$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: L++NJX8nXlqW9eJpjt18/T/R3Gn+oiUKkD2P1nz4jSk= Subject key identifier: 5C:CE:4E:72:D0:00:B7:02:28:B6:DF:BA:1F:59:94:1E:C7:21:7E:4F Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 6E230DF8359D69B673A9499782191F6D897F4F41 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: C5 Signing time: Wed 14 Oct 2026 23:25:48 +0000 Manifest this update: Wed 14 Oct 2026 23:20:48 +0000 Manifest next update: Sun 18 Oct 2026 03:51:48 +0000 Files and hashes: 1: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) 2: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: B0dGoSYIfb/xfMFMsp/2DiafkVroQn2DqWmmTnY7E34=) 3: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) 4: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:0d:f8:35:9d:69:b6:73:a9:49:97:82:19:1f:6d:89:7f:4f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: Oct 14 23:20:48 2026 GMT Not After : Oct 18 03:51:48 2026 GMT Subject: CN=5CCE4E72D000B70228B6DFBA1F59941EC7217E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:d4:66:4e:b1:63:27:c1:ef:1a:df:cb:46: ee:f6:34:fd:3f:09:5c:37:7d:25:44:82:60:9d:b5: cd:b8:d1:41:2b:06:a3:24:30:95:49:6f:7b:30:95: 27:97:7c:76:c2:8e:25:e2:b9:21:f9:d6:fb:7b:b1: ac:c0:49:43:0f:7f:10:1e:bb:11:ba:bb:03:5f:04: 6d:02:56:35:e2:a7:48:f4:d5:10:70:42:6b:80:10: eb:bc:2f:f4:3a:be:96:8d:50:48:a7:03:1a:53:0b: 8c:fe:db:e8:a1:54:11:90:5c:c0:02:33:a8:ec:dc: 70:6e:31:47:0e:8f:ab:de:97:d1:09:7b:7c:1a:e2: a7:43:b9:d4:b0:d5:ad:d1:bc:9e:32:90:ff:a0:36: b0:59:8b:c8:cb:8e:c4:fd:8c:ab:6d:85:52:e5:8e: 22:45:3f:63:68:c0:cf:a7:f7:43:03:6c:87:04:91: aa:4a:dc:fb:7d:e7:2e:8c:cb:66:41:7b:bb:d7:1c: 58:2c:12:c4:d9:d6:67:75:d0:9f:8f:e0:f8:0a:27: 45:b9:84:c1:10:36:02:39:b9:33:3d:d0:3b:96:a7: 41:64:01:e7:bb:1b:d4:1c:1d:c6:38:54:75:c0:eb: 83:af:67:94:77:81:ca:9b:9e:54:71:43:19:ea:d5: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CE:4E:72:D0:00:B7:02:28:B6:DF:BA:1F:59:94:1E:C7:21:7E:4F X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:23:53:3f:f5:64:8f:0b:15:d2:9d:11:1f:f5:18:d1:70:05: 8f:24:4d:ae:18:22:8a:ef:9c:d6:c9:39:95:59:28:3b:37:2b: 6b:13:ad:d5:d4:a8:5f:08:1b:39:6a:bc:88:c0:03:88:94:68: 65:b0:7f:f4:37:e4:46:37:ea:74:4b:c5:82:78:5d:12:d5:e9: 1a:47:fe:5c:3f:16:f3:e4:4c:b4:9c:e7:9e:20:3d:d8:76:5c: 6b:b1:ed:bb:91:c4:f5:58:3c:e9:e2:57:c2:43:bf:5b:25:09: 99:a4:60:63:02:f6:76:89:66:68:5e:48:37:60:ee:6f:2e:a6: f0:27:13:9a:c3:53:2b:8e:87:d6:20:fd:c4:f7:ef:98:cd:c5: 99:32:3d:1e:ad:ea:55:b7:3c:35:ba:fb:b3:2b:dc:f8:21:34: b2:e2:ec:0b:9b:a4:63:ee:9b:d5:53:91:5c:98:8a:23:a6:03: a4:5d:e7:d5:dd:8d:13:b2:cd:b3:a9:d0:74:b4:b1:ac:cc:ea: da:0f:3c:d7:b7:c5:02:6c:f6:a0:19:0d:1f:dc:a9:aa:7b:09: 3e:d1:f5:8a:e6:a9:bf:18:b9:c2:24:91:9a:eb:4e:f0:d8:a9: 82:84:a0:1c:fc:b4:02:ba:5e:32:42:aa:d9:33:3b:55:e3:b4: 26:e7:49:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbiMN+DWdabZzqUmXghkfbYl/T0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjEwMTQyMzIwNDhaFw0yNjEwMTgwMzUxNDhaMDMxMTAvBgNV BAMTKDVDQ0U0RTcyRDAwMEI3MDIyOEI2REZCQTFGNTk5NDFFQzcyMTdFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1w9RmTrFjJ8HvGt/LRu72NP0/ CVw3fSVEgmCdtc240UErBqMkMJVJb3swlSeXfHbCjiXiuSH51vt7sazASUMPfxAe uxG6uwNfBG0CVjXip0j01RBwQmuAEOu8L/Q6vpaNUEinAxpTC4z+2+ihVBGQXMAC M6js3HBuMUcOj6vel9EJe3wa4qdDudSw1a3RvJ4ykP+gNrBZi8jLjsT9jKtthVLl jiJFP2NowM+n90MDbIcEkapK3Pt95y6My2ZBe7vXHFgsEsTZ1md10J+P4PgKJ0W5 hMEQNgI5uTM90DuWp0FkAee7G9QcHcY4VHXA64OvZ5R3gcqbnlRxQxnq1XBRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXM5OctAAtwIott+6H1mUHschfk8wHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCNTP/VkjwsV 0p0RH/UY0XAFjyRNrhgiiu+c1sk5lVkoOzcraxOt1dSoXwgbOWq8iMADiJRoZbB/ 9DfkRjfqdEvFgnhdEtXpGkf+XD8W8+RMtJznniA92HZca7Htu5HE9Vg86eJXwkO/ WyUJmaRgYwL2dolmaF5IN2Duby6m8CcTmsNTK46H1iD9xPfvmM3FmTI9Hq3qVbc8 Nbr7syvc+CE0suLsC5ukY+6b1VORXJiKI6YDpF3n1d2NE7LNs6nQdLSxrMzq2g88 17fFAmz2oBkNH9ypqnsJPtH1iuapvxi5wiSRmutO8NipgoSgHPy0ArpeMkKq2TM7 VeO0JudJZw== -----END CERTIFICATE-----Generated at Fri Oct 16 12:50:56 2026 by rpki-client