$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: 6uNqIKZSGgJhVzRuRnlcK3OGZGBWmCY7ayk4Hr3+8Qc= Subject key identifier: 30:DD:EA:6A:CF:82:9E:3A:D0:37:39:82:76:53:9D:DE:3E:A5:D7:13 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 3C06FC262F6758F2AA6B6772A70CD30306DE2DAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 013B Signing time: Mon 12 Oct 2026 10:46:52 +0000 Manifest this update: Mon 12 Oct 2026 10:41:52 +0000 Manifest next update: Thu 15 Oct 2026 18:24:52 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: AKGfmfVzPifgRsJfsvzsURAcKXIrqbOHXZGY0jwM1Tc=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:06:fc:26:2f:67:58:f2:aa:6b:67:72:a7:0c:d3:03:06:de:2d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Oct 12 10:41:52 2026 GMT Not After : Oct 15 18:24:52 2026 GMT Subject: CN=30DDEA6ACF829E3AD037398276539DDE3EA5D713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:e2:9e:2d:d0:a8:5c:47:2c:b7:96:a8:aa: 8b:cd:37:5d:35:42:ff:60:a3:14:29:2e:54:28:3c: e8:2b:fa:9b:e2:2d:66:7b:17:3d:f1:9e:c9:e4:58: f0:d8:7e:db:c7:dd:5c:aa:22:98:69:00:4d:9b:f5: 62:12:6c:05:53:92:bb:30:96:4b:8e:5f:9a:ab:52: 6e:2f:06:6b:ed:cb:b5:cf:cd:f6:0f:7d:25:7d:34: 07:a3:bb:eb:48:a5:a4:48:9e:8e:66:7a:18:fc:e4: 38:de:1f:7e:45:27:7e:01:d2:9a:43:a3:4a:19:93: 5f:69:bb:6d:86:6e:b0:af:c6:28:22:c9:28:f1:5f: 65:02:9e:6f:a5:59:24:e6:c3:63:e4:bf:a3:4e:ec: e4:58:a3:f3:c7:31:c0:44:e7:d8:ba:53:ab:12:dd: 80:5c:bb:dd:b3:ee:ee:bc:20:ce:6c:40:d9:d8:6e: 3e:ea:56:31:1b:1c:97:d9:e0:dd:78:a0:97:cd:7c: ec:86:ca:55:6d:74:41:ba:ab:d2:8d:9e:4b:38:c2: ea:a8:27:9b:11:13:7f:5b:82:c4:1a:8c:88:88:99: 33:c6:01:bb:75:4e:9c:a5:f3:b9:94:34:d8:91:7a: 00:eb:3c:df:a7:f0:97:a0:84:0c:50:b2:6c:37:6d: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:EA:6A:CF:82:9E:3A:D0:37:39:82:76:53:9D:DE:3E:A5:D7:13 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:51:b0:f4:ad:bb:a2:60:78:f7:88:57:1f:77:d8:6a:18:da: 85:17:bd:7a:2f:6c:44:80:e4:aa:e2:74:cb:49:22:1d:4e:84: 56:ef:87:90:00:80:b9:23:b0:f6:8e:0d:8e:4d:94:12:d3:68: f9:fc:27:30:f3:0b:68:f9:23:dd:ab:00:b0:37:07:84:6d:8b: e4:6b:7d:4a:fa:99:59:e6:c7:14:54:80:22:ce:e0:3a:4c:bc: 9c:fb:22:e2:73:6c:97:84:11:35:c6:68:4b:75:bf:40:1d:b9: 52:06:eb:f8:31:81:16:64:59:5c:0c:7b:67:ab:91:31:34:50: 13:98:39:14:b7:aa:4c:6b:2d:70:e9:38:bd:80:f5:2d:87:5d: 07:02:5d:06:c6:92:8b:b4:3f:3b:ab:71:b5:6c:70:45:eb:f8: 13:ff:ea:20:b5:62:7f:e6:2e:59:30:47:f6:c9:22:45:c1:35: e3:02:8a:c7:6b:27:c2:26:c7:77:94:3e:58:2a:87:51:59:49: 0e:8a:1f:50:4a:70:96:2d:72:6e:5b:d5:af:f4:b3:49:1c:5f: 02:ec:43:7b:20:6f:10:23:35:d6:9c:e4:85:97:c0:96:22:78: 65:e4:02:c9:4e:4b:43:14:e1:53:1d:bb:f7:75:eb:f9:4f:75: e0:94:27:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPAb8Ji9nWPKqa2dypwzTAwbeLa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjEwMTIxMDQxNTJaFw0yNjEwMTUxODI0NTJaMDMxMTAvBgNV BAMTKDMwRERFQTZBQ0Y4MjlFM0FEMDM3Mzk4Mjc2NTM5RERFM0VBNUQ3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZD+KeLdCoXEcst5aoqovNN101 Qv9goxQpLlQoPOgr+pviLWZ7Fz3xnsnkWPDYftvH3VyqIphpAE2b9WISbAVTkrsw lkuOX5qrUm4vBmvty7XPzfYPfSV9NAeju+tIpaRIno5mehj85DjeH35FJ34B0ppD o0oZk19pu22GbrCvxigiySjxX2UCnm+lWSTmw2Pkv6NO7ORYo/PHMcBE59i6U6sS 3YBcu92z7u68IM5sQNnYbj7qVjEbHJfZ4N14oJfNfOyGylVtdEG6q9KNnks4wuqo J5sRE39bgsQajIiImTPGAbt1Tpyl87mUNNiRegDrPN+n8JeghAxQsmw3baT9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMN3qas+CnjrQNzmCdlOd3j6l1xMwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVGw9K27omB4 94hXH3fYahjahRe9ei9sRIDkquJ0y0kiHU6EVu+HkACAuSOw9o4Njk2UEtNo+fwn MPMLaPkj3asAsDcHhG2L5Gt9SvqZWebHFFSAIs7gOky8nPsi4nNsl4QRNcZoS3W/ QB25Ugbr+DGBFmRZXAx7Z6uRMTRQE5g5FLeqTGstcOk4vYD1LYddBwJdBsaSi7Q/ O6txtWxwRev4E//qILVif+YuWTBH9skiRcE14wKKx2snwibHd5Q+WCqHUVlJDoof UEpwli1yblvVr/SzSRxfAuxDeyBvECM11pzkhZfAliJ4ZeQCyU5LQxThUx2793Xr +U914JQn4A== -----END CERTIFICATE-----Generated at Mon Oct 12 23:57:09 2026 by rpki-client