$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: UvFOiDKGp2pQIj1hzg6pEILUU/2JksRkUP5L9JcQVJY= Subject key identifier: A2:61:D3:36:7C:AC:6E:0F:15:54:37:EE:E7:AA:06:E3:18:88:5C:A9 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 40FD51F690F696E037660732F43817BB6F738D8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 0139 Signing time: Sat 10 Oct 2026 10:59:36 +0000 Manifest this update: Sat 10 Oct 2026 10:54:36 +0000 Manifest next update: Tue 13 Oct 2026 11:53:36 +0000 Files and hashes: 1: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 2: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 3: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: 4PsbCS47e5wx2KLFBTMgnG3xOLUzJgA9XdX0C641Pgs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fd:51:f6:90:f6:96:e0:37:66:07:32:f4:38:17:bb:6f:73:8d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Oct 10 10:54:36 2026 GMT Not After : Oct 13 11:53:36 2026 GMT Subject: CN=A261D3367CAC6E0F155437EEE7AA06E318885CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:d0:c7:85:3a:7e:79:2b:6c:ad:fb:ff:d2: cb:dd:7f:67:9c:84:68:6c:73:35:31:11:a1:ff:0f: f1:4e:dc:71:1b:00:6e:20:11:38:c7:38:40:8b:f4: 5b:da:b9:f7:37:ab:e4:a5:83:97:14:0d:fe:d0:59: 63:ce:0d:fa:4a:d2:6e:60:6d:c0:0b:df:98:4d:02: 9e:ab:66:3e:e6:e0:2c:04:ec:d6:71:da:2a:7c:ed: 87:c8:43:cf:f9:63:5c:0f:5b:f1:32:5b:04:53:02: 33:1d:d1:0d:1b:16:84:f8:17:74:51:ee:93:2a:e3: 13:a1:bb:6f:db:81:a9:4f:51:67:57:f3:b6:dd:d7: ee:5f:af:b8:ef:c2:35:24:73:3b:d0:1f:b6:5e:1d: 78:be:45:f9:87:57:ec:25:0f:8a:17:f3:52:1d:d2: 19:34:8d:3f:ab:bc:d6:df:81:4b:bf:6e:b5:33:6f: 86:f8:1f:7e:02:8b:16:89:4d:87:ea:30:dc:e1:6b: b4:8d:dd:cf:60:72:f6:30:3c:f2:9b:a7:10:50:1e: 3d:57:1d:ad:4f:62:13:ea:27:d1:57:30:64:0f:f3: ff:79:7b:f3:98:d2:0a:0e:d0:36:49:61:57:ca:3d: fe:4c:c5:a1:4f:db:f0:8c:62:7c:75:ac:16:3b:42: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:D3:36:7C:AC:6E:0F:15:54:37:EE:E7:AA:06:E3:18:88:5C:A9 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:64:35:12:25:0e:86:80:0f:2e:fb:54:c8:54:8d:13:a5:6f: ac:4a:9f:b1:50:c4:78:5e:83:e7:2c:5c:a2:27:c6:87:74:e9: 39:0a:4a:ff:28:23:6d:b8:30:c0:31:4c:0c:46:76:68:a9:3a: de:4b:b2:17:52:6d:97:dc:00:83:26:d0:49:49:60:23:e0:45: 60:d5:46:b3:b6:7d:74:51:c9:9a:cf:3a:f7:b8:6a:9c:67:29: 56:de:fe:87:f7:3f:1b:49:08:62:27:e3:48:58:40:ac:80:69: e9:69:7d:86:d4:52:64:bb:6d:a1:a0:38:5e:09:9c:40:d0:65: a4:33:56:56:94:e4:d6:51:34:89:32:26:68:9c:b9:f4:3b:a1: 94:95:08:42:c8:c5:95:02:0a:70:0f:48:7f:0d:f9:76:1e:e4: 94:16:25:83:78:75:ff:ee:b2:6e:e6:81:bb:6f:9e:11:ea:09: 06:7c:23:97:9d:9a:27:5c:34:6d:ec:b8:3b:a2:b9:a0:77:cd: 48:c9:85:cf:c0:79:47:70:38:82:e9:49:21:9c:72:15:63:4a: a9:e5:8e:10:c8:b1:27:53:4e:02:a5:a8:7a:3f:87:c1:31:d7: 2b:57:89:51:3a:6b:77:ee:db:51:3b:67:72:44:6a:fe:b4:3c: c9:e5:59:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQP1R9pD2luA3Zgcy9DgXu29zjY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjEwMTAxMDU0MzZaFw0yNjEwMTMxMTUzMzZaMDMxMTAvBgNV BAMTKEEyNjFEMzM2N0NBQzZFMEYxNTU0MzdFRUU3QUEwNkUzMTg4ODVDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aNDHhTp+eStsrfv/0svdf2ec hGhsczUxEaH/D/FO3HEbAG4gETjHOECL9Fvaufc3q+Slg5cUDf7QWWPODfpK0m5g bcAL35hNAp6rZj7m4CwE7NZx2ip87YfIQ8/5Y1wPW/EyWwRTAjMd0Q0bFoT4F3RR 7pMq4xOhu2/bgalPUWdX87bd1+5fr7jvwjUkczvQH7ZeHXi+RfmHV+wlD4oX81Id 0hk0jT+rvNbfgUu/brUzb4b4H34CixaJTYfqMNzha7SN3c9gcvYwPPKbpxBQHj1X Ha1PYhPqJ9FXMGQP8/95e/OY0goO0DZJYVfKPf5MxaFP2/CMYnx1rBY7QjVXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUomHTNnysbg8VVDfu56oG4xiIXKkwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mQ1EiUOhoAP LvtUyFSNE6VvrEqfsVDEeF6D5yxcoifGh3TpOQpK/ygjbbgwwDFMDEZ2aKk63kuy F1Jtl9wAgybQSUlgI+BFYNVGs7Z9dFHJms8697hqnGcpVt7+h/c/G0kIYifjSFhA rIBp6Wl9htRSZLttoaA4XgmcQNBlpDNWVpTk1lE0iTImaJy59DuhlJUIQsjFlQIK cA9Ifw35dh7klBYlg3h1/+6ybuaBu2+eEeoJBnwjl52aJ1w0bey4O6K5oHfNSMmF z8B5R3A4gulJIZxyFWNKqeWOEMixJ1NOAqWoej+HwTHXK1eJUTprd+7bUTtnckRq /rQ8yeVZwA== -----END CERTIFICATE-----Generated at Sat Oct 10 19:58:06 2026 by rpki-client