$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft File: 4D766E2BA41D99B155DD457741DB970EC3007E71.mft (raw, json) Hash identifier: 12fs4xfMJkG64+9FjfkpBwaQ3qNBJUZnX6JmfVpdYvQ= Subject key identifier: D9:90:5C:5F:B9:42:F8:EF:29:D8:34:A6:30:A5:C4:9B:9A:17:17:68 Authority key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Certificate issuer: /CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Certificate serial: 4178CF11C616E6B51F22EBA5FD96C712E0D77203 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft Manifest number: 79 Signing time: Tue 13 Oct 2026 07:47:51 +0000 Manifest this update: Tue 13 Oct 2026 07:42:51 +0000 Manifest next update: Fri 16 Oct 2026 18:55:51 +0000 Files and hashes: 1: 3130332e3234312e39352e302f32342d3234203d3e203539303130.roa (hash: PSe7EbgdWOhWUl3Vwo/B3/8fvz4znjeR8pQCfVHvk/g=) 2: 4D766E2BA41D99B155DD457741DB970EC3007E71.crl (hash: 9INC8JQlxDX872gZH/gAiAbTeh1T1ZeL+yZoeRl2TpU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:78:cf:11:c6:16:e6:b5:1f:22:eb:a5:fd:96:c7:12:e0:d7:72:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Validity Not Before: Oct 13 07:42:51 2026 GMT Not After : Oct 16 18:55:51 2026 GMT Subject: CN=D9905C5FB942F8EF29D834A630A5C49B9A171768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:91:60:33:1c:ed:43:14:43:84:4e:7c:32: 73:28:d6:eb:23:49:b5:e8:ca:5a:a7:3b:d8:e3:4c: 12:90:a3:c3:4a:dc:4e:47:cf:a7:94:e5:ac:ec:33: 53:40:b3:75:56:34:b0:17:bb:62:fb:75:ee:41:f4: 01:4a:1c:bf:b2:d6:5e:d2:ea:5e:b4:1d:80:26:8f: 3c:d6:29:e4:6c:b0:69:5f:65:8e:58:76:c6:2f:41: be:a0:bd:6b:e5:3b:0e:0b:79:01:9f:6b:aa:9b:ab: 63:5c:5d:17:52:97:31:de:00:37:0d:ce:0c:4e:9f: c0:fc:49:a1:fc:80:e2:f7:d4:21:e3:5d:d1:39:be: 3f:40:fd:ae:26:24:7b:bf:6f:39:a4:ae:16:62:e3: 49:1b:62:22:af:93:9c:75:c9:1c:68:d0:b4:c8:17: 0b:13:c8:4a:f1:d6:7d:2a:8c:2f:5a:9d:b5:77:e7: 0e:30:e6:2d:bf:81:b6:f2:3f:e5:de:03:1a:cd:f5: 6f:f7:6b:31:2c:87:32:5d:9f:57:c9:f8:d9:ec:c1: 0f:9a:c3:ad:8a:f0:d5:65:99:2b:47:2b:bb:17:1f: 24:00:b7:77:64:f3:7b:53:68:30:d1:8d:e4:94:9f: d1:7c:4c:24:65:88:6b:f5:04:aa:db:29:83:e5:6c: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:5C:5F:B9:42:F8:EF:29:D8:34:A6:30:A5:C4:9B:9A:17:17:68 X509v3 Authority Key Identifier: keyid:4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d5:50:cb:0f:3b:e0:b0:d0:1e:eb:d9:4e:ab:f9:d0:fb:59: 7f:e9:5b:76:45:d5:25:73:29:51:38:e2:78:db:0d:70:f7:c3: 50:14:31:ab:dd:1a:83:e8:ff:65:01:0d:aa:35:e7:ac:21:24: 91:ed:67:81:cb:f6:b7:e8:22:d6:ae:5e:f1:51:15:b2:41:81: 09:bd:7f:73:90:16:15:08:17:f4:95:4d:3f:42:fb:28:35:af: 50:e3:93:fe:1a:3e:ad:6c:61:ac:e2:d0:a3:a6:5c:50:f1:a7: 19:45:b1:d5:c3:0a:2e:22:5f:2d:36:a0:e1:91:82:85:df:e4: d7:d7:39:3b:07:b6:d5:fe:cd:5e:18:98:cb:fa:63:ca:e5:63: 42:aa:3e:14:05:e3:94:df:0f:9b:07:55:7c:ce:2a:95:49:58: 46:47:b7:c7:86:a9:1a:2e:68:2c:37:9d:9c:3c:5d:83:8a:f8: 27:aa:e1:79:20:e1:d4:40:c4:ab:a6:7c:db:1b:1d:dd:5f:01: d9:88:e4:80:89:ba:55:8f:02:2a:e2:7a:b0:06:fe:fe:f6:0e: b6:d9:cf:3a:56:01:d3:2c:ca:b1:28:da:b3:72:ce:4a:0d:d3: 26:dc:39:a2:b5:95:cb:62:c4:46:87:16:dd:82:f1:e5:e6:77: c8:59:f6:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQXjPEcYW5rUfIuul/ZbHEuDXcgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVD MzAwN0U3MTAeFw0yNjEwMTMwNzQyNTFaFw0yNjEwMTYxODU1NTFaMDMxMTAvBgNV BAMTKEQ5OTA1QzVGQjk0MkY4RUYyOUQ4MzRBNjMwQTVDNDlCOUExNzE3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiZFgMxztQxRDhE58MnMo1usj SbXoylqnO9jjTBKQo8NK3E5Hz6eU5azsM1NAs3VWNLAXu2L7de5B9AFKHL+y1l7S 6l60HYAmjzzWKeRssGlfZY5YdsYvQb6gvWvlOw4LeQGfa6qbq2NcXRdSlzHeADcN zgxOn8D8SaH8gOL31CHjXdE5vj9A/a4mJHu/bzmkrhZi40kbYiKvk5x1yRxo0LTI FwsTyErx1n0qjC9anbV35w4w5i2/gbbyP+XeAxrN9W/3azEshzJdn1fJ+NnswQ+a w62K8NVlmStHK7sXHyQAt3dk83tTaDDRjeSUn9F8TCRliGv1BKrbKYPlbGjHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2ZBcX7lC+O8p2DSmMKXEm5oXF2gwHwYDVR0j BBgwFoAUTXZuK6QdmbFV3UV3QduXDsMAfnEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc5OTI3MTEyNzE1NDcxMS8wLzRENzY2RTJCQTQxRDk5QjE1NURENDU3NzQxREI5 NzBFQzMwMDdFNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3OTkyNzExMjcxNTQ3MTEvMC80RDc2NkUyQkE0MUQ5 OUIxNTVERDQ1Nzc0MURCOTcwRUMzMDA3RTcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdVQyw874LDQ HuvZTqv50PtZf+lbdkXVJXMpUTjieNsNcPfDUBQxq90ag+j/ZQENqjXnrCEkke1n gcv2t+gi1q5e8VEVskGBCb1/c5AWFQgX9JVNP0L7KDWvUOOT/ho+rWxhrOLQo6Zc UPGnGUWx1cMKLiJfLTag4ZGChd/k19c5Owe21f7NXhiYy/pjyuVjQqo+FAXjlN8P mwdVfM4qlUlYRke3x4apGi5oLDednDxdg4r4J6rheSDh1EDEq6Z82xsd3V8B2Yjk gIm6VY8CKuJ6sAb+/vYOttnPOlYB0yzKsSjas3LOSg3TJtw5orWVy2LERocW3YLx 5eZ3yFn21Q== -----END CERTIFICATE-----Generated at Tue Oct 13 12:11:45 2026 by rpki-client