$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: h00nLrxSv6tOicxDc0+i6fnBh25bbSqZKKHEK9PkKK4= Subject key identifier: 5D:F6:AC:98:B5:D2:22:B0:53:12:D9:23:78:E2:BB:CB:35:F0:A2:56 Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 11348132CEC6804344EC4C6718ECA5639C70D2D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: CA Signing time: Fri 16 Oct 2026 08:12:22 +0000 Manifest this update: Fri 16 Oct 2026 08:07:22 +0000 Manifest next update: Mon 19 Oct 2026 20:11:22 +0000 Files and hashes: 1: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) 2: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: qCPpyJHX0GWhdtHSUUTlNGmlsWCdkxYx7+pZ4sx31zE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:34:81:32:ce:c6:80:43:44:ec:4c:67:18:ec:a5:63:9c:70:d2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: Oct 16 08:07:22 2026 GMT Not After : Oct 19 20:11:22 2026 GMT Subject: CN=5DF6AC98B5D222B05312D92378E2BBCB35F0A256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:ed:1e:74:e0:f3:34:bf:ee:69:ee:71:f0: 9a:ec:b0:7d:98:f5:79:6a:c2:44:f3:68:ee:30:78: 0f:55:9b:19:bd:f3:b8:34:89:96:0f:2c:f4:2c:70: d3:f7:47:41:88:1b:09:02:44:81:0a:0a:f3:22:33: 8e:36:49:6f:35:14:72:4b:ab:03:ff:22:5f:cb:fc: 9b:72:70:73:ea:a9:15:21:1a:cb:1b:9c:c4:0f:fb: d6:68:68:38:d4:d0:76:b7:06:e6:29:97:73:47:94: 79:9a:55:a5:25:60:a6:40:85:e2:07:90:78:ce:cf: 23:31:6b:c4:55:2d:29:9c:82:d8:e4:e7:f2:13:ba: 3b:c9:67:8a:2a:bd:ad:7e:e1:35:03:0b:6c:c0:f7: 97:39:cd:4b:40:78:0e:54:37:94:33:b2:14:05:a9: 03:34:36:6c:78:26:ff:fa:39:cb:a6:aa:51:af:d6: 34:cb:34:c8:e5:18:f6:2b:25:21:86:47:f2:8c:78: 60:23:1f:6d:6e:76:f5:e2:5e:bf:34:d3:4b:fa:9e: 71:33:65:6b:36:85:55:f8:e0:6b:f0:4b:66:af:58: 12:ce:01:60:ac:04:96:9d:14:a2:4d:6d:74:02:08: 23:37:fd:ff:57:8f:8a:10:b2:de:1b:97:3f:34:2a: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:AC:98:B5:D2:22:B0:53:12:D9:23:78:E2:BB:CB:35:F0:A2:56 X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:8d:a7:c9:50:af:4d:4a:61:3d:a5:66:00:21:62:37:f9:37: 30:c1:ed:dc:0b:8c:9d:e9:93:8f:5f:3e:73:7c:50:96:b9:57: 24:4e:f3:5f:50:c1:46:a0:40:d4:e6:83:4f:3d:7f:39:96:b9: 34:08:89:3d:fb:4b:a0:12:a0:67:1c:13:0a:94:fd:83:14:33: ea:82:51:81:28:dd:aa:e0:81:46:8a:99:9c:36:87:8b:8f:dd: a8:86:cd:59:86:4d:ad:09:71:53:33:31:bc:c2:9d:4b:2a:1f: 91:8b:40:a4:21:35:39:e7:09:19:d1:00:19:e5:96:a0:ab:62: a8:c5:c2:0c:7b:01:a1:59:5d:f7:55:ad:e2:bb:a8:5c:48:34: 19:70:f4:e1:bc:08:93:b4:3f:39:8e:31:b2:ce:7b:4d:e7:10: b3:4e:df:0d:bf:3e:48:ce:4d:82:38:40:41:94:be:54:82:09: 85:7f:bd:dc:1b:99:f3:24:8f:0f:30:b5:9d:84:1a:1a:48:c5: 35:8f:b6:c6:35:6d:12:49:0f:50:37:2f:15:17:c2:f6:6d:b2: e5:53:d1:60:9a:fc:ce:d9:2a:e1:06:50:5b:71:94:36:71:9e: ec:15:1f:53:c7:85:42:39:a5:05:16:40:89:73:53:f2:73:86: ee:1f:e1:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUETSBMs7GgENE7ExnGOylY5xw0tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjEwMTYwODA3MjJaFw0yNjEwMTkyMDExMjJaMDMxMTAvBgNV BAMTKDVERjZBQzk4QjVEMjIyQjA1MzEyRDkyMzc4RTJCQkNCMzVGMEEyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMc+0edODzNL/uae5x8JrssH2Y 9XlqwkTzaO4weA9Vmxm987g0iZYPLPQscNP3R0GIGwkCRIEKCvMiM442SW81FHJL qwP/Il/L/JtycHPqqRUhGssbnMQP+9ZoaDjU0Ha3BuYpl3NHlHmaVaUlYKZAheIH kHjOzyMxa8RVLSmcgtjk5/ITujvJZ4oqva1+4TUDC2zA95c5zUtAeA5UN5QzshQF qQM0Nmx4Jv/6OcumqlGv1jTLNMjlGPYrJSGGR/KMeGAjH21udvXiXr8000v6nnEz ZWs2hVX44GvwS2avWBLOAWCsBJadFKJNbXQCCCM3/f9Xj4oQst4blz80Km1xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXfasmLXSIrBTEtkjeOK7yzXwolYwHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Y2nyVCvTUph PaVmACFiN/k3MMHt3AuMnemTj18+c3xQlrlXJE7zX1DBRqBA1OaDTz1/OZa5NAiJ PftLoBKgZxwTCpT9gxQz6oJRgSjdquCBRoqZnDaHi4/dqIbNWYZNrQlxUzMxvMKd SyofkYtApCE1OecJGdEAGeWWoKtiqMXCDHsBoVld91Wt4ruoXEg0GXD04bwIk7Q/ OY4xss57TecQs07fDb8+SM5NgjhAQZS+VIIJhX+93BuZ8ySPDzC1nYQaGkjFNY+2 xjVtEkkPUDcvFRfC9m2y5VPRYJr8ztkq4QZQW3GUNnGe7BUfU8eFQjmlBRZAiXNT 8nOG7h/hsg== -----END CERTIFICATE-----Generated at Sat Oct 17 02:16:26 2026 by rpki-client