$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: XMp+QYCA6FsZ2zbNN6Hx0Fd2nsiINXB3yfDVQREA7C0= Subject key identifier: A6:DB:96:0D:16:B6:9C:68:43:6D:BD:13:AD:43:24:5A:D1:69:24:27 Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 1A5120AA516CFB7153A0A8E5F47523F7BA3C74D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 4D Signing time: Tue 28 Jul 2026 19:37:38 +0000 Manifest this update: Tue 28 Jul 2026 19:32:38 +0000 Manifest next update: Wed 29 Jul 2026 22:41:38 +0000 Files and hashes: 1: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 2: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 3: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 4: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 5: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 6: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 7: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 8: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 9: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 10: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 11: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 12: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 13: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 14: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: RSK2fq0qfA1a1//rEKX02tIW8bZNm+xKgWdnjwyuQFw=) 15: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 16: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 17: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 18: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 19: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 20: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 21: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 22: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) 23: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:51:20:aa:51:6c:fb:71:53:a0:a8:e5:f4:75:23:f7:ba:3c:74:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Jul 28 19:32:38 2026 GMT Not After : Jul 29 22:41:38 2026 GMT Subject: CN=A6DB960D16B69C68436DBD13AD43245AD1692427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:17:60:77:73:6a:17:8b:f5:0e:5e:17:4b: 2d:5a:25:f2:3c:66:ba:d6:2f:5a:70:0d:c4:02:e5: d1:e3:3e:c4:0b:36:74:9e:c2:75:9c:d2:69:ea:29: 69:0a:75:f0:6d:88:5c:8e:3f:69:ba:07:56:c5:69: b6:99:72:a1:c3:05:8a:24:b0:0e:7f:89:23:a9:61: 07:c6:39:02:e1:f4:d7:12:45:84:24:29:9f:f3:3e: 7f:dd:b1:59:8d:e4:b4:a9:e6:29:06:dd:e0:3e:ff: f1:eb:89:4e:2c:09:5c:21:42:ed:0b:5b:c3:59:d9: 92:b3:92:ec:a3:1b:a4:c7:81:c3:ad:51:c1:a6:9c: f5:4f:2c:16:83:04:a1:42:27:89:c7:39:da:34:c9: 20:aa:6d:db:24:f5:12:d9:49:81:1a:6f:d9:8b:2c: 4c:01:7f:07:f8:b3:b6:1e:47:fa:8f:aa:87:6f:94: 49:36:99:63:50:77:b9:78:9b:09:5d:1c:47:dc:5f: 03:ce:3c:78:8e:f6:45:29:cc:b6:84:26:f0:35:de: 7d:92:27:f7:0d:7e:cf:f6:1f:d4:87:1f:d1:81:42: be:75:48:9c:76:83:c4:f7:24:fa:57:02:8c:e9:1e: e4:65:ce:5a:1b:78:34:48:bc:ce:a8:4f:69:27:03: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DB:96:0D:16:B6:9C:68:43:6D:BD:13:AD:43:24:5A:D1:69:24:27 X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:26:2c:e7:ac:a3:bc:f5:9e:a4:9b:d2:64:f3:52:d1:a7: 68:7f:b4:ee:c8:16:65:30:c7:83:9a:bf:16:7d:08:69:9a:94: 68:2b:1b:22:e7:8e:e7:f8:ca:2e:1d:29:e2:b4:69:c9:fe:bf: 9a:e4:bb:b6:73:3c:8e:63:4f:6f:e0:c6:f8:9a:c9:42:11:83: 85:8c:4e:71:06:f9:cc:3b:e5:19:a3:9a:75:c6:b0:1d:1e:83: d1:09:a1:4a:24:c8:8e:a6:e1:86:ac:e4:64:20:ca:6b:fc:89: 49:5d:33:45:60:20:3a:09:6e:d7:8d:01:e7:6b:f7:51:f4:ac: bc:25:2e:65:b3:ff:9f:39:9a:93:5e:06:59:98:8e:b9:48:10: b5:21:99:d3:94:32:0e:78:30:5c:21:fd:22:04:97:62:c0:ce: 5b:02:80:d3:e4:35:a0:88:91:e6:22:45:00:4f:84:ba:3a:2b: 47:e2:f3:c6:ee:ae:24:32:da:80:c4:37:18:83:10:78:93:65: cc:fe:5c:d7:2b:93:e4:4e:96:0f:bc:e3:04:de:da:31:f2:0f: a2:e5:f5:38:2e:62:a8:0b:40:91:8e:f1:09:a9:f3:66:3f:1e: 16:76:46:b7:7c:ca:e6:9f:d1:dc:e2:69:33:a2:44:4c:84:e2: c0:dd:11:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGlEgqlFs+3FToKjl9HUj97o8dNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA3MjgxOTMyMzhaFw0yNjA3MjkyMjQxMzhaMDMxMTAvBgNV BAMTKEE2REI5NjBEMTZCNjlDNjg0MzZEQkQxM0FENDMyNDVBRDE2OTI0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyBdgd3NqF4v1Dl4XSy1aJfI8 ZrrWL1pwDcQC5dHjPsQLNnSewnWc0mnqKWkKdfBtiFyOP2m6B1bFabaZcqHDBYok sA5/iSOpYQfGOQLh9NcSRYQkKZ/zPn/dsVmN5LSp5ikG3eA+//HriU4sCVwhQu0L W8NZ2ZKzkuyjG6THgcOtUcGmnPVPLBaDBKFCJ4nHOdo0ySCqbdsk9RLZSYEab9mL LEwBfwf4s7YeR/qPqodvlEk2mWNQd7l4mwldHEfcXwPOPHiO9kUpzLaEJvA13n2S J/cNfs/2H9SHH9GBQr51SJx2g8T3JPpXAozpHuRlzlobeDRIvM6oT2knA8dtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUptuWDRa2nGhDbb0TrUMkWtFpJCcwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9QmLOeso7z1 nqSb0mTzUtGnaH+07sgWZTDHg5q/Fn0IaZqUaCsbIueO5/jKLh0p4rRpyf6/muS7 tnM8jmNPb+DG+JrJQhGDhYxOcQb5zDvlGaOadcawHR6D0QmhSiTIjqbhhqzkZCDK a/yJSV0zRWAgOglu140B52v3UfSsvCUuZbP/nzmak14GWZiOuUgQtSGZ05QyDngw XCH9IgSXYsDOWwKA0+Q1oIiR5iJFAE+EujorR+Lzxu6uJDLagMQ3GIMQeJNlzP5c 1yuT5E6WD7zjBN7aMfIPouX1OC5iqAtAkY7xCanzZj8eFnZGt3zK5p/R3OJpM6JE TITiwN0RQw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:41:09 2026 by rpki-client