$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json) Hash identifier: SN9bkBWyRqToC7uY9ovXY5CQ+eSxEdADATqzFxyY1m8= Subject key identifier: 89:F0:DE:28:45:4D:6E:9D:91:1D:8F:A4:9B:3A:96:33:4C:93:6E:65 Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Certificate serial: 3817097AE896362540C95D32314E1AFA75461C61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft Manifest number: C0 Signing time: Fri 09 Oct 2026 13:33:24 +0000 Manifest this update: Fri 09 Oct 2026 13:28:24 +0000 Manifest next update: Mon 12 Oct 2026 23:46:24 +0000 Files and hashes: 1: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=) 2: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=) 3: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=) 4: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: bXkdqN8nR7BHexYZ+GbzLg29ZdyrsomLoCn/LIcKyy0=) 5: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=) 6: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=) 7: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=) 8: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=) 9: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 23:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:17:09:7a:e8:96:36:25:40:c9:5d:32:31:4e:1a:fa:75:46:1c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Validity Not Before: Oct 9 13:28:24 2026 GMT Not After : Oct 12 23:46:24 2026 GMT Subject: CN=89F0DE28454D6E9D911D8FA49B3A96334C936E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:95:9e:dd:f6:c1:36:25:da:2d:89:08:7a: 9a:c8:5d:0f:0b:02:8c:64:aa:15:16:c7:ad:66:04: cb:be:e2:12:cc:1a:fb:eb:f2:e5:01:24:38:ea:8e: 9d:48:71:64:78:22:b2:dc:7d:fb:0c:4f:18:bd:3e: 47:bd:45:0b:20:50:dc:c3:aa:0b:57:d6:9f:cd:e3: 88:bf:4d:78:cf:8d:4c:5f:54:17:4c:11:85:71:92: 8b:28:ca:65:ea:bb:73:11:6e:6b:9c:70:38:9a:1c: 60:6b:9d:07:b0:c2:34:ff:7c:29:8d:c8:f3:4a:57: f9:aa:84:24:13:91:88:c3:f9:5b:bd:30:4a:8e:64: 20:c3:41:7f:39:cf:f4:68:90:32:dc:1a:1d:e5:4b: cc:09:ee:2e:55:72:43:31:12:03:75:1d:b5:cc:06: fe:4a:78:5d:80:87:db:44:43:73:05:8d:d4:88:a7: 0b:34:62:16:67:9a:21:fc:fc:ca:40:85:7d:5f:35: a2:36:2a:9b:04:60:95:6d:6a:23:f2:c7:20:d8:2d: 76:81:b8:fd:b8:e8:31:7c:65:c0:82:6f:9a:be:fc: a4:d2:fc:8f:28:ff:c9:3c:83:eb:eb:84:16:82:bb: c1:5d:f4:6c:ba:de:eb:6a:b7:0f:0d:74:04:0d:38: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:DE:28:45:4D:6E:9D:91:1D:8F:A4:9B:3A:96:33:4C:93:6E:65 X509v3 Authority Key Identifier: keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4e:8e:e6:db:49:98:63:4e:ba:bf:a9:5a:27:2c:cb:20:81: f3:6e:f1:ea:94:ec:a4:3d:18:34:94:3f:03:54:75:57:70:86: fb:af:a0:16:a6:0e:bb:95:b2:1a:d6:ea:67:40:84:4b:2b:a4: 9e:3b:0d:66:9b:b8:87:28:1b:f9:92:fd:0e:0a:6b:b2:ee:db: e3:36:a6:07:ce:87:15:17:db:30:f1:8a:9c:84:65:25:d5:ca: d6:ab:89:4a:08:aa:60:3d:75:ef:4a:58:e4:52:bf:88:57:a1: 3c:07:44:a7:e5:a8:7a:c0:41:1e:d5:f5:a5:ca:d7:64:c8:be: a7:2b:1a:15:9e:7f:0b:ae:46:be:fc:c6:65:23:41:29:c7:dd: fe:bf:c1:2c:bf:f5:b4:e2:61:de:25:30:df:15:9e:0b:ef:ea: 42:df:c7:0a:8b:40:cb:d9:b7:81:42:df:64:45:b2:3f:e4:f4: fa:90:6f:2c:4a:29:15:16:bd:54:25:ef:2d:7c:84:97:fe:5e: 07:9f:53:2f:11:cf:08:b6:ce:59:f9:7e:cf:ef:a9:08:54:02: 52:73:ba:3c:e9:89:ce:e3:42:f9:ae:0d:49:14:33:43:f1:b2: 75:b4:d3:32:11:4e:4a:9e:2c:d8:22:35:8f:23:06:f5:3b:3c: d4:b2:4d:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOBcJeuiWNiVAyV0yMU4a+nVGHGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkw NjdEMzVFQTAeFw0yNjEwMDkxMzI4MjRaFw0yNjEwMTIyMzQ2MjRaMDMxMTAvBgNV BAMTKDg5RjBERTI4NDU0RDZFOUQ5MTFEOEZBNDlCM0E5NjMzNEM5MzZFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjpWe3fbBNiXaLYkIeprIXQ8L AoxkqhUWx61mBMu+4hLMGvvr8uUBJDjqjp1IcWR4IrLcffsMTxi9Pke9RQsgUNzD qgtX1p/N44i/TXjPjUxfVBdMEYVxkosoymXqu3MRbmuccDiaHGBrnQewwjT/fCmN yPNKV/mqhCQTkYjD+Vu9MEqOZCDDQX85z/RokDLcGh3lS8wJ7i5VckMxEgN1HbXM Bv5KeF2Ah9tEQ3MFjdSIpws0YhZnmiH8/MpAhX1fNaI2KpsEYJVtaiPyxyDYLXaB uP246DF8ZcCCb5q+/KTS/I8o/8k8g+vrhBaCu8Fd9Gy63utqtw8NdAQNOEQ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUifDeKEVNbp2RHY+kmzqWM0yTbmUwHwYDVR0j BBgwFoAUtHm5tH+K/BBiuNRp9ipmiQZ9NeowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTA5Mjk5My8wL0I0NzlCOUI0N0Y4QUZDMTA2MkI4RDQ2OUY2MkE2 Njg5MDY3RDM1RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkwNjdEMzVFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwOTI5OTMvMC9CNDc5QjlCNDdGOEFG QzEwNjJCOEQ0NjlGNjJBNjY4OTA2N0QzNUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU6O5ttJmGNO ur+pWicsyyCB827x6pTspD0YNJQ/A1R1V3CG+6+gFqYOu5WyGtbqZ0CESyuknjsN Zpu4hygb+ZL9Dgprsu7b4zamB86HFRfbMPGKnIRlJdXK1quJSgiqYD1170pY5FK/ iFehPAdEp+WoesBBHtX1pcrXZMi+pysaFZ5/C65GvvzGZSNBKcfd/r/BLL/1tOJh 3iUw3xWeC+/qQt/HCotAy9m3gULfZEWyP+T0+pBvLEopFRa9VCXvLXyEl/5eB59T LxHPCLbOWfl+z++pCFQCUnO6POmJzuNC+a4NSRQzQ/GydbTTMhFOSp4s2CI1jyMG 9Ts81LJNww== -----END CERTIFICATE-----Generated at Sun Oct 11 20:19:30 2026 by rpki-client