$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: QnxBBuvwOnQXHYr5dku/YUEilUTmWnVbr2esRwbcUg4= Subject key identifier: A1:E3:3F:E2:A8:18:B7:CC:D3:E7:F2:50:D4:5C:EE:08:68:D7:A5:1C Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 48826B0BED7F508042463CFA1C6C230EE9E858BE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: C2 Signing time: Sun 20 Sep 2026 11:12:37 +0000 Manifest this update: Sun 20 Sep 2026 11:07:37 +0000 Manifest next update: Wed 23 Sep 2026 12:03:37 +0000 Files and hashes: 1: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: ks1yEPGECbFsvM+qQr7rmOBZCADHs40ESLriIm+29JY=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:82:6b:0b:ed:7f:50:80:42:46:3c:fa:1c:6c:23:0e:e9:e8:58:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Sep 20 11:07:37 2026 GMT Not After : Sep 23 12:03:37 2026 GMT Subject: CN=A1E33FE2A818B7CCD3E7F250D45CEE0868D7A51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:e1:5a:0f:c4:b0:cd:35:21:f2:ec:c3:82: 50:5b:1f:37:d7:ec:81:03:fa:68:40:b9:1f:74:d0: 2b:57:a8:70:d1:51:ac:d3:a1:67:79:d3:47:d4:6a: 97:e1:30:35:5d:19:27:40:e1:4b:2f:84:49:75:90: 2b:7d:df:e4:20:2f:e7:34:e6:7b:e1:c8:56:f8:ec: 37:e0:ad:15:6a:0e:6b:07:77:b8:f3:be:93:7f:66: 04:72:13:0d:e0:61:63:2c:9c:2e:66:36:55:db:fc: c3:40:f6:97:39:4d:4c:2b:01:e5:a7:40:d6:dc:b1: c1:da:bc:22:33:0a:97:fc:f4:29:92:f3:d5:7f:cd: 1c:51:e7:ea:2f:be:fb:57:6e:dd:bb:03:b7:6d:c2: 8e:48:c2:1e:1a:f7:9b:ba:77:b3:38:f6:ac:56:82: 63:59:14:8b:5c:d2:7f:82:00:ee:d6:20:0a:12:30: b9:fc:47:28:b5:28:ec:cd:c3:18:02:39:8a:3e:0d: 73:bb:81:e9:4c:36:e5:eb:79:1a:d7:7d:88:22:e2: 4c:1e:1e:e1:de:7b:10:99:61:73:67:2b:68:2d:d2: 4c:73:53:3c:75:5c:cd:84:51:c6:1f:8e:f7:52:93: 15:8a:d2:3f:82:42:de:e9:1a:37:38:ff:d5:3a:35: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:3F:E2:A8:18:B7:CC:D3:E7:F2:50:D4:5C:EE:08:68:D7:A5:1C X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f0:b1:47:bd:85:a4:9d:4c:85:bf:fd:78:7c:3d:29:1d:3a: d5:f7:91:c6:c2:44:ca:ba:fb:3f:c8:cc:c0:17:ef:16:ab:ee: ec:2e:d9:f9:be:bc:3b:61:73:9b:ea:4f:b4:54:a4:82:7e:07: 8f:b0:33:2b:07:b7:6c:ee:c1:11:54:4a:32:3a:11:66:6c:cb: 9e:e6:93:39:4e:e1:aa:c3:b3:82:fa:fb:05:e2:57:22:ae:7d: 7d:e1:c4:27:26:6e:e1:a8:c6:6e:c5:8c:ee:12:31:ae:38:95: 0a:08:fd:1e:be:ed:58:0c:d2:99:42:fb:01:59:6a:d7:d9:2b: dd:07:1e:cf:75:76:b8:a6:07:5b:24:5e:df:e0:a2:ff:02:de: 34:bf:b8:7f:86:4e:f9:7a:68:8d:47:af:a6:b7:81:d1:1e:b3: 6a:2f:cd:8d:a0:3e:19:21:55:20:d7:82:58:af:1b:20:70:d7: 75:a3:18:60:41:fc:28:7c:07:b4:cd:dc:e1:2a:7b:31:7e:32: 5e:4a:c7:35:fc:85:4a:51:41:7e:0a:60:25:f5:88:bb:4a:d9: 4b:80:56:1a:05:9f:0a:65:9f:13:33:5e:30:27:87:f2:27:c8: 25:0f:7a:a0:b0:8d:9a:f6:ed:54:56:ca:cb:5c:bc:55:fb:ff: 7f:55:d2:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSIJrC+1/UIBCRjz6HGwjDunoWL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA5MjAxMTA3MzdaFw0yNjA5MjMxMjAzMzdaMDMxMTAvBgNV BAMTKEExRTMzRkUyQTgxOEI3Q0NEM0U3RjI1MEQ0NUNFRTA4NjhEN0E1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0A+FaD8SwzTUh8uzDglBbHzfX 7IED+mhAuR900CtXqHDRUazToWd500fUapfhMDVdGSdA4UsvhEl1kCt93+QgL+c0 5nvhyFb47DfgrRVqDmsHd7jzvpN/ZgRyEw3gYWMsnC5mNlXb/MNA9pc5TUwrAeWn QNbcscHavCIzCpf89CmS89V/zRxR5+ovvvtXbt27A7dtwo5Iwh4a95u6d7M49qxW gmNZFItc0n+CAO7WIAoSMLn8Ryi1KOzNwxgCOYo+DXO7gelMNuXreRrXfYgi4kwe HuHeexCZYXNnK2gt0kxzUzx1XM2EUcYfjvdSkxWK0j+CQt7pGjc4/9U6NQN1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoeM/4qgYt8zT5/JQ1FzuCGjXpRwwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfCxR72FpJ1M hb/9eHw9KR061feRxsJEyrr7P8jMwBfvFqvu7C7Z+b68O2Fzm+pPtFSkgn4Hj7Az Kwe3bO7BEVRKMjoRZmzLnuaTOU7hqsOzgvr7BeJXIq59feHEJyZu4ajGbsWM7hIx rjiVCgj9Hr7tWAzSmUL7AVlq19kr3Qcez3V2uKYHWyRe3+Ci/wLeNL+4f4ZO+Xpo jUevpreB0R6zai/NjaA+GSFVINeCWK8bIHDXdaMYYEH8KHwHtM3c4Sp7MX4yXkrH NfyFSlFBfgpgJfWIu0rZS4BWGgWfCmWfEzNeMCeH8ifIJQ96oLCNmvbtVFbKy1y8 Vfv/f1XSMA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:42:54 2026 by rpki-client