$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: 2XjOMDFD8wtzjWhImB41uAQ/WgTeA9sWYeULZxzI+rY= Subject key identifier: C1:E4:A3:1B:96:AC:94:0C:44:AA:DB:56:EC:8A:D1:8F:9F:A0:46:2B Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 7B47139CB5A286B5BCB984E5F3CD8D87306BDCA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 0140 Signing time: Tue 13 Oct 2026 09:32:53 +0000 Manifest this update: Tue 13 Oct 2026 09:27:53 +0000 Manifest next update: Fri 16 Oct 2026 10:17:53 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 2: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 3: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: AwAp5d37teXR5rgEnNiFc5kob8N0SrHAajyFklJMlas=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:47:13:9c:b5:a2:86:b5:bc:b9:84:e5:f3:cd:8d:87:30:6b:dc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Oct 13 09:27:53 2026 GMT Not After : Oct 16 10:17:53 2026 GMT Subject: CN=C1E4A31B96AC940C44AADB56EC8AD18F9FA0462B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:cd:43:33:c2:7d:76:da:91:6c:fd:e2:f3: ec:a7:ec:67:6f:a6:17:b4:c0:04:4e:0a:97:b2:6f: 79:43:3d:fc:3c:a3:9f:92:27:39:f5:90:ec:ce:2a: fb:9b:df:d9:bb:bb:2b:06:06:7e:85:d6:d4:b5:e0: be:79:6e:f2:1a:7a:3c:2c:86:b1:9f:8f:84:68:88: 4f:8d:55:09:32:1e:34:d0:1e:3c:8e:0e:2e:cd:93: d8:7f:c9:45:5a:52:c4:e1:31:47:95:50:ef:a9:d4: 76:c0:a9:54:04:d6:6f:d8:e6:4f:0e:ed:9a:15:e2: 87:c9:43:ea:44:6f:a6:43:96:1e:0a:e2:c4:dc:8c: 5f:dc:7b:fc:a1:dd:44:cb:25:2a:2e:54:d9:dd:a1: ee:65:d1:a7:aa:14:80:9d:c5:0d:ef:d6:03:56:39: 48:0a:72:3d:64:8d:8a:31:c0:26:bd:37:92:43:07: b1:de:1f:e7:7d:83:f3:3d:5c:03:89:fe:cf:06:50: 6e:9f:5e:54:28:da:36:8a:fb:9f:bc:e5:d4:27:62: 0f:0f:eb:79:42:68:b2:78:ef:a3:70:66:32:2e:18: 3b:ba:da:a4:e6:98:12:0a:65:91:66:d4:9e:ee:b5: 54:09:83:82:00:8c:c0:55:f0:12:ad:00:59:1c:6f: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:A3:1B:96:AC:94:0C:44:AA:DB:56:EC:8A:D1:8F:9F:A0:46:2B X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:ab:d4:e8:b8:d5:2f:49:78:d3:cf:1a:fb:21:c7:f4:7a: 5c:f1:c2:c9:ed:2a:98:35:09:df:22:92:3a:ca:ca:e8:83:65: 55:c4:e3:ec:40:be:2e:2b:ef:bb:98:46:e5:54:44:70:40:d9: 17:94:c0:70:d5:d2:6f:62:bc:0f:3e:71:28:62:0c:cc:14:ac: 97:73:4e:df:fb:cf:84:38:87:7d:ab:90:8f:45:61:c3:bb:e8: f6:fc:40:cd:51:ad:8b:e3:a8:26:ab:74:cf:72:ec:80:89:71: d9:18:a8:d1:51:1f:5d:0e:50:cb:32:9d:05:09:e6:88:77:81: 39:a9:ef:c5:2e:30:be:e6:1a:fe:4c:5c:4e:bd:04:bd:ac:30: 20:30:47:18:59:f7:b2:d9:f2:f2:87:4c:91:1e:0f:89:cd:9f: a7:cb:6e:ee:ce:22:52:b6:ce:ba:71:c6:5d:dd:da:1e:d2:98: 9d:cb:bf:a7:d6:25:1d:22:c3:ce:f0:37:08:8d:92:99:f0:db: 7e:ba:2d:26:a0:14:1c:b4:8f:be:47:1a:0a:5f:12:3b:df:e5: c2:b2:fd:64:f2:f5:07:68:f5:1f:4d:f2:e5:ec:32:92:51:bf: df:d8:e6:e4:60:12:b1:2d:b9:a7:02:34:2a:e2:68:91:ef:95: e5:05:86:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe0cTnLWihrW8uYTl882NhzBr3KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjEwMTMwOTI3NTNaFw0yNjEwMTYxMDE3NTNaMDMxMTAvBgNV BAMTKEMxRTRBMzFCOTZBQzk0MEM0NEFBREI1NkVDOEFEMThGOUZBMDQ2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/c1DM8J9dtqRbP3i8+yn7Gdv phe0wAROCpeyb3lDPfw8o5+SJzn1kOzOKvub39m7uysGBn6F1tS14L55bvIaejws hrGfj4RoiE+NVQkyHjTQHjyODi7Nk9h/yUVaUsThMUeVUO+p1HbAqVQE1m/Y5k8O 7ZoV4ofJQ+pEb6ZDlh4K4sTcjF/ce/yh3UTLJSouVNndoe5l0aeqFICdxQ3v1gNW OUgKcj1kjYoxwCa9N5JDB7HeH+d9g/M9XAOJ/s8GUG6fXlQo2jaK+5+85dQnYg8P 63lCaLJ476NwZjIuGDu62qTmmBIKZZFm1J7utVQJg4IAjMBV8BKtAFkcb4XhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUweSjG5aslAxEqttW7IrRj5+gRiswHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOSr1Oi41S9J eNPPGvshx/R6XPHCye0qmDUJ3yKSOsrK6INlVcTj7EC+Livvu5hG5VREcEDZF5TA cNXSb2K8Dz5xKGIMzBSsl3NO3/vPhDiHfauQj0Vhw7vo9vxAzVGti+OoJqt0z3Ls gIlx2Rio0VEfXQ5QyzKdBQnmiHeBOanvxS4wvuYa/kxcTr0EvawwIDBHGFn3stny 8odMkR4Pic2fp8tu7s4iUrbOunHGXd3aHtKYncu/p9YlHSLDzvA3CI2SmfDbfrot JqAUHLSPvkcaCl8SO9/lwrL9ZPL1B2j1H03y5ewyklG/39jm5GASsS25pwI0KuJo ke+V5QWGcA== -----END CERTIFICATE-----Generated at Thu Oct 15 01:53:33 2026 by rpki-client