$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft File: 94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json) Hash identifier: l4JYRFSv+xyatuHR9oklM6bHZObfZ88TtydKwYkpwh0= Subject key identifier: 06:4C:D9:49:8D:84:73:6D:9C:88:43:5E:EA:98:F6:19:E2:CE:3D:01 Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 Certificate issuer: /CN=94CD4C01C346E7777BF9874A62B37929003445D7 Certificate serial: 48072414F36D5C7615F7DAB3E8D52E89036CF7E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft Manifest number: A4 Signing time: Thu 24 Sep 2026 22:52:20 +0000 Manifest this update: Thu 24 Sep 2026 22:47:20 +0000 Manifest next update: Mon 28 Sep 2026 08:24:20 +0000 Files and hashes: 1: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=) 2: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: fX/U2GfSK8QMEM5B1Lp2mj2RTe1jBhABTR+pyJ90Rlw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:07:24:14:f3:6d:5c:76:15:f7:da:b3:e8:d5:2e:89:03:6c:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7 Validity Not Before: Sep 24 22:47:20 2026 GMT Not After : Sep 28 08:24:20 2026 GMT Subject: CN=064CD9498D84736D9C88435EEA98F619E2CE3D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:2a:9a:4d:92:4a:99:b7:77:54:ce:03:59: 58:eb:18:4b:61:f0:87:64:2d:38:0a:c7:83:06:3b: 37:7f:21:f3:6e:b6:6c:45:9b:4a:d3:5c:cb:ad:21: b7:ea:d5:3b:0e:a3:1d:a2:03:bf:82:eb:69:c2:42: 9c:ab:5c:83:eb:0a:77:cf:64:e6:d1:47:07:e4:1b: fb:95:42:3f:ed:cf:81:5d:f5:54:8d:6e:7c:40:5a: bd:ba:ba:2c:5e:44:cd:f2:97:c4:78:21:aa:13:5a: 84:bd:ee:f7:4d:32:09:42:4e:00:91:41:73:dd:bb: 86:fd:93:b8:f6:44:cf:22:4e:2b:8e:33:d2:01:a2: 07:75:6a:ad:e6:ac:e6:a1:82:3a:ce:b9:bb:de:76: e3:ed:5f:0b:6c:13:ca:3e:0e:ce:ca:6c:f3:56:72: 76:29:ca:f9:bc:e1:54:9d:a8:d8:5b:80:a9:6b:21: a1:20:a1:c0:7e:28:8a:d2:67:80:c0:09:9d:94:32: 49:2e:96:54:94:be:d7:89:87:39:62:41:a1:22:5a: 04:26:0b:0d:3e:d8:d9:e4:cc:7a:34:82:59:7b:42: c0:a6:2d:09:7e:28:d1:3a:a0:d3:ac:ad:44:2a:6a: 54:56:7a:c3:a0:87:da:1d:d0:11:40:04:28:ee:03: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4C:D9:49:8D:84:73:6D:9C:88:43:5E:EA:98:F6:19:E2:CE:3D:01 X509v3 Authority Key Identifier: keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:98:89:80:7d:7e:62:c3:23:29:a1:06:ee:52:80:f4:74: f9:c2:e7:4c:6c:d3:a3:b5:91:1f:19:24:bb:7c:7a:77:73:b4: c8:8d:29:db:bb:b1:be:8d:28:1d:45:46:54:fb:0e:8b:0c:1d: c1:13:9f:66:cc:f1:5e:f5:f0:19:62:f2:16:67:e7:07:4d:f9: 2f:a7:b3:6c:06:5e:11:b2:2c:a7:cf:df:37:2b:cf:df:39:3f: 4a:72:3c:14:a1:7f:a3:99:37:76:39:17:4e:8c:bb:ee:74:33: 2b:c3:ae:eb:e0:c8:9c:86:fc:78:df:13:c8:d2:ab:8a:87:b3: 4b:c0:53:ce:0a:0d:fb:8d:76:fd:b3:39:e4:b9:93:c4:39:e3: d1:93:00:e3:98:21:8c:65:ef:13:4b:bb:91:89:85:63:af:be: 5c:b1:1d:02:cf:77:58:49:47:98:90:8d:5c:4d:44:7e:75:2b: f3:4c:61:c6:97:3a:67:8d:07:81:80:08:c8:8d:ca:a9:be:94: 50:34:3b:00:d5:7a:ed:5b:8e:26:6a:a0:58:eb:67:cc:35:ab: 78:8d:59:2d:f1:ab:a8:a1:38:25:2a:38:09:df:34:3e:f2:f7: 55:bd:0b:11:d8:54:21:f4:4e:cd:12:22:b1:08:28:b5:57:dd: 7d:83:4c:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSAckFPNtXHYV99qz6NUuiQNs9+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRDRDRDMDFDMzQ2RTc3NzdCRjk4NzRBNjJCMzc5Mjkw MDM0NDVENzAeFw0yNjA5MjQyMjQ3MjBaFw0yNjA5MjgwODI0MjBaMDMxMTAvBgNV BAMTKDA2NENEOTQ5OEQ4NDczNkQ5Qzg4NDM1RUVBOThGNjE5RTJDRTNEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHSqaTZJKmbd3VM4DWVjrGEth 8IdkLTgKx4MGOzd/IfNutmxFm0rTXMutIbfq1TsOox2iA7+C62nCQpyrXIPrCnfP ZObRRwfkG/uVQj/tz4Fd9VSNbnxAWr26uixeRM3yl8R4IaoTWoS97vdNMglCTgCR QXPdu4b9k7j2RM8iTiuOM9IBogd1aq3mrOahgjrOubveduPtXwtsE8o+Ds7KbPNW cnYpyvm84VSdqNhbgKlrIaEgocB+KIrSZ4DACZ2UMkkullSUvteJhzliQaEiWgQm Cw0+2NnkzHo0gll7QsCmLQl+KNE6oNOsrUQqalRWesOgh9od0BFABCjuA+P7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBkzZSY2Ec22ciENe6pj2GeLOPQEwHwYDVR0j BBgwFoAUlM1MAcNG53d7+YdKYrN5KQA0RdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1NTc0NDIwNzY4MzU5My8wLzk0Q0Q0QzAxQzM0NkU3Nzc3QkY5ODc0QTYyQjM3 OTI5MDAzNDQ1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRDRDRDMDFDMzQ2RTc3NzdCRjk4NzRBNjJCMzc5MjkwMDM0NDVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNTU3NDQyMDc2ODM1OTMvMC85NENENEMwMUMzNDZF Nzc3N0JGOTg3NEE2MkIzNzkyOTAwMzQ0NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6+YiYB9fmLD IymhBu5SgPR0+cLnTGzTo7WRHxkku3x6d3O0yI0p27uxvo0oHUVGVPsOiwwdwROf ZszxXvXwGWLyFmfnB035L6ezbAZeEbIsp8/fNyvP3zk/SnI8FKF/o5k3djkXToy7 7nQzK8Ou6+DInIb8eN8TyNKrioezS8BTzgoN+412/bM55LmTxDnj0ZMA45ghjGXv E0u7kYmFY6++XLEdAs93WElHmJCNXE1EfnUr80xhxpc6Z40HgYAIyI3Kqb6UUDQ7 ANV67VuOJmqgWOtnzDWreI1ZLfGrqKE4JSo4Cd80PvL3Vb0LEdhUIfROzRIisQgo tVfdfYNMYA== -----END CERTIFICATE-----Generated at Sun Sep 27 05:57:36 2026 by rpki-client