$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: +7I5vJjJAl02U3BTBqfv8il6z+nlQJybj9mhh2qGxBg= Subject key identifier: 16:A7:73:37:79:8B:14:B6:CC:FA:61:4C:68:6C:43:0C:8C:CC:63:5A Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 226157C37A2FA73D3A5384F7F5317555AEED45DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 6C Signing time: Sat 10 Oct 2026 04:14:12 +0000 Manifest this update: Sat 10 Oct 2026 04:09:12 +0000 Manifest next update: Tue 13 Oct 2026 13:57:12 +0000 Files and hashes: 1: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 2: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 3: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: 5xjsl8Qq8VnIRVys6tZUtAAz1D5Jc44p74ykkNUaywQ=) 4: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) 5: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 6: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) 7: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:57:c3:7a:2f:a7:3d:3a:53:84:f7:f5:31:75:55:ae:ed:45:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Oct 10 04:09:12 2026 GMT Not After : Oct 13 13:57:12 2026 GMT Subject: CN=16A77337798B14B6CCFA614C686C430C8CCC635A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:cd:d1:d5:70:56:a8:4b:ea:2d:71:53:da: 34:98:b8:ec:51:29:ff:cf:7e:ab:27:07:14:ae:71: 8e:ed:c3:58:42:16:3c:c2:d3:ae:19:cd:17:81:99: d9:cb:e1:63:68:a0:35:60:ec:e6:e3:44:8b:55:94: 8f:fb:71:80:99:56:b1:22:9c:00:d1:42:f0:1b:9e: a9:6b:af:fa:ce:c4:29:5d:7c:f5:c8:fe:96:49:61: 13:87:2a:1e:56:7c:8a:55:5a:ff:5d:22:8d:49:6a: 1b:ef:9b:a0:89:ab:d4:3a:db:67:57:c7:c1:bb:91: f4:2d:60:c8:18:c1:0f:0f:97:36:f4:42:a0:82:4c: ab:c0:94:9d:39:fb:e1:cd:f8:e8:ce:9e:32:5e:4c: 5c:39:3f:6d:c1:57:ce:ae:36:20:83:de:f9:cc:68: 3b:ae:66:3b:b1:77:6a:81:77:8d:51:bc:77:fd:0c: 90:7c:40:d7:d9:63:9a:5d:3f:39:95:f6:62:d5:6d: 83:6e:26:ea:ff:df:78:53:ee:08:47:f6:92:53:b1: 12:1a:a0:d9:b6:1f:7e:15:76:f8:86:5b:f7:ee:81: 26:69:4d:1e:72:a3:01:63:fb:b8:a7:7a:ae:17:a5: 2b:c2:94:c7:ce:c0:a7:49:08:4c:e3:68:59:68:65: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:73:37:79:8B:14:B6:CC:FA:61:4C:68:6C:43:0C:8C:CC:63:5A X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:95:5f:ff:62:16:c9:76:c2:88:fd:bb:e0:c1:aa:55:1a: e4:27:3d:3f:f9:5d:a6:b5:15:2b:2c:c9:ee:f3:eb:0c:e4:ac: 4f:33:e1:d9:c8:ee:cb:cc:02:5b:fe:4e:1f:f8:8c:55:26:07: b1:b4:a3:6b:83:4d:6a:36:da:c8:b1:2d:e0:37:5a:aa:f5:e3: 7f:ba:db:c7:a9:7b:31:cb:6d:03:87:b6:01:b5:6d:db:b6:4a: 79:64:6c:8a:01:f9:a4:c2:53:75:7b:5e:1b:77:a1:64:b8:46: 9b:f4:bf:8b:ca:16:5b:9f:07:bc:04:28:80:a3:1a:21:71:8f: 5e:33:e0:0e:1e:87:79:75:55:ca:1a:51:1d:d4:87:bc:b0:4c: a6:43:8b:7a:e8:b0:4c:d6:c4:d1:dc:9a:bf:5e:df:14:b4:41: ef:48:b0:db:82:d7:74:0e:7e:4e:76:ca:13:e2:2b:7d:f0:83: 60:9c:e6:ee:f0:32:59:f2:32:26:51:0a:66:9c:2a:b0:33:1a: ba:f7:0a:8f:1f:05:da:cd:39:3b:af:33:26:44:72:7c:b9:2d: 71:92:ad:82:59:f3:6d:56:99:80:24:ef:1f:e2:3d:d3:68:d8: 1a:9c:ff:35:03:94:3a:32:50:54:80:37:98:2e:7d:76:06:2c: 7f:1f:ea:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUImFXw3ovpz06U4T39TF1Va7tRd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjEwMTAwNDA5MTJaFw0yNjEwMTMxMzU3MTJaMDMxMTAvBgNV BAMTKDE2QTc3MzM3Nzk4QjE0QjZDQ0ZBNjE0QzY4NkM0MzBDOENDQzYzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0M3R1XBWqEvqLXFT2jSYuOxR Kf/PfqsnBxSucY7tw1hCFjzC064ZzReBmdnL4WNooDVg7ObjRItVlI/7cYCZVrEi nADRQvAbnqlrr/rOxCldfPXI/pZJYROHKh5WfIpVWv9dIo1Jahvvm6CJq9Q622dX x8G7kfQtYMgYwQ8Plzb0QqCCTKvAlJ05++HN+OjOnjJeTFw5P23BV86uNiCD3vnM aDuuZjuxd2qBd41RvHf9DJB8QNfZY5pdPzmV9mLVbYNuJur/33hT7ghH9pJTsRIa oNm2H34VdviGW/fugSZpTR5yowFj+7ineq4XpSvClMfOwKdJCEzjaFloZSM3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFqdzN3mLFLbM+mFMaGxDDIzMY1owHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnyVX/9iFsl2 woj9u+DBqlUa5Cc9P/ldprUVKyzJ7vPrDOSsTzPh2cjuy8wCW/5OH/iMVSYHsbSj a4NNajbayLEt4DdaqvXjf7rbx6l7McttA4e2AbVt27ZKeWRsigH5pMJTdXteG3eh ZLhGm/S/i8oWW58HvAQogKMaIXGPXjPgDh6HeXVVyhpRHdSHvLBMpkOLeuiwTNbE 0dyav17fFLRB70iw24LXdA5+TnbKE+IrffCDYJzm7vAyWfIyJlEKZpwqsDMauvcK jx8F2s05O68zJkRyfLktcZKtglnzbVaZgCTvH+I902jYGpz/NQOUOjJQVIA3mC59 dgYsfx/qCQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:27:14 2026 by rpki-client