$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: QD1KaCtucU/aTVYjuKf+a47bVEr5PTm3zUTUqDsUY/o= Subject key identifier: D5:64:3E:3A:74:AE:A4:C4:33:9F:8D:60:E5:7A:AA:55:A7:1A:84:31 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 5B1BE7D1078098D6E46880E0DB80A5D22F51194A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: C7 Signing time: Fri 09 Oct 2026 05:23:08 +0000 Manifest this update: Fri 09 Oct 2026 05:18:08 +0000 Manifest next update: Mon 12 Oct 2026 07:49:08 +0000 Files and hashes: 1: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 2: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 3: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: X44NeEdl3SOZosxyKz+IbYRbVJEc3FsBw/j0WoBe4S4=) 4: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 5: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) 6: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 7: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1b:e7:d1:07:80:98:d6:e4:68:80:e0:db:80:a5:d2:2f:51:19:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Oct 9 05:18:08 2026 GMT Not After : Oct 12 07:49:08 2026 GMT Subject: CN=D5643E3A74AEA4C4339F8D60E57AAA55A71A8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:cb:a5:e1:23:a1:7d:8d:66:7d:1d:59:bd: ae:6c:d3:9b:8b:3a:4f:f8:d3:fe:5a:ab:3c:b1:e0: 55:0a:dc:bb:6e:48:ae:4f:5d:68:84:92:ed:af:c7: 32:a2:d8:3e:c3:ca:9f:bc:a2:46:d3:f3:96:3a:64: 48:f1:11:d9:22:73:f6:f5:7c:2a:7c:a6:32:bc:78: 59:ca:dc:70:82:57:a0:fd:15:e8:9d:da:3c:f1:7d: 9f:26:8a:29:0e:3e:d5:15:37:70:43:c3:ff:42:2a: ff:f3:56:43:bb:d3:e2:15:8e:fb:d2:86:58:d1:44: 54:66:da:8e:ee:35:61:5e:08:8e:23:e0:c0:a6:26: 5c:d5:e1:fd:32:fd:68:2c:8d:55:5f:09:37:14:cf: 00:e2:dc:1e:5d:bf:7a:27:b1:67:e0:59:94:21:96: 0b:07:b9:98:20:79:71:8a:fe:cd:88:96:7c:17:f2: 24:1d:08:7d:a5:f7:38:81:7d:f3:0b:42:87:cb:29: a6:54:17:1f:ea:9c:61:9e:a6:9e:6d:e8:40:6b:cb: 46:8a:8a:79:21:f5:a1:9a:36:9a:65:f1:f5:eb:33: bd:db:83:c8:7e:67:56:c6:c7:8c:ba:7f:e0:90:f4: ea:d8:24:db:2f:7d:89:23:b3:92:be:b0:45:7f:49: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:3E:3A:74:AE:A4:C4:33:9F:8D:60:E5:7A:AA:55:A7:1A:84:31 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:92:bd:31:3a:cb:59:04:76:e3:f4:5d:ea:be:31:c8:6c:96: 78:e4:63:4d:d3:03:ef:63:66:b3:90:11:1d:0f:bb:4f:4e:bc: 70:1d:af:9f:54:23:85:24:cd:61:e1:06:ee:72:1c:20:f2:ef: bf:ee:bc:93:2d:c8:f5:81:13:19:c5:26:63:89:8f:50:f2:5d: 5c:10:23:c4:c6:9c:d5:89:a3:ac:20:b8:f8:48:da:75:37:92: fd:8f:7a:7a:e2:b9:21:87:70:07:b6:1e:0a:ef:fc:66:0c:d3: 84:bd:18:0a:c1:2b:0f:65:c4:01:16:3d:63:4f:ab:53:37:44: 61:05:81:75:53:db:f3:b2:b0:2d:41:40:cc:66:26:6f:7e:a2: c4:de:b9:07:8e:92:54:f2:33:7a:ed:81:40:62:8a:c2:24:c6: 52:68:b6:de:ca:45:3b:05:22:c0:05:8e:45:dd:fa:46:e6:4d: 4e:2f:25:e0:4a:8b:a5:05:ad:2f:67:ed:b4:86:31:d5:e4:3f: 41:25:92:81:f0:3d:41:7d:d0:c3:11:a2:df:cb:b4:80:45:8a: 6d:5d:42:80:8a:16:6e:f2:af:e5:98:3e:40:6e:ca:3b:87:d3: cc:71:dc:45:11:78:f9:97:db:63:dc:8c:14:96:1f:ea:5a:63: 93:4c:2e:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWxvn0QeAmNbkaIDg24Cl0i9RGUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjEwMDkwNTE4MDhaFw0yNjEwMTIwNzQ5MDhaMDMxMTAvBgNV BAMTKEQ1NjQzRTNBNzRBRUE0QzQzMzlGOEQ2MEU1N0FBQTU1QTcxQTg0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vMul4SOhfY1mfR1Zva5s05uL Ok/40/5aqzyx4FUK3LtuSK5PXWiEku2vxzKi2D7Dyp+8okbT85Y6ZEjxEdkic/b1 fCp8pjK8eFnK3HCCV6D9Feid2jzxfZ8miikOPtUVN3BDw/9CKv/zVkO70+IVjvvS hljRRFRm2o7uNWFeCI4j4MCmJlzV4f0y/WgsjVVfCTcUzwDi3B5dv3onsWfgWZQh lgsHuZggeXGK/s2IlnwX8iQdCH2l9ziBffMLQofLKaZUFx/qnGGepp5t6EBry0aK inkh9aGaNppl8fXrM73bg8h+Z1bGx4y6f+CQ9OrYJNsvfYkjs5K+sEV/SYEHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1WQ+OnSupMQzn41g5XqqVacahDEwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1pK9MTrLWQR2 4/Rd6r4xyGyWeORjTdMD72Nms5ARHQ+7T068cB2vn1QjhSTNYeEG7nIcIPLvv+68 ky3I9YETGcUmY4mPUPJdXBAjxMac1YmjrCC4+EjadTeS/Y96euK5IYdwB7YeCu/8 ZgzThL0YCsErD2XEARY9Y0+rUzdEYQWBdVPb87KwLUFAzGYmb36ixN65B46SVPIz eu2BQGKKwiTGUmi23spFOwUiwAWORd36RuZNTi8l4EqLpQWtL2fttIYx1eQ/QSWS gfA9QX3QwxGi38u0gEWKbV1CgIoWbvKv5Zg+QG7KO4fTzHHcRRF4+ZfbY9yMFJYf 6lpjk0wukQ== -----END CERTIFICATE-----Generated at Sun Oct 11 01:23:00 2026 by rpki-client