$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: qcvRdRbIM4ZMaZugzkLCj3MA6NrOM89fyIyDutI0dfE= Subject key identifier: C5:4F:1E:68:06:6D:0C:39:7D:09:E7:DC:28:31:E7:A8:6D:60:B2:D9 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 63A018643D513036E642C03B8A19EE48C802CFA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: A7 Signing time: Mon 05 Oct 2026 23:54:41 +0000 Manifest this update: Mon 05 Oct 2026 23:49:41 +0000 Manifest next update: Fri 09 Oct 2026 07:00:41 +0000 Files and hashes: 1: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: eXJCGpnMJPwuZaldKLmg5uUr+ZkojKc0sOFcrbt4yko=) 2: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) 3: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a0:18:64:3d:51:30:36:e6:42:c0:3b:8a:19:ee:48:c8:02:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Oct 5 23:49:41 2026 GMT Not After : Oct 9 07:00:41 2026 GMT Subject: CN=C54F1E68066D0C397D09E7DC2831E7A86D60B2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:a1:80:e1:3c:2a:f2:5d:19:e8:cb:6b:ce: c1:81:5d:e0:5a:26:7e:bf:41:5a:11:89:85:fd:7d: 98:66:87:8f:f6:7b:88:bf:86:7e:c8:88:64:e0:7b: aa:83:3c:5c:08:2b:5e:d2:d1:6d:67:72:2b:c0:ae: c3:2a:28:94:e6:b0:e8:0a:d0:ea:ef:e3:c6:2e:6a: 68:f0:63:ec:87:d6:1a:0d:53:ea:dc:82:f4:7d:d3: c0:44:54:fe:62:c5:45:db:92:ae:17:cf:19:75:92: 24:50:b4:f0:11:21:b5:7b:5a:4e:71:29:d8:89:09: 06:5f:b2:68:27:01:5b:05:a1:fd:29:6c:d7:c5:18: e1:30:8f:a3:ae:57:fd:8d:46:89:5d:93:2b:ee:aa: c8:6f:ed:9c:f0:36:7f:e7:79:25:37:43:e9:0a:29: 5b:4d:2c:18:74:20:63:0a:fe:a6:1c:dc:27:b6:de: 31:7f:13:83:ed:5c:be:5c:8a:9b:3b:0f:7f:ce:17: aa:ba:e9:c6:5a:34:f2:c8:34:8e:38:7a:18:4b:f0: 22:af:c6:45:17:19:76:14:e5:ef:dc:31:9c:bb:ec: c6:26:9a:3e:f4:cb:17:96:5c:df:50:b2:70:46:51: 53:82:a2:0e:50:fc:82:17:23:e9:ca:fa:02:ac:f1: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:1E:68:06:6D:0C:39:7D:09:E7:DC:28:31:E7:A8:6D:60:B2:D9 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ab:0c:75:93:63:10:f2:c2:97:74:51:e8:69:df:a5:a7:94: f4:30:ab:37:15:ad:a3:14:be:73:c2:f3:c5:ef:83:89:a4:e0: e5:80:9e:83:34:a5:36:28:df:65:b5:8f:92:f5:82:2c:26:23: dd:63:cc:5d:1f:97:58:14:34:3c:34:30:7f:14:81:3a:d8:44: 35:a3:85:a0:bd:fc:50:c9:82:5c:55:72:51:f8:cb:6b:a8:08: 1e:23:5c:b7:65:21:f4:05:4c:49:ee:67:2e:70:3c:40:01:d4: 26:a3:89:a2:7b:7d:00:00:c4:43:5e:93:65:51:b6:9e:e7:90: 3c:03:65:89:14:57:f8:48:90:2f:5d:81:0b:d6:ed:9b:67:93: 28:89:6b:23:6b:4c:11:81:d7:90:7e:1d:e3:38:10:89:28:e6: be:6f:bc:48:17:97:1a:fc:7b:5f:85:fe:44:d2:fa:97:d8:db: d2:ab:1a:bc:69:99:79:bf:c7:80:e2:88:ac:5b:52:63:ba:32: fd:ab:d2:1a:2a:ad:3a:35:0a:90:68:e5:d2:5a:0f:f8:af:83: 67:b2:32:1a:1f:d6:ee:7f:16:88:73:05:17:2d:f8:39:da:e5: 23:0d:d0:de:e5:48:17:f3:34:25:f4:8b:f0:54:a4:0a:1d:88: aa:16:dc:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY6AYZD1RMDbmQsA7ihnuSMgCz6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjEwMDUyMzQ5NDFaFw0yNjEwMDkwNzAwNDFaMDMxMTAvBgNV BAMTKEM1NEYxRTY4MDY2RDBDMzk3RDA5RTdEQzI4MzFFN0E4NkQ2MEIyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqqGA4Twq8l0Z6MtrzsGBXeBa Jn6/QVoRiYX9fZhmh4/2e4i/hn7IiGTge6qDPFwIK17S0W1ncivArsMqKJTmsOgK 0Orv48YuamjwY+yH1hoNU+rcgvR908BEVP5ixUXbkq4Xzxl1kiRQtPARIbV7Wk5x KdiJCQZfsmgnAVsFof0pbNfFGOEwj6OuV/2NRoldkyvuqshv7ZzwNn/neSU3Q+kK KVtNLBh0IGMK/qYc3Ce23jF/E4PtXL5cips7D3/OF6q66cZaNPLINI44ehhL8CKv xkUXGXYU5e/cMZy77MYmmj70yxeWXN9QsnBGUVOCog5Q/IIXI+nK+gKs8aS/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxU8eaAZtDDl9CefcKDHnqG1gstkwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqsMdZNjEPLC l3RR6GnfpaeU9DCrNxWtoxS+c8Lzxe+DiaTg5YCegzSlNijfZbWPkvWCLCYj3WPM XR+XWBQ0PDQwfxSBOthENaOFoL38UMmCXFVyUfjLa6gIHiNct2Uh9AVMSe5nLnA8 QAHUJqOJont9AADEQ16TZVG2nueQPANliRRX+EiQL12BC9btm2eTKIlrI2tMEYHX kH4d4zgQiSjmvm+8SBeXGvx7X4X+RNL6l9jb0qsavGmZeb/HgOKIrFtSY7oy/avS GiqtOjUKkGjl0loP+K+DZ7IyGh/W7n8WiHMFFy34OdrlIw3Q3uVIF/M0JfSL8FSk Ch2IqhbcWA== -----END CERTIFICATE-----Generated at Tue Oct 6 20:44:07 2026 by rpki-client