$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: k+yyyYZKkbU9MFsDErfUVN2Bq4YICcRw9iHzMDrvjQs= Subject key identifier: CF:99:9B:08:84:06:6A:0F:E8:EF:A4:15:F3:51:2D:EC:15:59:CB:49 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 12B1202C9C93196D267C51063F87660F744E78B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 90 Signing time: Wed 29 Jul 2026 10:14:05 +0000 Manifest this update: Wed 29 Jul 2026 10:09:05 +0000 Manifest next update: Thu 30 Jul 2026 10:33:05 +0000 Files and hashes: 1: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: +cYVQDIV2kSuxqvxuV0gOCWQ/I9UQxol1qtnSQsWgG8=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b1:20:2c:9c:93:19:6d:26:7c:51:06:3f:87:66:0f:74:4e:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Jul 29 10:09:05 2026 GMT Not After : Jul 30 10:33:05 2026 GMT Subject: CN=CF999B0884066A0FE8EFA415F3512DEC1559CB49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:24:5a:21:95:cf:e1:0f:b1:0c:3b:c0:72: 0e:76:aa:ff:2f:37:df:50:34:a8:be:a3:04:0c:16: 06:14:f9:75:26:00:de:2c:2f:d4:44:e3:c4:42:f6: 3c:ec:88:e4:ad:f9:cb:f6:fa:7d:8d:76:15:a1:86: 17:00:d6:4b:01:45:b0:be:f5:23:4a:a1:10:16:0c: 9a:9b:23:d7:8c:26:98:d6:ad:ab:6f:ce:23:00:c1: 45:17:7b:e6:87:e8:e5:30:38:8c:57:2d:90:77:82: 73:b4:53:41:c4:10:b9:52:e8:29:35:69:3a:67:87: e8:99:19:c0:14:0a:b5:c4:83:b6:5f:84:21:d2:d0: c1:61:23:00:89:f0:b2:57:19:bc:37:12:ab:5b:93: 51:9e:e0:89:e3:92:fc:11:62:d2:eb:83:7a:2b:b9: 31:07:ce:03:0f:05:70:75:6c:5f:2b:07:10:2a:73: 01:3b:1a:75:96:25:f8:ab:8f:f3:77:90:1c:6d:27: e5:1c:05:0d:48:cd:61:cc:7b:6b:f1:be:40:73:92: ee:f3:b6:b8:c4:8f:eb:50:7c:10:b1:d3:97:88:3b: b3:ed:0d:18:72:a7:cf:a4:02:29:95:57:7f:b3:3e: 1e:f9:90:05:4c:6f:d0:84:ee:8a:3f:b1:aa:72:77: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:9B:08:84:06:6A:0F:E8:EF:A4:15:F3:51:2D:EC:15:59:CB:49 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:dc:71:6a:e3:c2:95:59:9a:d6:f5:bc:83:93:5f:3f:18:67: 60:85:f5:a5:98:19:4f:f1:42:3a:06:a5:13:9c:04:d4:30:33: ac:62:c9:c3:4b:59:71:ae:17:fb:9a:ba:93:4e:d8:f9:64:b4: a9:9e:9e:7a:42:ea:3e:5a:1a:73:4d:61:c7:b3:ec:c3:a7:23: a6:e3:82:36:db:ef:b5:bd:7b:04:7a:7f:11:b5:3c:c5:88:d4: 1a:b1:86:2f:0d:3f:90:27:8a:39:53:e0:5e:f7:02:e8:9e:ee: 6f:73:17:7b:e3:b3:31:2f:ee:da:b9:55:6a:c5:2d:a9:38:6e: e4:97:e4:2f:49:67:2f:1e:49:da:de:a9:04:99:a8:ca:39:48: fd:40:c0:9c:8f:c8:d3:8c:46:b4:f6:65:fe:a1:98:74:7f:25: 45:f6:29:0b:cd:9f:34:22:29:57:17:d4:fd:71:36:bb:09:3c: ca:46:fb:9c:a8:8e:50:15:2c:00:20:3b:40:ec:eb:20:f4:4d: 2b:ad:13:0d:db:c3:a6:01:ec:44:5e:87:c7:f6:fd:1e:04:1a: 69:1d:b8:86:5a:50:8b:7d:ca:40:1e:b4:08:0e:ba:89:b1:d7: e9:18:63:0a:e6:c5:9c:08:eb:d0:f9:af:2c:1c:27:a7:b9:6a: e6:7b:93:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUErEgLJyTGW0mfFEGP4dmD3ROeLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA3MjkxMDA5MDVaFw0yNjA3MzAxMDMzMDVaMDMxMTAvBgNV BAMTKENGOTk5QjA4ODQwNjZBMEZFOEVGQTQxNUYzNTEyREVDMTU1OUNCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjiRaIZXP4Q+xDDvAcg52qv8v N99QNKi+owQMFgYU+XUmAN4sL9RE48RC9jzsiOSt+cv2+n2NdhWhhhcA1ksBRbC+ 9SNKoRAWDJqbI9eMJpjWratvziMAwUUXe+aH6OUwOIxXLZB3gnO0U0HEELlS6Ck1 aTpnh+iZGcAUCrXEg7ZfhCHS0MFhIwCJ8LJXGbw3Eqtbk1Ge4InjkvwRYtLrg3or uTEHzgMPBXB1bF8rBxAqcwE7GnWWJfirj/N3kBxtJ+UcBQ1IzWHMe2vxvkBzku7z trjEj+tQfBCx05eIO7PtDRhyp8+kAimVV3+zPh75kAVMb9CE7oo/sapyd/b/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz5mbCIQGag/o76QV81Et7BVZy0kwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNxxauPClVma 1vW8g5NfPxhnYIX1pZgZT/FCOgalE5wE1DAzrGLJw0tZca4X+5q6k07Y+WS0qZ6e ekLqPloac01hx7Psw6cjpuOCNtvvtb17BHp/EbU8xYjUGrGGLw0/kCeKOVPgXvcC 6J7ub3MXe+OzMS/u2rlVasUtqThu5JfkL0lnLx5J2t6pBJmoyjlI/UDAnI/I04xG tPZl/qGYdH8lRfYpC82fNCIpVxfU/XE2uwk8ykb7nKiOUBUsACA7QOzrIPRNK60T DdvDpgHsRF6Hx/b9HgQaaR24hlpQi33KQB60CA66ibHX6RhjCubFnAjr0PmvLBwn p7lq5nuT1Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:41 2026 by rpki-client