$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: oHzaec4AgAW1vNGo0ozbrANIZ6EJgw1Q96Zs5FPtNYk= Subject key identifier: DA:CC:DD:6B:C5:47:5B:A8:C9:8B:9F:8B:03:22:89:C5:0C:CC:B0:DA Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 5F8E0AF4DFF192D17F9D889E1C88A0F53B9F8237 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 013A Signing time: Mon 12 Oct 2026 11:56:55 +0000 Manifest this update: Mon 12 Oct 2026 11:51:55 +0000 Manifest next update: Thu 15 Oct 2026 19:16:55 +0000 Files and hashes: 1: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 2: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: /sRdgU+a5llI2V42f+qwTtaC7RUv7Cr4v7tpTpGFSo4=) 3: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8e:0a:f4:df:f1:92:d1:7f:9d:88:9e:1c:88:a0:f5:3b:9f:82:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Oct 12 11:51:55 2026 GMT Not After : Oct 15 19:16:55 2026 GMT Subject: CN=DACCDD6BC5475BA8C98B9F8B032289C50CCCB0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:ca:d1:9b:9c:f1:3d:c0:3b:41:c0:b7:fa: 08:04:54:ec:49:83:5a:80:86:9f:6b:40:9d:81:60: 89:8a:0c:ab:d0:0f:4c:0b:80:ed:ea:0f:34:94:39: 2c:8f:d8:e3:aa:19:77:ee:4c:3d:65:04:32:de:3c: ae:af:ef:94:2c:f2:93:a0:af:c2:40:d7:10:ed:a9: 7d:ae:56:9e:40:5a:2f:7f:26:32:ed:d4:14:a5:f6: ce:7d:8f:47:61:a3:65:8d:29:94:48:19:cd:16:20: ea:56:47:bd:e0:9b:71:73:83:20:80:2e:88:f9:1a: 5c:f5:36:10:1b:83:9e:d0:be:8c:29:9b:27:39:aa: 05:6e:da:49:e6:2d:d0:ca:7c:cd:76:99:70:9f:c5: e4:02:c7:cb:7c:3f:39:83:40:3a:d0:35:e6:14:4e: 20:47:8e:92:6f:f2:48:86:31:1c:ef:9e:00:69:45: 34:94:56:19:79:39:39:0f:0f:20:95:b6:13:e9:bf: 9a:4d:c2:f9:75:1d:55:6b:50:0c:ee:4b:b6:5f:19: 78:30:52:c6:bb:b2:7c:75:ce:84:ad:7e:29:bb:1f: f7:25:99:10:c3:ba:80:be:dc:a2:2d:44:47:82:14: bd:78:81:a1:ad:f8:6a:ad:a3:ab:96:57:bb:55:13: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CC:DD:6B:C5:47:5B:A8:C9:8B:9F:8B:03:22:89:C5:0C:CC:B0:DA X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:94:d6:0b:b6:18:34:c5:8c:03:70:9e:9f:05:dd:d8:1f:ee: e6:f3:04:81:0b:c8:08:f7:7c:d0:ce:6b:0f:66:17:17:ea:97: 29:55:25:42:a0:af:b5:b6:10:6e:07:4b:fa:f4:e2:f6:66:e4: c8:3e:33:b7:64:a9:74:2f:a8:ca:86:10:e1:30:02:10:5b:bd: db:66:ce:a0:97:d4:a4:ad:ae:91:b3:c7:c3:3d:7c:1e:c9:fe: 31:34:d1:64:52:74:d3:55:9d:d9:cd:24:2c:75:02:ca:31:c6: ef:04:7c:1e:7a:0f:91:ae:3b:ee:a5:c5:ff:df:49:d3:3c:a1: f7:0e:1e:d6:33:70:fc:85:69:0c:a2:7e:28:b8:77:75:74:a6: 95:ef:b6:f2:c2:0e:c6:f9:dc:f4:fe:21:af:d7:c0:1b:5c:2e: f3:f9:c7:ef:f2:45:68:12:c7:c5:58:f8:65:2c:e7:6e:06:cd: af:e7:e0:a3:8a:b1:9c:12:8a:43:f6:21:b4:2f:ad:94:f2:55: 23:5b:9a:88:22:32:e7:90:73:2d:86:ef:40:00:28:8f:5c:98: f6:06:ed:c2:ac:c1:57:26:43:d4:64:70:91:dc:9d:30:57:d3: bd:12:13:27:ad:43:d1:59:65:e6:76:02:01:5b:a0:cc:65:03: ca:60:57:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX44K9N/xktF/nYieHIig9TufgjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjEwMTIxMTUxNTVaFw0yNjEwMTUxOTE2NTVaMDMxMTAvBgNV BAMTKERBQ0NERDZCQzU0NzVCQThDOThCOUY4QjAzMjI4OUM1MENDQ0IwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jMrRm5zxPcA7QcC3+ggEVOxJ g1qAhp9rQJ2BYImKDKvQD0wLgO3qDzSUOSyP2OOqGXfuTD1lBDLePK6v75Qs8pOg r8JA1xDtqX2uVp5AWi9/JjLt1BSl9s59j0dho2WNKZRIGc0WIOpWR73gm3FzgyCA Loj5Glz1NhAbg57Qvowpmyc5qgVu2knmLdDKfM12mXCfxeQCx8t8PzmDQDrQNeYU TiBHjpJv8kiGMRzvngBpRTSUVhl5OTkPDyCVthPpv5pNwvl1HVVrUAzuS7ZfGXgw Usa7snx1zoStfim7H/clmRDDuoC+3KItREeCFL14gaGt+Gqto6uWV7tVE1QHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2szda8VHW6jJi5+LAyKJxQzMsNowHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopTWC7YYNMWM A3CenwXd2B/u5vMEgQvICPd80M5rD2YXF+qXKVUlQqCvtbYQbgdL+vTi9mbkyD4z t2SpdC+oyoYQ4TACEFu922bOoJfUpK2ukbPHwz18Hsn+MTTRZFJ001Wd2c0kLHUC yjHG7wR8HnoPka477qXF/99J0zyh9w4e1jNw/IVpDKJ+KLh3dXSmle+28sIOxvnc 9P4hr9fAG1wu8/nH7/JFaBLHxVj4ZSznbgbNr+fgo4qxnBKKQ/YhtC+tlPJVI1ua iCIy55BzLYbvQAAoj1yY9gbtwqzBVyZD1GRwkdydMFfTvRITJ61D0Vll5nYCAVug zGUDymBXjw== -----END CERTIFICATE-----Generated at Wed Oct 14 04:49:15 2026 by rpki-client