$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: TqIi0raiPxkVgSxYkvBTKjqD8ibiHjRbnxjUaTwGM4M= Subject key identifier: DB:4E:67:B2:C0:DB:07:33:7A:A5:91:BF:92:57:0E:76:F6:75:34:DF Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 2BDF023AC250A5464A0DD5BB0BEF7C13FA8659F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: FE Signing time: Tue 28 Jul 2026 23:32:55 +0000 Manifest this update: Tue 28 Jul 2026 23:27:55 +0000 Manifest next update: Thu 30 Jul 2026 00:21:55 +0000 Files and hashes: 1: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: HI4IlaRrUkYZ/Smkbq52BV4+/6QxPjFbAdxO+j8DJMI=) 2: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 3: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:df:02:3a:c2:50:a5:46:4a:0d:d5:bb:0b:ef:7c:13:fa:86:59:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jul 28 23:27:55 2026 GMT Not After : Jul 30 00:21:55 2026 GMT Subject: CN=DB4E67B2C0DB07337AA591BF92570E76F67534DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:9d:dc:94:e9:d7:39:51:ef:77:d6:e1:08: 05:71:63:29:7a:3a:29:f3:fc:3a:52:84:c3:fc:43: d1:6b:7c:cb:50:4a:70:c4:9f:5d:15:76:dc:e9:a3: 48:99:02:6b:6b:24:58:3a:b7:c9:45:5a:c1:09:53: d3:ca:93:b3:f8:8b:ce:3e:53:5f:62:31:72:6c:c6: e9:2b:07:af:06:f6:6a:2d:eb:25:79:bd:42:81:a5: 5b:fa:d3:68:23:da:d7:ff:e3:62:78:9c:31:b6:71: c3:e2:5d:6a:33:18:8f:fc:53:16:31:e8:2e:03:f3: 0c:be:d8:78:2a:9f:2d:d9:f7:1e:12:f1:4f:ec:ea: 2e:26:3c:e7:cf:c7:12:56:06:93:a5:63:b4:98:db: a4:f0:07:ad:d4:17:a8:53:ac:4a:97:0f:a5:57:13: a7:3c:fc:17:84:32:a3:49:3b:99:f1:6f:f9:0b:8e: b5:ff:77:68:af:dd:30:68:e8:aa:68:23:f3:ef:e5: 11:88:bc:bd:9a:01:1b:27:8d:74:dd:b6:16:0d:6e: fe:65:28:ca:be:06:bc:29:1a:4d:80:b4:7b:63:e1: 5e:6c:8b:33:15:b6:3b:84:d9:49:bb:e3:65:9d:b1: ec:05:54:40:dd:8d:c0:9d:09:ce:ce:51:51:f7:ae: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4E:67:B2:C0:DB:07:33:7A:A5:91:BF:92:57:0E:76:F6:75:34:DF X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:62:2c:b5:43:84:30:9c:cf:3b:7b:da:0a:92:ba:67:36: d4:6c:1a:50:0f:b1:0c:89:d9:2c:b4:1f:df:5c:9e:07:70:52: 8d:69:c3:98:8e:a9:90:37:59:1e:6a:34:f3:68:ae:15:98:8e: f0:24:e3:fe:4d:fb:8d:5c:a2:a0:3e:31:b0:6a:58:b6:e6:42: 8a:d6:da:4c:44:ef:c7:23:7f:c0:6d:b9:33:a5:34:ea:cf:94: 72:8d:f6:2b:ef:6f:0b:16:9e:c3:b3:55:bb:65:b7:bd:df:a0: 82:ff:60:a1:40:43:ab:c7:e3:51:44:c3:29:29:c3:86:eb:e4: 76:f4:e3:3c:75:4c:9d:34:3c:8b:40:c0:35:26:e5:af:c9:b4: d5:ac:81:bb:55:79:15:79:cf:bf:28:e4:68:d3:91:5a:57:70: 87:e2:59:f5:10:0d:e2:cc:60:44:f0:a8:17:af:71:5c:5f:0d: 3d:d8:4e:f5:fd:24:81:a4:9d:75:d0:d6:6e:43:65:fc:b7:31: 14:59:e0:25:20:50:b6:e2:0e:63:a7:00:42:96:69:69:c7:9f: c2:9a:77:17:0f:c1:b3:8c:6e:cd:7b:b0:ed:e3:c1:a6:1b:7c: 1e:fb:45:17:88:e7:dd:07:03:4e:cf:a4:79:0e:99:0b:d5:3d: 76:a8:ad:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK98COsJQpUZKDdW7C+98E/qGWfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA3MjgyMzI3NTVaFw0yNjA3MzAwMDIxNTVaMDMxMTAvBgNV BAMTKERCNEU2N0IyQzBEQjA3MzM3QUE1OTFCRjkyNTcwRTc2RjY3NTM0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6M53clOnXOVHvd9bhCAVxYyl6 Oinz/DpShMP8Q9FrfMtQSnDEn10Vdtzpo0iZAmtrJFg6t8lFWsEJU9PKk7P4i84+ U19iMXJsxukrB68G9mot6yV5vUKBpVv602gj2tf/42J4nDG2ccPiXWozGI/8UxYx 6C4D8wy+2Hgqny3Z9x4S8U/s6i4mPOfPxxJWBpOlY7SY26TwB63UF6hTrEqXD6VX E6c8/BeEMqNJO5nxb/kLjrX/d2iv3TBo6KpoI/Pv5RGIvL2aARsnjXTdthYNbv5l KMq+BrwpGk2AtHtj4V5sizMVtjuE2Um742WdsewFVEDdjcCdCc7OUVH3rnRHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU205nssDbBzN6pZG/klcOdvZ1NN8wHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaJiLLVDhDCc zzt72gqSumc21GwaUA+xDInZLLQf31yeB3BSjWnDmI6pkDdZHmo082iuFZiO8CTj /k37jVyioD4xsGpYtuZCitbaTETvxyN/wG25M6U06s+Uco32K+9vCxaew7NVu2W3 vd+ggv9goUBDq8fjUUTDKSnDhuvkdvTjPHVMnTQ8i0DANSblr8m01ayBu1V5FXnP vyjkaNORWldwh+JZ9RAN4sxgRPCoF69xXF8NPdhO9f0kgaSdddDWbkNl/LcxFFng JSBQtuIOY6cAQpZpacefwpp3Fw/Bs4xuzXuw7ePBpht8HvtFF4jn3QcDTs+keQ6Z C9U9dqitqg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:23 2026 by rpki-client