$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: +8XZYaBTC4Yl6klfvI9PryLxFSli70kV/r3npWHXi2c= Subject key identifier: 58:3C:33:8E:5C:D7:97:27:23:76:45:9A:80:AF:EE:F5:1F:4E:69:AD Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 49F5B12DC63492A73A5BB64BA3EAC1FCE50F24B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 013B Signing time: Mon 12 Oct 2026 15:52:06 +0000 Manifest this update: Mon 12 Oct 2026 15:47:06 +0000 Manifest next update: Thu 15 Oct 2026 20:03:06 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: pZgBG+lWegAYG4omblQn3fh/u91R/4GZbrFsZMBdgNU=) 2: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) 3: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f5:b1:2d:c6:34:92:a7:3a:5b:b6:4b:a3:ea:c1:fc:e5:0f:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Oct 12 15:47:06 2026 GMT Not After : Oct 15 20:03:06 2026 GMT Subject: CN=583C338E5CD797272376459A80AFEEF51F4E69AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:4c:28:1f:2a:8c:27:89:5a:fa:49:fb:42: 99:9e:32:87:20:3f:6e:17:06:13:34:69:14:f6:7b: 4a:ed:ff:07:5e:b3:64:4f:88:e5:51:b5:c8:62:95: 35:69:72:a9:df:32:fa:ac:e5:b2:13:a8:37:94:05: 6b:f5:e8:17:fb:ce:15:f3:d1:90:d2:92:75:19:95: 41:d6:21:2e:96:65:5a:e6:e8:ca:7b:b9:52:74:40: 6e:f9:cd:5b:28:f9:06:f9:27:d5:f8:a8:28:8d:09: c7:87:c6:02:f0:b1:a8:0e:5f:5f:62:e5:e9:23:d4: e3:d6:86:52:d3:ba:af:a0:83:db:4d:29:f8:25:78: 04:98:5e:30:9f:d4:c0:04:b4:33:0d:8f:d3:e9:53: 00:c6:df:ac:02:90:bb:33:15:69:77:aa:32:1d:5f: 52:e7:dc:d1:23:2b:e5:93:3f:73:ca:65:a4:fe:50: d1:22:ad:62:33:c8:c4:ca:b5:23:27:53:77:1a:30: 06:1b:ec:23:b7:47:f7:31:91:ea:21:f0:9a:b6:4a: f9:47:69:94:cd:8a:f6:00:ba:60:8e:99:6a:11:b8: 6c:cf:6c:01:e0:38:af:cf:db:5a:d4:a8:3a:f1:ac: 51:7b:0a:eb:5a:b2:4b:09:c9:45:66:57:9b:b4:96: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:33:8E:5C:D7:97:27:23:76:45:9A:80:AF:EE:F5:1F:4E:69:AD X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:72:9c:c7:3e:df:e0:17:6f:db:23:1b:dc:bf:2a:42:f0:0a: e0:a3:7f:91:cc:9a:04:a1:f9:33:26:ec:78:d4:56:96:2d:dd: 1e:70:d6:a5:16:53:9b:38:f4:a6:7e:ef:be:ae:6c:10:61:05: 25:e7:dc:6e:77:22:52:6f:96:2f:93:73:a2:c3:c3:84:f1:35: a1:bb:ba:77:ef:2e:2a:4d:ec:a0:e7:05:8d:3c:74:01:8d:75: ca:5c:56:43:ed:46:3e:15:d4:8f:be:a2:bd:55:29:fc:4b:d6: 93:11:1f:d2:88:fe:60:a8:aa:94:98:4d:ca:4e:ff:86:e1:4b: 13:3a:c9:f6:9a:11:27:93:30:4e:fa:c8:36:8c:a9:73:44:61: ae:b3:7f:e2:5c:02:9e:30:67:b5:3d:0d:9d:d1:ef:4b:eb:7d: 03:be:65:cb:d2:d1:13:b5:ee:0c:01:d2:0e:60:2c:e3:6e:9e: 82:d0:b7:4a:ba:4b:64:b2:da:c7:9b:02:a6:a6:af:da:86:c6: 45:d9:2c:f3:85:3f:8d:a4:6f:9b:ae:7e:b0:d7:ba:e3:39:d3: 34:4f:04:c9:0a:82:3d:6b:69:8a:a8:8b:3b:a9:41:20:63:4a: ec:14:a7:be:b8:88:1e:0e:a8:19:bd:df:04:e4:b8:cc:7b:fd: 91:c7:15:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSfWxLcY0kqc6W7ZLo+rB/OUPJLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjEwMTIxNTQ3MDZaFw0yNjEwMTUyMDAzMDZaMDMxMTAvBgNV BAMTKDU4M0MzMzhFNUNENzk3MjcyMzc2NDU5QTgwQUZFRUY1MUY0RTY5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r0woHyqMJ4la+kn7QpmeMocg P24XBhM0aRT2e0rt/wdes2RPiOVRtchilTVpcqnfMvqs5bITqDeUBWv16Bf7zhXz 0ZDSknUZlUHWIS6WZVrm6Mp7uVJ0QG75zVso+Qb5J9X4qCiNCceHxgLwsagOX19i 5ekj1OPWhlLTuq+gg9tNKfgleASYXjCf1MAEtDMNj9PpUwDG36wCkLszFWl3qjId X1Ln3NEjK+WTP3PKZaT+UNEirWIzyMTKtSMnU3caMAYb7CO3R/cxkeoh8Jq2SvlH aZTNivYAumCOmWoRuGzPbAHgOK/P21rUqDrxrFF7CutasksJyUVmV5u0lg39AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWDwzjlzXlycjdkWagK/u9R9Oaa0wHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3Kcxz7f4Bdv 2yMb3L8qQvAK4KN/kcyaBKH5MybseNRWli3dHnDWpRZTmzj0pn7vvq5sEGEFJefc bnciUm+WL5NzosPDhPE1obu6d+8uKk3soOcFjTx0AY11ylxWQ+1GPhXUj76ivVUp /EvWkxEf0oj+YKiqlJhNyk7/huFLEzrJ9poRJ5MwTvrINoypc0RhrrN/4lwCnjBn tT0NndHvS+t9A75ly9LRE7XuDAHSDmAs426egtC3SrpLZLLax5sCpqav2obGRdks 84U/jaRvm65+sNe64znTNE8EyQqCPWtpiqiLO6lBIGNK7BSnvriIHg6oGb3fBOS4 zHv9kccVOw== -----END CERTIFICATE-----Generated at Wed Oct 14 04:36:58 2026 by rpki-client