$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: 3FjhL8Enba3SCn7+RPNnLHo7/rnbTIzTYGs1g76hbx8= Subject key identifier: A8:F3:FB:08:7F:52:1E:FF:5A:1B:7D:BC:CB:FE:30:B8:04:20:BF:7B Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 544365E28182CD3808B4C828788AD941B8515DDD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 15:07:05 +0000 Manifest this update: Tue 28 Jul 2026 15:02:05 +0000 Manifest next update: Wed 29 Jul 2026 17:15:05 +0000 Files and hashes: 1: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) 2: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: d4kTqzu5hgmp13rwJ8uNDrrb30wVtnFXIRta4xM9lKY=) 3: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:43:65:e2:81:82:cd:38:08:b4:c8:28:78:8a:d9:41:b8:51:5d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Jul 28 15:02:05 2026 GMT Not After : Jul 29 17:15:05 2026 GMT Subject: CN=A8F3FB087F521EFF5A1B7DBCCBFE30B80420BF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:63:1e:ba:45:3b:ea:9c:8c:b5:c5:99:0d: cc:7b:85:31:88:ce:1d:7d:7d:92:9a:2c:5d:21:4c: 8d:30:06:79:aa:dd:a8:d7:8e:67:32:1b:c3:92:77: b5:f9:5f:61:f6:60:d8:ec:f3:5c:eb:ee:e1:8a:fa: d2:93:c1:ae:ab:7d:58:98:28:1c:22:a6:56:93:f3: 3e:02:a2:94:4b:20:60:8f:17:69:f3:af:2c:0a:4e: f4:51:6e:9d:3a:e3:fc:27:fa:dc:33:83:8c:fb:a2: 19:39:1e:69:fc:f4:12:ef:2a:2d:34:c1:d5:7e:d5: 04:07:ed:d2:bc:85:18:99:ec:a0:b7:7a:2d:50:84: b5:d7:b0:04:3e:aa:f7:5b:a5:90:98:fc:0b:10:73: 67:9c:bc:38:a7:02:44:2a:0e:d0:d5:a0:d0:e6:49: 07:25:e8:77:31:10:3e:07:52:7a:ea:ef:b3:b3:47: fb:a8:92:b9:13:aa:1d:fc:7d:22:1c:0f:bc:41:d0: 80:b4:5a:c0:d6:1c:b3:96:27:cb:d9:9c:ba:ff:44: b9:5e:ab:99:e7:d5:c1:9e:1c:78:f2:02:16:04:70: 0a:6b:88:dc:79:e4:d5:98:9d:8f:55:5a:17:4b:60: 9c:04:0a:37:19:bd:d6:8d:3a:2a:ba:36:eb:65:44: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F3:FB:08:7F:52:1E:FF:5A:1B:7D:BC:CB:FE:30:B8:04:20:BF:7B X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:62:0a:8f:53:02:12:8e:9d:76:48:bc:14:55:04:02:3d:32: 61:8d:18:81:1b:e2:bc:df:91:7e:bd:15:23:cb:83:43:e3:34: a4:15:e5:18:7d:fe:2e:e4:a4:82:b3:f0:1b:1a:4f:2d:5d:89: b7:cd:af:8e:0d:23:87:0f:47:fd:a2:13:04:95:2e:8f:8f:63: 39:10:19:66:85:e3:76:f1:2f:5a:6e:ca:3e:3a:ab:f2:48:4d: 81:45:4a:e6:46:08:52:e1:4c:ec:98:34:51:ca:6d:44:48:15: 6a:b3:a8:64:cf:42:17:15:e7:28:06:99:0b:09:1e:90:00:ca: dd:1f:b8:05:2a:10:a9:eb:e6:aa:e3:ab:f5:f0:f2:5f:e3:7d: 34:da:c4:8f:ba:54:75:6e:44:4f:c3:7b:0c:e6:70:56:1a:ac: 66:92:ea:b2:cc:14:8a:27:1d:7d:24:74:ed:ad:32:84:14:95: 64:9f:09:9b:23:2a:49:dd:de:fd:95:5b:8d:94:a7:8e:0f:b3: cf:8a:bc:04:72:7a:fb:a7:82:45:c5:69:23:1a:d1:e7:7d:14: e1:12:d0:3f:6c:4a:6a:5d:ee:ff:0b:a3:89:2d:14:42:e4:d6: cb:c6:73:1f:fb:67:6e:6f:e1:5e:1b:6d:d4:8a:69:8f:00:4c: cf:71:ab:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVENl4oGCzTgItMgoeIrZQbhRXd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA3MjgxNTAyMDVaFw0yNjA3MjkxNzE1MDVaMDMxMTAvBgNV BAMTKEE4RjNGQjA4N0Y1MjFFRkY1QTFCN0RCQ0NCRkUzMEI4MDQyMEJGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+mMeukU76pyMtcWZDcx7hTGI zh19fZKaLF0hTI0wBnmq3ajXjmcyG8OSd7X5X2H2YNjs81zr7uGK+tKTwa6rfViY KBwiplaT8z4CopRLIGCPF2nzrywKTvRRbp064/wn+twzg4z7ohk5Hmn89BLvKi00 wdV+1QQH7dK8hRiZ7KC3ei1QhLXXsAQ+qvdbpZCY/AsQc2ecvDinAkQqDtDVoNDm SQcl6HcxED4HUnrq77OzR/uokrkTqh38fSIcD7xB0IC0WsDWHLOWJ8vZnLr/RLle q5nn1cGeHHjyAhYEcApriNx55NWYnY9VWhdLYJwECjcZvdaNOiq6NutlRDWfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqPP7CH9SHv9aG328y/4wuAQgv3swHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGIKj1MCEo6d dki8FFUEAj0yYY0YgRvivN+Rfr0VI8uDQ+M0pBXlGH3+LuSkgrPwGxpPLV2Jt82v jg0jhw9H/aITBJUuj49jORAZZoXjdvEvWm7KPjqr8khNgUVK5kYIUuFM7Jg0Ucpt REgVarOoZM9CFxXnKAaZCwkekADK3R+4BSoQqevmquOr9fDyX+N9NNrEj7pUdW5E T8N7DOZwVhqsZpLqsswUiicdfSR07a0yhBSVZJ8JmyMqSd3e/ZVbjZSnjg+zz4q8 BHJ6+6eCRcVpIxrR530U4RLQP2xKal3u/wujiS0UQuTWy8ZzH/tnbm/hXhtt1Ipp jwBMz3Gr0g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:07:22 2026 by rpki-client