$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: /AI3QMDvtcbRHfB//t7eb23qkZRiloE0wFTXNUB1udw= Subject key identifier: B6:A7:BC:C5:41:C6:A9:37:FB:3F:E3:86:C8:41:5C:3A:D0:90:FF:AD Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 6DC2041D870BDBB42BC0753E0791131201F1A48B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: A1 Signing time: Mon 21 Sep 2026 22:33:43 +0000 Manifest this update: Mon 21 Sep 2026 22:28:43 +0000 Manifest next update: Fri 25 Sep 2026 10:00:43 +0000 Files and hashes: 1: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: cxxo+KPoqOIguOqo1X4LCzdDVTWzoCJKKqnLtEEW4SU=) 2: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) 3: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c2:04:1d:87:0b:db:b4:2b:c0:75:3e:07:91:13:12:01:f1:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Sep 21 22:28:43 2026 GMT Not After : Sep 25 10:00:43 2026 GMT Subject: CN=B6A7BCC541C6A937FB3FE386C8415C3AD090FFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:a3:84:29:aa:66:eb:79:cd:d3:cc:a1:df: 73:b1:8d:f8:61:d3:03:39:26:b8:e1:7e:75:35:35: 52:0b:42:c6:64:51:57:15:b7:ce:be:0b:cf:16:cf: 15:7d:f9:e8:ec:ac:6d:c9:f6:9a:b1:70:87:6e:67: dc:89:61:64:07:fb:57:a5:bd:aa:39:ee:c3:67:02: b2:81:0f:3a:0e:50:7a:a9:ec:44:3e:f7:89:85:4f: 84:cc:38:08:27:b0:5e:08:92:d6:9b:4d:a9:29:d9: 40:4c:03:ca:70:f8:fc:e5:cf:e5:24:88:9b:12:76: 02:a3:c5:9b:5f:4a:71:7d:ed:91:ba:ab:9f:8d:55: d6:7a:2a:e9:28:a1:bc:50:c4:3f:5b:f4:fb:ff:18: 7c:05:90:57:50:16:df:c4:fc:52:1e:83:cf:80:51: 27:ec:ce:fe:35:ec:a1:8d:d4:8d:30:9f:fb:c8:cf: 23:14:ec:cf:19:11:a8:53:e5:89:1a:45:e5:0c:4f: a5:41:92:09:f2:03:97:db:82:37:cc:47:6b:87:c2: e7:cc:c2:13:aa:0f:ed:77:54:b6:ca:d0:e2:80:74: 57:ca:e9:b6:e0:d0:93:3e:44:2b:f4:27:10:99:4b: a8:9b:29:6e:b2:85:df:9b:6c:28:cd:63:ff:e9:0e: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A7:BC:C5:41:C6:A9:37:FB:3F:E3:86:C8:41:5C:3A:D0:90:FF:AD X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:54:8b:3b:ae:81:26:a7:aa:77:b5:14:f8:c6:c0:2c:55:cd: fa:55:b4:09:9c:8f:55:3c:bd:83:0d:64:c4:d5:9f:e2:2d:21: 74:a0:49:2b:3c:5a:e7:44:10:cf:9b:9f:e2:a5:b6:c8:ec:1e: 79:96:00:c9:3d:cd:78:cf:d0:11:b4:97:32:7d:f8:67:e5:f5: eb:bd:72:23:c9:ef:d3:52:8f:9e:e2:18:d4:6a:0f:b7:4d:bd: 2c:1c:dd:17:f8:5b:ee:28:29:b6:0c:2f:6e:9a:e5:e3:4c:f1: 1e:87:d8:16:62:82:45:b0:77:82:05:40:67:31:9b:5b:e7:84: de:bb:d9:0c:c9:fd:8f:f4:08:32:dd:a9:a0:5d:fb:e7:4e:cf: 98:4b:1a:0e:3d:69:70:bf:3b:ea:f1:1d:db:d1:f0:6b:7a:c0: 0e:d2:b2:c4:5e:08:b3:a8:01:21:b1:5c:1f:d9:0c:93:3e:82: 6c:f8:21:7b:da:72:9a:cb:c5:eb:5e:60:fe:78:ee:b3:7e:c6: 8c:46:a1:fc:02:a5:17:34:e9:e1:5a:c3:13:bf:d8:06:12:b1: a9:c6:c3:db:9c:2e:57:c6:84:6c:45:5f:16:6a:ec:71:c4:bc: c2:1e:8b:f8:10:f1:f8:9f:b0:32:9e:a2:3d:49:a5:60:e3:f5: f3:2b:94:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbcIEHYcL27QrwHU+B5ETEgHxpIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA5MjEyMjI4NDNaFw0yNjA5MjUxMDAwNDNaMDMxMTAvBgNV BAMTKEI2QTdCQ0M1NDFDNkE5MzdGQjNGRTM4NkM4NDE1QzNBRDA5MEZGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpKOEKapm63nN08yh33Oxjfhh 0wM5JrjhfnU1NVILQsZkUVcVt86+C88WzxV9+ejsrG3J9pqxcIduZ9yJYWQH+1el vao57sNnArKBDzoOUHqp7EQ+94mFT4TMOAgnsF4IktabTakp2UBMA8pw+Pzlz+Uk iJsSdgKjxZtfSnF97ZG6q5+NVdZ6KukoobxQxD9b9Pv/GHwFkFdQFt/E/FIeg8+A USfszv417KGN1I0wn/vIzyMU7M8ZEahT5YkaReUMT6VBkgnyA5fbgjfMR2uHwufM whOqD+13VLbK0OKAdFfK6bbg0JM+RCv0JxCZS6ibKW6yhd+bbCjNY//pDv4vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtqe8xUHGqTf7P+OGyEFcOtCQ/60wHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFSLO66BJqeq d7UU+MbALFXN+lW0CZyPVTy9gw1kxNWf4i0hdKBJKzxa50QQz5uf4qW2yOweeZYA yT3NeM/QEbSXMn34Z+X1671yI8nv01KPnuIY1GoPt029LBzdF/hb7igptgwvbprl 40zxHofYFmKCRbB3ggVAZzGbW+eE3rvZDMn9j/QIMt2poF37507PmEsaDj1pcL87 6vEd29Hwa3rADtKyxF4Is6gBIbFcH9kMkz6CbPghe9pymsvF615g/njus37GjEah /AKlFzTp4VrDE7/YBhKxqcbD25wuV8aEbEVfFmrsccS8wh6L+BDx+J+wMp6iPUml YOP18yuU2A== -----END CERTIFICATE-----Generated at Wed Sep 23 19:54:38 2026 by rpki-client