$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json) Hash identifier: 3rNtU2IP3Q8hzZsC5Teno+Ddi4jpXif4Jc89GXUlYuc= Subject key identifier: 48:FE:21:E5:AF:A4:59:A5:B6:80:3F:C2:94:4E:48:DE:32:A9:1C:0F Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Certificate serial: 06C322704124E7DA3E8F33A420CEC9202F9FD267 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft Manifest number: 72 Signing time: Mon 12 Oct 2026 07:26:46 +0000 Manifest this update: Mon 12 Oct 2026 07:21:46 +0000 Manifest next update: Thu 15 Oct 2026 18:06:46 +0000 Files and hashes: 1: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=) 2: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: kwfiDg4zOqTx4OUvSTZ/HXs0BfJAlUTPHZ/41D1nMos=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c3:22:70:41:24:e7:da:3e:8f:33:a4:20:ce:c9:20:2f:9f:d2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Validity Not Before: Oct 12 07:21:46 2026 GMT Not After : Oct 15 18:06:46 2026 GMT Subject: CN=48FE21E5AFA459A5B6803FC2944E48DE32A91C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:99:e0:30:c3:b1:ca:c0:ed:58:f8:a0:7c: 00:fd:95:4a:33:52:0f:ee:70:43:dd:66:49:4e:f3: df:33:d1:a8:e7:c5:6a:50:06:74:7d:fd:57:5e:77: ba:08:d4:83:99:1f:5f:f1:29:0f:64:83:cd:f9:f3: dd:d7:7a:a8:f6:20:f9:7c:52:1c:23:6b:71:6c:78: 23:89:30:65:e0:72:08:35:e4:2d:7e:e9:a9:bf:2f: ad:d2:16:08:51:73:a0:86:b2:c5:ce:48:e8:3c:f1: 6d:46:25:91:dd:57:a6:7a:8d:c3:5d:65:df:65:c1: 33:cc:14:fb:4e:76:cf:c3:77:bf:cb:ed:1b:4e:b5: 54:ed:aa:36:32:7a:63:4e:4e:a0:c9:41:97:a8:86: d2:d3:ca:89:9f:cd:de:f3:96:2f:bb:5d:3f:8a:9c: 5a:a8:ab:29:b1:ef:71:2e:96:03:4e:fc:40:c4:2e: d3:52:45:43:da:39:6f:2f:19:55:4b:af:43:4d:e3: 01:51:f4:78:08:c8:03:6c:cc:6d:af:e2:2c:e7:5a: 7f:53:41:db:13:72:e4:ec:d4:f4:db:f1:cf:57:79: 22:f6:4c:ad:2c:67:f3:46:42:21:b4:e3:1a:11:60: bc:a0:64:c7:28:86:39:e1:42:d6:f6:3a:75:84:e9: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FE:21:E5:AF:A4:59:A5:B6:80:3F:C2:94:4E:48:DE:32:A9:1C:0F X509v3 Authority Key Identifier: keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7f:75:79:e4:92:d5:40:b5:95:4d:91:ec:5d:96:79:05:ec: bc:1a:2f:e8:49:29:6d:3f:22:b9:0b:d6:bc:0e:e4:e0:0f:dd: ca:3a:68:08:cb:bb:71:07:d8:56:8b:7e:6d:6d:52:6c:11:ce: a0:97:c8:72:50:f3:fa:d9:ae:62:29:ee:0d:01:37:de:f3:f8: 62:83:cd:d1:68:23:74:0e:ed:09:81:17:a6:bf:1c:d0:c2:cd: 59:23:b0:af:1e:34:ff:65:4f:aa:9f:cc:d4:af:5e:9f:0b:e2: 67:fd:63:6b:39:19:3b:65:3a:1d:e8:59:5d:26:8d:56:e0:90: f4:df:0f:3f:eb:b1:87:ea:0e:ec:30:45:b2:43:82:9e:44:d5: e4:7e:f7:c1:24:bc:b6:08:6b:ab:f9:ca:23:1d:f8:19:48:65: 9b:77:28:73:54:97:e4:68:8b:cb:8a:b8:3c:2d:a7:c4:e4:f7: 34:6e:00:3f:20:60:42:ed:26:9c:4a:9a:8f:da:93:e0:d7:95: fc:e7:2d:7b:ad:dd:ae:6d:71:fd:e6:e9:b5:98:83:f6:a2:c9: 9a:50:47:09:ff:da:28:b0:26:e4:a8:eb:89:6b:91:3d:c7:c1: 90:6d:52:be:38:12:bd:15:98:25:cf:b7:aa:a1:b7:a6:52:d6: db:08:0d:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBsMicEEk59o+jzOkIM7JIC+f0mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1 Q0YwODM5MjAeFw0yNjEwMTIwNzIxNDZaFw0yNjEwMTUxODA2NDZaMDMxMTAvBgNV BAMTKDQ4RkUyMUU1QUZBNDU5QTVCNjgwM0ZDMjk0NEU0OERFMzJBOTFDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXmJngMMOxysDtWPigfAD9lUoz Ug/ucEPdZklO898z0ajnxWpQBnR9/Vded7oI1IOZH1/xKQ9kg835893Xeqj2IPl8 Uhwja3FseCOJMGXgcgg15C1+6am/L63SFghRc6CGssXOSOg88W1GJZHdV6Z6jcNd Zd9lwTPMFPtOds/Dd7/L7RtOtVTtqjYyemNOTqDJQZeohtLTyomfzd7zli+7XT+K nFqoqymx73EulgNO/EDELtNSRUPaOW8vGVVLr0NN4wFR9HgIyANszG2v4iznWn9T QdsTcuTs1PTb8c9XeSL2TK0sZ/NGQiG04xoRYLygZMcohjnhQtb2OnWE6WDVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSP4h5a+kWaW2gD/ClE5I3jKpHA8wHwYDVR0j BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3 RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX91eeSS1UC1 lU2R7F2WeQXsvBov6EkpbT8iuQvWvA7k4A/dyjpoCMu7cQfYVot+bW1SbBHOoJfI clDz+tmuYinuDQE33vP4YoPN0WgjdA7tCYEXpr8c0MLNWSOwrx40/2VPqp/M1K9e nwviZ/1jazkZO2U6HehZXSaNVuCQ9N8PP+uxh+oO7DBFskOCnkTV5H73wSS8tghr q/nKIx34GUhlm3coc1SX5GiLy4q4PC2nxOT3NG4APyBgQu0mnEqaj9qT4NeV/Oct e63drm1x/ebptZiD9qLJmlBHCf/aKLAm5KjriWuRPcfBkG1SvjgSvRWYJc+3qqG3 plLW2wgN+Q== -----END CERTIFICATE-----Generated at Wed Oct 14 17:41:35 2026 by rpki-client