$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: Mfl4VupMYWJJHDU5z93GPxG/PscYVwMvHmW9768N+/4= Subject key identifier: 97:3E:2D:B9:AE:CE:D2:4E:30:66:6A:63:3E:34:C2:E1:17:45:A9:D6 Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 645EA2AC06576DE24C690C93C69A1911D396C858 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: C5 Signing time: Tue 13 Oct 2026 08:17:52 +0000 Manifest this update: Tue 13 Oct 2026 08:12:52 +0000 Manifest next update: Fri 16 Oct 2026 16:47:52 +0000 Files and hashes: 1: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: FZXj1h6bcRJtW30waa5NDh+DiTq/I/MeXV8TaQBa5u8=) 2: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5e:a2:ac:06:57:6d:e2:4c:69:0c:93:c6:9a:19:11:d3:96:c8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Oct 13 08:12:52 2026 GMT Not After : Oct 16 16:47:52 2026 GMT Subject: CN=973E2DB9AECED24E30666A633E34C2E11745A9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:79:11:39:5f:ee:16:96:22:ae:49:23:58: fd:19:7f:ae:d6:d5:f1:c7:18:6d:55:05:de:12:28: ff:9f:85:38:af:2b:14:20:2b:8d:db:a6:77:89:10: ef:ce:29:88:5e:ac:f5:11:c0:64:70:e1:80:18:97: 0d:d4:78:bc:9f:8a:69:bb:a7:9a:e0:eb:78:78:ab: 82:89:cf:64:1e:a8:2e:06:58:a9:12:5e:a9:2b:37: e7:fa:e9:e3:e3:e9:23:2e:47:01:f6:b6:06:37:40: ad:a8:14:33:b5:62:22:b7:0d:f8:e2:a9:a1:b7:b8: df:6c:c9:3a:b6:7a:d5:73:6f:9e:b1:88:08:72:18: 2c:4c:b8:f5:c1:73:6e:1f:45:33:65:7a:95:b1:1a: 43:06:22:b0:58:97:af:89:49:a7:ab:05:f9:a4:3f: 9a:a0:0f:63:38:38:5a:94:42:7a:fc:c7:8f:d8:61: bd:b9:cd:19:ba:bb:1c:28:27:73:33:7c:8f:b2:a6: 0d:50:2f:68:d4:57:7a:9f:d6:dd:e3:f4:81:64:9e: bd:50:c3:56:d9:af:df:26:aa:60:72:a3:c3:01:33: f4:79:57:42:c7:69:e6:92:7b:fd:96:94:0c:7d:99: bd:9e:55:fa:ec:4c:bc:dd:a5:2f:22:37:dd:09:c5: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:2D:B9:AE:CE:D2:4E:30:66:6A:63:3E:34:C2:E1:17:45:A9:D6 X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5e:66:e5:eb:41:7c:f9:d4:8e:44:42:f1:9d:50:50:7a:c1: 76:a9:1a:84:28:53:f7:4b:d1:04:be:fb:31:2f:d8:9d:22:7a: 16:2f:07:f5:93:82:41:4d:dd:18:81:54:ce:9a:78:d6:aa:c6: 69:d4:ae:f7:7a:91:9f:ec:77:7e:b4:5d:c6:99:5d:7c:34:05: 93:40:bc:94:25:78:50:e0:69:62:f0:6c:7c:71:81:22:cc:1f: 74:98:dc:0a:6d:42:24:65:c1:f1:c7:0c:59:3e:41:19:1c:06: 39:58:73:98:5e:85:ed:ad:74:08:e7:e6:8c:0c:6b:62:3e:43: f5:d1:17:8a:40:d1:86:8b:e7:f6:3c:5d:1d:71:cf:8e:f1:21: 3a:99:3b:fd:36:80:19:9f:c7:a5:92:d9:57:6d:e3:bc:1f:20: 6e:91:f8:c3:7e:9e:b5:16:78:33:bf:6f:27:40:a4:2d:23:99: c1:ab:b1:80:59:dd:a2:31:3b:19:0f:f2:c5:fb:f2:24:bc:f7: 8a:c2:87:98:14:53:8d:92:3a:d1:f5:4f:e2:2a:c6:6e:57:51: ee:31:d2:f4:ae:fb:26:93:7f:70:df:db:db:bf:b4:6c:8b:a4: 49:0a:7e:14:93:e6:68:63:5c:f1:e6:38:b3:9f:2f:e0:f0:b2: 89:f6:be:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZF6irAZXbeJMaQyTxpoZEdOWyFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjEwMTMwODEyNTJaFw0yNjEwMTYxNjQ3NTJaMDMxMTAvBgNV BAMTKDk3M0UyREI5QUVDRUQyNEUzMDY2NkE2MzNFMzRDMkUxMTc0NUE5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSnkROV/uFpYirkkjWP0Zf67W 1fHHGG1VBd4SKP+fhTivKxQgK43bpneJEO/OKYherPURwGRw4YAYlw3UeLyfimm7 p5rg63h4q4KJz2QeqC4GWKkSXqkrN+f66ePj6SMuRwH2tgY3QK2oFDO1YiK3Dfji qaG3uN9syTq2etVzb56xiAhyGCxMuPXBc24fRTNlepWxGkMGIrBYl6+JSaerBfmk P5qgD2M4OFqUQnr8x4/YYb25zRm6uxwoJ3MzfI+ypg1QL2jUV3qf1t3j9IFknr1Q w1bZr98mqmByo8MBM/R5V0LHaeaSe/2WlAx9mb2eVfrsTLzdpS8iN90JxYzpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlz4tua7O0k4wZmpjPjTC4RdFqdYwHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU15m5etBfPnU jkRC8Z1QUHrBdqkahChT90vRBL77MS/YnSJ6Fi8H9ZOCQU3dGIFUzpp41qrGadSu 93qRn+x3frRdxpldfDQFk0C8lCV4UOBpYvBsfHGBIswfdJjcCm1CJGXB8ccMWT5B GRwGOVhzmF6F7a10COfmjAxrYj5D9dEXikDRhovn9jxdHXHPjvEhOpk7/TaAGZ/H pZLZV23jvB8gbpH4w36etRZ4M79vJ0CkLSOZwauxgFndojE7GQ/yxfvyJLz3isKH mBRTjZI60fVP4irGbldR7jHS9K77JpN/cN/b27+0bIukSQp+FJPmaGNc8eY4s58v 4PCyifa+oQ== -----END CERTIFICATE-----Generated at Wed Oct 14 08:52:36 2026 by rpki-client