$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: 1PFEAiDQszFjqTM9g1/ODkeHuVP8wxmEFeu9oitdv44= Subject key identifier: E9:2F:90:A7:A4:CC:DF:CC:7E:87:07:0C:BA:D7:28:68:E2:B0:AF:62 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 396579A7BCD37BD5AC1B5F796F5758B964A5BE48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: FD Signing time: Tue 28 Jul 2026 09:31:31 +0000 Manifest this update: Tue 28 Jul 2026 09:26:31 +0000 Manifest next update: Wed 29 Jul 2026 12:36:31 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: nU6S8xc2XyfOrbioRQ4NVntMNSRsGS5KLsD+qnihulw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:65:79:a7:bc:d3:7b:d5:ac:1b:5f:79:6f:57:58:b9:64:a5:be:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Jul 28 09:26:31 2026 GMT Not After : Jul 29 12:36:31 2026 GMT Subject: CN=E92F90A7A4CCDFCC7E87070CBAD72868E2B0AF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:e7:f7:22:76:87:fe:c8:bd:ac:b6:b8:d2: d5:31:4f:c3:18:c0:29:7d:80:5c:d5:01:8b:58:94: 4c:72:a8:d8:5e:5e:f3:73:81:f7:ee:27:c7:28:48: 56:56:a7:c6:f7:9e:ae:47:02:97:dd:e9:6d:fa:07: de:4b:ea:8e:8a:d8:d8:0c:c3:fc:4a:ed:09:43:ef: c2:8b:9c:3c:85:8b:06:7b:f1:ef:fe:95:47:72:f1: 64:b6:b9:ea:0e:81:ce:34:90:6d:8d:bb:32:19:ab: 67:ed:c1:af:6a:68:8c:bd:f3:78:59:48:a6:d8:e4: 18:42:58:f9:b6:1d:79:50:82:8a:d7:0d:ef:62:9e: 1f:c4:47:b3:9c:a1:08:ca:56:c2:25:c2:1e:5c:b2: ce:84:60:f1:74:67:ba:ec:ab:cf:33:e5:ad:54:2e: 42:3e:29:c1:05:48:f5:85:48:27:52:81:d4:15:c8: 73:e1:e4:26:f8:aa:8d:f7:dc:f9:fd:0b:08:71:a9: 3c:25:3b:5b:6b:10:eb:47:41:a3:3b:d5:de:95:07: 87:af:3d:f2:db:e6:25:71:7b:23:5b:d9:4c:e2:f0: 5a:99:4a:12:0d:d4:d9:22:0d:d6:7e:2a:e6:a0:65: ad:b7:a7:3e:2f:ea:64:78:12:58:0c:59:72:0c:a9: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2F:90:A7:A4:CC:DF:CC:7E:87:07:0C:BA:D7:28:68:E2:B0:AF:62 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:07:40:b2:30:31:70:97:f5:9f:21:50:85:d2:a4:58:e6: 0a:d2:c3:47:a7:2c:ca:0a:09:e6:9f:cd:d5:57:a7:d2:e4:70: aa:0d:b9:b7:5a:48:6d:43:36:5f:08:8b:62:bd:9c:44:7b:3f: 7d:06:ed:57:6e:57:a5:b6:a3:a7:5c:dc:1d:a7:4f:90:96:46: ee:3c:12:16:bc:98:8a:5b:0b:3d:f2:fe:2c:ba:09:b4:26:3e: a4:c9:5c:34:2b:18:9a:68:73:a3:2e:bd:6a:93:f6:f1:5c:fa: 90:e9:d0:4f:e5:b7:01:2f:90:a5:3b:6f:8a:26:12:5f:d4:c2: ff:4d:70:18:72:98:42:4b:00:fd:09:6f:3e:53:1e:e4:5c:a9: fd:23:95:08:be:fd:19:de:6a:9d:c0:0b:3b:c0:87:b2:0b:4c: 7f:1a:e5:e6:26:fe:88:2c:87:5c:2a:34:e5:25:32:6a:fd:09: d7:87:58:a7:20:1a:17:83:5b:d5:db:d3:0b:bc:40:0b:d8:ec: f1:41:2e:91:e9:be:2a:1b:bd:c0:c0:9d:2c:00:28:06:e9:54: 27:3a:e2:8d:88:19:9c:f4:ff:a6:89:f3:5e:40:8f:c2:ff:e3: 61:e3:f4:af:20:75:4d:5e:b2:72:ee:54:af:26:43:84:91:21: 63:72:bc:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOWV5p7zTe9WsG195b1dYuWSlvkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA3MjgwOTI2MzFaFw0yNjA3MjkxMjM2MzFaMDMxMTAvBgNV BAMTKEU5MkY5MEE3QTRDQ0RGQ0M3RTg3MDcwQ0JBRDcyODY4RTJCMEFGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHYOf3InaH/si9rLa40tUxT8MY wCl9gFzVAYtYlExyqNheXvNzgffuJ8coSFZWp8b3nq5HApfd6W36B95L6o6K2NgM w/xK7QlD78KLnDyFiwZ78e/+lUdy8WS2ueoOgc40kG2NuzIZq2ftwa9qaIy983hZ SKbY5BhCWPm2HXlQgorXDe9inh/ER7OcoQjKVsIlwh5css6EYPF0Z7rsq88z5a1U LkI+KcEFSPWFSCdSgdQVyHPh5Cb4qo333Pn9CwhxqTwlO1trEOtHQaM71d6VB4ev PfLb5iVxeyNb2Uzi8FqZShIN1NkiDdZ+KuagZa23pz4v6mR4ElgMWXIMqS9ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6S+Qp6TM38x+hwcMutcoaOKwr2IwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe0HQLIwMXCX 9Z8hUIXSpFjmCtLDR6csygoJ5p/N1Ven0uRwqg25t1pIbUM2XwiLYr2cRHs/fQbt V25Xpbajp1zcHadPkJZG7jwSFryYilsLPfL+LLoJtCY+pMlcNCsYmmhzoy69apP2 8Vz6kOnQT+W3AS+QpTtviiYSX9TC/01wGHKYQksA/QlvPlMe5Fyp/SOVCL79Gd5q ncALO8CHsgtMfxrl5ib+iCyHXCo05SUyav0J14dYpyAaF4Nb1dvTC7xAC9js8UEu kem+Khu9wMCdLAAoBulUJzrijYgZnPT/ponzXkCPwv/jYeP0ryB1TV6ycu5UryZD hJEhY3K8UA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:11:25 2026 by rpki-client