$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: +1PiYh4gAHTTvdkfGy6eJSYIUSgL2qs2nxMyLPZSOBs= Subject key identifier: 8B:9C:31:35:E2:84:CB:A8:9F:B0:39:BD:4A:01:C8:0D:75:36:46:4B Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 66DA45EFB91B203B8BC4E0E754083A80A7DEB4E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: CC Signing time: Sun 04 Oct 2026 02:32:37 +0000 Manifest this update: Sun 04 Oct 2026 02:27:37 +0000 Manifest next update: Wed 07 Oct 2026 12:37:37 +0000 Files and hashes: 1: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=) 2: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: AC5pxzLLq84mepIu+rhsose1szfE0r6toLHH4XXkIHw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 12:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:da:45:ef:b9:1b:20:3b:8b:c4:e0:e7:54:08:3a:80:a7:de:b4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Oct 4 02:27:37 2026 GMT Not After : Oct 7 12:37:37 2026 GMT Subject: CN=8B9C3135E284CBA89FB039BD4A01C80D7536464B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:cb:bf:2d:f2:06:c7:91:dc:fd:7d:48:c3: 47:65:12:f6:3f:5e:e0:f6:f4:67:23:13:ce:db:ed: ff:69:ed:9d:a5:94:08:17:04:b3:39:4c:0f:2c:88: fe:e8:92:a2:93:41:2d:02:8b:01:e5:96:a9:c5:bc: f0:ac:9f:de:8b:7a:a7:0d:44:7f:5d:77:3c:8f:0b: 80:5f:40:ce:ba:04:78:5a:a9:f0:af:ca:3a:51:63: cc:10:3d:7c:ef:ec:60:22:3c:53:1c:82:36:61:db: 6c:dc:78:8f:75:3c:17:1c:56:c2:e7:97:cd:46:7b: e5:74:33:ef:74:0e:7b:93:e9:7f:d6:c2:68:91:7a: 0f:46:54:7c:ab:20:34:f7:4d:3c:3d:a5:4c:9b:d8: 63:72:26:08:b0:22:0c:73:59:b8:ab:a1:7e:29:7a: d3:8c:39:38:a6:a7:56:cd:eb:22:e2:63:f0:e5:a9: af:14:ad:5e:f9:7a:21:92:0c:d7:17:8c:c5:bf:d2: 1b:a9:09:a8:01:2b:a8:9b:fe:bd:52:2e:0d:cb:ad: 77:ac:04:24:2e:47:12:fc:d3:45:ad:af:2d:d1:d3: 70:60:6e:22:27:0d:ee:3b:d9:71:cb:52:cd:cd:ca: 62:75:cd:f4:d0:5f:40:a6:f2:43:37:e8:ba:0e:f2: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:31:35:E2:84:CB:A8:9F:B0:39:BD:4A:01:C8:0D:75:36:46:4B X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:98:8c:d0:3a:9f:6c:4d:c4:e2:46:2b:3f:97:8d:e3:b0: ee:db:60:34:48:7e:b5:d1:68:6f:47:5b:94:95:8b:2d:c9:a9: 59:f3:f7:27:8d:d0:1c:94:a2:57:1a:57:06:6f:bb:48:d3:a1: 73:97:88:8c:52:72:f6:c2:6c:87:eb:1a:84:08:31:82:89:78: a8:02:98:eb:25:fd:1a:89:ec:7f:9f:3b:44:22:5b:ae:f1:45: ea:a0:5c:41:73:e0:24:95:45:4b:98:17:cc:69:f8:96:ea:2c: 6c:76:ac:f5:69:d6:aa:44:8a:1e:6b:1a:6b:54:d7:a6:85:ba: 04:ae:ea:a2:16:51:9c:94:dc:74:c2:21:18:ae:53:d4:62:96: 4a:7e:a8:76:fa:b2:68:c0:6b:7b:96:78:87:30:03:a5:d2:b6: 3e:32:68:b3:37:91:4a:fc:0d:7a:53:56:c8:ee:61:ba:a7:81: d7:d1:a5:17:b9:95:65:16:3f:53:d4:49:f8:bd:5a:61:aa:54: 42:16:b1:5e:5d:c2:83:b4:36:d2:f3:67:cd:4e:49:a7:b7:25: 60:ac:49:0d:00:0a:9a:6b:37:0c:e7:40:a2:28:d8:0b:30:32: 24:cf:50:98:21:83:5f:ee:0c:50:53:3a:f7:28:3b:cb:e4:c3: c3:65:33:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZtpF77kbIDuLxODnVAg6gKfetOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjEwMDQwMjI3MzdaFw0yNjEwMDcxMjM3MzdaMDMxMTAvBgNV BAMTKDhCOUMzMTM1RTI4NENCQTg5RkIwMzlCRDRBMDFDODBENzUzNjQ2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDts8u/LfIGx5Hc/X1Iw0dlEvY/ XuD29GcjE87b7f9p7Z2llAgXBLM5TA8siP7okqKTQS0CiwHllqnFvPCsn96LeqcN RH9ddzyPC4BfQM66BHhaqfCvyjpRY8wQPXzv7GAiPFMcgjZh22zceI91PBccVsLn l81Ge+V0M+90DnuT6X/WwmiReg9GVHyrIDT3TTw9pUyb2GNyJgiwIgxzWbiroX4p etOMOTimp1bN6yLiY/Dlqa8UrV75eiGSDNcXjMW/0hupCagBK6ib/r1SLg3LrXes BCQuRxL800Wtry3R03BgbiInDe472XHLUs3NymJ1zfTQX0Cm8kM36LoO8tPRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi5wxNeKEy6ifsDm9SgHIDXU2RkswHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBaYjNA6n2xN xOJGKz+XjeOw7ttgNEh+tdFob0dblJWLLcmpWfP3J43QHJSiVxpXBm+7SNOhc5eI jFJy9sJsh+sahAgxgol4qAKY6yX9Gonsf587RCJbrvFF6qBcQXPgJJVFS5gXzGn4 luosbHas9WnWqkSKHmsaa1TXpoW6BK7qohZRnJTcdMIhGK5T1GKWSn6odvqyaMBr e5Z4hzADpdK2PjJoszeRSvwNelNWyO5huqeB19GlF7mVZRY/U9RJ+L1aYapUQhax Xl3Cg7Q20vNnzU5Jp7clYKxJDQAKmms3DOdAoijYCzAyJM9QmCGDX+4MUFM69yg7 y+TDw2Uz1Q== -----END CERTIFICATE-----Generated at Sun Oct 4 17:06:08 2026 by rpki-client