$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: cvKAmh8F5RxOUJIPiVMJ0Cclvg4cBDGv0pfK7NwNo9A= Subject key identifier: AD:66:3F:50:A5:DF:22:83:E0:6A:DC:74:1B:0E:32:8E:60:FD:D8:E8 Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 2158321719DFE38E910696F67722F8615573F853 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 0146 Signing time: Sun 01 Nov 2026 12:40:39 +0000 Manifest this update: Sun 01 Nov 2026 12:35:39 +0000 Manifest next update: Thu 05 Nov 2026 00:05:39 +0000 Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: YgzpwZAkaeWNO19/e+PqTS5K5gY3SmvL8rT0I1PnBBk=) 2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 13:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:58:32:17:19:df:e3:8e:91:06:96:f6:77:22:f8:61:55:73:f8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: Nov 1 12:35:39 2026 GMT Not After : Nov 5 00:05:39 2026 GMT Subject: CN=AD663F50A5DF2283E06ADC741B0E328E60FDD8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:c8:cc:37:86:f1:10:a5:60:00:ea:53:97: a8:7c:08:1e:2a:92:8e:87:6b:2f:5e:5e:7f:0a:01: 77:3e:47:dc:d9:ee:a0:ec:80:a1:6f:e0:42:99:bf: 12:d7:fc:e6:01:bb:42:bf:16:ea:07:2a:73:83:f9: dd:70:21:d2:6e:32:c1:f7:1a:1e:35:80:49:7c:a5: dc:be:d0:00:42:29:6c:37:f7:36:77:83:16:b7:4e: 75:53:71:22:0a:4d:79:97:c2:63:99:c5:d1:7e:a1: 87:45:51:07:1b:b8:6f:57:db:b1:cb:b4:2e:f3:08: 74:fb:b2:b1:83:7e:70:5e:8e:19:60:65:e6:d3:09: b9:08:0d:2d:80:89:06:15:a8:eb:69:84:54:53:ef: f2:f9:86:a1:0f:7c:1c:20:bc:8c:f7:ba:7d:4a:3f: 82:3f:58:d6:12:f8:43:46:4c:fb:a8:1d:77:84:bb: dc:f1:06:f1:93:da:c4:ce:da:b0:23:74:27:8c:81: 2b:cb:4d:f3:38:fb:bf:04:9d:04:83:68:c0:26:e1: 0b:da:4d:04:41:40:b2:22:5d:a6:e5:6f:c8:96:c3: 23:03:f5:b3:91:d9:35:66:7d:37:09:fc:3b:df:31: 15:0a:89:08:95:6b:00:c9:ed:9c:8e:a2:83:35:21: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:66:3F:50:A5:DF:22:83:E0:6A:DC:74:1B:0E:32:8E:60:FD:D8:E8 X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:af:ec:f3:ca:ae:27:1e:1f:97:06:96:69:d3:94:ab:63: de:c0:c7:9f:42:76:55:5b:d4:14:cf:0a:b3:99:5f:3d:b3:9b: 72:f0:00:77:44:8c:25:31:56:ca:30:14:ec:85:39:c8:cb:a1: 44:b2:73:73:29:26:b9:4f:3e:bd:1e:17:fd:4b:ce:ec:16:49: 13:9a:b0:a2:5a:31:d6:48:94:b6:2b:64:22:68:f3:fb:4d:cb: 63:e9:6c:6d:fc:d4:ee:84:39:5a:70:3d:45:b6:9f:ed:68:f7: 4c:d2:d1:ae:31:be:4b:6c:09:62:8c:74:d4:4e:e9:9a:4f:d7: 48:cb:b8:fd:6e:17:2e:aa:a4:2f:ef:7d:32:6b:ca:7d:91:ef: e1:f9:a1:68:55:e3:aa:45:8d:45:d6:1d:4b:73:3f:ad:75:00: 73:2f:77:41:f1:65:95:6b:dc:c8:40:be:73:d2:32:62:c6:94: 1a:ba:b5:ca:3d:29:45:f2:73:b6:d5:90:26:c9:dc:52:f8:06: fd:0c:b3:3f:93:a5:dc:12:e4:66:e9:71:ca:b6:b3:73:10:59: eb:36:e4:54:0d:93:70:6b:65:2e:e2:2e:91:63:58:0f:72:c5: 64:27:9b:5e:71:50:af:db:46:ae:64:03:a9:1a:ec:86:a1:fc: a2:58:c3:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIVgyFxnf446RBpb2dyL4YVVz+FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjExMDExMjM1MzlaFw0yNjExMDUwMDA1MzlaMDMxMTAvBgNV BAMTKEFENjYzRjUwQTVERjIyODNFMDZBREM3NDFCMEUzMjhFNjBGREQ4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDcjMN4bxEKVgAOpTl6h8CB4q ko6Hay9eXn8KAXc+R9zZ7qDsgKFv4EKZvxLX/OYBu0K/FuoHKnOD+d1wIdJuMsH3 Gh41gEl8pdy+0ABCKWw39zZ3gxa3TnVTcSIKTXmXwmOZxdF+oYdFUQcbuG9X27HL tC7zCHT7srGDfnBejhlgZebTCbkIDS2AiQYVqOtphFRT7/L5hqEPfBwgvIz3un1K P4I/WNYS+ENGTPuoHXeEu9zxBvGT2sTO2rAjdCeMgSvLTfM4+78EnQSDaMAm4Qva TQRBQLIiXablb8iWwyMD9bOR2TVmfTcJ/DvfMRUKiQiVawDJ7ZyOooM1IUmxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrWY/UKXfIoPgatx0Gw4yjmD92OgwHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbuv7PPKrice H5cGlmnTlKtj3sDHn0J2VVvUFM8Ks5lfPbObcvAAd0SMJTFWyjAU7IU5yMuhRLJz cykmuU8+vR4X/UvO7BZJE5qwolox1kiUtitkImjz+03LY+lsbfzU7oQ5WnA9Rbaf 7Wj3TNLRrjG+S2wJYox01E7pmk/XSMu4/W4XLqqkL+99MmvKfZHv4fmhaFXjqkWN RdYdS3M/rXUAcy93QfFllWvcyEC+c9IyYsaUGrq1yj0pRfJzttWQJsncUvgG/Qyz P5Ol3BLkZulxyrazcxBZ6zbkVA2TcGtlLuIukWNYD3LFZCebXnFQr9tGrmQDqRrs hqH8oljDJA== -----END CERTIFICATE-----Generated at Tue Nov 3 06:40:17 2026 by rpki-client