$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: 2Nilu7oG/kMum4xjorh3g4MB7SvfmizebB0YdIvJzJY= Subject key identifier: 93:5B:29:B3:A8:15:2E:B1:8E:FD:69:99:19:3A:BF:AB:ED:4F:1E:4B Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 7D4C3F88A617608F55DD12A73813A5BFD6480DBE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 0139 Signing time: Sat 10 Oct 2026 08:49:30 +0000 Manifest this update: Sat 10 Oct 2026 08:44:30 +0000 Manifest next update: Tue 13 Oct 2026 20:15:30 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 2: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 3: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: NN6QoOpRfM1P831NZPpi1WpEVcl9TgLioNuPvoSjW6g=) 5: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:3f:88:a6:17:60:8f:55:dd:12:a7:38:13:a5:bf:d6:48:0d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Oct 10 08:44:30 2026 GMT Not After : Oct 13 20:15:30 2026 GMT Subject: CN=935B29B3A8152EB18EFD6999193ABFABED4F1E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:59:5a:c0:1d:ee:5a:11:2c:74:85:88:b7: ec:dc:39:99:bd:9e:94:ac:0c:ba:69:e3:41:a4:e5: 83:2c:27:b2:e7:59:f5:dd:9b:74:64:e6:9b:6a:97: fb:04:62:d1:36:95:59:f5:08:95:fc:ac:5f:85:46: d4:e5:bf:ee:cf:18:3b:0f:1a:12:61:d9:31:45:08: 5a:9b:4e:c4:56:3d:e4:c9:a5:bc:12:a3:8e:6b:a8: 85:85:a7:63:60:5a:04:fb:0c:6f:0b:d2:a1:bd:88: 97:33:75:c8:d2:df:00:03:0b:f2:2d:19:d8:d3:da: 8f:b3:7f:62:8f:9e:f7:26:62:58:02:7d:54:16:d6: 6e:90:f3:21:c1:4e:36:5c:ca:6e:29:91:37:81:30: 21:43:b9:54:b5:dd:94:5e:35:03:8c:8c:86:ab:ee: 4a:3e:5b:32:20:e6:67:9d:42:42:3b:f1:08:3d:0b: c6:7c:0d:fa:02:f2:da:fc:79:ad:71:33:2a:81:93: ec:15:15:f5:f1:a0:15:05:ed:49:20:c3:33:a6:67: ee:2e:67:5d:3b:49:e2:1f:2e:cc:b9:30:5a:1e:f4: ef:01:e9:55:27:05:a5:10:17:0c:58:cf:30:51:00: 52:24:c8:8b:89:1d:bd:21:4f:04:c9:1a:e1:03:e1: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5B:29:B3:A8:15:2E:B1:8E:FD:69:99:19:3A:BF:AB:ED:4F:1E:4B X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cd:1c:59:15:a1:bd:f5:0e:7b:67:1c:9b:c9:13:65:bd:3a: 4d:db:83:96:56:76:f9:26:c7:2a:cf:88:a9:3a:5b:47:99:4b: d0:ee:19:0e:b5:82:38:87:f7:14:42:04:5d:eb:3e:b9:3a:1f: 53:60:b6:54:46:fb:b1:e3:78:50:b2:7a:4b:6c:67:7a:40:04: 7b:f2:d6:86:f0:61:63:e3:b7:47:49:48:f8:38:62:e1:56:19: 19:9a:04:76:a4:e4:ed:9e:8e:a5:3f:a8:72:35:78:07:a8:cc: d7:e4:a3:eb:62:10:9b:ae:89:0c:e5:0e:8d:14:98:d2:bd:14: 3e:73:03:14:e2:6e:03:28:bc:94:18:9f:56:a4:a8:d7:5c:d6: 50:4f:17:b9:64:f2:50:5d:ad:bd:69:71:97:29:b2:e9:cf:14: bf:89:a1:98:07:b6:4f:08:62:0a:52:1f:eb:f8:3d:0a:65:fb: d8:64:a9:87:c7:29:f8:73:0d:db:ab:6e:a8:7f:a4:b9:38:80: ef:84:43:05:f6:65:63:9d:ab:d3:c2:43:94:0a:49:a1:15:35: 6d:6d:7b:8d:35:db:d2:75:a9:31:d4:dd:76:68:17:32:b3:a4: 87:64:80:de:86:2f:53:ef:83:b9:57:0e:b3:27:e7:e3:b5:32: 9c:83:23:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfUw/iKYXYI9V3RKnOBOlv9ZIDb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjEwMTAwODQ0MzBaFw0yNjEwMTMyMDE1MzBaMDMxMTAvBgNV BAMTKDkzNUIyOUIzQTgxNTJFQjE4RUZENjk5OTE5M0FCRkFCRUQ0RjFFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzy1lawB3uWhEsdIWIt+zcOZm9 npSsDLpp40Gk5YMsJ7LnWfXdm3Rk5ptql/sEYtE2lVn1CJX8rF+FRtTlv+7PGDsP GhJh2TFFCFqbTsRWPeTJpbwSo45rqIWFp2NgWgT7DG8L0qG9iJczdcjS3wADC/It GdjT2o+zf2KPnvcmYlgCfVQW1m6Q8yHBTjZcym4pkTeBMCFDuVS13ZReNQOMjIar 7ko+WzIg5medQkI78Qg9C8Z8DfoC8tr8ea1xMyqBk+wVFfXxoBUF7UkgwzOmZ+4u Z107SeIfLsy5MFoe9O8B6VUnBaUQFwxYzzBRAFIkyIuJHb0hTwTJGuED4RnbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk1sps6gVLrGO/WmZGTq/q+1PHkswHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM0cWRWhvfUO e2ccm8kTZb06TduDllZ2+SbHKs+IqTpbR5lL0O4ZDrWCOIf3FEIEXes+uTofU2C2 VEb7seN4ULJ6S2xnekAEe/LWhvBhY+O3R0lI+Dhi4VYZGZoEdqTk7Z6OpT+ocjV4 B6jM1+Sj62IQm66JDOUOjRSY0r0UPnMDFOJuAyi8lBifVqSo11zWUE8XuWTyUF2t vWlxlymy6c8Uv4mhmAe2TwhiClIf6/g9CmX72GSph8cp+HMN26tuqH+kuTiA74RD BfZlY52r08JDlApJoRU1bW17jTXb0nWpMdTddmgXMrOkh2SA3oYvU++DuVcOsyfn 47UynIMjwQ== -----END CERTIFICATE-----Generated at Sun Oct 11 19:42:31 2026 by rpki-client