$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: Wcm8fvqcTnJke0oGLT4cSRYkvWi1xPzqEf8VDyy8HiU= Subject key identifier: EB:DA:98:8B:8A:BA:16:6B:BD:B7:16:CF:C4:20:CF:79:F4:D5:45:1A Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 61367DE7DF3726E16B2FEBA01E3ADDE9726A105A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 013A Signing time: Mon 12 Oct 2026 05:51:40 +0000 Manifest this update: Mon 12 Oct 2026 05:46:40 +0000 Manifest next update: Thu 15 Oct 2026 16:39:40 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: TAH8Ff+6SsOyOfCDv+Ik5swCUrYncgOAARiU/IEtWWg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:36:7d:e7:df:37:26:e1:6b:2f:eb:a0:1e:3a:dd:e9:72:6a:10:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Oct 12 05:46:40 2026 GMT Not After : Oct 15 16:39:40 2026 GMT Subject: CN=EBDA988B8ABA166BBDB716CFC420CF79F4D5451A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:48:74:25:25:a9:b4:ad:72:7d:a8:1a:b7: 84:8d:22:04:67:00:2d:40:b0:a1:76:4a:f2:07:08: 4a:63:f4:7c:56:8e:76:21:50:5e:bd:ad:2c:da:f6: 85:68:0d:e6:d1:cd:3e:63:a4:2c:38:e2:fc:29:be: 52:2f:dc:f8:f7:fd:2a:00:4c:29:e2:46:95:4a:d9: 1d:5f:d6:cc:38:dc:24:57:69:4d:03:42:57:81:3a: e7:e3:6b:7f:2a:c6:50:6a:22:ea:6a:e2:a8:77:53: f5:80:1c:b3:bc:a5:8f:68:cc:00:09:1f:d4:60:0a: 47:5a:cb:e4:e0:84:c2:fa:d6:1a:97:fd:a6:f0:17: 54:7b:c2:c6:80:b3:74:fc:22:98:05:43:7c:ea:b2: f4:d5:8c:6f:a7:1e:b8:11:b6:9b:06:92:73:9e:1a: ba:00:30:37:d7:1b:13:a8:36:06:12:7c:07:d2:15: ed:b5:ce:d3:e8:b7:03:56:f3:5d:f2:35:7c:51:d9: 45:14:5f:aa:e3:58:a8:3c:70:7f:5e:a7:ef:98:70: 2b:52:ca:de:01:03:fd:f7:ae:0c:be:4b:c5:89:7b: ca:96:30:5e:8c:53:4d:9e:35:61:bf:4f:ac:cd:e7: b2:e6:70:03:43:5e:9e:0f:3d:72:d2:24:08:48:5f: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:98:8B:8A:BA:16:6B:BD:B7:16:CF:C4:20:CF:79:F4:D5:45:1A X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:46:a2:95:38:b3:67:e9:20:99:91:99:46:4b:4e:96:ca:91: c8:e5:50:dc:ed:46:10:de:f7:91:f6:67:ef:d6:d0:38:18:f2: db:7f:a0:dd:ac:01:b0:76:5e:8b:0d:8f:7e:ba:72:ff:9d:32: d6:0e:85:14:df:e8:70:02:74:cd:98:bf:1e:04:da:33:1b:a4: bc:ba:46:11:2a:1e:c4:a7:89:71:3d:92:ce:97:fb:fe:f8:5a: d4:92:ab:d2:1c:4c:04:e1:a3:e7:e0:46:a9:2f:53:41:e3:49: 22:53:5f:74:78:cc:c9:33:06:98:d4:a2:28:f9:47:6a:b1:25: 1b:b1:10:63:4d:20:45:2d:15:a1:ef:97:28:59:bf:57:d4:76: 02:53:f3:a5:1a:42:0b:06:3a:64:60:55:b9:14:42:33:df:3d: 2c:dc:f4:ab:ed:fb:1b:95:5f:cb:f5:25:aa:00:1f:eb:5f:93: 6e:87:8c:8e:3d:d5:b0:6a:d0:00:c2:a1:bc:84:06:ee:26:6a: 1e:e9:4e:78:b0:b2:6d:c3:bb:6e:c0:66:2c:69:aa:59:0a:2e: 1b:e9:32:37:c1:9c:a7:52:8f:65:b1:af:1b:f3:73:bd:94:ac: 3c:09:8b:69:2e:55:dd:08:a3:4f:86:97:26:24:be:5b:97:20: 5e:c3:6b:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYTZ95983JuFrL+ugHjrd6XJqEFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjEwMTIwNTQ2NDBaFw0yNjEwMTUxNjM5NDBaMDMxMTAvBgNV BAMTKEVCREE5ODhCOEFCQTE2NkJCREI3MTZDRkM0MjBDRjc5RjRENTQ1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXb0h0JSWptK1yfagat4SNIgRn AC1AsKF2SvIHCEpj9HxWjnYhUF69rSza9oVoDebRzT5jpCw44vwpvlIv3Pj3/SoA TCniRpVK2R1f1sw43CRXaU0DQleBOufja38qxlBqIupq4qh3U/WAHLO8pY9ozAAJ H9RgCkday+TghML61hqX/abwF1R7wsaAs3T8IpgFQ3zqsvTVjG+nHrgRtpsGknOe GroAMDfXGxOoNgYSfAfSFe21ztPotwNW813yNXxR2UUUX6rjWKg8cH9ep++YcCtS yt4BA/33rgy+S8WJe8qWMF6MU02eNWG/T6zN57LmcANDXp4PPXLSJAhIX7XbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU69qYi4q6Fmu9txbPxCDPefTVRRowHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUailTizZ+kg mZGZRktOlsqRyOVQ3O1GEN73kfZn79bQOBjy23+g3awBsHZeiw2Pfrpy/50y1g6F FN/ocAJ0zZi/HgTaMxukvLpGESoexKeJcT2Szpf7/vha1JKr0hxMBOGj5+BGqS9T QeNJIlNfdHjMyTMGmNSiKPlHarElG7EQY00gRS0Voe+XKFm/V9R2AlPzpRpCCwY6 ZGBVuRRCM989LNz0q+37G5Vfy/UlqgAf61+TboeMjj3VsGrQAMKhvIQG7iZqHulO eLCybcO7bsBmLGmqWQouG+kyN8Gcp1KPZbGvG/NzvZSsPAmLaS5V3QijT4aXJiS+ W5cgXsNrew== -----END CERTIFICATE-----Generated at Mon Oct 12 15:00:23 2026 by rpki-client