$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json) Hash identifier: 6kNfKUkOyGuU2zSZEfpqWgBa34SqWBUl8dTJnLbYaqE= Subject key identifier: 8D:9A:1D:5B:E0:80:EF:AA:C7:DC:70:B1:77:1C:06:E9:6B:BD:CB:B3 Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 35BAF28A956FEB2F5C31A176A453AA1F1D9E31F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft Manifest number: B5 Signing time: Mon 12 Oct 2026 03:26:25 +0000 Manifest this update: Mon 12 Oct 2026 03:21:25 +0000 Manifest next update: Thu 15 Oct 2026 09:10:25 +0000 Files and hashes: 1: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=) 2: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=) 3: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: QdvbjE7Ib0wTqZgwMSEOGy/8dfrnmdozhc0UyaxoID0=) 4: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ba:f2:8a:95:6f:eb:2f:5c:31:a1:76:a4:53:aa:1f:1d:9e:31:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: Oct 12 03:21:25 2026 GMT Not After : Oct 15 09:10:25 2026 GMT Subject: CN=8D9A1D5BE080EFAAC7DC70B1771C06E96BBDCBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:08:ea:f7:1b:b5:47:e5:00:ba:ea:6b:13: c7:81:43:14:a8:aa:82:9f:d8:c4:cf:d9:e8:9e:a5: a1:61:49:1c:f7:86:3b:2c:f3:8a:74:9b:ab:1b:84: df:3d:23:71:09:c3:91:4d:19:2b:0d:58:da:71:92: f4:c1:aa:57:35:c0:49:d8:53:31:a5:37:d2:37:0b: 1a:13:2e:86:4e:29:13:04:26:ee:a8:43:ac:13:df: 50:0f:2f:85:43:26:ac:cb:d9:b1:ed:58:07:43:f3: 8b:1d:79:f4:eb:18:8b:ce:4e:1a:db:21:fb:8b:ed: 82:7a:83:f0:a7:93:34:3e:d5:ae:41:30:7d:9a:b5: 88:90:e6:93:38:cc:0a:80:50:c6:a1:3b:59:c2:84: 34:79:1d:20:13:89:86:8c:26:3a:60:c8:b0:88:56: 68:bb:67:ba:da:ee:ad:b3:09:bc:2b:8c:ea:1a:a5: d6:69:e9:16:d5:d4:42:15:9c:84:55:a2:8b:fd:fc: c9:92:ab:e7:be:f6:3e:34:5b:ca:a4:62:d1:8f:7e: f6:59:37:94:d9:b8:32:ee:08:79:d6:64:9b:3d:ad: 94:bb:5d:74:3a:97:42:fd:88:52:ec:82:91:20:8a: a4:5a:ae:e4:29:7d:3b:28:6a:3d:bf:ea:0f:c6:77: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9A:1D:5B:E0:80:EF:AA:C7:DC:70:B1:77:1C:06:E9:6B:BD:CB:B3 X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:a5:7c:43:44:05:83:06:dc:83:4a:aa:3b:6d:67:4f:bd: 0a:34:43:a2:bf:24:68:1f:dc:45:46:67:ff:a0:4e:53:db:89: bc:40:2c:9c:35:36:da:e3:9e:c3:fc:be:7a:ad:58:f0:9e:50: c2:da:e9:9f:73:b4:e1:35:09:22:ff:f4:2d:d4:85:4a:26:51: 1f:f1:ee:83:34:bf:88:eb:b0:cc:09:86:c2:a8:67:b5:1a:97: ec:1c:4f:28:f2:8a:f3:b5:a8:88:b6:97:49:15:80:a1:8a:e6: 07:7a:8f:68:58:50:49:8f:77:4e:db:9d:85:f7:ba:17:86:45: 38:14:64:6f:33:09:a4:d9:77:bd:0f:bd:b6:3a:c2:2d:74:86: a9:b6:27:c9:7b:b6:4c:c5:6c:3c:f0:21:9d:df:b0:3b:d3:73: 1f:f1:c5:49:52:ee:45:8c:9f:39:ff:2e:6a:05:4b:e9:98:7f: 6c:33:64:7a:b6:5d:cd:f6:85:bd:41:7f:36:c3:8f:c7:d7:c9: 69:ca:d2:26:3c:9d:8a:08:79:a1:ca:17:76:47:42:76:7d:c4: 61:6d:b7:4c:55:e5:e8:f5:0b:07:63:d3:61:34:e2:4b:9e:89: d1:f0:5d:b3:c1:b7:a0:9a:19:f4:b7:72:47:08:57:7c:b4:ac: 58:09:f0:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNbryipVv6y9cMaF2pFOqHx2eMfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjEwMTIwMzIxMjVaFw0yNjEwMTUwOTEwMjVaMDMxMTAvBgNV BAMTKDhEOUExRDVCRTA4MEVGQUFDN0RDNzBCMTc3MUMwNkU5NkJCRENCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PQjq9xu1R+UAuuprE8eBQxSo qoKf2MTP2eiepaFhSRz3hjss84p0m6sbhN89I3EJw5FNGSsNWNpxkvTBqlc1wEnY UzGlN9I3CxoTLoZOKRMEJu6oQ6wT31APL4VDJqzL2bHtWAdD84sdefTrGIvOThrb IfuL7YJ6g/CnkzQ+1a5BMH2atYiQ5pM4zAqAUMahO1nChDR5HSATiYaMJjpgyLCI Vmi7Z7ra7q2zCbwrjOoapdZp6RbV1EIVnIRVoov9/MmSq+e+9j40W8qkYtGPfvZZ N5TZuDLuCHnWZJs9rZS7XXQ6l0L9iFLsgpEgiqRaruQpfTsoaj2/6g/Gd7ZRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjZodW+CA76rH3HCxdxwG6Wu9y7MwHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIxNTc2OTAyNTMwODI2MzEvMC9BNENGN0Y3MDlFMDYy ODQ5RTZCRjg0RTE0NDc0QTAzMjBFQUI3ODBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvalfENEBYMG 3INKqjttZ0+9CjRDor8kaB/cRUZn/6BOU9uJvEAsnDU22uOew/y+eq1Y8J5Qwtrp n3O04TUJIv/0LdSFSiZRH/HugzS/iOuwzAmGwqhntRqX7BxPKPKK87WoiLaXSRWA oYrmB3qPaFhQSY93Ttudhfe6F4ZFOBRkbzMJpNl3vQ+9tjrCLXSGqbYnyXu2TMVs PPAhnd+wO9NzH/HFSVLuRYyfOf8uagVL6Zh/bDNkerZdzfaFvUF/NsOPx9fJacrS Jjydigh5ocoXdkdCdn3EYW23TFXl6PULB2PTYTTiS56J0fBds8G3oJoZ9LdyRwhX fLSsWAnwdw== -----END CERTIFICATE-----Generated at Wed Oct 14 01:29:13 2026 by rpki-client