$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: Y+kwlzW6hTPmFTeuXoX5yRK9p6wNPUG2yVvWfUClFNI= Subject key identifier: 7F:55:AC:C7:9F:21:41:B5:7E:9D:BC:4B:FC:B7:00:E4:3A:88:42:64 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 758DA30E3A556E22C4938B637AED9D8535927C4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 0141 Signing time: Sat 03 Oct 2026 15:47:01 +0000 Manifest this update: Sat 03 Oct 2026 15:42:01 +0000 Manifest next update: Tue 06 Oct 2026 22:45:01 +0000 Files and hashes: 1: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: Rcu6BxjpbmJRKKI73Vm88k2W4laMEg07Ess0gEkW9iY=) 2: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 3: 34332e3139332e36352e302f32342d3234203d3e203130323036.roa (hash: 6m6sraX2wercPUwc5ViicNvbpVzyOKO2UCe0QtoYQwQ=) 4: 34332e3139332e36352e302f32342d3234203d3e20313334373631.roa (hash: vtB4q26rJZnPT0HeksyyQ09N0xJbQpfDhBpPOrG+qEE=) 5: 34332e3139332e36352e302f32342d3234203d3e20313335363239.roa (hash: MwVN3taj66Ka8e6zM6DN8RrX4mecL96iDgmUhMFQ9x0=) 6: 34332e3139332e36352e302f32342d3234203d3e2039383038.roa (hash: V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=) 7: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 8: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 22:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:a3:0e:3a:55:6e:22:c4:93:8b:63:7a:ed:9d:85:35:92:7c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Oct 3 15:42:01 2026 GMT Not After : Oct 6 22:45:01 2026 GMT Subject: CN=7F55ACC79F2141B57E9DBC4BFCB700E43A884264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:b1:16:a9:4a:3e:ce:4b:a7:26:10:8e:9c: 06:db:3d:9a:4d:8b:2c:e8:91:c9:f8:ce:e2:2b:89: ac:6f:db:33:cd:ee:ba:3e:bf:dd:69:71:8a:27:08: c6:a6:ee:b4:36:a4:f8:54:24:97:16:86:51:7f:90: b7:1e:de:46:4b:0e:43:68:3f:3b:19:4b:a3:38:40: 75:6c:ce:ac:54:64:13:9b:5d:df:7d:02:7e:69:b3: 09:d2:a0:79:90:85:c7:38:a3:4f:2f:b0:c4:1c:d7: 3a:5a:41:50:13:46:e7:81:7e:f4:9d:ac:6f:70:2c: 66:f3:34:05:2b:d7:76:9a:40:20:22:b9:cf:45:0f: 06:8f:49:b3:ec:66:1b:80:b4:76:18:f3:49:36:47: 63:92:1e:c9:ad:c1:5b:b1:13:39:e0:27:87:92:aa: ea:fc:73:d8:b4:16:aa:96:ad:5b:11:90:c6:d0:1f: db:7b:da:93:7c:f6:fb:4e:e4:43:b6:d7:58:01:68: 36:27:02:99:ea:a1:c5:07:bb:ff:6a:76:a9:bf:4a: d5:0e:74:c6:1a:cb:a0:4f:78:28:7a:30:a5:8f:c8: b9:24:11:d6:57:b8:b5:a1:60:57:df:eb:2e:06:cc: df:83:18:7a:ef:cd:9d:4f:ac:36:80:c6:af:1f:61: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:55:AC:C7:9F:21:41:B5:7E:9D:BC:4B:FC:B7:00:E4:3A:88:42:64 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:9b:cd:6e:b0:ef:d0:ab:cc:fc:f1:28:ab:1f:a2:9e:36: d6:1f:2f:52:1f:a5:37:8b:fe:c2:a3:b3:f9:3f:e9:8b:be:93: 58:b7:bd:48:09:82:4f:b0:1f:b8:71:e2:12:35:89:51:dd:ae: 7d:2c:6c:3a:5d:6b:70:f5:98:0b:f3:5e:7d:79:49:5b:cc:bc: 9c:13:d5:92:3d:03:e3:f9:13:54:8e:de:5e:5e:ee:3a:58:f9: 13:37:44:1d:8b:9b:0a:18:47:a1:13:a1:a5:67:e5:1d:30:66: 74:06:de:7e:f8:1e:0b:05:ae:5c:8f:c0:48:7e:aa:84:82:3e: 57:de:1f:ab:a8:26:f2:10:1f:48:06:6e:f8:ae:cb:79:17:98: de:6b:ea:89:55:8e:b8:67:7e:ce:29:7f:7c:08:94:2c:c7:62: ce:d8:4a:fd:97:80:fb:5d:a5:3e:68:e5:13:5d:9a:49:11:ab: 16:f4:d8:8f:71:56:f3:45:37:64:e9:7d:5c:a3:e5:87:3b:cc: 3f:06:85:d0:08:d5:2f:e4:af:e6:30:4e:6f:f2:72:ae:07:13: eb:de:5e:65:75:26:39:87:58:5f:98:ee:45:ce:b8:88:61:e3: da:3a:0d:eb:2f:55:c6:97:a3:a3:c8:92:5e:22:28:f2:4b:46: bf:24:82:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdY2jDjpVbiLEk4tjeu2dhTWSfEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjEwMDMxNTQyMDFaFw0yNjEwMDYyMjQ1MDFaMDMxMTAvBgNV BAMTKDdGNTVBQ0M3OUYyMTQxQjU3RTlEQkM0QkZDQjcwMEU0M0E4ODQyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsbEWqUo+zkunJhCOnAbbPZpN iyzokcn4zuIriaxv2zPN7ro+v91pcYonCMam7rQ2pPhUJJcWhlF/kLce3kZLDkNo PzsZS6M4QHVszqxUZBObXd99An5pswnSoHmQhcc4o08vsMQc1zpaQVATRueBfvSd rG9wLGbzNAUr13aaQCAiuc9FDwaPSbPsZhuAtHYY80k2R2OSHsmtwVuxEzngJ4eS qur8c9i0FqqWrVsRkMbQH9t72pN89vtO5EO211gBaDYnApnqocUHu/9qdqm/StUO dMYay6BPeCh6MKWPyLkkEdZXuLWhYFff6y4GzN+DGHrvzZ1PrDaAxq8fYU2NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf1Wsx58hQbV+nbxL/LcA5DqIQmQwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX6bzW6w79Cr zPzxKKsfop421h8vUh+lN4v+wqOz+T/pi76TWLe9SAmCT7AfuHHiEjWJUd2ufSxs Ol1rcPWYC/NefXlJW8y8nBPVkj0D4/kTVI7eXl7uOlj5EzdEHYubChhHoROhpWfl HTBmdAbefvgeCwWuXI/ASH6qhII+V94fq6gm8hAfSAZu+K7LeReY3mvqiVWOuGd+ zil/fAiULMdizthK/ZeA+12lPmjlE12aSRGrFvTYj3FW80U3ZOl9XKPlhzvMPwaF 0AjVL+Sv5jBOb/JyrgcT695eZXUmOYdYX5juRc64iGHj2joN6y9Vxpejo8iSXiIo 8ktGvySC2Q== -----END CERTIFICATE-----Generated at Sun Oct 4 19:46:23 2026 by rpki-client