$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: 3vcDUwpdrq1O04c+/d2+QuVk3frDhF6nBQVH8ZMOI0k= Subject key identifier: E4:D3:2C:8B:01:1E:C7:A8:0B:51:FA:F2:4E:CA:2F:7F:C6:35:D1:AB Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 43B9C390CEE5B3EDE0A77F857FF7C52149D8061B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 014D Signing time: Fri 09 Oct 2026 05:03:06 +0000 Manifest this update: Fri 09 Oct 2026 04:58:06 +0000 Manifest next update: Mon 12 Oct 2026 06:14:06 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: 8jFwLBUOn1XDRpggNhYaM1hkTMfjgJfU73ezbElBSEE=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b9:c3:90:ce:e5:b3:ed:e0:a7:7f:85:7f:f7:c5:21:49:d8:06:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Oct 9 04:58:06 2026 GMT Not After : Oct 12 06:14:06 2026 GMT Subject: CN=E4D32C8B011EC7A80B51FAF24ECA2F7FC635D1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:6e:cc:bd:23:6c:82:63:89:3e:58:5f:10: 27:26:87:b5:20:70:30:fd:68:fd:e3:80:a9:15:f2: e4:70:f1:cd:c1:0a:eb:c7:0d:9b:c2:95:d2:8b:86: d0:dc:69:c4:fd:4e:3b:27:89:5e:6c:1f:0d:45:4c: bf:4d:7c:54:c8:be:55:af:5d:de:3c:ea:34:2e:a9: 76:18:97:bd:d4:9e:fa:de:e4:bb:9d:a5:3e:ab:97: 4c:bd:fd:9c:5a:a4:d9:1c:32:ac:ac:d5:68:0c:fd: d1:7f:2f:6f:61:5f:65:27:c1:f5:8d:10:ce:50:a4: 67:ea:c9:b4:3f:b6:14:c4:5a:35:e0:ed:a7:38:8c: 14:16:b6:54:c3:7a:88:91:ee:5c:16:0c:ec:fe:a6: c5:47:c9:d7:bc:04:51:b9:4c:a5:32:35:c0:de:7b: 86:4e:f6:63:7b:5b:03:33:17:4b:b2:61:f2:be:65: 4a:99:92:dc:ee:dc:38:de:e0:a8:18:f3:a2:d1:63: 3e:a8:dc:35:61:9d:10:be:f6:10:0d:36:6e:19:d9: 7d:f3:c6:17:a8:c7:ab:91:01:86:c5:8d:77:5f:af: f7:fb:43:b4:0b:0b:93:07:a3:d7:10:b8:d9:9f:e5: 88:52:cb:02:22:68:78:81:61:84:ad:51:9b:32:e2: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D3:2C:8B:01:1E:C7:A8:0B:51:FA:F2:4E:CA:2F:7F:C6:35:D1:AB X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5b:2b:0d:11:36:93:9d:46:80:81:b2:30:f3:b5:25:14:37: aa:bf:f8:90:61:1e:55:d8:73:68:7f:ee:91:d7:23:53:05:4e: 63:8b:68:7c:98:94:2f:ff:ba:d3:de:09:c5:0b:f5:72:bd:32: 53:4a:f2:b0:23:49:dd:f4:3d:bb:e2:cc:69:b6:0b:99:05:8a: 8f:c5:e1:d6:fa:40:d4:6f:eb:78:93:f0:9d:1b:41:4f:e6:57: 9c:23:e3:77:96:81:6f:29:0f:58:36:5d:90:cd:a7:6e:a2:b9: a8:8c:21:2e:6e:68:59:33:4f:cd:99:fa:63:c8:d6:4e:3a:a7: 2f:81:44:ce:88:4e:ec:9b:ce:3e:33:2c:d9:56:f3:50:6a:d6: 8c:f3:bc:f0:9a:a8:ee:f1:7e:a1:a0:44:47:95:4a:97:3f:de: ee:7e:38:13:e9:17:47:b4:cb:c6:86:9c:e1:65:3c:69:80:b8: 08:21:8e:2b:44:55:30:31:6f:da:2f:3e:4d:d7:45:6f:5e:56: df:c8:a0:c8:6f:c6:7b:3e:c0:8c:a1:db:a8:3c:ec:50:55:90: 45:ab:4f:b9:db:60:07:b4:b2:92:b9:b1:34:0c:50:36:51:bb: a7:2d:9a:2a:d8:61:d1:40:a0:50:ff:a8:7c:e4:10:47:9b:1f: 5b:a1:ad:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ7nDkM7ls+3gp3+Ff/fFIUnYBhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjEwMDkwNDU4MDZaFw0yNjEwMTIwNjE0MDZaMDMxMTAvBgNV BAMTKEU0RDMyQzhCMDExRUM3QTgwQjUxRkFGMjRFQ0EyRjdGQzYzNUQxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcG7MvSNsgmOJPlhfECcmh7Ug cDD9aP3jgKkV8uRw8c3BCuvHDZvCldKLhtDcacT9TjsniV5sHw1FTL9NfFTIvlWv Xd486jQuqXYYl73Unvre5LudpT6rl0y9/ZxapNkcMqys1WgM/dF/L29hX2UnwfWN EM5QpGfqybQ/thTEWjXg7ac4jBQWtlTDeoiR7lwWDOz+psVHyde8BFG5TKUyNcDe e4ZO9mN7WwMzF0uyYfK+ZUqZktzu3Dje4KgY86LRYz6o3DVhnRC+9hANNm4Z2X3z xheox6uRAYbFjXdfr/f7Q7QLC5MHo9cQuNmf5YhSywIiaHiBYYStUZsy4mMLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5NMsiwEex6gLUfryTsovf8Y10aswHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1srDRE2k51G gIGyMPO1JRQ3qr/4kGEeVdhzaH/ukdcjUwVOY4tofJiUL/+6094JxQv1cr0yU0ry sCNJ3fQ9u+LMabYLmQWKj8Xh1vpA1G/reJPwnRtBT+ZXnCPjd5aBbykPWDZdkM2n bqK5qIwhLm5oWTNPzZn6Y8jWTjqnL4FEzohO7JvOPjMs2VbzUGrWjPO88Jqo7vF+ oaBER5VKlz/e7n44E+kXR7TLxoac4WU8aYC4CCGOK0RVMDFv2i8+TddFb15W38ig yG/Gez7AjKHbqDzsUFWQRatPudtgB7SykrmxNAxQNlG7py2aKthh0UCgUP+ofOQQ R5sfW6GtNA== -----END CERTIFICATE-----Generated at Sun Oct 11 06:55:54 2026 by rpki-client