$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: +lC/+U15axHeG27XklpOirQtUo+HusaiLP5ZYnhYWvk= Subject key identifier: 1B:53:77:9E:05:EB:07:9F:F1:0F:8A:B2:8B:21:16:B3:FB:16:1E:2F Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 45B465AE39071F3B6D9C6ECFF512591901402673 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: C4 Signing time: Sat 10 Oct 2026 22:10:01 +0000 Manifest this update: Sat 10 Oct 2026 22:05:01 +0000 Manifest next update: Wed 14 Oct 2026 08:14:01 +0000 Files and hashes: 1: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: sJpW1YiQy5hi7nbj9qlo9S8sr3mx32aii6HVcQf+l3c=) 2: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b4:65:ae:39:07:1f:3b:6d:9c:6e:cf:f5:12:59:19:01:40:26:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Oct 10 22:05:01 2026 GMT Not After : Oct 14 08:14:01 2026 GMT Subject: CN=1B53779E05EB079FF10F8AB28B2116B3FB161E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ff:4c:1f:9f:86:f0:2e:3e:89:30:04:14:e8: 4f:9b:42:b6:e8:7e:fc:d2:5b:6e:93:59:5b:f0:08: 5e:e4:65:be:5d:aa:19:92:e7:5b:7a:95:79:88:56: 2d:00:d0:c7:26:41:cc:e1:81:f5:ac:92:a2:e5:fe: 94:ae:42:8e:5e:f7:c6:0d:97:a3:95:d3:03:0c:20: 8c:0e:14:61:2b:31:81:53:9f:a2:e6:85:6c:40:76: 6f:3e:ef:db:ce:65:7e:20:45:d0:18:3a:16:96:de: fb:e7:a6:24:ce:e6:f3:cc:aa:b9:b1:8b:43:84:83: 69:12:41:63:ad:6e:5a:6e:a2:50:3a:aa:0f:4d:ef: f6:80:af:a7:c7:f7:14:39:77:f6:59:67:37:e1:68: 3c:5d:2c:bd:04:31:4e:ae:58:14:1f:17:c9:12:cd: d9:ad:99:50:e5:76:08:8e:10:6f:cc:5d:3b:29:fe: 61:02:10:a9:c7:f4:4b:f1:31:14:eb:b2:49:e5:40: 84:2d:12:e4:15:02:ae:4a:b8:f5:4d:81:7c:bf:55: ea:bd:47:b1:75:2e:1e:ff:33:52:30:20:14:0d:e5: 39:95:d8:18:fd:03:a4:0a:71:44:a4:56:2b:37:2c: 7a:19:79:1f:1b:bb:6d:30:da:a7:52:2e:47:f3:b7: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:53:77:9E:05:EB:07:9F:F1:0F:8A:B2:8B:21:16:B3:FB:16:1E:2F X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:d7:43:76:db:9e:bf:84:0c:7c:49:a8:d2:69:b9:cd:c3: 7a:48:5c:2c:8a:ac:61:b5:d6:3c:28:0a:51:4a:e3:35:30:ee: 40:93:79:79:73:31:cb:f0:bb:c4:7f:05:d9:af:21:8f:18:4b: 03:b8:1d:4b:47:97:99:e2:a2:fd:51:08:f9:43:3d:55:74:32: 76:a8:76:2c:61:b3:83:11:b3:f7:d0:83:42:75:41:fa:89:cd: a5:16:e9:ff:de:41:b2:75:f4:f4:99:51:98:20:1a:64:14:5d: dd:d1:f0:4a:ed:36:76:0a:a8:dc:ac:9c:3e:32:3e:29:8c:91: 12:5e:ee:47:f9:fc:4f:fd:4e:99:37:59:2e:fb:d0:cc:dd:4b: c8:ef:20:dd:a3:c9:f0:26:d6:ea:b2:be:9f:10:55:55:7c:02: 98:2e:11:b7:48:df:5a:47:a8:d9:cd:72:83:47:ce:c5:81:6f: 93:2f:23:dc:5b:8b:2f:50:51:5e:0c:88:9e:b2:56:28:fd:63: 69:fe:55:ba:c9:00:f7:ed:97:c0:eb:94:f4:d0:fc:a4:24:6d: 32:7a:2c:10:dd:9f:85:23:0b:83:8b:46:38:f4:c9:2a:d1:b1: 68:30:99:ad:64:d5:70:8a:a0:01:33:6f:b0:2d:1d:f6:bc:d2: 44:66:b6:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURbRlrjkHHzttnG7P9RJZGQFAJnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjEwMTAyMjA1MDFaFw0yNjEwMTQwODE0MDFaMDMxMTAvBgNV BAMTKDFCNTM3NzlFMDVFQjA3OUZGMTBGOEFCMjhCMjExNkIzRkIxNjFFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/0wfn4bwLj6JMAQU6E+bQrbo fvzSW26TWVvwCF7kZb5dqhmS51t6lXmIVi0A0McmQczhgfWskqLl/pSuQo5e98YN l6OV0wMMIIwOFGErMYFTn6LmhWxAdm8+79vOZX4gRdAYOhaW3vvnpiTO5vPMqrmx i0OEg2kSQWOtblpuolA6qg9N7/aAr6fH9xQ5d/ZZZzfhaDxdLL0EMU6uWBQfF8kS zdmtmVDldgiOEG/MXTsp/mECEKnH9EvxMRTrsknlQIQtEuQVAq5KuPVNgXy/Veq9 R7F1Lh7/M1IwIBQN5TmV2Bj9A6QKcUSkVis3LHoZeR8bu20w2qdSLkfzt67jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG1N3ngXrB5/xD4qyiyEWs/sWHi8wHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0PXQ3bbnr+E DHxJqNJpuc3DekhcLIqsYbXWPCgKUUrjNTDuQJN5eXMxy/C7xH8F2a8hjxhLA7gd S0eXmeKi/VEI+UM9VXQydqh2LGGzgxGz99CDQnVB+onNpRbp/95BsnX09JlRmCAa ZBRd3dHwSu02dgqo3KycPjI+KYyREl7uR/n8T/1OmTdZLvvQzN1LyO8g3aPJ8CbW 6rK+nxBVVXwCmC4Rt0jfWkeo2c1yg0fOxYFvky8j3FuLL1BRXgyInrJWKP1jaf5V uskA9+2XwOuU9ND8pCRtMnosEN2fhSMLg4tGOPTJKtGxaDCZrWTVcIqgATNvsC0d 9rzSRGa2RQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:52:33 2026 by rpki-client