$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: 47aQn6lOIxol8WoSIkubrWm3ZeJ6XnR6EvWQWkxNq90= Subject key identifier: FB:4D:85:23:E0:D1:2D:1D:C5:50:F1:E9:2F:8A:6C:A4:76:99:FB:AE Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 18A5F2DE3FB503375D3F4A8B7A8FDFBAAC587BF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: 88 Signing time: Wed 29 Jul 2026 10:34:10 +0000 Manifest this update: Wed 29 Jul 2026 10:29:10 +0000 Manifest next update: Thu 30 Jul 2026 12:11:10 +0000 Files and hashes: 1: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) 2: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) 3: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) 4: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: ckcgHLpK0DJFmw4p4o5VU05CIjMfg/C6/OoZZXKE9kY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a5:f2:de:3f:b5:03:37:5d:3f:4a:8b:7a:8f:df:ba:ac:58:7b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: Jul 29 10:29:10 2026 GMT Not After : Jul 30 12:11:10 2026 GMT Subject: CN=FB4D8523E0D12D1DC550F1E92F8A6CA47699FBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:9e:d1:e4:2d:fe:f9:77:72:bc:8e:9c:51: 4c:08:01:04:00:29:89:85:f7:fc:7b:e2:2c:46:9e: a3:c3:4e:59:32:ac:c0:e0:37:4e:75:92:fc:32:de: 7e:88:12:68:c4:a9:6b:03:cc:28:51:19:4d:39:81: c2:7e:9c:36:dd:61:20:f9:75:d5:e0:b8:b0:00:a6: 1d:59:44:92:ae:ff:af:24:ce:df:03:e8:10:93:a2: 84:a6:b3:64:3a:e8:b6:bc:78:9d:a3:9f:a9:5c:80: ad:16:48:e4:e7:2c:a2:7a:7d:f2:c1:48:30:ea:39: e2:53:ed:91:35:df:dc:64:3b:23:2f:fb:d4:5c:98: 7f:9d:3f:7a:0d:75:20:aa:4c:4b:79:cc:6c:d5:be: 5b:8c:2b:39:28:de:6b:86:36:95:75:e9:ae:5e:9f: 75:6a:86:9e:1e:46:ab:4e:23:c7:1c:d4:ce:d5:fe: 14:31:9f:cd:37:7f:a8:99:0e:f8:9c:03:bc:af:a3: 1d:8a:ce:9d:0b:dc:4f:18:15:ec:5b:a0:a4:68:64: 42:a6:1c:35:c7:82:0c:7c:88:c3:92:ad:91:c9:99: 51:50:f5:9f:35:84:b2:89:97:71:3f:88:05:38:52: de:df:52:85:2e:f4:77:1d:ec:58:54:37:3d:7f:60: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4D:85:23:E0:D1:2D:1D:C5:50:F1:E9:2F:8A:6C:A4:76:99:FB:AE X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ee:8f:32:b1:11:c6:09:66:a2:9e:f8:8a:25:9b:12:3f:81: 02:fc:d9:cf:52:40:4e:92:0e:18:4b:05:60:88:c6:4e:ac:70: b2:e8:61:83:5a:e2:4d:a9:fb:05:8b:bf:50:0a:3b:65:3a:39: b0:7d:4f:88:0f:9c:82:c7:77:71:66:0b:2d:f7:22:2d:73:ed: 2f:a7:ef:0e:f9:77:54:80:c1:18:16:f0:5f:73:82:1b:ac:a4: 64:db:5a:f9:b7:9c:f2:7c:ca:52:2c:02:90:5e:c6:f5:6f:f0: 8a:d5:9b:70:28:42:f4:15:f2:4a:b5:dd:38:aa:c7:ab:f5:68: 7d:a8:7e:da:3e:d8:a4:c0:ae:24:22:b5:3b:1b:bb:2b:ac:4f: a7:50:60:3e:ca:e5:66:6f:d8:45:be:ec:c3:9f:fb:ba:b8:1c: 73:10:75:d5:3f:c1:70:8b:01:87:13:8a:35:80:69:9a:00:34: 85:8e:55:ce:08:0a:1f:fb:92:f3:1d:29:ee:9a:dc:23:9d:65: 42:c2:29:3c:83:5c:4b:a3:94:24:cb:b8:6c:89:03:69:1f:c9: e0:93:26:e3:04:9d:1e:9b:42:54:a0:b5:ba:0c:f4:9c:7d:b7: 9c:33:63:93:95:a4:b8:36:08:59:0e:89:54:04:5f:cc:c1:58: b6:93:4b:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGKXy3j+1AzddP0qLeo/fuqxYe/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjA3MjkxMDI5MTBaFw0yNjA3MzAxMjExMTBaMDMxMTAvBgNV BAMTKEZCNEQ4NTIzRTBEMTJEMURDNTUwRjFFOTJGOEE2Q0E0NzY5OUZCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBZ7R5C3++XdyvI6cUUwIAQQA KYmF9/x74ixGnqPDTlkyrMDgN051kvwy3n6IEmjEqWsDzChRGU05gcJ+nDbdYSD5 ddXguLAAph1ZRJKu/68kzt8D6BCTooSms2Q66La8eJ2jn6lcgK0WSOTnLKJ6ffLB SDDqOeJT7ZE139xkOyMv+9RcmH+dP3oNdSCqTEt5zGzVvluMKzko3muGNpV16a5e n3Vqhp4eRqtOI8cc1M7V/hQxn803f6iZDvicA7yvox2Kzp0L3E8YFexboKRoZEKm HDXHggx8iMOSrZHJmVFQ9Z81hLKJl3E/iAU4Ut7fUoUu9Hcd7FhUNz1/YEoDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+02FI+DRLR3FUPHpL4pspHaZ+64wHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu6PMrERxglm op74iiWbEj+BAvzZz1JATpIOGEsFYIjGTqxwsuhhg1riTan7BYu/UAo7ZTo5sH1P iA+cgsd3cWYLLfciLXPtL6fvDvl3VIDBGBbwX3OCG6ykZNta+bec8nzKUiwCkF7G 9W/witWbcChC9BXySrXdOKrHq/Vofah+2j7YpMCuJCK1Oxu7K6xPp1BgPsrlZm/Y Rb7sw5/7urgccxB11T/BcIsBhxOKNYBpmgA0hY5VzggKH/uS8x0p7prcI51lQsIp PINcS6OUJMu4bIkDaR/J4JMm4wSdHptCVKC1ugz0nH23nDNjk5WkuDYIWQ6JVARf zMFYtpNLWw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:46 2026 by rpki-client