$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: aceWpPg9JrbE0F9thwIsV3m2Z5uTgTHoS9NJoSaa1bY= Subject key identifier: AA:F8:81:D8:40:75:72:AB:AD:4F:30:02:FF:55:6E:FE:1F:B9:54:50 Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 4D57CF701F8CE0972988F99F8B0CEA4C3BAA3C8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: C4 Signing time: Mon 12 Oct 2026 22:47:29 +0000 Manifest this update: Mon 12 Oct 2026 22:42:29 +0000 Manifest next update: Thu 15 Oct 2026 23:23:29 +0000 Files and hashes: 1: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) 2: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) 3: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) 4: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: zKYlqTadEF7jHPM4pb3OFinjXcFrD/hzJaDSTaI1Fys=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:57:cf:70:1f:8c:e0:97:29:88:f9:9f:8b:0c:ea:4c:3b:aa:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: Oct 12 22:42:29 2026 GMT Not After : Oct 15 23:23:29 2026 GMT Subject: CN=AAF881D8407572ABAD4F3002FF556EFE1FB95450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:c3:0d:86:9f:49:ed:84:bb:28:4e:12:fb: 5c:56:26:f1:32:0b:88:d0:9c:73:2b:38:4f:44:ff: 62:64:d4:8b:01:f1:b4:10:e0:ec:4f:f3:4a:4a:4e: cd:12:cf:41:c5:5d:04:e5:18:a5:a5:d1:d5:2f:61: 09:be:a3:79:f1:fb:07:25:ef:46:cd:6b:46:06:47: 4d:84:ae:47:4e:51:06:46:8a:28:28:af:42:91:d2: f3:44:c7:40:ff:06:73:97:39:7a:5c:ec:d3:f2:7d: 05:9e:ba:a5:82:36:4f:cc:96:e8:d7:54:d3:50:af: 27:aa:d6:d8:2a:92:df:3e:2e:70:a3:64:7e:ff:d5: f8:b4:0f:54:b4:22:14:e0:3e:12:5d:c4:89:03:70: 31:62:fa:f3:57:61:92:cf:ef:e2:94:e2:bf:e9:0f: 50:dc:b2:f7:44:b2:29:75:17:99:68:a5:64:a1:fc: 1f:6a:88:4e:15:9a:2e:5f:d0:1f:28:82:5c:e4:41: c7:86:58:f9:40:2a:62:0a:d8:49:84:fd:a5:e6:59: 30:65:bc:af:f5:a3:16:94:ad:e8:50:c3:ff:fe:fe: 0f:a4:4f:e9:30:37:5b:b5:5b:23:0a:4a:ef:96:07: 11:96:d1:74:f8:ff:b8:ef:03:42:43:2b:40:24:4d: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:81:D8:40:75:72:AB:AD:4F:30:02:FF:55:6E:FE:1F:B9:54:50 X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2a:c0:eb:aa:33:e9:87:71:51:3f:7d:0c:85:fb:36:33:ec: 0d:1d:50:68:37:d8:ab:56:55:37:5d:c2:d0:bf:61:83:99:4c: 86:90:ad:60:78:22:d9:71:c0:d4:e4:b2:c0:35:f6:ef:6a:d8: e7:82:39:8c:37:92:3f:8d:eb:53:32:d6:5d:23:fb:42:77:3b: e4:0f:ba:e2:3e:1c:02:2a:36:95:7f:5a:b7:f9:0f:fd:f4:c1: 28:51:a3:1e:1b:b9:fe:5e:5d:74:02:63:30:33:75:4e:dd:94: 78:93:eb:c9:01:35:71:71:28:cd:e7:1f:9a:69:2b:e7:73:e3: 4d:69:52:21:78:69:9b:ee:93:b0:04:0b:1a:5c:b7:41:22:6e: 61:58:d6:5f:19:2d:a2:83:95:ad:6f:a6:71:ce:79:34:02:00: dc:7d:53:2f:82:32:4d:ce:ea:93:50:4a:d8:1d:1b:4c:1c:3d: 57:da:4f:11:67:04:23:1f:4b:2b:86:30:d9:31:1d:d9:5b:f9: dd:af:00:02:c6:37:05:f8:45:c4:f8:7a:6c:2d:1f:5a:84:5e: a8:69:19:9e:b7:f2:54:6d:86:75:96:96:fc:fc:1e:e5:f2:d9: a3:59:10:d3:a2:61:ba:6f:43:38:64:41:c2:34:0f:20:b8:f5: 5c:20:de:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTVfPcB+M4JcpiPmfiwzqTDuqPIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjEwMTIyMjQyMjlaFw0yNjEwMTUyMzIzMjlaMDMxMTAvBgNV BAMTKEFBRjg4MUQ4NDA3NTcyQUJBRDRGMzAwMkZGNTU2RUZFMUZCOTU0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPjcMNhp9J7YS7KE4S+1xWJvEy C4jQnHMrOE9E/2Jk1IsB8bQQ4OxP80pKTs0Sz0HFXQTlGKWl0dUvYQm+o3nx+wcl 70bNa0YGR02ErkdOUQZGiigor0KR0vNEx0D/BnOXOXpc7NPyfQWeuqWCNk/MlujX VNNQryeq1tgqkt8+LnCjZH7/1fi0D1S0IhTgPhJdxIkDcDFi+vNXYZLP7+KU4r/p D1DcsvdEsil1F5lopWSh/B9qiE4Vmi5f0B8oglzkQceGWPlAKmIK2EmE/aXmWTBl vK/1oxaUrehQw//+/g+kT+kwN1u1WyMKSu+WBxGW0XT4/7jvA0JDK0AkTQEzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqviB2EB1cqutTzAC/1Vu/h+5VFAwHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSrA66oz6Ydx UT99DIX7NjPsDR1QaDfYq1ZVN13C0L9hg5lMhpCtYHgi2XHA1OSywDX272rY54I5 jDeSP43rUzLWXSP7Qnc75A+64j4cAio2lX9at/kP/fTBKFGjHhu5/l5ddAJjMDN1 Tt2UeJPryQE1cXEozecfmmkr53PjTWlSIXhpm+6TsAQLGly3QSJuYVjWXxktooOV rW+mcc55NAIA3H1TL4IyTc7qk1BK2B0bTBw9V9pPEWcEIx9LK4Yw2TEd2Vv53a8A AsY3BfhFxPh6bC0fWoReqGkZnrfyVG2GdZaW/Pwe5fLZo1kQ06Jhum9DOGRBwjQP ILj1XCDe2A== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:13 2026 by rpki-client