$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: 3WMa/NoonKrT4HnK6SUOHGB9KkXS2h7Lu9ejYa7zwnw= Subject key identifier: 78:17:6D:19:7C:CB:8F:D3:19:D7:A5:4D:C3:50:7C:F2:43:14:06:B5 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 4B6CE93E1CDF8ED9703330B4A36164E397FC5A57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: FE Signing time: Wed 29 Jul 2026 06:13:40 +0000 Manifest this update: Wed 29 Jul 2026 06:08:40 +0000 Manifest next update: Thu 30 Jul 2026 08:01:40 +0000 Files and hashes: 1: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 2: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: mdYpXaYxjr7Y+v/YrN1jOwFq+jF8u7CbjsAvZlAcnkM=) 3: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6c:e9:3e:1c:df:8e:d9:70:33:30:b4:a3:61:64:e3:97:fc:5a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Jul 29 06:08:40 2026 GMT Not After : Jul 30 08:01:40 2026 GMT Subject: CN=78176D197CCB8FD319D7A54DC3507CF2431406B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:e4:36:8f:94:30:b1:86:60:9c:95:d3:f2: 53:cd:d5:3b:12:f8:a3:8c:fd:f9:41:8d:6d:d0:cd: 7f:d0:ac:90:d4:74:47:90:a2:54:b9:e5:bb:c8:2c: 32:27:b7:0c:6a:e1:3b:56:85:16:68:93:d6:da:86: 77:cc:f3:b8:71:97:5f:0e:33:ce:87:11:65:bb:df: a4:2d:d4:64:0d:aa:7d:33:7f:29:76:9f:00:20:6c: fb:19:b7:d3:d7:49:bb:97:39:0e:70:ee:0d:29:bd: 01:3a:d9:05:d0:86:89:61:0c:9a:ed:9c:f5:9d:54: e8:96:f9:ca:e0:9d:63:48:b4:8f:19:2c:ae:a3:93: ab:de:19:e4:14:a7:07:32:69:c1:de:7f:56:91:f9: 4e:13:be:d2:ea:bd:8e:57:ad:94:2b:13:fb:53:f5: 0c:77:15:a4:52:67:1f:1d:0d:39:f8:c9:b3:4e:ab: b8:35:1f:06:99:bb:8f:dc:65:93:2e:aa:30:0c:94: 21:95:51:55:95:82:19:19:5a:6e:10:6d:61:db:5f: db:72:a4:f1:26:a5:82:c5:57:6c:ea:9c:b2:d1:53: 24:e6:56:2d:0c:82:7f:48:ea:e6:6d:70:2a:73:ae: 45:c0:d4:04:16:fc:ce:cd:de:28:9c:66:62:41:df: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:6D:19:7C:CB:8F:D3:19:D7:A5:4D:C3:50:7C:F2:43:14:06:B5 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a6:d9:60:e6:2f:67:bd:8c:72:5f:95:b6:3d:77:ef:67:6c: 53:56:ce:9b:04:4b:92:27:47:d2:34:8f:0e:8a:db:ba:d2:9c: 7a:a3:e7:19:7e:d0:93:bd:3c:40:b8:04:8a:a5:c8:1d:41:ec: 6d:c2:65:1d:f8:b7:30:07:47:05:ec:ad:a4:a1:ac:19:e4:91: 35:ac:79:57:44:56:40:7f:b6:14:2c:68:71:36:e1:9e:40:92: 4d:91:a2:0a:c8:d5:dd:57:a1:78:f1:fa:9d:9b:fa:d4:8b:29: 36:7e:30:5a:e1:cd:e5:da:dd:c4:1d:1a:bd:08:e5:11:46:14: df:a6:51:bb:a4:aa:5f:04:1c:c4:04:c9:0a:c0:bc:97:18:db: d4:24:d6:80:e1:df:92:ac:da:af:7c:fb:b4:93:39:7b:e9:63: c9:f4:a1:03:75:f4:32:1d:4a:71:5e:99:4a:8f:80:5e:54:09: e6:f9:2e:d9:a6:ce:45:ec:f2:f3:60:6e:6b:6b:ae:bb:a2:35: c7:8c:f9:04:b0:bd:3a:8c:df:c7:10:2c:e8:dd:89:5b:08:74: f2:39:14:59:a5:ce:8f:cd:cf:af:0c:85:f8:0d:61:77:8f:94: 6c:82:c2:ea:c5:41:70:aa:0a:46:f7:f3:84:36:77:cc:9a:cd: bb:62:8d:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS2zpPhzfjtlwMzC0o2Fk45f8WlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA3MjkwNjA4NDBaFw0yNjA3MzAwODAxNDBaMDMxMTAvBgNV BAMTKDc4MTc2RDE5N0NDQjhGRDMxOUQ3QTU0REMzNTA3Q0YyNDMxNDA2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7K+Q2j5QwsYZgnJXT8lPN1TsS +KOM/flBjW3QzX/QrJDUdEeQolS55bvILDIntwxq4TtWhRZok9bahnfM87hxl18O M86HEWW736Qt1GQNqn0zfyl2nwAgbPsZt9PXSbuXOQ5w7g0pvQE62QXQholhDJrt nPWdVOiW+crgnWNItI8ZLK6jk6veGeQUpwcyacHef1aR+U4TvtLqvY5XrZQrE/tT 9Qx3FaRSZx8dDTn4ybNOq7g1HwaZu4/cZZMuqjAMlCGVUVWVghkZWm4QbWHbX9ty pPEmpYLFV2zqnLLRUyTmVi0Mgn9I6uZtcCpzrkXA1AQW/M7N3iicZmJB31fVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeBdtGXzLj9MZ16VNw1B88kMUBrUwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqabZYOYvZ72M cl+Vtj1372dsU1bOmwRLkidH0jSPDorbutKceqPnGX7Qk708QLgEiqXIHUHsbcJl Hfi3MAdHBeytpKGsGeSRNax5V0RWQH+2FCxocTbhnkCSTZGiCsjV3VehePH6nZv6 1IspNn4wWuHN5drdxB0avQjlEUYU36ZRu6SqXwQcxATJCsC8lxjb1CTWgOHfkqza r3z7tJM5e+ljyfShA3X0Mh1KcV6ZSo+AXlQJ5vku2abORezy82Bua2uuu6I1x4z5 BLC9OozfxxAs6N2JWwh08jkUWaXOj83PrwyF+A1hd4+UbILC6sVBcKoKRvfzhDZ3 zJrNu2KN3g== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:47 2026 by rpki-client