$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json) Hash identifier: p/4bjwDZVzZyzTCUvDARmLYUZl4Srl1jpVvjnG3FcMU= Subject key identifier: 32:1E:BC:95:B4:87:C7:06:5F:A1:7D:39:D3:1F:48:84:70:56:40:1C Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 08406E5E481F0D6FA602705B58FBD9DDD7E22B69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft Manifest number: 0107 Signing time: Wed 14 Oct 2026 19:19:27 +0000 Manifest this update: Wed 14 Oct 2026 19:14:27 +0000 Manifest next update: Sun 18 Oct 2026 03:37:27 +0000 Files and hashes: 1: AS0.roa (hash: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE=) 2: AS141771.roa (hash: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE=) 3: AS4837.roa (hash: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8=) 4: AS17621.roa (hash: FgRK6EJ93pTm3fStKaZDsp5WoaDJ+ZV/uwIlWcN1CfE=) 5: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: bSpyZJHut2ShiiBDFlFxfLLgK7GAM2IPkd5DpUuSpG0=) 6: AS4811.roa (hash: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=) 7: AS63619.roa (hash: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os=) 8: AS24547.roa (hash: aThkMpxD23pAJVWAABx08oowIUHQmo7KBJIsg/LhuK4=) 9: AS146781.roa (hash: CYdQQlwdflyA5j801ct6fQ7pTh27hC+nUnGbzXcwxdY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:40:6e:5e:48:1f:0d:6f:a6:02:70:5b:58:fb:d9:dd:d7:e2:2b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Oct 14 19:14:27 2026 GMT Not After : Oct 18 03:37:27 2026 GMT Subject: CN=321EBC95B487C7065FA17D39D31F48847056401C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:5c:03:31:16:22:f1:0e:f8:a7:f5:83:a3: f1:44:a6:18:32:0f:37:74:10:33:ca:df:37:4b:f1: 94:45:d3:92:48:df:a4:61:b7:10:0a:69:4a:5f:ea: 7d:47:da:4a:25:c6:f1:0d:e5:fc:b2:1c:6e:37:63: c0:c3:aa:a3:59:26:e6:32:b1:e5:5f:b9:52:87:be: 69:43:c2:50:2b:71:fe:9d:3d:41:8d:13:bf:d5:69: 7e:57:d9:98:fa:ab:b4:ba:a4:c2:7a:fc:4c:ca:23: 81:0a:a5:dd:72:1c:d1:8f:3a:8e:f5:41:a3:21:f2: 37:9c:ff:d0:b0:4f:84:03:6e:cc:ba:cc:88:78:51: 44:87:cc:18:0a:7b:4a:7c:99:a1:af:fb:22:1e:d6: 22:7d:f3:d4:30:ae:ce:f0:19:7b:bd:cd:20:ba:11: 25:cb:a8:18:4f:d5:e4:4c:75:64:56:9d:8b:62:2f: 0e:9e:fe:27:9a:d0:23:b4:05:9e:39:5e:d9:09:16: a6:85:f0:09:af:37:f7:57:27:33:f2:81:87:d8:ab: 89:28:1b:72:30:52:dc:86:ae:d4:5c:79:a0:8b:0d: 91:b3:e1:22:b6:2e:67:74:aa:fd:9d:4c:02:0b:19: e9:0c:8e:71:01:86:78:48:03:1b:b3:c4:ae:1f:90: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:BC:95:B4:87:C7:06:5F:A1:7D:39:D3:1F:48:84:70:56:40:1C X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:36:b1:ff:ad:29:d7:5b:c2:a4:45:87:9e:5e:aa:c8:80:a6: bc:25:20:c7:fa:3b:12:3f:de:e9:6a:8f:ce:1f:3b:4f:2b:41: 54:b6:56:06:a3:58:c4:09:73:3e:dc:a2:6b:bd:75:eb:10:1c: fa:fc:fb:c7:39:06:e5:7d:bd:cb:35:ca:e2:2c:12:81:84:97: 7d:51:08:46:b6:77:45:98:bb:d4:c1:96:44:93:85:3e:10:13: 8a:2b:c0:a8:83:54:6d:7a:b2:43:39:40:4f:bb:64:a5:81:e9: 66:d8:c2:dc:ef:99:c2:7f:66:e1:8e:c1:4d:b4:6b:12:92:8f: 4b:8c:7f:49:d1:4f:bd:93:d1:92:c7:43:22:9e:dc:0f:17:03: 08:3d:e5:0b:c9:16:96:26:59:ec:88:2f:63:3e:9a:51:e7:1a: b8:80:5b:4a:e3:85:ca:2d:ac:26:3c:68:b5:4b:cd:e6:c4:7d: 87:10:38:a7:94:1a:8c:12:18:0d:35:e5:20:c8:dd:dc:b7:9b: 0e:c7:19:c3:af:34:38:62:e0:7f:2d:b7:ac:e3:08:99:fd:00: 14:b3:be:61:e7:ab:4d:2d:28:9a:ef:7c:03:33:10:84:41:fe: fd:3f:0f:f3:b2:e1:55:de:ea:e3:66:31:45:9b:01:86:fc:ee: 75:1b:76:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCEBuXkgfDW+mAnBbWPvZ3dfiK2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjEwMTQxOTE0MjdaFw0yNjEwMTgwMzM3MjdaMDMxMTAvBgNV BAMTKDMyMUVCQzk1QjQ4N0M3MDY1RkExN0QzOUQzMUY0ODg0NzA1NjQwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk11wDMRYi8Q74p/WDo/FEphgy Dzd0EDPK3zdL8ZRF05JI36RhtxAKaUpf6n1H2kolxvEN5fyyHG43Y8DDqqNZJuYy seVfuVKHvmlDwlArcf6dPUGNE7/VaX5X2Zj6q7S6pMJ6/EzKI4EKpd1yHNGPOo71 QaMh8jec/9CwT4QDbsy6zIh4UUSHzBgKe0p8maGv+yIe1iJ989Qwrs7wGXu9zSC6 ESXLqBhP1eRMdWRWnYtiLw6e/iea0CO0BZ45XtkJFqaF8AmvN/dXJzPygYfYq4ko G3IwUtyGrtRceaCLDZGz4SK2Lmd0qv2dTAILGekMjnEBhnhIAxuzxK4fkFWDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMh68lbSHxwZfoX050x9IhHBWQBwwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1 MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajax/60p11vC pEWHnl6qyICmvCUgx/o7Ej/e6WqPzh87TytBVLZWBqNYxAlzPtyia7116xAc+vz7 xzkG5X29yzXK4iwSgYSXfVEIRrZ3RZi71MGWRJOFPhATiivAqINUbXqyQzlAT7tk pYHpZtjC3O+Zwn9m4Y7BTbRrEpKPS4x/SdFPvZPRksdDIp7cDxcDCD3lC8kWliZZ 7IgvYz6aUecauIBbSuOFyi2sJjxotUvN5sR9hxA4p5QajBIYDTXlIMjd3LebDscZ w680OGLgfy23rOMImf0AFLO+YeerTS0omu98AzMQhEH+/T8P87LhVd7q42YxRZsB hvzudRt2+A== -----END CERTIFICATE-----Generated at Wed Oct 14 22:43:32 2026 by rpki-client