$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: 3fV4K2dhZ6V/7TnzI3mfPq2EYYewcWbOxV/GivSw4yU= Subject key identifier: 27:C4:F1:B7:ED:45:3E:00:B9:0D:2A:3C:B5:2F:A2:FA:74:A1:66:C3 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 73934B4ABBB5273F8E4EE489D785AC1DAEBCF46D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 19:07:08 +0000 Manifest this update: Sat 13 Jun 2026 19:02:08 +0000 Manifest next update: Sun 14 Jun 2026 19:09:08 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: U9uA+fypbycP31bjjxJsqV9JJOiKysS9cb3AuCFobug=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 3: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:93:4b:4a:bb:b5:27:3f:8e:4e:e4:89:d7:85:ac:1d:ae:bc:f4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Jun 13 19:02:08 2026 GMT Not After : Jun 14 19:09:08 2026 GMT Subject: CN=27C4F1B7ED453E00B90D2A3CB52FA2FA74A166C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:c4:8d:61:91:63:8c:30:f3:e8:6a:5c:9a: 3d:1d:ce:b9:ec:ab:fd:80:67:6b:0c:67:c6:a1:b6: 97:85:b0:47:cd:40:86:8e:ad:02:6b:a0:d5:ba:f4: e2:7e:30:10:45:a7:d8:f5:46:a3:2b:e4:8c:c9:df: ed:54:fe:40:08:ae:e0:9a:f4:6d:54:50:23:1e:a9: b6:1d:dc:5c:78:70:47:c9:35:e8:3f:44:0b:ea:b7: f8:72:e8:9e:a0:39:6d:84:7d:b3:d8:af:bb:f2:bd: 7f:04:5c:13:08:af:df:05:8f:e6:45:f6:b5:f7:28: 9f:4f:79:06:12:78:4c:86:4f:48:29:71:49:89:05: 9e:04:5a:6f:73:56:71:e0:70:80:f9:69:3f:68:7a: b8:73:70:41:49:79:28:22:36:a4:86:29:19:d3:f6: 61:c7:59:dc:42:cf:5e:13:4c:5d:e8:0e:f5:a2:77: 2e:20:6f:99:d2:18:82:b3:a0:a9:5c:bf:22:ef:60: de:9c:c0:46:43:bc:79:19:72:61:d8:e7:f0:a2:f6: 5d:9c:be:89:96:a2:81:78:24:5a:c1:64:27:6c:3e: 34:a7:78:1d:f7:e1:8f:7b:01:b0:0c:bc:b2:bc:9e: 5d:b0:e9:10:cd:0f:d2:2d:a1:1b:c0:b0:d5:27:f7: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C4:F1:B7:ED:45:3E:00:B9:0D:2A:3C:B5:2F:A2:FA:74:A1:66:C3 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6d:87:c7:eb:0a:57:92:d9:3d:b5:75:3b:7f:9c:f3:81:62: 73:65:92:b2:5c:87:0e:a2:43:7b:43:31:66:e6:82:ef:a4:c7: 62:2e:a9:d4:2d:c9:60:b5:1f:6d:40:cd:46:c3:da:ab:b5:83: 79:44:66:62:bb:97:2c:47:71:07:f2:c0:b9:79:fd:5f:70:e7: a0:3c:47:cd:0e:d7:0b:8f:73:3c:26:bb:94:53:52:c9:90:63: 0a:62:c2:ea:16:7c:fb:30:85:04:22:40:c3:28:84:14:51:d5: dc:70:c2:64:02:47:c8:8f:5a:f3:80:51:70:c4:28:25:8a:09: 74:80:5d:e3:a1:e5:74:9c:02:ab:43:92:99:f0:61:1a:49:6b: dd:50:26:24:17:bc:9d:c2:cd:b7:32:31:28:1e:24:c2:2b:2e: 6f:35:2d:88:28:e5:16:d9:14:a0:69:cb:42:31:fb:13:af:6e: 0c:18:aa:70:19:0d:47:db:10:69:0d:fb:7f:21:e2:86:a4:69: 70:dc:b6:c1:8e:39:89:d9:36:b7:60:86:7b:ae:4f:d4:c7:b5: 74:bf:e8:33:89:c4:79:57:30:f2:1c:e5:34:20:21:35:0d:09: fd:a7:19:af:bb:17:57:b8:65:59:4c:57:15:1d:44:e7:c2:a2: 50:2e:6f:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc5NLSru1Jz+OTuSJ14WsHa689G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA2MTMxOTAyMDhaFw0yNjA2MTQxOTA5MDhaMDMxMTAvBgNV BAMTKDI3QzRGMUI3RUQ0NTNFMDBCOTBEMkEzQ0I1MkZBMkZBNzRBMTY2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW8SNYZFjjDDz6Gpcmj0dzrns q/2AZ2sMZ8ahtpeFsEfNQIaOrQJroNW69OJ+MBBFp9j1RqMr5IzJ3+1U/kAIruCa 9G1UUCMeqbYd3Fx4cEfJNeg/RAvqt/hy6J6gOW2EfbPYr7vyvX8EXBMIr98Fj+ZF 9rX3KJ9PeQYSeEyGT0gpcUmJBZ4EWm9zVnHgcID5aT9oerhzcEFJeSgiNqSGKRnT 9mHHWdxCz14TTF3oDvWidy4gb5nSGIKzoKlcvyLvYN6cwEZDvHkZcmHY5/Ci9l2c vomWooF4JFrBZCdsPjSneB334Y97AbAMvLK8nl2w6RDND9ItoRvAsNUn91dnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ8Txt+1FPgC5DSo8tS+i+nShZsMwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG2Hx+sKV5LZ PbV1O3+c84Fic2WSslyHDqJDe0MxZuaC76THYi6p1C3JYLUfbUDNRsPaq7WDeURm YruXLEdxB/LAuXn9X3DnoDxHzQ7XC49zPCa7lFNSyZBjCmLC6hZ8+zCFBCJAwyiE FFHV3HDCZAJHyI9a84BRcMQoJYoJdIBd46HldJwCq0OSmfBhGklr3VAmJBe8ncLN tzIxKB4kwisubzUtiCjlFtkUoGnLQjH7E69uDBiqcBkNR9sQaQ37fyHihqRpcNy2 wY45idk2t2CGe65P1Me1dL/oM4nEeVcw8hzlNCAhNQ0J/acZr7sXV7hlWUxXFR1E 58KiUC5viA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:24:09 2026 by rpki-client