$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: gko5FrBetvWIlS2geGxQCAaivNm/nZhvpvMdBL9iNzQ= Subject key identifier: 36:6D:23:E4:0B:35:EC:43:01:51:42:78:1E:D7:1A:63:09:0E:C0:E1 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 04B113FBCC6EFDB3E1BDC87F70BD962ECDDE638D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: A3 Signing time: Sat 26 Sep 2026 20:49:22 +0000 Manifest this update: Sat 26 Sep 2026 20:44:22 +0000 Manifest next update: Wed 30 Sep 2026 06:52:22 +0000 Files and hashes: 1: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) 2: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: vGmTMi/1nDNdrWr3eMMyhssKZ967hqjY5hRSnPnWyXA=) 3: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:13:fb:cc:6e:fd:b3:e1:bd:c8:7f:70:bd:96:2e:cd:de:63:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Sep 26 20:44:22 2026 GMT Not After : Sep 30 06:52:22 2026 GMT Subject: CN=366D23E40B35EC43015142781ED71A63090EC0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:b9:4b:1e:e2:f7:1d:fb:31:12:e1:2a:58: 0d:83:2e:09:41:90:43:9c:82:65:87:74:6b:1e:a7: 12:b6:64:7f:2b:fe:08:10:93:0e:bf:3b:20:b0:b7: b2:cf:3b:1f:64:e5:54:43:fa:d9:8f:b1:94:08:47: 3f:aa:40:62:d5:25:5c:b8:cb:dd:19:13:8e:5a:38: 8a:f5:3a:90:38:cf:41:b9:93:31:e5:f1:51:b2:21: 0c:08:f9:91:3d:aa:74:c3:54:32:dc:ec:8e:24:cc: 1f:25:63:82:ce:e6:be:dc:8d:13:c4:41:e6:c4:14: e9:2c:bd:71:03:28:a9:fe:8a:c4:91:49:79:3a:c6: a4:d0:b9:b1:9f:9c:97:cb:32:0c:e1:9d:9e:55:2b: 83:26:5c:dc:bc:fd:0b:7f:c4:61:17:f0:30:01:a5: c8:0d:e6:f7:df:18:7e:f5:10:fd:d0:5d:8c:93:96: 37:bd:28:c2:33:ba:a5:26:fb:1a:54:41:44:51:71: 2e:22:d6:11:9a:44:99:84:98:68:3e:6a:d4:6d:f1: ff:c0:ae:23:95:af:e5:1d:1a:75:ef:05:83:ba:7c: 62:3d:fb:be:c0:84:0a:2b:db:85:3f:e5:16:f2:02: 25:c4:19:74:9c:0f:b8:a0:d5:d8:75:87:dc:e8:0e: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6D:23:E4:0B:35:EC:43:01:51:42:78:1E:D7:1A:63:09:0E:C0:E1 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:62:01:90:fb:bf:16:01:fe:f0:8e:a5:c2:7d:d8:f8:14:51: d2:11:c8:41:d7:44:aa:7b:b0:06:81:65:23:47:00:88:7b:93: f3:fb:b8:50:b9:99:59:0a:cf:75:88:84:bb:ce:20:c9:30:29: c2:20:fa:05:d4:8b:bf:88:35:a8:2d:e7:af:df:d7:7c:03:91: cd:86:93:18:ed:0b:57:fb:6d:4a:ee:44:5e:08:5f:a8:e9:45: 29:02:23:af:c0:64:10:c1:15:3f:b2:27:4c:a4:4f:95:53:6d: 40:48:2d:dd:9e:c9:85:8c:e4:c8:cd:e4:f0:fe:79:6f:b5:05: 1f:f6:ee:ee:1b:15:2d:be:23:c9:92:bd:da:5f:58:6d:e2:92: 7b:18:e9:2f:5c:ee:ea:9a:65:9e:aa:91:24:dd:e0:10:f7:e8: 7a:87:fa:d9:f1:27:8a:ce:de:b7:a3:0b:7a:8d:5b:78:21:48: 7f:0e:e7:a2:dd:73:7c:34:c7:cd:77:59:3b:b5:7b:d0:87:82: dd:16:f2:32:9d:2b:6e:83:5b:9d:c3:9b:3d:88:f3:7a:d1:ef: d4:4a:87:5b:1e:0a:02:e2:3d:d1:bd:10:3e:af:2e:4b:e7:79: 97:72:91:cc:d1:de:8a:c1:8f:50:76:51:a4:90:f3:b2:03:9a: ee:5a:79:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBLET+8xu/bPhvch/cL2WLs3eY40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA5MjYyMDQ0MjJaFw0yNjA5MzAwNjUyMjJaMDMxMTAvBgNV BAMTKDM2NkQyM0U0MEIzNUVDNDMwMTUxNDI3ODFFRDcxQTYzMDkwRUMwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0blLHuL3HfsxEuEqWA2DLglB kEOcgmWHdGsepxK2ZH8r/ggQkw6/OyCwt7LPOx9k5VRD+tmPsZQIRz+qQGLVJVy4 y90ZE45aOIr1OpA4z0G5kzHl8VGyIQwI+ZE9qnTDVDLc7I4kzB8lY4LO5r7cjRPE QebEFOksvXEDKKn+isSRSXk6xqTQubGfnJfLMgzhnZ5VK4MmXNy8/Qt/xGEX8DAB pcgN5vffGH71EP3QXYyTlje9KMIzuqUm+xpUQURRcS4i1hGaRJmEmGg+atRt8f/A riOVr+UdGnXvBYO6fGI9+77AhAor24U/5RbyAiXEGXScD7ig1dh1h9zoDqKvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNm0j5As17EMBUUJ4HtcaYwkOwOEwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWIBkPu/FgH+ 8I6lwn3Y+BRR0hHIQddEqnuwBoFlI0cAiHuT8/u4ULmZWQrPdYiEu84gyTApwiD6 BdSLv4g1qC3nr9/XfAORzYaTGO0LV/ttSu5EXghfqOlFKQIjr8BkEMEVP7InTKRP lVNtQEgt3Z7JhYzkyM3k8P55b7UFH/bu7hsVLb4jyZK92l9YbeKSexjpL1zu6ppl nqqRJN3gEPfoeof62fEnis7et6MLeo1beCFIfw7not1zfDTHzXdZO7V70IeC3Rby Mp0rboNbncObPYjzetHv1EqHWx4KAuI90b0QPq8uS+d5l3KRzNHeisGPUHZRpJDz sgOa7lp5KA== -----END CERTIFICATE-----Generated at Sun Sep 27 10:20:54 2026 by rpki-client