$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: yi3rw72mow23bytJdsbMi5KrvtUAZtgXGQ9XQoXXjPU= Subject key identifier: 70:EA:16:24:A3:FF:BF:9B:63:AE:95:05:36:9C:52:6D:F5:81:BF:DA Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 45587E2300133E3A5BF54D7F99472DD085263510 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: FD Signing time: Tue 28 Jul 2026 16:37:15 +0000 Manifest this update: Tue 28 Jul 2026 16:32:15 +0000 Manifest next update: Wed 29 Jul 2026 20:04:15 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 2: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 3: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: RyfTmNXgsjKS2a0YkNqzsB8kcieNN3plumgRDEE3fUg=) 4: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 5: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:58:7e:23:00:13:3e:3a:5b:f5:4d:7f:99:47:2d:d0:85:26:35:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jul 28 16:32:15 2026 GMT Not After : Jul 29 20:04:15 2026 GMT Subject: CN=70EA1624A3FFBF9B63AE9505369C526DF581BFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:6c:18:d7:55:3d:2c:cd:60:da:8a:a5:54: 5d:65:4a:ff:21:a7:e9:52:f1:8b:a9:4e:fa:be:81: 4a:86:8b:46:71:1b:ac:07:f6:6c:fa:b5:74:97:44: a7:05:bc:19:75:33:09:04:0e:b0:f1:a6:93:d6:4b: 47:8d:b3:b5:c0:cb:86:2a:17:ae:d6:03:0e:88:8c: 8a:22:3d:5a:86:0e:01:61:2e:ec:ce:c9:66:72:42: 1f:22:ed:7f:29:b6:39:7d:f4:3b:b7:5d:e0:dd:53: dc:7d:52:e5:68:66:67:41:77:c4:08:b7:8d:7e:e2: 83:18:50:f2:cf:e0:74:48:e4:ba:60:d3:8b:80:6c: 81:bf:6c:30:eb:15:c6:64:cb:21:e3:f2:3b:eb:36: fd:86:d0:c1:62:05:0e:5e:90:00:db:da:67:a3:d2: 44:a0:37:94:2f:bb:e1:b7:f3:d6:0c:9b:88:fd:e8: 7e:f8:55:57:97:79:2c:60:da:86:92:d2:ff:57:08: 11:b6:71:4b:eb:94:e6:81:1a:c8:cd:4f:b9:8c:a8: dc:a0:5a:e8:77:a7:90:f9:1e:1d:17:55:2d:e0:a3: 3f:64:33:a1:6d:c4:fc:09:38:be:4f:d5:43:dc:72: 68:ff:ff:39:cf:d8:7b:e8:d5:ea:81:d6:50:52:ad: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EA:16:24:A3:FF:BF:9B:63:AE:95:05:36:9C:52:6D:F5:81:BF:DA X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e9:e9:d3:20:f6:70:b1:84:b0:61:86:c4:04:83:cc:40:03: ff:53:46:ac:45:f8:b2:4c:4d:7c:11:6d:9a:f1:8c:d2:2b:83: 2b:6a:ad:0f:dc:2d:c8:0e:5f:f6:71:31:f2:c1:4c:0d:58:01: 7d:8a:e0:f3:d2:6f:50:bf:f9:eb:c4:d2:a9:b1:b3:a8:98:ab: 20:00:10:04:41:2d:ba:7f:d2:ec:19:e2:6b:f6:a6:a0:05:1f: 15:c7:1b:1f:1a:17:e2:99:7f:cd:81:43:05:fb:48:75:d7:95: c1:18:df:3b:15:0a:08:b5:c8:e0:3c:b5:91:e3:44:6e:0e:9e: 02:db:a1:66:85:d8:58:54:87:ea:89:d5:f3:f7:1c:20:b0:e9: 22:cd:2b:55:41:2b:98:65:16:74:be:4c:75:85:df:c1:76:16: 66:36:02:d1:38:34:e9:07:30:94:8c:94:8d:fb:70:c6:91:61: d9:ce:4f:d2:21:61:03:b0:7a:a5:c3:be:aa:d5:3e:74:3c:20: 8a:c4:8a:9a:2a:14:e8:a6:2f:1e:73:ed:49:ab:87:e0:9d:55: c1:de:1c:39:0e:f8:08:4f:91:bf:b9:cd:16:00:0b:30:65:c4: 26:85:f8:94:10:78:25:e7:39:35:7b:02:5a:9a:6c:82:fa:21: 94:8d:3d:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURVh+IwATPjpb9U1/mUct0IUmNRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA3MjgxNjMyMTVaFw0yNjA3MjkyMDA0MTVaMDMxMTAvBgNV BAMTKDcwRUExNjI0QTNGRkJGOUI2M0FFOTUwNTM2OUM1MjZERjU4MUJGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eGwY11U9LM1g2oqlVF1lSv8h p+lS8YupTvq+gUqGi0ZxG6wH9mz6tXSXRKcFvBl1MwkEDrDxppPWS0eNs7XAy4Yq F67WAw6IjIoiPVqGDgFhLuzOyWZyQh8i7X8ptjl99Du3XeDdU9x9UuVoZmdBd8QI t41+4oMYUPLP4HRI5Lpg04uAbIG/bDDrFcZkyyHj8jvrNv2G0MFiBQ5ekADb2mej 0kSgN5Qvu+G389YMm4j96H74VVeXeSxg2oaS0v9XCBG2cUvrlOaBGsjNT7mMqNyg Wuh3p5D5Hh0XVS3goz9kM6FtxPwJOL5P1UPccmj//znP2Hvo1eqB1lBSrSpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcOoWJKP/v5tjrpUFNpxSbfWBv9owHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsenp0yD2cLGE sGGGxASDzEAD/1NGrEX4skxNfBFtmvGM0iuDK2qtD9wtyA5f9nEx8sFMDVgBfYrg 89JvUL/568TSqbGzqJirIAAQBEEtun/S7Bnia/amoAUfFccbHxoX4pl/zYFDBftI ddeVwRjfOxUKCLXI4Dy1keNEbg6eAtuhZoXYWFSH6onV8/ccILDpIs0rVUErmGUW dL5MdYXfwXYWZjYC0Tg06QcwlIyUjftwxpFh2c5P0iFhA7B6pcO+qtU+dDwgisSK mioU6KYvHnPtSauH4J1Vwd4cOQ74CE+Rv7nNFgALMGXEJoX4lBB4Jec5NXsCWpps gvohlI09vA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:38:45 2026 by rpki-client