$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: otVdH/BAuShSVK5CpxQxgQMkz7TdOnIjlZlFPP8UF10= Subject key identifier: 30:DF:0C:8A:3B:A2:85:5B:70:27:03:C1:60:DD:6D:7A:ED:39:7D:CA Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 0F0B3964211061F9C45761C52375F4B8EE026560 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: CF Signing time: Tue 27 Oct 2026 20:45:08 +0000 Manifest this update: Tue 27 Oct 2026 20:40:08 +0000 Manifest next update: Fri 30 Oct 2026 23:43:08 +0000 Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: JzbGHZNuoozWZhkaBETD398RM348yXasrjzYIzSAoRU=) 2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 23:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0b:39:64:21:10:61:f9:c4:57:61:c5:23:75:f4:b8:ee:02:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: Oct 27 20:40:08 2026 GMT Not After : Oct 30 23:43:08 2026 GMT Subject: CN=30DF0C8A3BA2855B702703C160DD6D7AED397DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:9b:a9:8a:55:0a:c5:30:c1:12:5c:9a:05: 60:4f:e7:70:3f:99:1a:3c:fa:cf:18:7a:6c:f0:0d: 9c:38:e0:1e:58:dd:83:69:c5:64:de:93:23:2f:01: 4f:b2:45:af:bd:74:5a:1d:4c:21:28:ad:b0:90:b4: b7:dd:8d:76:36:9d:20:7b:fe:51:a6:b8:be:39:c6: 99:59:13:db:dd:4d:b9:a9:68:1f:b1:57:04:a3:33: 30:f7:51:66:7d:97:7d:7d:92:3a:fc:a3:ff:34:0e: 64:c0:08:bf:68:b7:c6:59:01:23:a6:b5:26:bf:15: fa:09:97:7e:a0:9e:5f:01:a9:07:20:17:04:ab:13: c7:25:a9:3e:01:26:13:8e:d3:2a:d4:bc:eb:ec:08: 73:9d:09:29:c8:72:65:3c:c5:56:91:41:b8:30:74: 33:fe:16:11:6d:48:26:3c:3c:0e:ac:65:53:f3:e3: 09:b4:dc:1c:23:58:b0:c3:62:37:26:cd:3d:c9:03: c2:c6:53:22:6d:69:ec:24:a7:49:aa:4e:04:ed:53: 66:15:5c:45:1d:cc:cf:d3:26:35:ea:22:7a:97:ca: f4:85:fa:b9:d0:10:f3:a7:a1:c1:11:e2:c1:9e:12: 08:a3:6b:77:ed:16:2d:7d:98:06:f2:ed:ca:36:fb: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DF:0C:8A:3B:A2:85:5B:70:27:03:C1:60:DD:6D:7A:ED:39:7D:CA X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:56:ee:30:f2:a0:d9:00:e0:37:9a:cb:42:1a:13:6c:93:e4: 49:fb:c4:9b:51:54:0f:28:46:d2:75:f4:23:ad:6c:f6:46:ef: c8:a8:6c:6e:16:97:88:60:ba:a3:8e:95:70:4b:71:09:41:11: 85:b8:be:81:33:51:0d:ca:f8:9a:32:e8:dd:37:b4:b2:8c:34: 3d:8d:c9:5f:37:1a:93:a4:b8:97:91:f1:e0:30:6e:37:a9:aa: bc:cb:f1:32:f5:73:88:85:c1:21:83:4c:89:89:b8:69:a0:63: dd:b8:e4:05:7b:f9:bc:cb:79:e2:9b:d5:30:fc:c5:f5:fe:36: 8d:34:b4:d2:d8:91:46:13:4a:a4:42:5e:47:54:f1:b4:3c:cd: ac:73:67:f5:9c:41:17:7f:26:6b:a6:ec:a7:11:f6:3e:9a:1e: 77:09:1a:01:77:c2:e7:94:2c:c6:f1:d4:3b:43:4a:8e:81:10: e1:c9:7b:f0:1d:bd:17:85:6a:87:88:6f:fc:87:02:8a:f3:5e: 00:17:11:31:0b:5d:a1:c0:47:56:0c:56:a0:6c:6d:4f:e9:23: 83:a3:7d:0a:f2:c3:a3:18:1a:77:e2:c5:94:27:b1:2d:e2:15: 9a:0d:b2:fd:b2:84:17:6e:8b:36:47:93:1f:7b:73:09:de:7c: 6e:44:94:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDws5ZCEQYfnEV2HFI3X0uO4CZWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjEwMjcyMDQwMDhaFw0yNjEwMzAyMzQzMDhaMDMxMTAvBgNV BAMTKDMwREYwQzhBM0JBMjg1NUI3MDI3MDNDMTYwREQ2RDdBRUQzOTdEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzJupilUKxTDBElyaBWBP53A/ mRo8+s8YemzwDZw44B5Y3YNpxWTekyMvAU+yRa+9dFodTCEorbCQtLfdjXY2nSB7 /lGmuL45xplZE9vdTbmpaB+xVwSjMzD3UWZ9l319kjr8o/80DmTACL9ot8ZZASOm tSa/FfoJl36gnl8BqQcgFwSrE8clqT4BJhOO0yrUvOvsCHOdCSnIcmU8xVaRQbgw dDP+FhFtSCY8PA6sZVPz4wm03BwjWLDDYjcmzT3JA8LGUyJtaewkp0mqTgTtU2YV XEUdzM/TJjXqInqXyvSF+rnQEPOnocER4sGeEgija3ftFi19mAby7co2+w9DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMN8MijuihVtwJwPBYN1teu05fcowHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVbuMPKg2QDg N5rLQhoTbJPkSfvEm1FUDyhG0nX0I61s9kbvyKhsbhaXiGC6o46VcEtxCUERhbi+ gTNRDcr4mjLo3Te0sow0PY3JXzcak6S4l5Hx4DBuN6mqvMvxMvVziIXBIYNMiYm4 aaBj3bjkBXv5vMt54pvVMPzF9f42jTS00tiRRhNKpEJeR1TxtDzNrHNn9ZxBF38m a6bspxH2PpoedwkaAXfC55QsxvHUO0NKjoEQ4cl78B29F4Vqh4hv/IcCivNeABcR MQtdocBHVgxWoGxtT+kjg6N9CvLDoxgad+LFlCexLeIVmg2y/bKEF26LNkeTH3tz Cd58bkSUUQ== -----END CERTIFICATE-----Generated at Wed Oct 28 14:44:20 2026 by rpki-client