$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: YQzNbjWfdVfTc/gcOlrLBAteQ2HxJIc2Q5qiZDPlRjA= Subject key identifier: AF:15:8C:94:5D:B8:DA:A0:C4:B0:EC:AE:3F:8F:C2:D5:2B:40:60:0B Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 4CC99C05A92B82996B315B37D315267D17FB6660 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 0103 Signing time: Wed 29 Jul 2026 19:45:06 +0000 Manifest this update: Wed 29 Jul 2026 19:40:06 +0000 Manifest next update: Thu 30 Jul 2026 21:23:06 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: lgkAVm2EL9cCnbHVjpt1Dzz7ZkwCfk446do/QN79Du4=) 2: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 3: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 21:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c9:9c:05:a9:2b:82:99:6b:31:5b:37:d3:15:26:7d:17:fb:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Jul 29 19:40:06 2026 GMT Not After : Jul 30 21:23:06 2026 GMT Subject: CN=AF158C945DB8DAA0C4B0ECAE3F8FC2D52B40600B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:20:27:98:c2:ad:e2:4f:2d:bf:c1:4f:86: 53:a9:ce:37:85:bc:81:16:0f:3e:02:d3:b2:b4:1d: 38:16:61:8b:e6:31:00:d3:2a:5c:25:ab:78:0b:84: 67:f9:5d:f1:fa:d1:93:d9:96:35:6e:4d:82:81:fd: 4a:5a:5d:de:23:15:6d:98:82:65:60:e2:27:93:b0: d8:b1:3d:de:2f:6b:92:3e:c2:0f:e5:7b:8f:20:99: eb:c7:6d:8f:d1:76:2c:39:84:74:f8:9a:4b:cc:18: 52:23:db:f8:20:59:a7:4b:5b:d8:f6:81:c2:fe:3b: 03:ab:c8:c9:c8:a2:ac:e3:e3:72:1b:ec:f3:ef:db: 2a:37:20:6b:c9:78:33:16:0d:ce:04:91:f0:c5:66: 57:ce:bb:70:4b:9b:21:4c:b1:c3:ab:15:56:55:69: 44:f1:84:86:98:cb:d7:50:de:a5:0e:0f:56:20:c7: c0:d9:c3:1a:a0:7a:96:25:30:4f:23:8c:38:c7:5d: c9:b2:12:ab:6d:91:c8:30:00:5f:37:36:66:5a:ee: 1e:f4:00:d7:ec:a9:4d:84:48:ca:f5:a0:3f:6c:85: dd:c6:d2:db:c8:88:73:89:3a:a1:8e:39:5e:61:e7: 19:67:b6:a2:4a:5d:bc:bd:77:fc:df:65:4b:27:c5: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:8C:94:5D:B8:DA:A0:C4:B0:EC:AE:3F:8F:C2:D5:2B:40:60:0B X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:39:41:3c:c3:bf:77:94:d9:3e:b3:46:0d:2d:1f:97:ad:67: 35:61:18:9c:95:42:f8:9e:78:ff:ad:4a:34:08:cd:d6:ba:ac: d8:bc:39:f3:0b:f0:d1:d5:9f:8e:69:8f:9d:f5:7e:f7:7b:c6: fd:f9:d1:c3:4a:03:0f:18:45:1b:80:02:59:9e:70:49:40:2e: 37:1c:24:1e:2c:fa:37:25:28:11:eb:1a:38:27:ab:85:95:85: 24:08:01:66:e6:0f:7c:33:d4:a5:f3:91:64:39:5d:33:80:0d: 5e:da:ef:a2:f8:64:f5:b0:1a:84:71:89:a5:3c:65:5b:f3:87: 4d:f1:ed:45:60:ac:a7:8c:63:c8:35:0a:c2:e6:9d:c4:34:7a: 81:0f:c3:7b:cb:18:f1:25:75:0c:d0:b8:25:4a:fc:19:00:1c: 00:cd:66:d1:82:af:53:74:1a:ab:ea:b2:0c:4f:55:3c:96:9f: 4b:4c:fc:8c:38:b8:d1:10:ee:f6:68:9d:90:18:eb:54:97:8a: 1e:94:4b:46:76:94:9c:2e:aa:8b:8f:1b:e7:d1:77:6f:d6:63: bf:da:5b:41:2b:5d:f9:72:3b:0d:83:71:f9:0a:1e:e5:95:fb: c9:56:1d:8b:ce:d4:37:6c:ac:57:51:4e:5e:cc:d0:d8:91:5b: 9e:ce:a7:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTMmcBakrgplrMVs30xUmfRf7ZmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA3MjkxOTQwMDZaFw0yNjA3MzAyMTIzMDZaMDMxMTAvBgNV BAMTKEFGMTU4Qzk0NURCOERBQTBDNEIwRUNBRTNGOEZDMkQ1MkI0MDYwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsSAnmMKt4k8tv8FPhlOpzjeF vIEWDz4C07K0HTgWYYvmMQDTKlwlq3gLhGf5XfH60ZPZljVuTYKB/UpaXd4jFW2Y gmVg4ieTsNixPd4va5I+wg/le48gmevHbY/Rdiw5hHT4mkvMGFIj2/ggWadLW9j2 gcL+OwOryMnIoqzj43Ib7PPv2yo3IGvJeDMWDc4EkfDFZlfOu3BLmyFMscOrFVZV aUTxhIaYy9dQ3qUOD1Ygx8DZwxqgepYlME8jjDjHXcmyEqttkcgwAF83NmZa7h70 ANfsqU2ESMr1oD9shd3G0tvIiHOJOqGOOV5h5xlntqJKXby9d/zfZUsnxXJRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrxWMlF242qDEsOyuP4/C1StAYAswHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzlBPMO/d5TZ PrNGDS0fl61nNWEYnJVC+J54/61KNAjN1rqs2Lw58wvw0dWfjmmPnfV+93vG/fnR w0oDDxhFG4ACWZ5wSUAuNxwkHiz6NyUoEesaOCerhZWFJAgBZuYPfDPUpfORZDld M4ANXtrvovhk9bAahHGJpTxlW/OHTfHtRWCsp4xjyDUKwuadxDR6gQ/De8sY8SV1 DNC4JUr8GQAcAM1m0YKvU3Qaq+qyDE9VPJafS0z8jDi40RDu9midkBjrVJeKHpRL RnaUnC6qi48b59F3b9Zjv9pbQStd+XI7DYNx+Qoe5ZX7yVYdi87UN2ysV1FOXszQ 2JFbns6ncg== -----END CERTIFICATE-----Generated at Thu Jul 30 03:10:51 2026 by rpki-client