$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: R2Xtr7QMw8LNdeUcH52yknitrzaG39BT89DdjOfaU1w= Subject key identifier: 96:1D:7C:E5:8A:59:D1:37:5F:94:34:C3:EC:83:19:E1:62:ED:DD:FE Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 3B60EDC1C9426B00C09744FA45BD0E0AB672C3C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 013A Signing time: Sat 10 Oct 2026 10:34:34 +0000 Manifest this update: Sat 10 Oct 2026 10:29:34 +0000 Manifest next update: Tue 13 Oct 2026 10:44:34 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: XzJQ9Tjb56TYE+fY42C/J60z8zd7stCM5c/i+NB3XjY=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:60:ed:c1:c9:42:6b:00:c0:97:44:fa:45:bd:0e:0a:b6:72:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Oct 10 10:29:34 2026 GMT Not After : Oct 13 10:44:34 2026 GMT Subject: CN=961D7CE58A59D1375F9434C3EC8319E162EDDDFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:34:d8:b6:e4:8f:0b:1a:bd:e9:25:0a:31: d3:5b:a2:34:e8:82:3b:6c:b8:2e:60:e2:1b:86:ac: 1b:73:fb:66:13:e7:70:14:c0:8c:5d:0b:5d:01:2d: 7f:a6:fc:3d:14:a6:60:cd:57:0a:cb:c4:7b:7c:50: ca:7e:79:1e:f4:da:6b:b5:cb:9a:77:1f:a0:a8:db: 1e:6a:60:d9:31:a5:66:ca:a8:88:3e:7a:d7:bf:92: bc:4d:36:5c:3d:71:c5:84:e5:c0:d0:7d:4d:e7:8d: 64:30:45:3d:75:d7:7c:81:cc:59:44:e3:e0:63:e0: da:86:cc:b5:7f:ca:e6:2d:fd:65:94:f6:15:e6:57: 28:16:1f:5b:10:08:bb:fd:63:2b:b2:8e:25:29:d7: 46:8e:cf:51:15:f6:10:d6:72:e6:6c:62:ed:3b:61: d0:01:2d:6d:01:c3:68:b1:ee:f0:bf:be:5f:f5:80: e6:9a:85:4c:7f:26:97:ae:83:f9:17:ce:20:12:7f: 1c:d0:62:19:f2:ec:dc:d9:b9:e8:e5:e5:51:1b:6a: c3:6f:82:72:7c:68:ff:97:32:0d:29:a3:2c:d5:12: 6f:d1:2b:65:d1:7e:5a:51:fe:17:01:73:31:69:19: 63:30:22:0a:0f:f5:a2:14:af:95:a1:42:fb:dc:29: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:7C:E5:8A:59:D1:37:5F:94:34:C3:EC:83:19:E1:62:ED:DD:FE X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:72:09:c3:fb:7b:e3:0f:3d:53:e6:e0:75:99:c2:2e:a5:08: 51:ed:56:ce:78:05:8c:bb:b0:4f:2f:aa:49:1e:c5:77:a8:63: 3a:47:82:74:58:86:05:30:b1:04:95:fd:da:28:3d:3d:61:21: 84:52:fb:0b:25:a5:00:1e:0f:07:bc:f7:a3:8d:c0:0e:0d:6f: 35:e1:c6:47:6f:5b:a5:05:c9:80:b3:d8:4f:c1:75:8f:c7:f2: cf:71:e1:12:47:83:a1:a6:a6:d7:59:65:de:b6:88:7e:21:1d: cd:5a:c1:77:ad:d4:8a:ee:a5:26:ea:67:98:a0:e8:63:c8:52: 73:04:a0:09:c5:71:48:e2:ba:64:c2:1f:69:ed:53:ff:e3:e6: 14:b5:1f:9e:b1:f6:f7:10:e2:ef:80:7e:ea:88:a1:98:b1:b5: 12:af:a5:8a:da:c0:b6:56:ff:e3:cb:db:bc:fe:53:79:0d:76: a3:0f:b5:92:bd:c9:60:81:a8:41:34:75:9c:98:05:23:a6:09: f2:1b:46:cb:77:ea:e8:10:b3:9a:be:80:72:1c:98:de:a2:3b: 0d:74:bd:c8:29:b9:c7:26:f5:05:2c:62:b8:f5:2b:ac:60:ac: b9:23:c0:fd:dd:28:08:41:77:83:b5:a2:49:1d:f9:4d:20:e3: 7e:32:77:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO2DtwclCawDAl0T6Rb0OCrZyw8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjEwMTAxMDI5MzRaFw0yNjEwMTMxMDQ0MzRaMDMxMTAvBgNV BAMTKDk2MUQ3Q0U1OEE1OUQxMzc1Rjk0MzRDM0VDODMxOUUxNjJFRERERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVezTYtuSPCxq96SUKMdNbojTo gjtsuC5g4huGrBtz+2YT53AUwIxdC10BLX+m/D0UpmDNVwrLxHt8UMp+eR702mu1 y5p3H6Co2x5qYNkxpWbKqIg+ete/krxNNlw9ccWE5cDQfU3njWQwRT1113yBzFlE 4+Bj4NqGzLV/yuYt/WWU9hXmVygWH1sQCLv9YyuyjiUp10aOz1EV9hDWcuZsYu07 YdABLW0Bw2ix7vC/vl/1gOaahUx/Jpeug/kXziASfxzQYhny7NzZuejl5VEbasNv gnJ8aP+XMg0poyzVEm/RK2XRflpR/hcBczFpGWMwIgoP9aIUr5WhQvvcKV+zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlh185YpZ0TdflDTD7IMZ4WLt3f4wHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnIJw/t74w89 U+bgdZnCLqUIUe1WzngFjLuwTy+qSR7Fd6hjOkeCdFiGBTCxBJX92ig9PWEhhFL7 CyWlAB4PB7z3o43ADg1vNeHGR29bpQXJgLPYT8F1j8fyz3HhEkeDoaam11ll3raI fiEdzVrBd63Uiu6lJupnmKDoY8hScwSgCcVxSOK6ZMIfae1T/+PmFLUfnrH29xDi 74B+6oihmLG1Eq+litrAtlb/48vbvP5TeQ12ow+1kr3JYIGoQTR1nJgFI6YJ8htG y3fq6BCzmr6AchyY3qI7DXS9yCm5xyb1BSxiuPUrrGCsuSPA/d0oCEF3g7WiSR35 TSDjfjJ36Q== -----END CERTIFICATE-----Generated at Sun Oct 11 14:39:39 2026 by rpki-client