$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: AP5zNuyXIyD9OW6yzPz56NVSsQAFjU7Ks3mnBYjtHtE= Subject key identifier: 38:73:61:66:FA:BE:B4:8B:24:4C:17:FC:C0:DB:AD:45:60:2C:09:6F Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 7D76B73FEF9698C5907125EB93D97266B9191862 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 013F Signing time: Sat 10 Oct 2026 21:39:58 +0000 Manifest this update: Sat 10 Oct 2026 21:34:58 +0000 Manifest next update: Wed 14 Oct 2026 09:31:58 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: LEYad7mSahRTSf7RhquRmsgSxvjd5mcRpUMG02EzZlU=) 3: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:76:b7:3f:ef:96:98:c5:90:71:25:eb:93:d9:72:66:b9:19:18:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Oct 10 21:34:58 2026 GMT Not After : Oct 14 09:31:58 2026 GMT Subject: CN=38736166FABEB48B244C17FCC0DBAD45602C096F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:d5:b7:20:fb:7d:67:c2:e6:99:bb:99:d4: 85:d7:85:a6:f4:f9:97:cd:ca:cf:a7:45:63:86:e7: 26:81:44:4a:a9:14:08:fb:de:53:61:30:20:52:d4: a9:85:1b:df:1f:9e:0b:1b:3f:f4:ed:8a:cd:76:d6: c0:ca:36:20:54:de:c0:d1:38:64:59:43:1c:03:0f: 1b:2e:b5:97:da:94:b7:fe:72:3e:48:11:f1:0a:d2: 18:38:64:49:ad:1a:eb:f5:1d:f8:e3:f5:2e:7f:02: c4:6f:11:c0:1b:7d:0a:97:95:17:da:7a:17:0b:a3: d2:43:b5:00:9c:33:68:72:c7:b1:7e:26:dc:41:5c: 1e:32:64:21:a3:95:28:6e:01:83:81:69:22:01:e1: c2:70:99:34:9e:28:a2:2c:c3:ac:24:d4:5b:87:73: 13:ba:cd:de:d4:11:a5:94:52:b8:1a:41:13:13:81: dc:e6:84:95:a7:ee:92:95:b5:86:02:c9:c1:d4:f4: 16:a2:51:25:02:20:fd:ae:37:f9:84:34:3f:dd:05: 0d:f4:9c:c7:72:d7:37:26:ae:5c:af:e2:07:11:5b: 45:69:11:11:1b:e8:b9:61:76:42:e1:52:71:c7:43: a6:e2:ad:bc:86:ab:d7:69:cf:f3:66:26:2f:ad:d5: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:73:61:66:FA:BE:B4:8B:24:4C:17:FC:C0:DB:AD:45:60:2C:09:6F X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:35:3b:d0:87:be:41:7c:72:83:85:e2:66:bd:67:69:ac:97: 87:e2:d6:00:6e:50:33:d4:2d:90:e5:5c:df:44:44:a7:01:8c: 1d:a9:4d:bb:f3:96:4c:f9:b6:bf:00:40:bf:04:61:9d:d6:8e: 33:be:25:2a:56:a0:c8:d7:6d:b9:8d:94:53:7f:53:96:2d:cb: 94:d1:df:6d:e3:78:6d:1c:fc:4d:df:21:1e:42:7e:67:8b:12: d9:53:5e:cc:7f:3e:d5:ba:a0:82:b0:a1:f2:22:2e:11:46:a4: c3:75:fd:3b:1c:8c:1b:65:f0:a0:6c:34:33:68:31:b5:a3:ae: 7a:9b:cf:25:09:5a:07:eb:1b:80:ee:be:85:65:20:fb:21:af: e5:3c:c8:c8:2d:cd:d1:e5:ea:e2:5c:80:ee:20:9e:80:96:27: f6:07:6c:14:27:4a:ee:9b:e3:30:4a:5b:32:06:06:6a:71:4d: 5f:cc:f9:bb:4b:b8:8b:38:a6:fa:a5:9d:c7:d1:fd:5c:c1:47: f3:9d:aa:6e:d3:27:de:8c:14:f7:f5:c7:f0:d7:cd:81:10:da: 29:2e:53:43:23:c2:44:d7:2d:5b:1f:b3:a7:fc:71:57:07:1a: 83:ab:ee:35:2e:17:56:12:da:44:3f:f0:cd:06:62:32:d2:32: a4:ea:6a:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfXa3P++WmMWQcSXrk9lyZrkZGGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjEwMTAyMTM0NThaFw0yNjEwMTQwOTMxNThaMDMxMTAvBgNV BAMTKDM4NzM2MTY2RkFCRUI0OEIyNDRDMTdGQ0MwREJBRDQ1NjAyQzA5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwtW3IPt9Z8LmmbuZ1IXXhab0 +ZfNys+nRWOG5yaBREqpFAj73lNhMCBS1KmFG98fngsbP/Ttis121sDKNiBU3sDR OGRZQxwDDxsutZfalLf+cj5IEfEK0hg4ZEmtGuv1Hfjj9S5/AsRvEcAbfQqXlRfa ehcLo9JDtQCcM2hyx7F+JtxBXB4yZCGjlShuAYOBaSIB4cJwmTSeKKIsw6wk1FuH cxO6zd7UEaWUUrgaQRMTgdzmhJWn7pKVtYYCycHU9BaiUSUCIP2uN/mEND/dBQ30 nMdy1zcmrlyv4gcRW0VpEREb6LlhdkLhUnHHQ6birbyGq9dpz/NmJi+t1RIPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOHNhZvq+tIskTBf8wNutRWAsCW8wHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjU70Ie+QXxy g4XiZr1naayXh+LWAG5QM9QtkOVc30REpwGMHalNu/OWTPm2vwBAvwRhndaOM74l KlagyNdtuY2UU39Tli3LlNHfbeN4bRz8Td8hHkJ+Z4sS2VNezH8+1bqggrCh8iIu EUakw3X9OxyMG2XwoGw0M2gxtaOuepvPJQlaB+sbgO6+hWUg+yGv5TzIyC3N0eXq 4lyA7iCegJYn9gdsFCdK7pvjMEpbMgYGanFNX8z5u0u4izim+qWdx9H9XMFH852q btMn3owU9/XH8NfNgRDaKS5TQyPCRNctWx+zp/xxVwcag6vuNS4XVhLaRD/wzQZi MtIypOpq6g== -----END CERTIFICATE-----Generated at Mon Oct 12 19:27:49 2026 by rpki-client