$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft File: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json) Hash identifier: NEfxJv1Sz7BtNUSNxWdmNHRVznf2C+BFHnsMit9p2gU= Subject key identifier: C5:D5:5F:B3:AF:F0:BA:57:9F:BF:06:96:F4:92:DF:F7:99:81:8F:A9 Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 Certificate issuer: /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Certificate serial: 666E677AAF5A7512E6DC37383389EBC318E4B6DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft Manifest number: BD Signing time: Sun 27 Sep 2026 23:20:12 +0000 Manifest this update: Sun 27 Sep 2026 23:15:12 +0000 Manifest next update: Thu 01 Oct 2026 08:29:12 +0000 Files and hashes: 1: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: 9mS68kCS2dLuyuyyJzDBnBOaSV1HrEwuwdKcUfHwb1g=) 2: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 08:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6e:67:7a:af:5a:75:12:e6:dc:37:38:33:89:eb:c3:18:e4:b6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Validity Not Before: Sep 27 23:15:12 2026 GMT Not After : Oct 1 08:29:12 2026 GMT Subject: CN=C5D55FB3AFF0BA579FBF0696F492DFF799818FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:ef:41:18:1d:66:cd:28:1a:d1:de:7e:43: ab:9a:fe:99:95:4a:38:cc:d3:07:83:08:5e:9c:64: db:19:22:60:9a:af:bb:c4:bc:08:ad:26:02:13:72: 50:40:52:f9:44:3a:ce:cf:64:af:2f:42:ba:52:71: 59:16:36:bc:97:bb:09:a2:6f:a6:d4:bb:c1:54:a6: 90:a5:af:42:22:54:e2:51:9e:a7:7c:15:ed:4a:95: d3:f4:da:f6:c1:aa:d2:e1:cd:14:1a:11:82:70:27: 4f:6a:2d:a2:46:0d:b3:8e:66:93:a8:f9:1c:83:23: 1f:32:d5:69:ee:94:82:f7:ee:e3:c2:a3:e6:27:1a: 10:62:fc:ae:74:5c:f8:a7:85:db:3a:35:7a:84:5d: 00:4a:89:c4:b4:4b:06:62:8d:16:d0:fe:36:01:74: 3f:34:55:ea:88:26:ec:67:1e:55:f2:2e:69:a9:9e: 24:fa:97:60:11:cf:1d:24:0d:f6:0c:9e:71:6d:f0: a0:f7:5e:59:d0:11:6f:5b:1f:4b:45:24:8b:5e:c4: 97:c6:ff:45:fb:88:af:03:10:5e:c0:98:b6:0e:18: 7a:d4:78:cd:51:d7:6f:2f:a6:2c:eb:cf:07:cd:cb: 13:3d:b3:e9:0d:24:10:ed:90:82:8b:3a:c8:75:df: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:5F:B3:AF:F0:BA:57:9F:BF:06:96:F4:92:DF:F7:99:81:8F:A9 X509v3 Authority Key Identifier: keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:75:52:72:6a:b9:bc:5f:f2:bc:6e:54:be:3a:a8:5c:40: fb:90:59:48:a6:9c:94:80:79:f3:d9:26:59:65:06:8d:9e:06: 3b:da:f7:b5:75:d0:e6:99:78:52:9e:d2:7c:b0:18:f6:36:fd: 5f:81:f8:85:f6:d6:6a:6f:13:59:43:23:da:e7:4e:e4:b5:ce: 45:cd:8c:d6:72:52:73:a7:fd:69:d1:0d:5c:d8:d9:61:24:85: 55:52:60:92:00:3f:d3:19:f6:22:fd:10:ac:7a:28:11:88:ad: 9a:ca:e6:33:96:f0:ad:c5:57:4d:20:ac:77:83:0d:70:11:9c: 26:d5:04:37:d2:d5:dc:09:0e:06:26:c8:95:25:53:f4:4c:ff: c5:f0:c3:4d:37:f1:20:06:b5:52:dd:a5:1a:65:87:6f:d0:dd: df:8d:2b:da:13:88:33:f5:f0:96:d3:52:09:00:be:96:72:70: 63:2a:49:71:cb:11:18:ee:30:5d:9c:76:e2:bc:f5:35:1d:97: b3:00:96:3d:8c:78:d1:1f:6e:46:4b:47:1b:4f:ce:20:19:c0: 8b:32:35:59:0d:09:c5:09:82:1c:dc:88:38:73:0c:47:32:52: e8:f7:35:49:5d:db:1e:03:8a:df:59:08:d1:2e:ce:e8:db:dd: e1:5a:f5:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZm5neq9adRLm3Dc4M4nrwxjkttswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZD NkQ3QTE2NDAeFw0yNjA5MjcyMzE1MTJaFw0yNjEwMDEwODI5MTJaMDMxMTAvBgNV BAMTKEM1RDU1RkIzQUZGMEJBNTc5RkJGMDY5NkY0OTJERkY3OTk4MThGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGe9BGB1mzSga0d5+Q6ua/pmV SjjM0weDCF6cZNsZImCar7vEvAitJgITclBAUvlEOs7PZK8vQrpScVkWNryXuwmi b6bUu8FUppClr0IiVOJRnqd8Fe1KldP02vbBqtLhzRQaEYJwJ09qLaJGDbOOZpOo +RyDIx8y1WnulIL37uPCo+YnGhBi/K50XPinhds6NXqEXQBKicS0SwZijRbQ/jYB dD80VeqIJuxnHlXyLmmpniT6l2ARzx0kDfYMnnFt8KD3XlnQEW9bH0tFJItexJfG /0X7iK8DEF7AmLYOGHrUeM1R128vpizrzwfNyxM9s+kNJBDtkIKLOsh13z+FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxdVfs6/wulefvwaW9JLf95mBj6kwHwYDVR0j BBgwFoAUC063iHcon9culrrs8bvf9sbXoWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTI1Njk0MTkwNzAxNzczMC8wLzBCNEVCNzg4NzcyODlGRDcyRTk2QkFFQ0YxQkJE RkY2QzZEN0ExNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZDNkQ3QTE2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkyNTY5NDE5MDcwMTc3MzAvMC8wQjRFQjc4ODc3Mjg5 RkQ3MkU5NkJBRUNGMUJCREZGNkM2RDdBMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljx1UnJqubxf 8rxuVL46qFxA+5BZSKaclIB589kmWWUGjZ4GO9r3tXXQ5pl4Up7SfLAY9jb9X4H4 hfbWam8TWUMj2udO5LXORc2M1nJSc6f9adENXNjZYSSFVVJgkgA/0xn2Iv0QrHoo EYitmsrmM5bwrcVXTSCsd4MNcBGcJtUEN9LV3AkOBibIlSVT9Ez/xfDDTTfxIAa1 Ut2lGmWHb9Dd340r2hOIM/XwltNSCQC+lnJwYypJccsRGO4wXZx24rz1NR2XswCW PYx40R9uRktHG0/OIBnAizI1WQ0JxQmCHNyIOHMMRzJS6Pc1SV3bHgOK31kI0S7O 6Nvd4Vr1Eg== -----END CERTIFICATE-----Generated at Mon Sep 28 19:37:49 2026 by rpki-client