$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: 5qPYJASpDHIeBkI/y8aqOn4e2RZB7wkgjcqoigDkfE0= Subject key identifier: 00:D0:CC:B4:11:AE:D3:D9:12:40:0F:D2:EE:92:AA:7F:79:F5:97:EF Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 72F243F8C0F748034BA6ACE7C8597AEC323227A0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 013B Signing time: Fri 09 Oct 2026 11:38:20 +0000 Manifest this update: Fri 09 Oct 2026 11:33:20 +0000 Manifest next update: Mon 12 Oct 2026 19:04:20 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: WebSlOq0bgau2O5invEWadvQ+zFpsfadRFpRgOwbTek=) 3: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 19:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f2:43:f8:c0:f7:48:03:4b:a6:ac:e7:c8:59:7a:ec:32:32:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Oct 9 11:33:20 2026 GMT Not After : Oct 12 19:04:20 2026 GMT Subject: CN=00D0CCB411AED3D912400FD2EE92AA7F79F597EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:1a:fd:79:8d:69:45:06:a9:05:a1:c5:3b: 21:7b:33:c7:bc:32:1b:94:e9:78:7d:10:53:c3:08: 87:d4:e2:42:24:d9:d4:4f:83:7d:5a:d4:31:8f:48: df:7a:5c:ea:e7:43:9b:87:79:cf:1d:9f:40:86:56: b3:74:82:1e:c4:eb:4a:30:ab:44:ee:59:c2:7a:e4: 31:75:13:87:b0:df:10:a6:35:f1:f7:b1:e9:5e:e8: 20:f1:58:2e:e8:e2:20:4f:c9:37:96:9a:be:27:c7: b9:93:e6:a6:49:56:ee:12:04:05:60:c2:db:de:7a: 03:bb:59:15:a8:86:ba:59:3e:60:b8:6d:03:99:b7: 75:17:9a:64:e2:78:24:75:51:39:fa:0d:24:1c:68: 2f:2a:51:dc:d8:d4:55:3f:68:e0:fa:55:27:bc:07: fe:04:dd:e9:43:f5:7e:ad:fd:55:7d:90:3d:8e:3b: 37:5e:d6:8a:2b:08:ec:b9:77:04:5c:5e:c3:3d:21: 1c:44:28:5c:8f:9f:bc:a4:fe:30:de:2d:ae:df:d7: f0:2e:6c:95:86:33:bb:49:88:cf:07:85:1d:e6:2b: 5e:81:28:40:92:48:ab:fa:90:f5:38:8e:64:a5:6b: 20:57:04:90:78:0f:03:a1:94:2c:b4:a1:36:4b:fb: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D0:CC:B4:11:AE:D3:D9:12:40:0F:D2:EE:92:AA:7F:79:F5:97:EF X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b3:9f:36:9f:35:d3:a4:af:3e:17:c3:da:6a:53:64:c6:51: 57:fe:a6:70:ea:37:d3:04:1f:05:d1:07:05:d3:f5:a5:88:e1: 8b:38:e5:5b:f0:f2:21:6b:89:d5:6c:90:53:a4:36:fb:51:70: 63:30:d9:f5:ce:1c:a3:2a:60:c0:f9:a6:3c:85:32:02:c0:9c: d0:9b:f7:cd:85:db:4a:f6:09:29:c2:bc:13:ff:69:e4:35:22: 83:6b:01:ad:bb:b1:3b:c8:9d:3b:42:35:4a:46:e1:3e:87:4b: 7a:5e:93:a8:fc:85:f1:77:9c:ca:42:2c:22:bc:ed:b3:77:af: 91:ba:70:03:e6:87:f4:a7:e7:98:55:9f:09:dd:b1:e1:23:c1: 7e:8b:e4:20:6a:2d:c1:cb:8d:0c:9e:c8:cb:1f:35:8b:d6:68: 61:f9:81:b8:47:84:ff:d5:e4:0e:1a:d7:6d:a5:28:54:0c:e4: 40:bc:d1:b8:c7:4d:27:13:96:fc:6a:67:ec:9c:1e:7a:84:f9: ef:59:8e:93:e8:54:c3:ec:59:98:b7:3e:c0:a9:97:7b:22:b1: e8:bd:5e:7c:11:e0:b2:83:df:6f:57:a2:0f:f3:b8:1c:e6:4c: c2:df:dc:d9:cb:a2:97:54:d8:a8:74:b1:1e:a7:3c:d0:dc:ac: b7:67:3a:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcvJD+MD3SANLpqznyFl67DIyJ6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjEwMDkxMTMzMjBaFw0yNjEwMTIxOTA0MjBaMDMxMTAvBgNV BAMTKDAwRDBDQ0I0MTFBRUQzRDkxMjQwMEZEMkVFOTJBQTdGNzlGNTk3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2axr9eY1pRQapBaHFOyF7M8e8 MhuU6Xh9EFPDCIfU4kIk2dRPg31a1DGPSN96XOrnQ5uHec8dn0CGVrN0gh7E60ow q0TuWcJ65DF1E4ew3xCmNfH3sele6CDxWC7o4iBPyTeWmr4nx7mT5qZJVu4SBAVg wtveegO7WRWohrpZPmC4bQOZt3UXmmTieCR1UTn6DSQcaC8qUdzY1FU/aOD6VSe8 B/4E3elD9X6t/VV9kD2OOzde1oorCOy5dwRcXsM9IRxEKFyPn7yk/jDeLa7f1/Au bJWGM7tJiM8HhR3mK16BKECSSKv6kPU4jmSlayBXBJB4DwOhlCy0oTZL+wRjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUANDMtBGu09kSQA/S7pKqf3n1l+8wHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLOfNp8106Sv PhfD2mpTZMZRV/6mcOo30wQfBdEHBdP1pYjhizjlW/DyIWuJ1WyQU6Q2+1FwYzDZ 9c4coypgwPmmPIUyAsCc0Jv3zYXbSvYJKcK8E/9p5DUig2sBrbuxO8idO0I1Skbh PodLel6TqPyF8XecykIsIrzts3evkbpwA+aH9KfnmFWfCd2x4SPBfovkIGotwcuN DJ7Iyx81i9ZoYfmBuEeE/9XkDhrXbaUoVAzkQLzRuMdNJxOW/Gpn7JweeoT571mO k+hUw+xZmLc+wKmXeyKx6L1efBHgsoPfb1eiD/O4HOZMwt/c2cuil1TYqHSxHqc8 0Nyst2c6wg== -----END CERTIFICATE-----Generated at Sat Oct 10 23:48:56 2026 by rpki-client