$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: avGpgPQoteirVeyT++hsGCVKt6cSlNJRTa2E4nhu48g= Subject key identifier: A2:2D:A1:22:5E:3F:36:EC:07:EC:7B:CA:3D:79:57:B8:75:FC:EE:9A Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 1E9070F05895FDE95D0F31020771EBC7DC34B394 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: 94 Signing time: Wed 29 Jul 2026 09:08:58 +0000 Manifest this update: Wed 29 Jul 2026 09:03:58 +0000 Manifest next update: Thu 30 Jul 2026 12:25:58 +0000 Files and hashes: 1: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=) 2: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: g5u6zpIJ/wqsEQUn9ZNh0wjw0XxwXuCyxhdlu1bsi7c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:90:70:f0:58:95:fd:e9:5d:0f:31:02:07:71:eb:c7:dc:34:b3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Jul 29 09:03:58 2026 GMT Not After : Jul 30 12:25:58 2026 GMT Subject: CN=A22DA1225E3F36EC07EC7BCA3D7957B875FCEE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:22:33:2a:17:9b:49:b9:95:84:a3:a3:bf: 57:b3:85:9a:f1:5e:03:b9:05:f7:1a:d8:2c:07:a7: c3:b5:c1:38:88:a3:5c:63:cd:6a:06:9c:f9:8d:1e: 14:f1:d4:14:90:f4:c5:53:02:30:cb:7f:e8:0d:23: 5e:8a:0d:9e:bb:28:60:26:cc:8c:8f:f2:cb:db:c2: de:cf:e2:08:13:4e:56:5f:34:88:fe:f5:c5:26:99: 07:87:06:7a:a7:0b:31:65:76:73:b5:56:5d:d6:d4: d1:53:7c:7b:54:3f:22:9f:a5:83:f9:88:51:f4:45: 45:bf:43:a3:e8:63:b4:37:d1:9e:b8:c6:f2:52:bc: 2a:a2:0f:65:0d:17:47:10:a7:0d:4a:5c:97:9d:1e: e4:dc:d0:b6:19:75:1c:3c:0b:a8:99:c1:66:55:53: ca:09:80:53:10:b3:d0:4e:b8:46:be:6e:cf:5d:78: c2:e7:cf:9b:9e:7d:c6:b9:f8:77:28:37:f3:69:d9: 5c:2e:42:c6:2e:6f:4b:9a:43:3e:3f:a6:2a:fb:7c: fb:86:c9:76:b5:a7:73:69:7e:c2:5b:19:9e:5d:38: 6a:b3:12:b4:53:4b:91:6e:83:ec:7d:38:ef:3d:60: e5:1c:b8:bf:02:d2:33:09:45:c2:eb:d1:a8:fc:ed: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:A1:22:5E:3F:36:EC:07:EC:7B:CA:3D:79:57:B8:75:FC:EE:9A X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:79:6d:5f:7f:8c:c9:a5:f7:78:88:5f:92:19:7e:31:1b:9f: 6b:d6:94:cc:44:60:91:26:0c:1c:71:10:36:ac:e7:78:34:26: e1:f4:66:a3:78:1d:71:eb:04:f1:be:16:89:41:bc:4a:d5:a3: ec:75:20:06:35:c7:2f:f2:0c:60:58:63:44:d0:de:bc:1e:4e: a1:48:d2:1f:21:8c:cb:ec:fb:bd:97:b7:bf:d9:ae:67:dd:f1: 34:6e:44:3f:4f:5d:60:81:43:59:75:6c:cf:39:f3:39:e8:7f: 77:7e:9f:16:af:4e:79:50:5b:d9:3a:68:bd:29:37:37:f2:a9: 3a:a5:8e:43:16:02:07:ed:95:12:25:af:c3:cf:71:d0:77:65: e2:a9:3a:d7:84:18:f8:be:4c:ee:d7:b5:b0:b4:40:5d:03:01: ef:1c:df:c5:5f:8c:0d:00:15:a0:e4:c7:f8:5f:0d:1c:b3:87: a9:fb:20:05:20:06:32:00:29:fd:b3:ee:12:22:17:6a:c1:e1: 22:00:fd:b6:12:87:4a:07:52:78:ba:f9:be:18:90:a5:59:a1: df:54:75:19:76:77:9f:07:54:0a:f9:fd:dc:5a:eb:ae:70:96: 79:39:f0:ca:de:12:d0:43:74:df:92:f1:6d:00:6c:dc:65:47: 95:57:08:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHpBw8FiV/eldDzECB3Hrx9w0s5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjA3MjkwOTAzNThaFw0yNjA3MzAxMjI1NThaMDMxMTAvBgNV BAMTKEEyMkRBMTIyNUUzRjM2RUMwN0VDN0JDQTNENzk1N0I4NzVGQ0VFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9SIzKhebSbmVhKOjv1ezhZrx XgO5Bfca2CwHp8O1wTiIo1xjzWoGnPmNHhTx1BSQ9MVTAjDLf+gNI16KDZ67KGAm zIyP8svbwt7P4ggTTlZfNIj+9cUmmQeHBnqnCzFldnO1Vl3W1NFTfHtUPyKfpYP5 iFH0RUW/Q6PoY7Q30Z64xvJSvCqiD2UNF0cQpw1KXJedHuTc0LYZdRw8C6iZwWZV U8oJgFMQs9BOuEa+bs9deMLnz5uefca5+HcoN/Np2VwuQsYub0uaQz4/pir7fPuG yXa1p3NpfsJbGZ5dOGqzErRTS5Fug+x9OO89YOUcuL8C0jMJRcLr0aj87TsDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoi2hIl4/NuwH7HvKPXlXuHX87powHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHltX3+MyaX3 eIhfkhl+MRufa9aUzERgkSYMHHEQNqzneDQm4fRmo3gdcesE8b4WiUG8StWj7HUg BjXHL/IMYFhjRNDevB5OoUjSHyGMy+z7vZe3v9muZ93xNG5EP09dYIFDWXVszznz Oeh/d36fFq9OeVBb2TpovSk3N/KpOqWOQxYCB+2VEiWvw89x0Hdl4qk614QY+L5M 7te1sLRAXQMB7xzfxV+MDQAVoOTH+F8NHLOHqfsgBSAGMgAp/bPuEiIXasHhIgD9 thKHSgdSeLr5vhiQpVmh31R1GXZ3nwdUCvn93FrrrnCWeTnwyt4S0EN035LxbQBs 3GVHlVcIwg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:09 2026 by rpki-client