$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: cLK6WgQ7jbE8NGg6tsOMDa0kooxqiOMnvw7gGJGtVYw= Subject key identifier: 93:E8:94:7E:5E:4E:A7:82:E0:37:8C:5B:95:B5:F3:45:E5:ED:9E:07 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 05DF5FB48EB734735F668EF516EA3F2C7FC4B4B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: FE Signing time: Wed 29 Jul 2026 07:48:49 +0000 Manifest this update: Wed 29 Jul 2026 07:43:49 +0000 Manifest next update: Thu 30 Jul 2026 09:18:49 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 2: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: 4kFXyWh4nJY1GZr6gVd+wvJi5HOw/Z6DAVeuQI2OESs=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:5f:b4:8e:b7:34:73:5f:66:8e:f5:16:ea:3f:2c:7f:c4:b4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Jul 29 07:43:49 2026 GMT Not After : Jul 30 09:18:49 2026 GMT Subject: CN=93E8947E5E4EA782E0378C5B95B5F345E5ED9E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:8f:61:ff:8c:3a:ac:92:61:58:7f:df:0b: 44:ad:12:66:bb:5f:18:63:06:ba:0b:e9:4b:ff:8c: 22:e4:44:ab:47:2d:c9:32:25:7f:b3:ae:a3:43:0a: 46:89:04:4c:74:19:74:25:9f:22:83:46:83:ce:e5: 48:2e:8e:69:88:15:ac:2b:db:34:22:a2:ec:ec:36: b3:75:a0:64:20:88:f7:21:95:f0:ee:9d:dc:cc:4c: 3b:c2:a7:08:89:f5:01:d5:77:a5:0d:fc:77:a9:0e: ec:96:00:55:77:3f:ad:32:49:67:6a:b2:e0:e9:7a: c4:40:a6:a2:d5:60:a9:68:71:05:22:9f:10:f3:39: 8c:7c:d0:d0:b4:cf:c7:cb:c6:a1:14:1a:98:d6:74: 8e:0f:5a:bd:69:7d:fb:61:9d:2f:81:55:2b:c3:66: 60:ef:af:0c:1e:0a:2b:22:ae:38:2b:6b:cb:66:a0: 39:56:34:1e:67:c8:d5:a7:67:22:83:65:97:ce:dc: ed:6c:cc:b8:69:48:5a:69:3c:c3:d6:8f:d3:97:4d: 94:b4:c4:73:fc:57:4d:7b:67:d6:dd:dc:3d:5b:c7: f0:2d:46:6e:fc:4d:e7:59:0f:2c:d5:06:72:85:c1: ab:16:2b:b0:6c:c2:33:d3:2e:87:a2:ac:d8:c7:1d: ae:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E8:94:7E:5E:4E:A7:82:E0:37:8C:5B:95:B5:F3:45:E5:ED:9E:07 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:46:30:6b:db:96:53:4c:82:6d:80:f8:af:8c:33:c8:ae: 0b:15:dd:e6:d7:40:f6:27:11:61:ed:1d:97:fa:1c:83:0d:71: f1:06:c1:10:55:ad:a1:3e:02:d5:28:8b:ad:57:b6:a2:fd:cd: 99:cd:52:f2:82:b5:57:24:a5:b4:e8:da:cd:11:a2:6f:b2:4e: 54:a0:c2:d9:66:33:0c:c1:23:0e:16:af:32:a3:f2:23:91:9c: 66:a7:21:40:b3:41:b4:3e:81:f1:9b:b7:2a:ee:a7:17:d9:bd: 60:d6:f6:65:cf:41:f7:a9:09:cb:b1:d6:37:b7:56:de:ed:a4: 8d:3c:f9:ea:84:a2:87:80:dc:9c:f0:db:38:74:38:84:c2:95: 6e:82:66:7b:ba:8c:52:79:04:6d:a8:6a:e7:06:ab:62:ae:9b: 0a:a4:16:80:9f:59:ea:2a:39:d6:b7:82:d5:7e:fa:db:04:d4: bf:ef:71:21:e3:20:fb:71:ff:40:d2:d4:fc:a1:0b:4d:44:51: de:46:75:af:14:69:25:f7:88:84:2f:94:20:3f:fa:d9:43:aa: 5d:b3:1b:0f:fb:fe:36:54:ad:1e:78:bb:86:25:b1:9b:a7:e3: 1a:16:67:79:cc:9f:3f:83:4f:f6:61:66:58:29:78:a7:30:05: 77:4c:9c:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBd9ftI63NHNfZo71Fuo/LH/EtLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA3MjkwNzQzNDlaFw0yNjA3MzAwOTE4NDlaMDMxMTAvBgNV BAMTKDkzRTg5NDdFNUU0RUE3ODJFMDM3OEM1Qjk1QjVGMzQ1RTVFRDlFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJI9h/4w6rJJhWH/fC0StEma7 XxhjBroL6Uv/jCLkRKtHLckyJX+zrqNDCkaJBEx0GXQlnyKDRoPO5UgujmmIFawr 2zQiouzsNrN1oGQgiPchlfDundzMTDvCpwiJ9QHVd6UN/HepDuyWAFV3P60ySWdq suDpesRApqLVYKlocQUinxDzOYx80NC0z8fLxqEUGpjWdI4PWr1pffthnS+BVSvD ZmDvrwweCisirjgra8tmoDlWNB5nyNWnZyKDZZfO3O1szLhpSFppPMPWj9OXTZS0 xHP8V017Z9bd3D1bx/AtRm78TedZDyzVBnKFwasWK7BswjPTLoeirNjHHa65AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk+iUfl5Op4LgN4xblbXzReXtngcwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8FGMGvbllNM gm2A+K+MM8iuCxXd5tdA9icRYe0dl/ocgw1x8QbBEFWtoT4C1SiLrVe2ov3Nmc1S 8oK1VySltOjazRGib7JOVKDC2WYzDMEjDhavMqPyI5GcZqchQLNBtD6B8Zu3Ku6n F9m9YNb2Zc9B96kJy7HWN7dW3u2kjTz56oSih4DcnPDbOHQ4hMKVboJme7qMUnkE bahq5warYq6bCqQWgJ9Z6io51reC1X762wTUv+9xIeMg+3H/QNLU/KELTURR3kZ1 rxRpJfeIhC+UID/62UOqXbMbD/v+NlStHni7hiWxm6fjGhZnecyfP4NP9mFmWCl4 pzAFd0ycLw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:09 2026 by rpki-client