$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json) Hash identifier: 2KJkHpeRFFd5OklxvBeu5CsyIUrUxIrJieLWltaGb/0= Subject key identifier: 5A:9D:51:88:29:EA:D9:72:34:60:89:48:D4:28:05:6D:A6:DD:6B:E6 Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Certificate serial: 41C7A2983F71ED0F068E922911F904E1F98E66ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft Manifest number: 02DE Signing time: Wed 02 Sep 2026 09:38:02 +0000 Manifest this update: Wed 02 Sep 2026 09:33:02 +0000 Manifest next update: Sat 05 Sep 2026 16:36:02 +0000 Files and hashes: 1: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: Dkvb61RUlHiGVr0tOgITpYyh9LYlellqYvX5iGWZulE=) 2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=) 3: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 16:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c7:a2:98:3f:71:ed:0f:06:8e:92:29:11:f9:04:e1:f9:8e:66:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Validity Not Before: Sep 2 09:33:02 2026 GMT Not After : Sep 5 16:36:02 2026 GMT Subject: CN=5A9D518829EAD97234608948D428056DA6DD6BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:5e:e0:f7:00:36:79:bb:8e:51:78:a3:83: 6e:28:36:ec:76:31:8a:67:c4:91:7a:94:ab:6d:d5: 0d:6b:09:ca:94:c3:8d:f4:6f:bb:bd:bf:bb:64:4a: d0:54:9f:da:a6:bb:31:fa:d9:1c:95:d9:96:10:b5: f9:ab:54:a6:4e:a1:aa:47:be:a5:9e:fa:6e:7d:c5: f8:04:71:97:4d:b0:c3:e7:48:eb:60:4a:9d:34:64: b0:65:17:84:6d:7a:bb:d0:60:6d:53:f7:ad:75:88: 33:2b:53:20:ec:e0:19:c0:2e:af:fc:3e:31:87:15: e6:8b:40:b6:21:ab:87:c7:0b:46:c4:8f:f6:dd:76: 5a:1b:ab:26:90:d1:62:6a:bc:2a:09:71:01:07:de: 73:e3:9c:48:e8:7d:9f:38:47:d9:0b:7a:15:3e:65: 17:70:00:ff:d2:a0:fd:34:1c:3a:b6:35:a4:d4:56: 6d:38:58:5b:18:aa:c8:23:cc:c7:53:a2:e4:29:34: d6:e8:ae:69:3f:17:eb:99:68:7a:2c:40:df:4e:f8: e5:cb:58:90:cb:8e:26:c1:73:ca:9c:55:26:b4:33: f0:0e:2b:3d:aa:de:94:b5:b5:3e:1e:fb:a0:cb:06: 92:04:bf:a0:95:66:46:62:fd:5b:5d:db:35:14:68: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:51:88:29:EA:D9:72:34:60:89:48:D4:28:05:6D:A6:DD:6B:E6 X509v3 Authority Key Identifier: keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:78:78:5e:00:8b:ee:ad:0e:eb:f6:2d:2b:5c:9c:be:42:c2: 74:51:4d:e9:77:6c:6b:65:69:e2:47:72:70:c8:55:41:b9:ab: b7:99:66:4d:87:af:28:cb:68:fe:03:4b:3f:55:29:03:da:63: 9d:fd:fb:0a:fe:97:ef:56:ef:ea:23:83:3f:68:60:31:e5:4f: e1:67:a6:52:3e:5a:0e:52:4a:04:30:4a:74:0a:9b:26:d7:e2: d1:fd:08:5e:41:bb:16:ec:70:8e:f2:58:e5:2b:10:58:0e:da: fd:4c:4b:2c:c0:9c:f6:b7:59:82:1e:a5:e0:27:7f:ca:48:71: 0f:fb:d7:48:58:57:a7:3d:d1:95:a8:89:cb:a4:ee:e5:85:34: 50:ca:fb:73:4d:d5:dd:08:da:65:f1:74:2d:7e:22:2a:62:39: 20:e7:65:99:fb:c6:38:ef:45:14:45:59:c9:c4:b7:bb:25:04: 06:dc:d0:cf:f3:48:16:f1:3f:be:75:d9:22:34:73:c7:b2:62: 77:c7:4e:15:5c:6d:e6:b3:12:b7:3b:0f:9b:b2:35:a2:4e:76: 46:f9:0b:6f:41:3b:ec:99:69:ef:01:8a:55:c3:36:ee:0a:b3: 5e:8e:4e:25:e4:f8:5c:d9:e7:fa:90:64:4d:36:6c:8c:63:8f: 19:56:cc:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQceimD9x7Q8GjpIpEfkE4fmOZu0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg0QzlFNjcxRUFE NDY0RTA0NjIzQkIwNDNGRDYyRTdCQTJBNzdFREQ0MB4XDTI2MDkwMjA5MzMwMloX DTI2MDkwNTE2MzYwMlowMzExMC8GA1UEAxMoNUE5RDUxODgyOUVBRDk3MjM0NjA4 OTQ4RDQyODA1NkRBNkRENkJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALupXuD3ADZ5u45ReKODbig27HYximfEkXqUq23VDWsJypTDjfRvu72/u2RK 0FSf2qa7MfrZHJXZlhC1+atUpk6hqke+pZ76bn3F+ARxl02ww+dI62BKnTRksGUX hG16u9BgbVP3rXWIMytTIOzgGcAur/w+MYcV5otAtiGrh8cLRsSP9t12WhurJpDR Ymq8KglxAQfec+OcSOh9nzhH2Qt6FT5lF3AA/9Kg/TQcOrY1pNRWbThYWxiqyCPM x1Oi5Ck01uiuaT8X65loeixA30745ctYkMuOJsFzypxVJrQz8A4rParelLW1Ph77 oMsGkgS/oJVmRmL9W13bNRRodnkCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRanVGI KerZcjRgiUjUKAVtpt1r5jAfBgNVHSMEGDAWgBRMnmcerUZOBGI7sEP9Yue6Knft 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzEvNEM5RTY3 MUVBRDQ2NEUwNDYyM0JCMDQzRkQ2MkU3QkEyQTc3RURENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvVEo1bkhxMUdU Z1JpTzdCRF9XTG51aXAzN2RRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8xLzRDOUU2NzFFQUQ0NjRFMDQ2MjNCQjA0M0ZENjJFN0JBMkE3N0VE RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCWeHheAIvurQ7r9i0rXJy+QsJ0UU3pd2xrZWniR3JwyFVB uau3mWZNh68oy2j+A0s/VSkD2mOd/fsK/pfvVu/qI4M/aGAx5U/hZ6ZSPloOUkoE MEp0Cpsm1+LR/QheQbsW7HCO8ljlKxBYDtr9TEsswJz2t1mCHqXgJ3/KSHEP+9dI WFenPdGVqInLpO7lhTRQyvtzTdXdCNpl8XQtfiIqYjkg52WZ+8Y470UURVnJxLe7 JQQG3NDP80gW8T++ddkiNHPHsmJ3x04VXG3msxK3Ow+bsjWiTnZG+QtvQTvsmWnv AYpVwzbuCrNejk4l5Phc2ef6kGRNNmyMY48ZVszO -----END CERTIFICATE-----Generated at Thu Sep 3 23:29:32 2026 by rpki-client