$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: rZt1Uu5jCUrhtGL6lvD3DNC5akx7YAOrhzDhzK/j5to= Subject key identifier: 23:BC:6B:F7:C9:F1:17:09:3B:C2:53:55:05:31:19:70:D0:5B:83:3E Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 7A2A41DFEF3D29F07339B3CDD49BD6DD4148D575 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: C4 Signing time: Mon 12 Oct 2026 21:47:26 +0000 Manifest this update: Mon 12 Oct 2026 21:42:26 +0000 Manifest next update: Fri 16 Oct 2026 03:30:26 +0000 Files and hashes: 1: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) 2: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 3: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (hash: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk=) 4: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: QhxHPBWTj5W8fp1OpUVFUGNpz2SrRh26r0f+8MmcDmI=) 5: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) 6: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) 7: 3130332e38312e342e302f32322d3232203d3e203633373034.roa (hash: xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=) 8: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (hash: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2a:41:df:ef:3d:29:f0:73:39:b3:cd:d4:9b:d6:dd:41:48:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Oct 12 21:42:26 2026 GMT Not After : Oct 16 03:30:26 2026 GMT Subject: CN=23BC6BF7C9F117093BC2535505311970D05B833E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:55:dc:b5:21:00:5f:f8:4b:ce:a8:f6:35: 90:98:62:e5:e0:7c:1d:44:e1:8d:8f:e0:cc:87:9d: 55:cd:9d:60:d1:26:e2:a3:3d:2e:13:3e:92:74:89: 31:bd:15:72:59:48:24:76:83:5b:87:e2:df:08:66: fa:7c:98:79:41:d1:1c:a2:eb:49:ea:94:ea:c1:6a: ef:c1:d0:78:ea:a5:fe:83:e3:c2:31:d5:a8:77:9c: be:57:1b:05:e8:9c:56:20:62:b3:1a:5c:f1:c8:7e: ae:80:62:7f:ab:72:c8:fd:7f:15:6c:e9:a6:42:ec: d9:18:cc:6c:38:be:95:46:20:ee:8f:d5:7f:e7:1d: 2f:fc:ae:18:d1:6a:a6:96:95:df:36:86:15:db:9b: d3:e1:96:4a:37:43:3d:e1:77:aa:70:a2:de:70:44: 47:80:51:96:28:5f:3e:f4:8e:1e:a5:94:14:2e:b5: 3a:be:e1:65:7d:44:76:06:b9:38:c4:50:d5:b5:6e: 41:77:09:ad:0a:d0:ff:76:1d:bf:a4:cb:36:0c:93: 35:e7:bc:83:ad:cc:68:85:5e:78:f1:fe:d4:ff:58: 68:a2:9a:ef:2f:9f:56:19:a0:8e:68:46:10:c5:8a: e5:9a:9a:f9:bf:87:64:3d:60:29:8e:7c:b7:2f:34: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:6B:F7:C9:F1:17:09:3B:C2:53:55:05:31:19:70:D0:5B:83:3E X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c3:1c:32:50:24:47:8f:b5:fa:37:a7:14:15:6d:cb:c3:8e: 19:e3:eb:c7:29:4f:94:3e:a6:d3:cf:58:57:c0:65:2f:9e:77: 18:de:2f:85:e4:29:43:29:50:23:a1:62:3b:c7:cb:51:38:6b: 25:59:09:3e:95:3b:19:ef:6f:b1:11:25:4c:cb:c8:0f:36:eb: a0:c9:a7:09:73:5c:bc:6a:07:08:55:d4:cd:d9:93:38:5f:44: 7f:dc:56:4d:c1:4a:71:7d:cd:4f:97:a5:4e:bf:b9:b7:f1:c9: 8a:74:e9:41:bd:ae:93:6a:69:a7:f1:3a:ca:a5:9b:fc:a8:d6: f7:0d:bf:6d:7d:29:7c:3d:58:93:f3:49:5e:da:5b:4d:59:ff: 59:a3:88:94:02:52:f8:e2:21:81:18:04:88:f5:30:93:ea:dc: 38:df:7c:4d:e0:ee:8c:e4:6b:66:90:b9:ab:a5:58:96:a3:51: 73:d3:71:40:a6:d0:52:2d:3f:ff:95:15:8a:01:e8:45:88:23: 8e:53:b4:5f:e9:c2:72:9b:ec:b0:1c:41:5c:3e:9b:c2:99:fa: 98:e9:c5:ab:b5:37:db:ca:ef:86:bb:14:28:96:53:3a:ea:df: 1f:d8:f4:67:b5:05:9f:5a:c2:3a:64:54:f2:d5:d6:a9:da:f8: 94:8e:1d:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeipB3+89KfBzObPN1JvW3UFI1XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjEwMTIyMTQyMjZaFw0yNjEwMTYwMzMwMjZaMDMxMTAvBgNV BAMTKDIzQkM2QkY3QzlGMTE3MDkzQkMyNTM1NTA1MzExOTcwRDA1QjgzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiFXctSEAX/hLzqj2NZCYYuXg fB1E4Y2P4MyHnVXNnWDRJuKjPS4TPpJ0iTG9FXJZSCR2g1uH4t8IZvp8mHlB0Ryi 60nqlOrBau/B0Hjqpf6D48Ix1ah3nL5XGwXonFYgYrMaXPHIfq6AYn+rcsj9fxVs 6aZC7NkYzGw4vpVGIO6P1X/nHS/8rhjRaqaWld82hhXbm9Phlko3Qz3hd6pwot5w REeAUZYoXz70jh6llBQutTq+4WV9RHYGuTjEUNW1bkF3Ca0K0P92Hb+kyzYMkzXn vIOtzGiFXnjx/tT/WGiimu8vn1YZoI5oRhDFiuWamvm/h2Q9YCmOfLcvNP7BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI7xr98nxFwk7wlNVBTEZcNBbgz4wHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMMcMlAkR4+1 +jenFBVty8OOGePrxylPlD6m089YV8BlL553GN4vheQpQylQI6FiO8fLUThrJVkJ PpU7Ge9vsRElTMvIDzbroMmnCXNcvGoHCFXUzdmTOF9Ef9xWTcFKcX3NT5elTr+5 t/HJinTpQb2uk2ppp/E6yqWb/KjW9w2/bX0pfD1Yk/NJXtpbTVn/WaOIlAJS+OIh gRgEiPUwk+rcON98TeDujORrZpC5q6VYlqNRc9NxQKbQUi0//5UVigHoRYgjjlO0 X+nCcpvssBxBXD6bwpn6mOnFq7U328rvhrsUKJZTOurfH9j0Z7UFn1rCOmRU8tXW qdr4lI4d6g== -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:38 2026 by rpki-client