$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: xHycWx9ybtArvMKgyKJ1fnYFI30UsDwFH2stBu4Ewxg= Subject key identifier: EF:1C:19:FC:AC:B2:C7:52:D8:D0:2F:A7:8C:CD:9E:16:AE:1E:90:01 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 6CA925478B4BAFF23A05124EB625C5F9B72932FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 013A Signing time: Mon 12 Oct 2026 05:51:40 +0000 Manifest this update: Mon 12 Oct 2026 05:46:40 +0000 Manifest next update: Thu 15 Oct 2026 09:29:40 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: HVkgEIPTEvMWUgLMtWBPGMkRtrmQhgY9x1OodaHJZrk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 09:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a9:25:47:8b:4b:af:f2:3a:05:12:4e:b6:25:c5:f9:b7:29:32:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Oct 12 05:46:40 2026 GMT Not After : Oct 15 09:29:40 2026 GMT Subject: CN=EF1C19FCACB2C752D8D02FA78CCD9E16AE1E9001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:e6:80:20:67:dd:fe:89:b2:c2:f0:6f:db: cf:d3:5a:c8:e4:c0:e4:72:96:e0:1b:cc:04:73:86: 01:6b:75:62:31:1b:d6:74:62:f2:ee:ec:ca:9c:94: bc:2e:ce:56:c8:6d:bc:d0:57:42:8b:e2:0b:d1:b9: c5:a6:ed:a7:0c:44:2d:69:fb:cb:3d:00:04:31:64: 63:00:7b:e0:9d:42:c1:10:aa:02:4f:be:e1:29:fe: 2e:07:ea:8e:b8:16:df:f2:59:63:93:16:87:6b:ba: 97:1d:e4:ee:84:18:6b:8d:e4:b3:13:4c:ff:f6:8a: 21:00:0b:a2:6a:4a:a6:9f:32:bd:69:db:bb:3a:83: 1d:59:cc:d8:65:17:0b:67:dc:57:0a:f9:0f:e2:8d: b0:da:3f:73:7b:be:8e:80:04:51:7f:1b:8d:9e:aa: 15:dd:17:e6:6c:92:d7:ae:6f:3f:ac:29:15:b9:64: 7c:06:00:f5:51:0e:47:42:fe:1e:f3:fa:b0:5a:34: f2:88:5a:ce:04:53:e7:ea:4b:f1:10:a8:55:47:37: c5:ac:00:bf:33:d0:8b:d8:5c:77:a6:2e:d4:b1:6f: 78:03:05:91:82:69:2d:ce:d8:6f:eb:77:94:4c:33: 4e:cf:32:40:ca:a5:e7:1f:de:fb:27:b8:ad:b8:0e: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:19:FC:AC:B2:C7:52:D8:D0:2F:A7:8C:CD:9E:16:AE:1E:90:01 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e7:ce:bc:83:9b:ef:7f:99:bf:a9:d1:3e:c9:f9:05:d6:4f: 2b:b0:3d:bb:d6:13:63:c7:bd:fa:0d:ad:ec:a9:ff:f8:25:f0: 7d:c3:ed:a5:8a:1e:56:5f:03:63:fc:91:c2:a0:1d:20:86:9b: b6:69:1f:38:20:b8:d9:73:13:a4:51:12:be:35:af:b5:ab:29: e5:9f:f3:37:fb:b3:4f:95:64:15:7e:24:19:d7:7b:dd:8e:56: 62:df:05:0d:53:10:37:f1:eb:a0:48:92:14:c3:43:93:a7:d8: 2e:74:8b:40:57:4a:c3:4c:58:74:e9:f8:86:d7:20:de:c4:18: 96:c2:87:3c:f7:26:42:01:53:3c:ce:0a:cd:17:26:0a:f0:9f: bf:67:a9:9b:02:39:18:cb:16:71:e7:03:05:91:e1:ee:19:4b: 00:79:00:53:7b:23:51:00:f9:0f:10:fc:c4:7f:60:6d:94:07: a5:22:d6:2c:59:fb:f4:d1:75:f0:19:3d:59:5a:9d:8f:b7:75: 40:c2:47:48:77:b3:b3:57:5d:1c:a3:6b:78:ff:0d:af:d0:87: d2:83:f3:4b:d5:89:dd:c5:43:20:76:9f:c8:d3:4a:15:41:d3: f1:04:12:74:5c:09:b4:4f:db:3c:45:ac:54:97:13:03:0b:17: c3:70:0e:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbKklR4tLr/I6BRJOtiXF+bcpMv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjEwMTIwNTQ2NDBaFw0yNjEwMTUwOTI5NDBaMDMxMTAvBgNV BAMTKEVGMUMxOUZDQUNCMkM3NTJEOEQwMkZBNzhDQ0Q5RTE2QUUxRTkwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB++aAIGfd/omywvBv28/TWsjk wORyluAbzARzhgFrdWIxG9Z0YvLu7MqclLwuzlbIbbzQV0KL4gvRucWm7acMRC1p +8s9AAQxZGMAe+CdQsEQqgJPvuEp/i4H6o64Ft/yWWOTFodrupcd5O6EGGuN5LMT TP/2iiEAC6JqSqafMr1p27s6gx1ZzNhlFwtn3FcK+Q/ijbDaP3N7vo6ABFF/G42e qhXdF+Zskteubz+sKRW5ZHwGAPVRDkdC/h7z+rBaNPKIWs4EU+fqS/EQqFVHN8Ws AL8z0IvYXHemLtSxb3gDBZGCaS3O2G/rd5RMM07PMkDKpecf3vsnuK24DmP/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7xwZ/Kyyx1LY0C+njM2eFq4ekAEwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+fOvIOb73+Z v6nRPsn5BdZPK7A9u9YTY8e9+g2t7Kn/+CXwfcPtpYoeVl8DY/yRwqAdIIabtmkf OCC42XMTpFESvjWvtasp5Z/zN/uzT5VkFX4kGdd73Y5WYt8FDVMQN/HroEiSFMND k6fYLnSLQFdKw0xYdOn4htcg3sQYlsKHPPcmQgFTPM4KzRcmCvCfv2epmwI5GMsW cecDBZHh7hlLAHkAU3sjUQD5DxD8xH9gbZQHpSLWLFn79NF18Bk9WVqdj7d1QMJH SHezs1ddHKNreP8Nr9CH0oPzS9WJ3cVDIHafyNNKFUHT8QQSdFwJtE/bPEWsVJcT AwsXw3AOdg== -----END CERTIFICATE-----Generated at Tue Oct 13 19:49:20 2026 by rpki-client