$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: OYXsuR96gd+aJtr+wzKZ7yvTtq6Tfqbhdlul4YhG448= Subject key identifier: D0:BB:93:72:4C:3E:91:DD:CA:B5:67:47:A2:C3:C2:A4:41:F1:EA:0F Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 20C2FD74FB3A12D3DB3C981241E858FD11F1AB13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 00:02:22 +0000 Manifest this update: Thu 24 Sep 2026 23:57:22 +0000 Manifest next update: Mon 28 Sep 2026 08:56:22 +0000 Files and hashes: 1: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: swcSK4Ze0AzlkNI8DHbMs6J0VtJI52IdZhGVvrZl4I0=) 2: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:fd:74:fb:3a:12:d3:db:3c:98:12:41:e8:58:fd:11:f1:ab:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Sep 24 23:57:22 2026 GMT Not After : Sep 28 08:56:22 2026 GMT Subject: CN=D0BB93724C3E91DDCAB56747A2C3C2A441F1EA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:f7:8d:08:e6:8a:d8:ce:e8:57:89:75:ca: 68:58:4c:d2:e9:1c:0a:9b:26:b8:88:b7:62:45:78: 21:4e:e1:0a:79:91:43:6b:5f:d3:cc:18:43:87:12: 04:ad:22:bc:a8:b8:fd:d9:50:f8:e4:1c:4e:86:79: 06:29:b2:c6:73:e5:39:52:29:fa:81:77:70:87:0a: cc:f4:3c:7c:07:32:39:f0:2f:71:b2:6a:d3:f3:08: 39:5b:69:8c:70:34:f4:9b:c0:39:b8:2d:cf:0f:74: a1:5a:aa:99:b5:a7:ac:e9:fe:78:5e:d8:9d:04:f8: 07:a0:24:db:86:e9:68:da:1b:69:9f:2e:1b:9b:a1: a9:5b:c7:8c:3a:62:74:6e:5a:27:15:d7:a1:74:c9: fb:99:82:87:c5:be:ca:45:1d:95:87:e6:f6:3e:11: 16:89:d3:22:52:2c:14:87:9c:cd:f8:b5:65:df:d7: 27:b6:bb:c9:65:16:8e:ac:c0:87:15:95:ba:68:8c: 9b:6d:13:d5:c9:ec:d1:6a:c0:6e:1e:b9:c1:20:bf: 34:44:20:cf:bb:55:2a:a4:4e:4c:8d:15:59:a7:5c: 4c:d5:b7:d2:bb:4a:59:66:d1:dd:0f:4c:d0:cd:1e: c0:44:b8:57:aa:a0:44:c0:69:c4:fc:13:b9:3f:c2: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:93:72:4C:3E:91:DD:CA:B5:67:47:A2:C3:C2:A4:41:F1:EA:0F X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:25:24:3c:c4:ee:66:19:94:4e:10:a3:26:c9:68:e1:0a:9c: 58:3a:14:dd:a3:9c:a6:9b:27:f7:8f:40:b7:23:84:5c:c6:8e: 49:68:9b:c2:e0:b7:5c:bd:e4:39:f4:10:25:fb:10:ba:76:14: f8:9f:49:e7:66:d6:90:33:9d:4c:76:bd:99:84:9f:0d:4e:e5: 15:d6:80:54:b7:a5:72:ce:b3:de:40:31:30:43:f2:b2:09:6b: 8f:eb:94:a6:74:b8:3f:81:e5:66:32:18:e2:d1:4a:ba:85:7d: 04:2f:7a:e2:1c:d5:67:cc:6d:31:a6:da:11:7c:83:9d:2a:44: 03:1d:a1:3f:c1:3c:9f:9f:11:54:cb:24:99:7f:91:d6:05:8e: 17:c5:e8:40:78:8f:7f:cb:f6:d9:e7:9e:36:7c:9d:a6:62:9b: 7e:a0:e5:9b:d2:5d:31:e9:12:da:b9:a7:ce:4b:44:91:23:7a: b0:7f:aa:63:6f:ee:8d:e0:27:30:65:1a:ee:59:14:44:b6:0d: 79:87:7b:a1:66:92:ef:a8:15:b6:da:76:68:c6:00:9f:ef:20: f7:1a:52:3f:9d:eb:32:c8:a7:23:d8:c9:fc:f3:75:15:cb:b5: 0d:fa:f4:a2:ad:72:11:4f:0f:1f:59:9b:a2:76:f6:89:b7:ae: c5:91:a2:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIML9dPs6EtPbPJgSQehY/RHxqxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA5MjQyMzU3MjJaFw0yNjA5MjgwODU2MjJaMDMxMTAvBgNV BAMTKEQwQkI5MzcyNEMzRTkxRERDQUI1Njc0N0EyQzNDMkE0NDFGMUVBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkPeNCOaK2M7oV4l1ymhYTNLp HAqbJriIt2JFeCFO4Qp5kUNrX9PMGEOHEgStIryouP3ZUPjkHE6GeQYpssZz5TlS KfqBd3CHCsz0PHwHMjnwL3GyatPzCDlbaYxwNPSbwDm4Lc8PdKFaqpm1p6zp/nhe 2J0E+AegJNuG6WjaG2mfLhuboalbx4w6YnRuWicV16F0yfuZgofFvspFHZWH5vY+ ERaJ0yJSLBSHnM34tWXf1ye2u8llFo6swIcVlbpojJttE9XJ7NFqwG4eucEgvzRE IM+7VSqkTkyNFVmnXEzVt9K7Sllm0d0PTNDNHsBEuFeqoETAacT8E7k/wtoLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0LuTckw+kd3KtWdHosPCpEHx6g8wHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyUkPMTuZhmU ThCjJslo4QqcWDoU3aOcppsn949AtyOEXMaOSWibwuC3XL3kOfQQJfsQunYU+J9J 52bWkDOdTHa9mYSfDU7lFdaAVLelcs6z3kAxMEPysglrj+uUpnS4P4HlZjIY4tFK uoV9BC964hzVZ8xtMabaEXyDnSpEAx2hP8E8n58RVMskmX+R1gWOF8XoQHiPf8v2 2eeeNnydpmKbfqDlm9JdMekS2rmnzktEkSN6sH+qY2/ujeAnMGUa7lkURLYNeYd7 oWaS76gVttp2aMYAn+8g9xpSP53rMsinI9jJ/PN1Fcu1Dfr0oq1yEU8PH1mbonb2 ibeuxZGi5A== -----END CERTIFICATE-----Generated at Fri Sep 25 20:22:31 2026 by rpki-client