$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: hbifZEPHUm3+qkEpqVZk1+WGwG95UQmpzYVVw5E5+Ys= Subject key identifier: 40:57:E9:4C:04:F5:29:48:AC:D9:68:B2:CF:07:4A:EC:27:AD:D3:A4 Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 7E4CEEF404498624709CF4DEB50949F39458EBB1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 89 Signing time: Sat 31 Oct 2026 00:23:46 +0000 Manifest this update: Sat 31 Oct 2026 00:18:46 +0000 Manifest next update: Tue 03 Nov 2026 08:01:46 +0000 Files and hashes: 1: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: D9SKSHLNdZZA2cqzC2jYUydJcRQhKVVNLDud2j4tq08=) 2: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4c:ee:f4:04:49:86:24:70:9c:f4:de:b5:09:49:f3:94:58:eb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Oct 31 00:18:46 2026 GMT Not After : Nov 3 08:01:46 2026 GMT Subject: CN=4057E94C04F52948ACD968B2CF074AEC27ADD3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:da:5f:e8:5d:e3:3a:9e:80:bb:7f:3b:43: 84:78:a9:6d:98:03:cf:21:5a:05:1b:69:e5:b2:c6: 74:cd:11:71:81:57:5f:a1:a3:ba:28:98:b2:86:43: de:99:f9:07:f5:60:ad:06:dd:e0:e1:20:3d:24:3a: c0:92:52:14:7e:e1:57:34:f9:a1:4c:8a:86:13:8f: 6e:85:c3:a3:d2:1f:0a:ee:71:89:6b:57:f8:cf:c8: 8f:16:04:c3:fd:b4:95:cd:13:87:0a:d0:4a:22:c9: 51:1b:5b:ff:4d:3a:40:3c:ec:5e:d4:07:bd:33:f3: 31:61:04:ee:76:2e:ab:a5:0e:27:22:18:10:53:78: 06:3b:4b:ab:05:d2:72:87:04:ac:f7:fb:30:6b:17: dc:2c:dd:c9:b0:c2:c7:9f:70:52:b1:54:f9:3e:72: 91:67:62:24:d0:e3:cf:59:e4:21:54:f6:ac:28:18: da:49:27:37:3b:33:2b:0c:3d:79:f9:a4:17:fb:d1: 48:3c:0a:fd:cf:cb:57:f7:ce:d8:0d:c5:e2:b9:db: ad:63:e7:b0:88:a1:b6:de:84:75:8e:15:87:49:2f: d7:15:e2:cb:4c:9f:ff:c0:c5:f3:0e:ed:ae:20:bc: dd:e1:1a:a1:dd:74:07:91:b7:f7:a3:b3:2c:1f:b4: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:E9:4C:04:F5:29:48:AC:D9:68:B2:CF:07:4A:EC:27:AD:D3:A4 X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:d7:87:c7:ab:45:17:6e:57:f5:93:a0:12:d6:23:be:39: 8e:a2:65:c5:44:87:a1:95:2c:8b:03:db:ff:b1:d2:2e:66:fe: 71:9c:9c:2c:67:81:1a:67:9d:f9:e2:d2:a0:c1:5f:00:48:a6: 4f:3c:30:bc:2b:96:8a:aa:1d:47:44:97:3c:ae:6e:8c:78:2b: 6d:3c:31:b2:45:77:da:2a:9e:37:39:25:84:81:76:e3:36:1f: af:60:ff:21:c2:c7:ca:eb:00:2f:b0:1f:57:e5:78:d4:3a:fb: 36:43:86:92:95:22:d4:04:76:1d:54:9f:c3:f7:b8:2e:37:91: cd:b7:c3:fb:20:f7:14:cb:ed:f2:1f:26:9e:a8:db:20:5d:86: fd:c1:f5:ca:31:89:40:de:ec:7d:fe:40:d7:51:1d:0f:a6:10: 67:ea:a0:da:70:a3:a1:f2:b3:5c:0f:d6:de:e0:bb:e3:ca:8c: 01:64:57:3c:2b:2f:df:ed:70:b8:cf:e1:26:52:b6:54:86:a9: 3a:78:f4:ba:ff:0d:cc:64:a7:95:8a:cc:1a:23:72:44:b0:98: 09:29:e3:1d:ae:07:d1:c8:11:04:d3:6c:36:1b:06:c3:a1:c1: 2d:8b:08:ca:e7:86:0a:8f:2c:68:a9:9b:d3:96:e7:f5:f9:31: e9:8a:15:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfkzu9ARJhiRwnPTetQlJ85RY67EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjEwMzEwMDE4NDZaFw0yNjExMDMwODAxNDZaMDMxMTAvBgNV BAMTKDQwNTdFOTRDMDRGNTI5NDhBQ0Q5NjhCMkNGMDc0QUVDMjdBREQzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtI9pf6F3jOp6Au387Q4R4qW2Y A88hWgUbaeWyxnTNEXGBV1+ho7oomLKGQ96Z+Qf1YK0G3eDhID0kOsCSUhR+4Vc0 +aFMioYTj26Fw6PSHwrucYlrV/jPyI8WBMP9tJXNE4cK0EoiyVEbW/9NOkA87F7U B70z8zFhBO52LqulDiciGBBTeAY7S6sF0nKHBKz3+zBrF9ws3cmwwsefcFKxVPk+ cpFnYiTQ489Z5CFU9qwoGNpJJzc7MysMPXn5pBf70Ug8Cv3Py1f3ztgNxeK5261j 57CIobbehHWOFYdJL9cV4stMn//AxfMO7a4gvN3hGqHddAeRt/ejsywftFFJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQFfpTAT1KUis2WiyzwdK7Cet06QwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnb3Xh8erRRdu V/WToBLWI745jqJlxUSHoZUsiwPb/7HSLmb+cZycLGeBGmed+eLSoMFfAEimTzww vCuWiqodR0SXPK5ujHgrbTwxskV32iqeNzklhIF24zYfr2D/IcLHyusAL7AfV+V4 1Dr7NkOGkpUi1AR2HVSfw/e4LjeRzbfD+yD3FMvt8h8mnqjbIF2G/cH1yjGJQN7s ff5A11EdD6YQZ+qg2nCjofKzXA/W3uC748qMAWRXPCsv3+1wuM/hJlK2VIapOnj0 uv8NzGSnlYrMGiNyRLCYCSnjHa4H0cgRBNNsNhsGw6HBLYsIyueGCo8saKmb05bn 9fkx6YoVtA== -----END CERTIFICATE-----Generated at Sat Oct 31 15:23:29 2026 by rpki-client