$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: 5xRCvd7xnuWwJR5rDPLogZF0B7UVC+0TCycbPBaeoF8= Subject key identifier: BB:5E:E6:90:35:DE:23:13:19:BF:D1:59:6C:75:E4:60:EC:0F:AA:B6 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 27CDC9A7E903D5328A794796B6E423A939D8B9E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 013B Signing time: Wed 14 Oct 2026 09:33:54 +0000 Manifest this update: Wed 14 Oct 2026 09:28:54 +0000 Manifest next update: Sat 17 Oct 2026 10:09:54 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: /esmYcS/gG20qlSHWx+ANnXMQZ+bWAcOtwpDkhryPK8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cd:c9:a7:e9:03:d5:32:8a:79:47:96:b6:e4:23:a9:39:d8:b9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Oct 14 09:28:54 2026 GMT Not After : Oct 17 10:09:54 2026 GMT Subject: CN=BB5EE69035DE231319BFD1596C75E460EC0FAAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:54:62:1b:fb:55:9a:4a:6e:97:6d:7b:54:05: 76:f9:62:79:88:cb:75:9e:fa:05:d3:8d:24:8c:f9: 24:2b:e2:38:2b:43:0a:bf:56:d5:6e:d2:e2:77:98: c0:24:a3:d9:60:c6:31:0b:3b:41:3b:04:b7:5b:b0: 23:20:bc:b6:10:8a:19:2f:95:6d:86:f7:b1:84:bb: f6:0d:8e:b6:de:67:7e:99:b0:74:d7:7e:4c:cd:ba: d8:fb:18:a9:c2:ac:7c:28:49:94:4e:75:83:af:d7: ec:6d:23:34:d3:ba:61:73:fe:6c:f7:dc:e3:e2:d4: 1e:7e:35:4b:37:95:fe:64:40:2d:57:dd:40:14:28: 4b:00:02:7c:36:e0:f6:96:f3:e6:b9:0d:68:72:69: e3:b8:14:ae:d9:ed:2b:a2:ea:30:ac:02:36:7b:14: 1e:bc:10:a3:07:63:5b:8f:0f:28:43:f2:95:b2:8b: 4a:9b:84:ee:dd:89:17:a8:9e:7a:33:d6:7b:27:b9: 1b:59:0c:d3:bf:c0:1e:0e:77:9e:12:92:8e:fc:2d: 9a:5d:80:47:da:75:30:58:28:77:c2:24:fd:d9:d0: 47:fa:f7:06:9e:01:4b:a4:9c:a6:e4:0c:b0:70:5f: 21:e1:d7:93:e8:d0:0c:11:14:75:c8:69:3e:3b:93: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5E:E6:90:35:DE:23:13:19:BF:D1:59:6C:75:E4:60:EC:0F:AA:B6 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:69:7a:6a:1a:86:5f:bb:7d:aa:29:84:27:6e:3c:71:73:88: 00:a2:73:88:9a:13:60:1c:8b:06:25:b8:2c:f6:96:a7:5c:45: 58:04:49:3d:51:a7:02:e0:eb:0e:a6:92:67:b8:e5:7c:1e:32: 74:92:fd:c5:65:76:47:59:28:58:68:3f:75:14:12:5b:32:41: db:80:3d:50:e6:37:5f:9f:bb:2a:b1:44:1c:7f:1c:a2:73:28: 81:09:03:76:95:ec:b5:d0:b2:bd:f2:70:b8:fb:c2:5a:2f:99: 58:52:2a:87:5b:ec:7b:bf:2b:cb:02:99:82:f2:72:0d:48:c2: 97:8b:31:4d:1e:3a:d7:03:61:c3:5e:fa:81:09:9d:4c:e2:2e: 8a:a7:3b:34:e2:b1:43:ce:69:75:b8:d0:3e:58:3e:b0:67:28: 31:f7:07:92:0d:7d:99:09:5a:dc:35:70:8f:cd:d5:f6:83:33: fc:c3:c1:a2:13:7f:b8:b3:70:d5:83:4b:4a:ec:97:a8:19:c6: 1c:bc:a9:3d:01:f6:0e:e4:5f:a6:0e:c8:6a:50:f9:1c:89:14: 01:82:1d:0e:0f:48:90:3c:10:d8:ff:11:d4:2a:5f:a3:29:36: c7:44:cd:cb:ac:35:ad:13:8a:1c:41:f9:85:9d:fc:d1:a0:fa: 84:95:7c:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ83Jp+kD1TKKeUeWtuQjqTnYueQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjEwMTQwOTI4NTRaFw0yNjEwMTcxMDA5NTRaMDMxMTAvBgNV BAMTKEJCNUVFNjkwMzVERTIzMTMxOUJGRDE1OTZDNzVFNDYwRUMwRkFBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwVGIb+1WaSm6XbXtUBXb5YnmI y3We+gXTjSSM+SQr4jgrQwq/VtVu0uJ3mMAko9lgxjELO0E7BLdbsCMgvLYQihkv lW2G97GEu/YNjrbeZ36ZsHTXfkzNutj7GKnCrHwoSZROdYOv1+xtIzTTumFz/mz3 3OPi1B5+NUs3lf5kQC1X3UAUKEsAAnw24PaW8+a5DWhyaeO4FK7Z7Sui6jCsAjZ7 FB68EKMHY1uPDyhD8pWyi0qbhO7diReonnoz1nsnuRtZDNO/wB4Od54Sko78LZpd gEfadTBYKHfCJP3Z0Ef69waeAUuknKbkDLBwXyHh15Po0AwRFHXIaT47k+M7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu17mkDXeIxMZv9FZbHXkYOwPqrYwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2l6ahqGX7t9 qimEJ248cXOIAKJziJoTYByLBiW4LPaWp1xFWARJPVGnAuDrDqaSZ7jlfB4ydJL9 xWV2R1koWGg/dRQSWzJB24A9UOY3X5+7KrFEHH8conMogQkDdpXstdCyvfJwuPvC Wi+ZWFIqh1vse78rywKZgvJyDUjCl4sxTR461wNhw176gQmdTOIuiqc7NOKxQ85p dbjQPlg+sGcoMfcHkg19mQla3DVwj83V9oMz/MPBohN/uLNw1YNLSuyXqBnGHLyp PQH2DuRfpg7IalD5HIkUAYIdDg9IkDwQ2P8R1Cpfoyk2x0TNy6w1rROKHEH5hZ38 0aD6hJV8SA== -----END CERTIFICATE-----Generated at Wed Oct 14 17:41:22 2026 by rpki-client