$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: RF5Am0+AhNlDy1Vlt/FjCI5azN9WDqgKrhcufa3e3oE= Subject key identifier: 49:1F:40:C2:89:8D:54:EA:C9:3A:10:2D:B7:81:30:ED:8D:65:AC:C3 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 60255B43EA18FF848525687B47BB25532865C21B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 013A Signing time: Mon 12 Oct 2026 01:31:18 +0000 Manifest this update: Mon 12 Oct 2026 01:26:18 +0000 Manifest next update: Thu 15 Oct 2026 13:22:18 +0000 Files and hashes: 1: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: lwblKCyZv4qcJtwXSf88Xbu8dez+T1b6MJdCdXENvG4=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:25:5b:43:ea:18:ff:84:85:25:68:7b:47:bb:25:53:28:65:c2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Oct 12 01:26:18 2026 GMT Not After : Oct 15 13:22:18 2026 GMT Subject: CN=491F40C2898D54EAC93A102DB78130ED8D65ACC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:f9:a8:f3:df:b4:de:51:31:da:0c:02:3e: 71:76:66:50:78:a0:aa:db:39:3d:5b:4c:28:f8:b0: 01:4b:5d:6e:58:e2:1b:fb:5d:9b:33:a3:f6:f0:66: e3:e2:26:2a:c2:ed:d2:65:68:1d:1f:e3:13:b2:bd: f8:b3:38:29:c6:c6:e8:81:b5:9e:70:80:c8:cc:16: 93:ca:c8:0a:dd:f0:cb:96:cf:e7:e3:f4:8c:0d:96: f6:b5:0e:26:50:27:24:dd:e7:16:28:b1:6e:f2:8e: 0c:f4:6f:14:82:c1:ff:09:e0:cb:c8:39:6c:25:a7: 6e:a4:74:70:2b:b6:72:5f:65:d6:fe:cc:ff:77:81: 63:41:8f:96:96:78:96:e7:7a:1d:7f:33:29:16:66: 98:41:a0:d1:07:c4:3d:fc:69:78:69:b5:03:1b:a4: 0f:e7:d1:76:b6:28:da:60:95:32:87:db:bf:1a:f5: d6:88:74:87:02:a6:96:2b:8a:6c:a7:cd:c8:8c:69: 19:85:ed:0a:5c:4d:5c:b8:b4:8a:e6:aa:46:f7:73: aa:6c:19:ab:4b:9c:e0:3e:3f:70:a4:59:88:f4:9c: 03:a2:a2:a1:23:b4:97:e5:cb:ce:ca:e5:3c:88:de: f8:7e:3f:06:9a:ea:87:15:20:01:45:40:4c:04:51: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:40:C2:89:8D:54:EA:C9:3A:10:2D:B7:81:30:ED:8D:65:AC:C3 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ab:9e:fd:75:2f:f6:3f:20:3c:06:40:2b:d0:19:4d:14:71: de:27:10:a8:37:73:73:ec:75:b3:7b:eb:af:0d:b5:4c:f1:55: a9:40:e4:b6:03:42:9f:d7:73:6f:2f:a3:4d:3a:a2:c8:ac:5f: 92:e1:40:7b:99:e5:03:33:19:1a:f8:fb:f0:96:4a:5d:eb:6c: 92:16:e7:89:20:65:08:76:67:79:5d:26:8b:50:b2:e7:7d:0a: a0:0f:4f:65:19:8d:fd:95:ab:08:92:c0:bd:56:f3:0d:ac:26: 7e:66:4b:31:ab:c7:62:a2:a0:38:c1:78:b0:c4:07:88:ec:8a: fc:4b:04:9f:4d:bf:1f:04:5f:01:60:3c:9f:a1:15:8a:7f:63: d2:e4:de:5b:5c:87:11:e6:86:84:2b:72:9f:a0:79:3d:8f:6b: ac:3b:88:bc:ec:ae:cb:65:1e:4a:e3:6a:38:19:4d:4b:00:66: d1:f0:0c:72:ea:5b:ad:1f:f8:7f:b2:99:12:1d:07:23:d7:f1: ec:c6:e5:46:7d:32:77:75:f1:84:3a:f0:e4:62:48:8e:b5:1f: 5c:c4:71:b5:ce:77:88:80:f8:b9:91:0f:29:81:9b:9e:0d:71: 38:40:ab:ec:b3:27:50:0d:23:63:ea:fc:87:37:ce:c2:79:1b: 5b:84:81:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYCVbQ+oY/4SFJWh7R7slUyhlwhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjEwMTIwMTI2MThaFw0yNjEwMTUxMzIyMThaMDMxMTAvBgNV BAMTKDQ5MUY0MEMyODk4RDU0RUFDOTNBMTAyREI3ODEzMEVEOEQ2NUFDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtPmo89+03lEx2gwCPnF2ZlB4 oKrbOT1bTCj4sAFLXW5Y4hv7XZszo/bwZuPiJirC7dJlaB0f4xOyvfizOCnGxuiB tZ5wgMjMFpPKyArd8MuWz+fj9IwNlva1DiZQJyTd5xYosW7yjgz0bxSCwf8J4MvI OWwlp26kdHArtnJfZdb+zP93gWNBj5aWeJbneh1/MykWZphBoNEHxD38aXhptQMb pA/n0Xa2KNpglTKH278a9daIdIcCppYrimynzciMaRmF7QpcTVy4tIrmqkb3c6ps GatLnOA+P3CkWYj0nAOioqEjtJfly87K5TyI3vh+Pwaa6ocVIAFFQEwEUa7FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSR9AwomNVOrJOhAtt4Ew7Y1lrMMwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnque/XUv9j8g PAZAK9AZTRRx3icQqDdzc+x1s3vrrw21TPFVqUDktgNCn9dzby+jTTqiyKxfkuFA e5nlAzMZGvj78JZKXetskhbniSBlCHZneV0mi1Cy530KoA9PZRmN/ZWrCJLAvVbz DawmfmZLMavHYqKgOMF4sMQHiOyK/EsEn02/HwRfAWA8n6EVin9j0uTeW1yHEeaG hCtyn6B5PY9rrDuIvOyuy2UeSuNqOBlNSwBm0fAMcupbrR/4f7KZEh0HI9fx7Mbl Rn0yd3XxhDrw5GJIjrUfXMRxtc53iID4uZEPKYGbng1xOECr7LMnUA0jY+r8hzfO wnkbW4SBug== -----END CERTIFICATE-----Generated at Mon Oct 12 19:50:37 2026 by rpki-client