$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json) Hash identifier: Mwxq00yTT+xibU/zBY28CNRa02nTiee4bFD+zAxZ0Cw= Subject key identifier: D3:29:C8:15:A5:88:06:E3:FB:20:CA:29:2B:C6:6A:9C:17:60:13:28 Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Certificate serial: 5E60770D54BB20D13A90D86DE99BB6B11D10EDC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft Manifest number: 6F Signing time: Mon 05 Oct 2026 10:03:54 +0000 Manifest this update: Mon 05 Oct 2026 09:58:54 +0000 Manifest next update: Thu 08 Oct 2026 10:09:54 +0000 Files and hashes: 1: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=) 2: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: S5c/FcM6Qf+FnzJ9/Mvg3cNfZ3dP1B8PE7KNJ8phXMg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:60:77:0d:54:bb:20:d1:3a:90:d8:6d:e9:9b:b6:b1:1d:10:ed:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Validity Not Before: Oct 5 09:58:54 2026 GMT Not After : Oct 8 10:09:54 2026 GMT Subject: CN=D329C815A58806E3FB20CA292BC66A9C17601328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:fa:06:79:7d:88:0e:c6:f0:71:e3:f6:b6: 3b:c3:df:3f:86:8a:ed:85:04:1c:28:f1:71:ba:73: ca:a9:9a:b0:71:69:d6:7a:bf:a2:f5:8f:08:a6:d2: d9:43:03:fc:bc:46:ce:68:d1:23:af:70:04:b5:90: 5b:9c:68:de:02:56:91:39:36:01:4b:7b:96:9f:f1: a7:fe:f8:a9:bd:ad:b8:e6:51:a3:a3:d8:92:d3:b8: 64:9d:77:c8:1f:86:ad:58:5a:3e:41:a8:81:ac:d8: bd:85:35:50:04:3d:16:4f:36:99:a2:d7:a9:a9:a5: 2c:35:92:73:65:41:9c:c6:94:ca:80:f0:3c:3d:bc: 9b:43:b9:c8:44:48:f1:06:30:bd:b4:04:18:0d:d6: 69:7f:5d:03:0c:5a:d4:93:b3:61:ea:a7:94:34:94: 11:28:3b:66:4e:2a:ff:67:c6:82:d3:99:9e:f9:d1: c0:ec:68:9f:b1:37:be:f0:28:c6:0e:88:91:66:45: fb:a8:b6:9c:2c:18:bc:b4:d2:72:ea:ea:0a:de:b5: 4e:39:ed:3d:ac:cc:68:5b:9e:6f:2b:9d:4c:7f:25: 07:96:f9:7e:e2:5e:95:51:fc:3b:bb:41:c8:dd:c3: 58:72:ef:64:f6:f8:82:15:e6:5a:58:b9:f0:3d:4f: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:C8:15:A5:88:06:E3:FB:20:CA:29:2B:C6:6A:9C:17:60:13:28 X509v3 Authority Key Identifier: keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c4:9c:05:96:01:8d:10:29:79:10:2a:6c:98:a1:39:a9:07: 03:07:d8:bd:89:ff:a9:ac:52:c0:e1:8b:4a:9b:35:a1:fb:dd: ca:ba:66:89:da:fc:0d:9e:73:9f:e1:1b:45:f6:60:fb:14:4f: 2a:94:1a:3b:e7:f1:8e:4c:4d:7e:5a:ec:e0:da:80:9c:a0:9c: db:51:a2:7d:46:a1:d4:25:97:81:aa:3f:f4:37:da:92:ef:f5: aa:9e:18:10:f5:3c:b5:d1:70:9f:18:4e:81:f2:70:28:3c:69: 22:40:89:53:b7:06:ed:d4:01:fa:7a:63:c7:e3:e9:c4:e4:13: ba:44:55:5f:30:5f:8f:79:c6:c7:cc:57:ce:b0:7b:37:86:fa: 3a:17:ae:c7:e2:b2:73:54:03:d3:10:f2:b0:d9:d6:37:7f:d1: 1e:4e:68:df:92:dc:6a:6e:5f:bb:d2:df:d5:7f:6b:da:e0:16: 7d:42:62:c6:11:22:5c:82:3b:b9:58:bf:df:9f:39:cf:a9:2d: 0b:81:b7:41:f1:02:99:25:d3:70:be:45:f0:71:81:94:e5:34: 7b:3b:ff:54:c6:9b:f3:16:d5:73:80:31:d2:67:ea:9e:d3:c1: fb:d7:10:6d:72:54:97:7c:8d:e9:c8:d0:ae:77:6d:af:1a:64: e0:cb:9d:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXmB3DVS7INE6kNht6Zu2sR0Q7cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1 Q0YwODM5MjAeFw0yNjEwMDUwOTU4NTRaFw0yNjEwMDgxMDA5NTRaMDMxMTAvBgNV BAMTKEQzMjlDODE1QTU4ODA2RTNGQjIwQ0EyOTJCQzY2QTlDMTc2MDEzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvfoGeX2IDsbwceP2tjvD3z+G iu2FBBwo8XG6c8qpmrBxadZ6v6L1jwim0tlDA/y8Rs5o0SOvcAS1kFucaN4CVpE5 NgFLe5af8af++Km9rbjmUaOj2JLTuGSdd8gfhq1YWj5BqIGs2L2FNVAEPRZPNpmi 16mppSw1knNlQZzGlMqA8Dw9vJtDuchESPEGML20BBgN1ml/XQMMWtSTs2Hqp5Q0 lBEoO2ZOKv9nxoLTmZ750cDsaJ+xN77wKMYOiJFmRfuotpwsGLy00nLq6gretU45 7T2szGhbnm8rnUx/JQeW+X7iXpVR/Du7Qcjdw1hy72T2+IIV5lpYufA9T2xbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0ynIFaWIBuP7IMopK8ZqnBdgEygwHwYDVR0j BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3 RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8ScBZYBjRAp eRAqbJihOakHAwfYvYn/qaxSwOGLSps1ofvdyrpmidr8DZ5zn+EbRfZg+xRPKpQa O+fxjkxNflrs4NqAnKCc21GifUah1CWXgao/9Dfaku/1qp4YEPU8tdFwnxhOgfJw KDxpIkCJU7cG7dQB+npjx+PpxOQTukRVXzBfj3nGx8xXzrB7N4b6Oheux+Kyc1QD 0xDysNnWN3/RHk5o35Lcam5fu9Lf1X9r2uAWfUJixhEiXII7uVi/3585z6ktC4G3 QfECmSXTcL5F8HGBlOU0ezv/VMab8xbVc4Ax0mfqntPB+9cQbXJUl3yN6cjQrndt rxpk4Mud6w== -----END CERTIFICATE-----Generated at Wed Oct 7 04:17:35 2026 by rpki-client