$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: G34XiVdyh3PuJTbzy/DRi/RVIkK7Z6BKe9DUA8cyFpU= Subject key identifier: E8:37:D0:73:11:15:C0:7F:00:F2:4A:FA:57:08:CE:CF:00:BE:C6:20 Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 673C1E92FBC2CA213B047E0F8A179050EDC9476A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: 88 Signing time: Wed 29 Jul 2026 08:48:54 +0000 Manifest this update: Wed 29 Jul 2026 08:43:54 +0000 Manifest next update: Thu 30 Jul 2026 12:44:54 +0000 Files and hashes: 1: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (hash: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=) 2: 3130332e38312e342e302f32322d3232203d3e203633373034.roa (hash: xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=) 3: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: SrFxgLku6zMOTXr+/cyyqLOrQYLsKpbnZXPhN2O413k=) 4: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 5: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (hash: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk=) 6: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) 7: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) 8: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3c:1e:92:fb:c2:ca:21:3b:04:7e:0f:8a:17:90:50:ed:c9:47:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Jul 29 08:43:54 2026 GMT Not After : Jul 30 12:44:54 2026 GMT Subject: CN=E837D0731115C07F00F24AFA5708CECF00BEC620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:e9:e8:86:a8:f6:90:57:6a:33:f8:9a:2b: 6b:bc:66:40:cb:ff:32:38:a0:2b:66:96:62:14:b8: 36:b4:3b:1a:80:41:a7:a3:77:8e:db:31:dd:7d:8a: 27:fd:b9:e8:67:1f:f7:be:c6:2c:59:cf:83:cc:98: 17:16:4b:c0:09:2d:17:7b:4e:00:c0:e3:7f:70:6b: 88:ee:eb:56:0f:a9:c8:26:3f:a7:68:a6:63:03:36: 9a:d1:e8:c2:ba:7c:5e:fe:0a:fa:37:f8:b4:15:77: 42:33:3f:32:65:3b:ef:3b:b8:1b:d3:eb:25:af:fe: 13:af:94:b2:b3:48:2c:9b:85:a0:85:4b:52:e3:96: 46:d8:36:4f:11:73:cb:13:25:35:21:53:4a:f0:85: 5f:b0:b0:e7:07:01:a5:07:d7:9d:56:dc:00:2c:fb: cd:d8:a1:e6:60:db:5a:d9:12:e6:01:23:1f:f3:35: 98:cf:e3:aa:a4:67:81:19:22:98:d1:48:e0:29:1e: e0:16:10:8f:1e:c0:06:ec:bf:fc:e0:3a:a2:04:53: 23:fe:17:72:7c:03:ad:ad:60:27:ec:61:3a:5a:52: 9d:0d:b1:75:ac:f0:15:c4:6c:01:69:ac:08:c2:eb: b3:0b:c6:b3:71:00:fc:89:3a:70:a4:38:a5:ec:39: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:37:D0:73:11:15:C0:7F:00:F2:4A:FA:57:08:CE:CF:00:BE:C6:20 X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2e:0c:8a:52:ec:88:9d:e8:f8:5a:37:e4:42:dd:31:05:1c: 57:20:7a:70:f3:de:13:a1:ce:82:41:3d:8c:42:49:13:18:4f: 9d:ac:66:5d:4c:b6:c0:8b:4a:2c:41:48:d8:84:d5:0b:ce:3f: c1:bd:98:ca:56:80:e1:42:62:51:c2:d5:8a:91:45:a1:4e:5f: d8:a1:47:2a:0f:74:8c:15:d7:21:2f:23:57:75:37:b5:14:31: 95:74:7d:0e:fd:f0:07:ca:ae:32:9e:54:d6:b0:6d:52:13:49: 6e:f8:92:8d:e5:1e:e0:e8:72:34:0f:3f:de:36:42:a4:91:c6: e0:f5:41:f0:d6:5b:f2:bf:b9:ca:d9:3c:60:64:51:fb:10:07: 68:10:fc:44:e7:8b:2f:62:d9:c4:e5:ef:b2:f9:6f:06:ab:d0: ba:58:5f:64:9c:4c:69:44:58:ba:3c:24:06:b7:c1:a8:08:4c: 84:cd:52:d9:55:08:4d:41:e5:26:bd:99:27:58:56:ea:ea:1c: a9:41:82:4b:7d:bf:30:2e:8e:98:5b:9a:30:4a:3b:39:90:5c: 1c:2e:2b:37:ff:7f:27:e0:e0:c4:73:4d:4a:45:a5:fd:94:4b: a5:e4:59:0a:52:8f:c2:dd:58:d6:4f:a5:af:d2:81:4d:2f:28: 98:c5:f9:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZzwekvvCyiE7BH4PiheQUO3JR2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA3MjkwODQzNTRaFw0yNjA3MzAxMjQ0NTRaMDMxMTAvBgNV BAMTKEU4MzdEMDczMTExNUMwN0YwMEYyNEFGQTU3MDhDRUNGMDBCRUM2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6+nohqj2kFdqM/iaK2u8ZkDL /zI4oCtmlmIUuDa0OxqAQaejd47bMd19iif9uehnH/e+xixZz4PMmBcWS8AJLRd7 TgDA439wa4ju61YPqcgmP6dopmMDNprR6MK6fF7+Cvo3+LQVd0IzPzJlO+87uBvT 6yWv/hOvlLKzSCybhaCFS1LjlkbYNk8Rc8sTJTUhU0rwhV+wsOcHAaUH151W3AAs +83YoeZg21rZEuYBIx/zNZjP46qkZ4EZIpjRSOApHuAWEI8ewAbsv/zgOqIEUyP+ F3J8A62tYCfsYTpaUp0NsXWs8BXEbAFprAjC67MLxrNxAPyJOnCkOKXsOdQhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6DfQcxEVwH8A8kr6VwjOzwC+xiAwHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS4MilLsiJ3o +Fo35ELdMQUcVyB6cPPeE6HOgkE9jEJJExhPnaxmXUy2wItKLEFI2ITVC84/wb2Y ylaA4UJiUcLVipFFoU5f2KFHKg90jBXXIS8jV3U3tRQxlXR9Dv3wB8quMp5U1rBt UhNJbviSjeUe4OhyNA8/3jZCpJHG4PVB8NZb8r+5ytk8YGRR+xAHaBD8ROeLL2LZ xOXvsvlvBqvQulhfZJxMaURYujwkBrfBqAhMhM1S2VUITUHlJr2ZJ1hW6uocqUGC S32/MC6OmFuaMEo7OZBcHC4rN/9/J+DgxHNNSkWl/ZRLpeRZClKPwt1Y1k+lr9KB TS8omMX5ww== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:22 2026 by rpki-client