$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: yYkPAyYr7hXEJ5zHHytKF/K5AxyI1TsMj5yC5QRkePw= Subject key identifier: F2:2E:F7:16:2F:C6:8D:81:D6:E2:60:39:8E:A7:87:8A:DB:41:3A:3F Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 4D7EDA0ED08BEF2CFFE91001017399EB67A21C08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: D2 Signing time: Tue 03 Nov 2026 12:28:01 +0000 Manifest this update: Tue 03 Nov 2026 12:23:01 +0000 Manifest next update: Fri 06 Nov 2026 13:22:01 +0000 Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: WBmKXaRoOT1jBGbxJmqnU5axoadqr9XZNsL0x8yyfz8=) 2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 13:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:da:0e:d0:8b:ef:2c:ff:e9:10:01:01:73:99:eb:67:a2:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: Nov 3 12:23:01 2026 GMT Not After : Nov 6 13:22:01 2026 GMT Subject: CN=F22EF7162FC68D81D6E260398EA7878ADB413A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:cc:b3:ba:fa:67:3b:90:79:3b:dd:ae:f6: ac:9a:e4:d6:bb:3c:93:86:8b:77:ec:e9:f5:a3:db: 88:da:f6:33:42:8c:01:58:15:27:5f:8d:fd:3c:d3: e3:7e:a5:2d:2a:c7:bf:61:48:4c:79:9c:bc:6c:05: 6a:17:80:3a:44:16:2e:dd:45:40:75:30:ce:d0:a6: 95:b7:f0:24:17:e0:5a:dd:4a:b6:d3:fe:2f:b8:b3: d4:df:95:e9:1c:59:be:9f:ad:e3:91:09:34:8d:3e: 06:28:83:99:d9:1e:9f:5e:47:a7:6d:f4:ac:ab:1d: 0b:ce:fa:95:02:b0:ad:6a:f9:2b:7f:7e:20:55:24: 0b:b8:4d:91:9a:6e:a3:b2:ea:11:cf:48:d9:3b:c4: c4:be:a5:8c:99:24:f4:52:32:bb:d8:69:f1:6d:1d: 93:9a:df:6e:50:97:1b:25:ae:6b:a2:06:06:07:96: 40:c1:51:4b:d7:cc:52:fa:d2:dc:1b:03:cc:f9:a4: 9a:5a:bb:70:a9:dc:76:f4:0c:a1:d6:fa:d9:37:bb: 20:4d:d5:c2:11:fa:2b:88:ba:29:76:a4:8d:24:20: 21:47:77:22:7b:b9:d5:93:29:a1:0e:09:a4:79:0e: 6d:80:8c:06:cd:70:73:12:43:09:d3:4d:bd:15:82: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2E:F7:16:2F:C6:8D:81:D6:E2:60:39:8E:A7:87:8A:DB:41:3A:3F X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:de:34:d3:8b:d3:14:7c:37:4f:4c:1a:40:e7:4e:f8:bd:08: 54:4b:14:59:87:b8:a2:2d:34:0a:16:3f:80:6c:ab:c2:de:30: 19:56:0b:79:62:3d:47:c8:85:ed:0e:ca:d7:14:15:fa:8d:d0: 8a:82:39:44:82:b3:e9:fc:88:bb:2e:46:46:09:37:ab:3e:35: 7f:00:b5:98:bc:e3:c7:57:6b:ee:b5:16:56:95:e8:4c:ce:b5: 64:55:70:89:3e:4b:ba:26:8d:4c:00:4e:a9:ca:fd:78:f1:08: 24:40:f2:f7:1a:84:f0:21:16:3f:a8:2a:0a:62:af:25:e1:e4: f4:d3:14:51:fb:9e:d0:cf:3c:8a:39:50:81:5d:a3:5a:30:44: b3:8d:4c:4f:a6:97:4e:da:f9:83:b2:fe:ab:5e:2c:e8:b8:be: f8:74:ce:35:4f:00:b4:f0:cf:33:54:50:77:1a:af:f9:e7:71: 6e:04:50:65:74:36:13:0a:9d:ba:c7:d7:6a:26:88:a4:74:b6: 46:94:c1:3f:8c:03:cb:37:03:2c:5b:e3:26:f9:c5:66:20:3c: 51:cb:b6:91:2c:63:4b:fe:6e:e7:37:36:4f:58:f4:63:c2:47: ae:86:da:84:a4:d0:a4:ac:38:14:a7:85:3d:18:89:ea:8a:4b: 2a:8d:ae:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTX7aDtCL7yz/6RABAXOZ62eiHAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjExMDMxMjIzMDFaFw0yNjExMDYxMzIyMDFaMDMxMTAvBgNV BAMTKEYyMkVGNzE2MkZDNjhEODFENkUyNjAzOThFQTc4NzhBREI0MTNBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YsyzuvpnO5B5O92u9qya5Na7 PJOGi3fs6fWj24ja9jNCjAFYFSdfjf080+N+pS0qx79hSEx5nLxsBWoXgDpEFi7d RUB1MM7QppW38CQX4FrdSrbT/i+4s9TflekcWb6freORCTSNPgYog5nZHp9eR6dt 9KyrHQvO+pUCsK1q+St/fiBVJAu4TZGabqOy6hHPSNk7xMS+pYyZJPRSMrvYafFt HZOa325QlxslrmuiBgYHlkDBUUvXzFL60twbA8z5pJpau3Cp3Hb0DKHW+tk3uyBN 1cIR+iuIuil2pI0kICFHdyJ7udWTKaEOCaR5Dm2AjAbNcHMSQwnTTb0VgnIVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8i73Fi/GjYHW4mA5jqeHittBOj8wHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd4004vTFHw3 T0waQOdO+L0IVEsUWYe4oi00ChY/gGyrwt4wGVYLeWI9R8iF7Q7K1xQV+o3QioI5 RIKz6fyIuy5GRgk3qz41fwC1mLzjx1dr7rUWVpXoTM61ZFVwiT5LuiaNTABOqcr9 ePEIJEDy9xqE8CEWP6gqCmKvJeHk9NMUUfue0M88ijlQgV2jWjBEs41MT6aXTtr5 g7L+q14s6Li++HTONU8AtPDPM1RQdxqv+edxbgRQZXQ2EwqdusfXaiaIpHS2RpTB P4wDyzcDLFvjJvnFZiA8Ucu2kSxjS/5u5zc2T1j0Y8JHrobahKTQpKw4FKeFPRiJ 6opLKo2upA== -----END CERTIFICATE-----Generated at Wed Nov 4 01:35:18 2026 by rpki-client