$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: NSUxmCWADdL3j/ArJASkBB5wl7w9ioi1mNCj2/a6Q38= Subject key identifier: 2D:8C:A6:52:AA:38:99:58:F1:C3:2A:A0:5C:6C:7A:B2:88:A0:C9:98 Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 2C3040C05A59EB676C23ACDF02D09CADE683470F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 81 Signing time: Tue 13 Oct 2026 17:48:12 +0000 Manifest this update: Tue 13 Oct 2026 17:43:12 +0000 Manifest next update: Sat 17 Oct 2026 00:59:12 +0000 Files and hashes: 1: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: rvjEDVYvNNXPNIMgCzSDfVpkWUc1tsGpMqQFLL5YLBU=) 2: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:40:c0:5a:59:eb:67:6c:23:ac:df:02:d0:9c:ad:e6:83:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Oct 13 17:43:12 2026 GMT Not After : Oct 17 00:59:12 2026 GMT Subject: CN=2D8CA652AA389958F1C32AA05C6C7AB288A0C998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:23:ea:27:f0:7f:8c:09:5a:78:3c:28:0d: 08:7c:80:2d:a5:1d:53:57:63:ff:b8:d1:79:70:96: dc:cf:03:00:46:77:6f:dd:4d:ca:16:b8:45:f5:69: b4:45:1c:c8:19:33:e9:e6:e6:ca:53:7f:43:86:66: ba:40:74:29:47:b1:46:36:df:47:e3:3e:3b:4b:88: 99:67:31:fe:f9:42:b3:aa:87:36:36:8c:87:46:47: 8a:58:8f:42:b6:d4:10:91:e6:4d:45:59:9c:d0:50: a7:18:88:d3:f9:2d:eb:2d:09:19:b6:69:a0:1d:20: f1:ae:c9:7a:a1:ba:0a:92:da:4e:f1:c0:ab:44:8b: 9f:0e:c6:a4:70:e4:1d:45:dd:d5:66:ba:05:a5:1f: 8f:ac:6d:21:13:03:71:05:94:9e:f8:31:17:6e:6e: 55:3c:5c:5a:8b:ca:3a:71:fe:f3:12:45:a5:f6:b7: 88:7e:a2:4f:cb:4f:ef:3d:92:45:da:71:b5:9b:1b: b5:7d:52:d5:c8:7e:f6:03:5a:07:dd:61:cc:9c:22: 92:8a:19:96:08:83:54:ae:33:45:cd:8c:1f:10:76: 6a:f6:b0:fa:6e:86:0b:da:c3:52:85:36:75:4e:a2: 49:70:98:b8:8b:1d:57:e1:60:1c:6e:52:06:13:43: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8C:A6:52:AA:38:99:58:F1:C3:2A:A0:5C:6C:7A:B2:88:A0:C9:98 X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0e:38:af:aa:84:53:ec:95:54:f4:3e:4a:db:18:46:5e:09: 04:4c:e0:66:60:6b:e5:f5:52:b0:37:02:02:64:b5:69:43:5b: a0:96:39:ef:c4:44:e9:cd:99:55:3b:b1:ff:b9:90:86:07:42: 5b:7c:5c:41:3b:ba:a1:4f:ca:34:ab:16:3c:5d:c3:90:53:cf: 70:9b:0e:b2:c0:d1:c6:e3:4d:c1:b2:74:df:d8:c3:07:37:ca: d1:51:90:ed:7b:76:7d:92:f0:79:e8:b8:0c:eb:c1:d5:f9:11: f3:68:13:c5:bd:3f:ec:f9:14:b2:bd:7c:84:f9:e1:88:33:b5: 3d:a4:7d:03:56:f2:0e:39:1a:12:64:2a:f0:8a:65:ff:84:6a: c0:68:bb:05:40:04:7d:e8:dd:45:fd:43:67:bc:70:dc:a6:74: ad:83:01:74:dd:af:7b:fd:fc:6e:d2:db:ab:50:61:c5:ba:17: 31:bf:c3:21:e4:30:96:08:86:e7:e9:1a:86:d9:92:a4:c2:6b: b1:06:8b:b9:06:ea:15:0d:c6:f8:ae:84:34:e2:89:03:29:b5: e7:d2:ce:01:d8:ff:4f:c8:21:5b:f6:0f:dd:58:5b:4c:bd:99: 97:c5:a7:c9:6e:b1:d1:db:c0:43:8a:3b:af:57:2a:e2:44:43: 39:ba:67:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULDBAwFpZ62dsI6zfAtCcreaDRw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjEwMTMxNzQzMTJaFw0yNjEwMTcwMDU5MTJaMDMxMTAvBgNV BAMTKDJEOENBNjUyQUEzODk5NThGMUMzMkFBMDVDNkM3QUIyODhBMEM5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewiPqJ/B/jAlaeDwoDQh8gC2l HVNXY/+40XlwltzPAwBGd2/dTcoWuEX1abRFHMgZM+nm5spTf0OGZrpAdClHsUY2 30fjPjtLiJlnMf75QrOqhzY2jIdGR4pYj0K21BCR5k1FWZzQUKcYiNP5LestCRm2 aaAdIPGuyXqhugqS2k7xwKtEi58OxqRw5B1F3dVmugWlH4+sbSETA3EFlJ74MRdu blU8XFqLyjpx/vMSRaX2t4h+ok/LT+89kkXacbWbG7V9UtXIfvYDWgfdYcycIpKK GZYIg1SuM0XNjB8Qdmr2sPpuhgvaw1KFNnVOoklwmLiLHVfhYBxuUgYTQ78VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULYymUqo4mVjxwyqgXGx6soigyZgwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA44r6qEU+yV VPQ+StsYRl4JBEzgZmBr5fVSsDcCAmS1aUNboJY578RE6c2ZVTux/7mQhgdCW3xc QTu6oU/KNKsWPF3DkFPPcJsOssDRxuNNwbJ039jDBzfK0VGQ7Xt2fZLweei4DOvB 1fkR82gTxb0/7PkUsr18hPnhiDO1PaR9A1byDjkaEmQq8Ipl/4RqwGi7BUAEfejd Rf1DZ7xw3KZ0rYMBdN2ve/38btLbq1BhxboXMb/DIeQwlgiG5+kahtmSpMJrsQaL uQbqFQ3G+K6ENOKJAym159LOAdj/T8ghW/YP3VhbTL2Zl8WnyW6x0dvAQ4o7r1cq 4kRDObpnOw== -----END CERTIFICATE-----Generated at Thu Oct 15 19:45:57 2026 by rpki-client