$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: F6Hvb078muj7Bi0Rp/jzmlLRl/9gjKAyUVA8jBU/km4= Subject key identifier: 55:71:80:A6:B7:9C:C3:79:86:86:1A:61:8C:09:96:6B:F2:C5:08:7B Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 30EE2E61FEF739CE628CF7E44E5332F99A03AE48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 013C Signing time: Sun 11 Oct 2026 19:05:51 +0000 Manifest this update: Sun 11 Oct 2026 19:00:51 +0000 Manifest next update: Thu 15 Oct 2026 06:26:51 +0000 Files and hashes: 1: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: z8Ui4qNbuSQY3V4225atgJ6p1X5Z0KqTzXT0qkawAWo=) 2: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 3: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ee:2e:61:fe:f7:39:ce:62:8c:f7:e4:4e:53:32:f9:9a:03:ae:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Oct 11 19:00:51 2026 GMT Not After : Oct 15 06:26:51 2026 GMT Subject: CN=557180A6B79CC37986861A618C09966BF2C5087B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:f3:cd:cc:77:47:0e:c8:32:73:30:73:31: ca:ea:3e:7e:c2:0e:2a:58:8d:85:76:b6:89:db:36: b2:e7:85:7f:2a:e2:7d:e3:ef:da:71:32:ff:51:6b: b8:94:41:2f:dc:c5:43:5e:a1:7b:eb:cb:09:45:6d: 89:85:36:d3:23:46:9d:f7:4b:bd:3e:4f:95:b8:bb: 3c:9e:27:02:70:b7:9d:ce:99:ae:ca:18:92:1b:56: 37:53:5e:9d:0b:d2:46:67:e8:e7:cc:9e:dd:05:87: 67:4d:9c:42:a8:e1:9f:fb:fd:60:ea:2f:8a:31:dc: 35:f7:76:31:ce:b4:61:ab:ba:f3:72:b0:fe:e2:98: e1:b0:1b:0b:e4:c2:b0:5a:6d:0c:14:9b:73:fd:fe: 33:dd:ec:f5:65:6a:44:46:cc:a0:40:5c:4c:5e:62: d3:67:80:6e:53:cd:53:b7:7e:91:45:f7:89:f7:e5: 08:ec:a0:ae:f0:bb:93:fb:33:bf:ce:0e:1d:9e:f8: 26:95:27:dc:d0:c3:47:f5:f7:dd:6a:41:3b:ea:79: aa:a0:a9:ef:0e:0c:16:37:e1:f7:a1:32:ef:9a:36: 19:72:18:ef:a9:c6:c3:0f:b1:02:8a:ca:df:76:e9: 32:f9:bb:e7:80:a4:67:ef:bc:f6:a2:a4:7c:2f:06: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:80:A6:B7:9C:C3:79:86:86:1A:61:8C:09:96:6B:F2:C5:08:7B X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:10:a6:45:f0:a4:a6:e5:a6:c7:07:de:2f:24:63:32:f0:d5: 89:a7:ff:f1:b8:eb:73:92:20:78:52:82:04:44:de:a0:3d:8d: 13:d4:46:e6:fe:58:91:66:03:75:ee:98:b1:2e:cb:bf:0c:a3: 3a:16:f8:b3:b8:0b:05:67:f9:2c:2c:93:c9:30:5c:9b:6e:45: 4d:80:f5:e0:01:ca:83:61:ac:97:56:e5:a3:1e:5e:bb:cc:5a: df:13:6b:ad:82:0f:b4:66:da:c8:85:59:a7:23:9d:63:ce:91: 71:ce:7c:7f:a1:fe:ed:fb:82:99:91:b8:dd:7b:ed:ed:4c:76: 81:dd:e0:5d:d8:f4:d8:06:b7:9a:9f:71:a8:d4:1b:a3:26:8d: 76:67:c4:b0:36:fe:30:2d:6d:65:35:26:b1:d7:cb:b0:55:4f: 01:ed:21:05:d2:01:3f:ad:3d:dd:7f:4a:17:87:ba:70:9a:24: 4c:d3:dc:1a:5f:73:bd:24:ce:64:79:97:2b:d3:1c:03:2b:09: 41:e2:80:d7:81:25:65:8f:e4:ad:e2:6e:67:9a:73:7e:45:03: 4a:61:11:a5:fd:94:4f:0d:b2:cb:b7:04:5d:3d:b2:1e:52:2f: 4d:59:66:de:c3:49:93:1b:2e:cc:ca:0c:44:c9:ea:df:43:b9: 5d:0f:a9:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMO4uYf73Oc5ijPfkTlMy+ZoDrkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjEwMTExOTAwNTFaFw0yNjEwMTUwNjI2NTFaMDMxMTAvBgNV BAMTKDU1NzE4MEE2Qjc5Q0MzNzk4Njg2MUE2MThDMDk5NjZCRjJDNTA4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrfPNzHdHDsgyczBzMcrqPn7C DipYjYV2tonbNrLnhX8q4n3j79pxMv9Ra7iUQS/cxUNeoXvrywlFbYmFNtMjRp33 S70+T5W4uzyeJwJwt53Oma7KGJIbVjdTXp0L0kZn6OfMnt0Fh2dNnEKo4Z/7/WDq L4ox3DX3djHOtGGruvNysP7imOGwGwvkwrBabQwUm3P9/jPd7PVlakRGzKBAXExe YtNngG5TzVO3fpFF94n35QjsoK7wu5P7M7/ODh2e+CaVJ9zQw0f1991qQTvqeaqg qe8ODBY34fehMu+aNhlyGO+pxsMPsQKKyt926TL5u+eApGfvvPaipHwvBvGJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVXGAprecw3mGhhphjAmWa/LFCHswHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxCmRfCkpuWm xwfeLyRjMvDViaf/8bjrc5IgeFKCBETeoD2NE9RG5v5YkWYDde6YsS7LvwyjOhb4 s7gLBWf5LCyTyTBcm25FTYD14AHKg2Gsl1blox5eu8xa3xNrrYIPtGbayIVZpyOd Y86Rcc58f6H+7fuCmZG43Xvt7Ux2gd3gXdj02Aa3mp9xqNQboyaNdmfEsDb+MC1t ZTUmsdfLsFVPAe0hBdIBP6093X9KF4e6cJokTNPcGl9zvSTOZHmXK9McAysJQeKA 14ElZY/kreJuZ5pzfkUDSmERpf2UTw2yy7cEXT2yHlIvTVlm3sNJkxsuzMoMRMnq 30O5XQ+p6A== -----END CERTIFICATE-----Generated at Mon Oct 12 00:57:50 2026 by rpki-client