4:ef:36: d1:2a:20:e9:88:53:59:ea:ce:e9:33:ac:e4:7a:02:61:ea:64: 5d:dd:d9:9a:bf:ae:8d:69:21:aa:82:a0:c9:2c:c4:ef:35:6b: 8f:e4:fd:51:c9:d0:a6:22:54:8c:92:7a:12:e1:4d:96:76:6a: e1:51:02:93:72:69:0b:8d:75:31:f1:6b:77:a3:81:17:b2:98: 0c:52:f4:e6:91:a5:cd:f3:d0:fb:5c:00:59:ce:cf:f9:7a:67: 93:11:51:ac:1a:4d:ab:f7:87:5f:61:96:c7:7b:29:1c:cf:92: 28:0d:9d:37:9e:8e:34:16:f3:64:d1:4f:a1:2f:bb:c5:7f:29: f7:c4:65:69:c7:0f:14:cb:c7:e7:9c:c1:f2:27:7f:8b:d3:8f: bd:6a:d4:80:21:66:a1:02:fa:9f:58:a9:83:b6:df:9e:77:eb: 6f:0e:15:12:e4:41:49:2e:de:18:0c:b9:51:e1:6c:82:2b:38: 44:1f:f6:91:b3:d0:2f:10:cf:68:59:0a:a2:c2:f2:42:6d:cd: 92:44:b4:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULQaMqg78TlUPzEANzEohu/K1t44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjEwMjUxMDEyMjlaFw0yNjEwMjgxMDIzMjlaMDMxMTAvBgNV BAMTKDI1NzgzM0NDMjEwRjY0QzQ1MzhBNDQxNjIzMEFGMDk0QURGMDdFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTal7L9Z1fWty2Ep0bLET8BmFa 5bIltZs89bWHZHZacqVtkas/rmy7X52xeyHGuiFlle6QuDAo3uQx80PU1TYa+n4j rM3GvpesaSIU6oLH+6up1sA36t2vRVqOpUK7z2vQuqcXRNtIVdFs9CE+jUtE/PHe ku1qDkuhZjIG6EPqMtgxlxkdFSHen30E7gNtrxDX4+E2T3Q63InEuJNo+qqJAIuZ 08PnvlCITG3e4qtnmtiMYvBwM4zeLjlVdET7P+mCMZEfOwiDXmWnpdtAG8XhMO7c JMXVoa/w2umCtJF7MdRvgjcH63aPaxYY7u2Lsz0R3+mdPEXIYv7BSKKV9XYzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJXgzzCEPZMRTikQWIwrwlK3wfl0wHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcSsrzSQMJ7Y 6sBwN5Owx7IJ+dbluRAy091Va5cyFK4rrAKwyKUmmabP+2TVULljRGvsxO820Sog 6YhTWerO6TOs5HoCYepkXd3Zmr+ujWkhqoKgySzE7zVrj+T9UcnQpiJUjJJ6EuFN lnZq4VECk3JpC411MfFrd6OBF7KYDFL05pGlzfPQ+1wAWc7P+XpnkxFRrBpNq/eH X2GWx3spHM+SKA2dN56ONBbzZNFPoS+7xX8p98RlaccPFMvH55zB8id/i9OPvWrU gCFmoQL6n1ipg7bfnnfrbw4VEuRBSS7eGAy5UeFsgis4RB/2kbPQLxDPaFkKosLy Qm3NkkS0nw== -----END CERTIFICATE-----Generated at Mon Oct 26 16:59:27 2026 by rpki-client