$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json) Hash identifier: XWd43r8tKAKadnF/F7yrOrSKiio+3NLp/dQe4HFGvcs= Subject key identifier: A5:D8:87:55:90:83:C4:25:15:5C:DE:D7:5A:85:29:E6:16:77:DB:90 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 3EE8C77F33E8615EB4D306FF35D55CBBF5C1C7B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft Manifest number: 0106 Signing time: Mon 12 Oct 2026 10:16:50 +0000 Manifest this update: Mon 12 Oct 2026 10:11:50 +0000 Manifest next update: Thu 15 Oct 2026 19:14:50 +0000 Files and hashes: 1: AS146781.roa (hash: CYdQQlwdflyA5j801ct6fQ7pTh27hC+nUnGbzXcwxdY=) 2: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: HBR2e7OAGFaY6nKsFz8cBkPL1s1fHrUTu1Hyps/IFIc=) 3: AS4837.roa (hash: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8=) 4: AS63619.roa (hash: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os=) 5: AS17621.roa (hash: FgRK6EJ93pTm3fStKaZDsp5WoaDJ+ZV/uwIlWcN1CfE=) 6: AS141771.roa (hash: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE=) 7: AS24547.roa (hash: aThkMpxD23pAJVWAABx08oowIUHQmo7KBJIsg/LhuK4=) 8: AS0.roa (hash: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE=) 9: AS4811.roa (hash: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e8:c7:7f:33:e8:61:5e:b4:d3:06:ff:35:d5:5c:bb:f5:c1:c7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Oct 12 10:11:50 2026 GMT Not After : Oct 15 19:14:50 2026 GMT Subject: CN=A5D887559083C425155CDED75A8529E61677DB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:b7:97:d4:5f:7c:19:e4:99:b7:d9:31:8d: ff:6d:8a:8c:bd:2d:b1:69:5f:6a:9e:f4:7e:a5:72: 88:81:00:ea:9f:73:b3:57:f2:ac:30:4f:4b:b4:43: f0:d8:57:d9:17:d5:33:44:a6:44:e3:e7:25:8e:82: d3:8b:e3:a4:c1:34:fd:32:9e:db:0d:dd:61:39:9e: 31:a4:ea:c1:20:df:ef:97:d0:b0:fc:66:f2:7d:4f: f8:33:b6:65:2d:97:16:da:29:16:bf:3f:97:13:85: d5:22:0f:9e:ad:c6:e6:97:ca:60:1c:ca:20:b4:fb: b3:8c:3e:b3:aa:7b:4d:47:e3:85:e7:f1:a8:02:66: 8c:1a:b8:65:5f:8a:d4:35:32:15:f3:f7:a7:97:75: 90:02:c1:54:46:59:db:ae:8a:74:9e:15:54:95:df: f9:cb:56:98:19:92:eb:eb:9c:f6:74:d2:1a:98:c4: c8:24:0e:52:2e:f0:f3:74:7b:8f:09:8e:e9:aa:82: 1a:0e:27:c8:d4:ea:e7:45:a7:eb:69:32:4d:00:0d: c0:bf:e3:27:c1:e5:81:bb:49:36:ec:ab:b9:01:97: 2b:84:b1:45:03:12:1a:ac:e4:7a:17:6e:02:08:d7: e1:95:19:2f:b0:22:58:a6:a9:25:19:a7:e6:30:61: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D8:87:55:90:83:C4:25:15:5C:DE:D7:5A:85:29:E6:16:77:DB:90 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b3:2c:ed:ee:bb:1e:de:22:ba:f7:45:3b:45:9d:54:aa:86: 4b:11:32:59:79:5b:44:bb:91:01:69:14:01:d2:55:94:bb:64: 3d:c0:79:8e:76:21:4c:97:69:b4:61:17:6b:1a:03:4f:eb:77: bf:68:ed:13:ea:a2:eb:ad:bd:0d:19:49:13:7c:cd:d2:48:17: 06:b6:3a:8b:4e:ec:be:d1:55:1f:3e:a1:8d:e7:9d:92:1a:d3: 65:2b:7f:ef:62:92:59:b1:8e:3f:bb:1d:69:bc:f6:37:62:b9: 56:7b:cf:4a:3e:95:42:cd:50:88:24:22:57:c4:76:1d:70:ec: bd:88:1e:40:71:ab:51:19:cb:d2:a3:80:41:f9:41:f1:54:d3: 23:ce:ad:36:dd:cc:56:bc:79:6a:f3:3f:73:48:b9:99:e6:43: 63:46:62:bb:92:ad:d4:ca:45:76:7f:af:ed:2b:39:7e:49:50: 45:aa:0b:49:84:70:d6:fb:08:15:c5:43:de:cd:8c:1e:c6:be: 9f:da:2b:47:6e:3b:a1:8e:e0:03:2d:6f:b0:68:33:d4:20:26: 77:1e:dc:c3:09:14:4e:0e:b6:60:00:fb:12:eb:84:08:d1:43: 26:c6:d9:ef:8b:45:c2:65:6d:23:4e:0f:b0:1e:ec:63:6d:7b: df:6a:29:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPujHfzPoYV600wb/NdVcu/XBx7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjEwMTIxMDExNTBaFw0yNjEwMTUxOTE0NTBaMDMxMTAvBgNV BAMTKEE1RDg4NzU1OTA4M0M0MjUxNTVDREVENzVBODUyOUU2MTY3N0RCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TreX1F98GeSZt9kxjf9tioy9 LbFpX2qe9H6lcoiBAOqfc7NX8qwwT0u0Q/DYV9kX1TNEpkTj5yWOgtOL46TBNP0y ntsN3WE5njGk6sEg3++X0LD8ZvJ9T/gztmUtlxbaKRa/P5cThdUiD56txuaXymAc yiC0+7OMPrOqe01H44Xn8agCZowauGVfitQ1MhXz96eXdZACwVRGWduuinSeFVSV 3/nLVpgZkuvrnPZ00hqYxMgkDlIu8PN0e48JjumqghoOJ8jU6udFp+tpMk0ADcC/ 4yfB5YG7STbsq7kBlyuEsUUDEhqs5HoXbgII1+GVGS+wIlimqSUZp+YwYXE5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpdiHVZCDxCUVXN7XWoUp5hZ325AwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1 MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLMs7e67Ht4i uvdFO0WdVKqGSxEyWXlbRLuRAWkUAdJVlLtkPcB5jnYhTJdptGEXaxoDT+t3v2jt E+qi6629DRlJE3zN0kgXBrY6i07svtFVHz6hjeedkhrTZSt/72KSWbGOP7sdabz2 N2K5VnvPSj6VQs1QiCQiV8R2HXDsvYgeQHGrURnL0qOAQflB8VTTI86tNt3MVrx5 avM/c0i5meZDY0Ziu5Kt1MpFdn+v7Ss5fklQRaoLSYRw1vsIFcVD3s2MHsa+n9or R247oY7gAy1vsGgz1CAmdx7cwwkUTg62YAD7EuuECNFDJsbZ74tFwmVtI04PsB7s Y21732opog== -----END CERTIFICATE-----Generated at Wed Oct 14 04:15:16 2026 by rpki-client