$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json) Hash identifier: b6PSs3VQLtah72Opkwu/aDufRCo3njvWQc+2zEnn0x0= Subject key identifier: 78:E9:9E:85:7C:CA:0E:C0:3C:4B:0D:5E:6C:27:FC:28:FE:AA:52:C5 Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Certificate serial: 023A660A4C0EC93078B82E00AFF0393C4A11C8A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft Manifest number: 34 Signing time: Tue 28 Jul 2026 09:21:30 +0000 Manifest this update: Tue 28 Jul 2026 09:16:30 +0000 Manifest next update: Wed 29 Jul 2026 13:01:30 +0000 Files and hashes: 1: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: H4Hal7e3vHFOySZ0qlgGhJYnQKlQBmiA/n0L+tzJBxk=) 2: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3a:66:0a:4c:0e:c9:30:78:b8:2e:00:af:f0:39:3c:4a:11:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Validity Not Before: Jul 28 09:16:30 2026 GMT Not After : Jul 29 13:01:30 2026 GMT Subject: CN=78E99E857CCA0EC03C4B0D5E6C27FC28FEAA52C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:34:c8:da:8a:fc:19:db:ac:bb:c9:55:27: 45:b5:88:f3:46:99:b2:28:d6:27:6f:db:15:67:d5: 1e:10:f6:99:8b:c4:61:f9:f7:10:30:c4:8a:5c:46: 64:df:9f:5a:39:82:6d:86:57:1b:91:a9:db:13:dd: 64:15:c5:29:c5:c5:01:1b:c7:2a:00:d2:bf:3c:87: 49:49:d9:61:60:8f:3b:99:a1:d6:f8:18:cc:82:8c: 11:ba:15:98:85:17:26:44:b0:5f:75:e8:03:d2:df: bc:b0:82:9e:e2:5e:64:7e:1d:e8:0c:5e:9e:53:0b: 13:78:6d:89:e9:ec:f5:b3:3f:45:28:75:78:bb:53: 0e:89:b5:52:00:2a:0b:a6:30:db:5c:6c:04:32:17: 33:09:c6:c4:1d:36:92:33:ed:38:75:a9:b2:3a:d3: c0:24:93:ed:fb:0e:5f:da:e7:e7:8f:6b:21:dc:ca: 93:7c:0f:d5:77:c2:4a:cd:7d:19:9a:19:d8:0e:f0: f6:da:4f:38:8e:c0:44:9a:fc:83:b6:1f:a0:98:ca: 47:c4:93:ff:f7:a0:75:cc:3f:7f:81:0b:4f:1e:09: 4c:bc:f8:1b:bd:73:51:3a:b4:b6:4d:cc:05:ba:da: cf:28:34:e4:af:4a:35:5e:bd:62:ef:03:a7:92:8e: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E9:9E:85:7C:CA:0E:C0:3C:4B:0D:5E:6C:27:FC:28:FE:AA:52:C5 X509v3 Authority Key Identifier: keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8e:43:52:ed:e2:8c:73:81:d8:2a:a4:e7:4b:30:62:5f:b8: ac:29:9f:ef:17:17:2d:38:30:51:9b:3b:c9:c6:ba:51:46:92: c8:e3:73:2e:d6:16:68:b7:68:76:a5:c5:95:99:8b:de:f8:64: f5:cf:4f:77:b6:ab:aa:77:db:2d:b4:f3:59:6d:6b:55:2c:96: 23:5e:30:d3:7d:c3:06:bf:41:bf:1c:be:44:a0:db:82:3e:94: a2:ef:86:0a:42:51:ff:dd:36:3e:35:83:8d:49:d0:bf:0d:25: 83:09:ac:5e:04:6f:6f:42:6b:77:51:8b:80:8e:d9:8e:9c:4c: 57:ba:1d:5a:b6:82:d4:44:47:7a:65:51:42:77:af:6c:b6:40: a9:b6:05:36:8e:2d:72:93:3b:05:b8:72:e8:e7:63:f5:fa:9d: 2a:89:6f:40:60:5b:c8:42:45:db:ac:cd:6a:b0:13:43:27:83: cd:20:c1:99:6b:7a:a8:37:f9:cf:9a:d8:46:df:25:6f:82:5e: ae:a0:cf:f0:94:6d:6a:88:82:07:4a:ce:08:4b:58:c5:5a:36: d2:1c:31:42:2e:28:0c:79:b7:db:9f:d8:30:44:13:68:7e:1c: ab:1e:1b:13:8a:7c:d5:16:d4:e8:95:be:82:fb:d8:1b:27:99: 62:e6:c2:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAjpmCkwOyTB4uC4Ar/A5PEoRyKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1 Q0YwODM5MjAeFw0yNjA3MjgwOTE2MzBaFw0yNjA3MjkxMzAxMzBaMDMxMTAvBgNV BAMTKDc4RTk5RTg1N0NDQTBFQzAzQzRCMEQ1RTZDMjdGQzI4RkVBQTUyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYDTI2or8Gdusu8lVJ0W1iPNG mbIo1idv2xVn1R4Q9pmLxGH59xAwxIpcRmTfn1o5gm2GVxuRqdsT3WQVxSnFxQEb xyoA0r88h0lJ2WFgjzuZodb4GMyCjBG6FZiFFyZEsF916APS37ywgp7iXmR+HegM Xp5TCxN4bYnp7PWzP0UodXi7Uw6JtVIAKgumMNtcbAQyFzMJxsQdNpIz7Th1qbI6 08Akk+37Dl/a5+ePayHcypN8D9V3wkrNfRmaGdgO8PbaTziOwESa/IO2H6CYykfE k//3oHXMP3+BC08eCUy8+Bu9c1E6tLZNzAW62s8oNOSvSjVevWLvA6eSjpPfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeOmehXzKDsA8Sw1ebCf8KP6qUsUwHwYDVR0j BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3 RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArY5DUu3ijHOB 2Cqk50swYl+4rCmf7xcXLTgwUZs7yca6UUaSyONzLtYWaLdodqXFlZmL3vhk9c9P d7arqnfbLbTzWW1rVSyWI14w033DBr9Bvxy+RKDbgj6Uou+GCkJR/902PjWDjUnQ vw0lgwmsXgRvb0Jrd1GLgI7ZjpxMV7odWraC1ERHemVRQnevbLZAqbYFNo4tcpM7 Bbhy6Odj9fqdKolvQGBbyEJF26zNarATQyeDzSDBmWt6qDf5z5rYRt8lb4JerqDP 8JRtaoiCB0rOCEtYxVo20hwxQi4oDHm325/YMEQTaH4cqx4bE4p81RbU6JW+gvvY GyeZYubCrw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:17:40 2026 by rpki-client