$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: TMy/dcYn26Crml8Hzbt9tNoo7pR3mYusy0PC44Ahx98= Subject key identifier: C4:C2:0B:CC:52:5D:40:99:F9:EF:49:38:5C:C5:DD:28:CA:90:21:A1 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 33E3E7A852A8F8275D00786CC1A9C91AD79B5A52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 4B Signing time: Wed 29 Jul 2026 21:35:17 +0000 Manifest this update: Wed 29 Jul 2026 21:30:17 +0000 Manifest next update: Thu 30 Jul 2026 23:03:17 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: JaLLJ7Hem54zPCCc6zbj2tcYi2iCIlhXw+Sb81cBQMk=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e3:e7:a8:52:a8:f8:27:5d:00:78:6c:c1:a9:c9:1a:d7:9b:5a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Jul 29 21:30:17 2026 GMT Not After : Jul 30 23:03:17 2026 GMT Subject: CN=C4C20BCC525D4099F9EF49385CC5DD28CA9021A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:cb:18:6b:ce:ea:34:92:b0:68:e0:32:e9: ab:a1:b9:b2:60:77:27:70:28:61:d3:09:ea:3c:9e: c4:78:fc:7a:28:40:04:e9:12:64:6e:d6:6e:b3:c2: a7:11:cd:f6:f5:31:3b:a8:97:5f:4c:e7:4f:43:b6: df:5f:0a:63:ce:d3:73:c1:4e:62:e4:5e:ba:ef:94: 13:d7:fe:fe:7e:38:ef:8b:b2:c0:54:8c:27:d3:35: c6:81:9a:ae:58:0f:d1:f7:2c:b9:16:4b:17:49:f9: d7:20:5f:a8:42:c3:21:5a:c0:52:52:83:26:12:0a: 5f:a0:07:93:78:a9:5d:9f:1c:e7:d5:87:04:33:c6: f4:79:85:95:5b:f9:74:d1:4e:08:41:58:eb:ca:f6: eb:d7:a7:40:f5:6f:f7:20:e8:87:9e:2d:34:f2:0c: 37:df:eb:c0:96:10:ac:16:e7:b2:8d:91:23:53:df: a7:eb:e8:d6:a5:5f:ab:42:43:34:e7:ef:e3:8d:e0: 2e:cd:f5:7f:ef:76:78:2c:0d:15:ef:ba:d2:fb:9d: cb:c2:76:5f:88:27:70:89:af:48:92:0b:17:c5:b8: e6:bf:ce:f3:f3:8f:d1:a2:29:1f:f4:04:91:b8:20: 8f:21:20:74:65:22:82:ef:2d:6e:5b:12:6b:09:f6: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C2:0B:CC:52:5D:40:99:F9:EF:49:38:5C:C5:DD:28:CA:90:21:A1 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0d:4f:84:8d:85:9c:77:b9:c4:d9:4d:a6:ef:5b:44:2b:e7: 2f:b6:37:11:97:84:6c:db:d8:8c:75:fd:23:4b:2c:d6:56:c9: 43:33:08:fe:f5:93:20:76:71:51:f1:99:cf:a8:04:d9:68:62: ca:11:28:e7:e1:16:a9:e7:0e:a0:a9:f3:08:c4:a3:01:4d:b5: 42:93:be:7b:f2:1a:1a:f6:db:a0:e4:b8:5a:16:32:36:df:ba: 73:fe:3f:81:6f:c3:42:2b:b3:7d:36:8f:36:f4:05:cc:44:af: 0b:df:fa:a4:12:18:16:88:b0:ac:32:1b:ba:a6:f5:33:90:4d: 30:54:03:8a:92:ed:a7:1b:f2:33:c9:8d:d8:8d:0a:93:ef:cc: 6b:89:d3:92:1d:08:6d:96:cb:59:9a:ec:12:68:a2:a9:53:3e: 76:4b:c6:dc:9e:4e:6b:75:47:5e:ce:e5:76:3f:67:d1:35:55: a0:46:5a:da:8d:fe:e7:10:14:fb:02:a7:34:42:e8:76:57:ea: 2a:d4:4d:ec:29:6f:b9:61:82:ec:2b:2a:32:82:fb:77:02:ae: 0e:22:2d:00:5d:82:50:b5:c0:5a:e5:a3:b7:96:26:85:17:85: 98:04:a1:7f:ca:8d:1c:76:ef:09:2c:cf:f5:78:01:3c:72:63: 00:14:c8:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM+PnqFKo+CddAHhswanJGtebWlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjA3MjkyMTMwMTdaFw0yNjA3MzAyMzAzMTdaMDMxMTAvBgNV BAMTKEM0QzIwQkNDNTI1RDQwOTlGOUVGNDkzODVDQzVERDI4Q0E5MDIxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG28sYa87qNJKwaOAy6auhubJg dydwKGHTCeo8nsR4/HooQATpEmRu1m6zwqcRzfb1MTuol19M509Dtt9fCmPO03PB TmLkXrrvlBPX/v5+OO+LssBUjCfTNcaBmq5YD9H3LLkWSxdJ+dcgX6hCwyFawFJS gyYSCl+gB5N4qV2fHOfVhwQzxvR5hZVb+XTRTghBWOvK9uvXp0D1b/cg6IeeLTTy DDff68CWEKwW57KNkSNT36fr6NalX6tCQzTn7+ON4C7N9X/vdngsDRXvutL7ncvC dl+IJ3CJr0iSCxfFuOa/zvPzj9GiKR/0BJG4II8hIHRlIoLvLW5bEmsJ9vVDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxMILzFJdQJn570k4XMXdKMqQIaEwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA1PhI2FnHe5 xNlNpu9bRCvnL7Y3EZeEbNvYjHX9I0ss1lbJQzMI/vWTIHZxUfGZz6gE2WhiyhEo 5+EWqecOoKnzCMSjAU21QpO+e/IaGvbboOS4WhYyNt+6c/4/gW/DQiuzfTaPNvQF zESvC9/6pBIYFoiwrDIbuqb1M5BNMFQDipLtpxvyM8mN2I0Kk+/Ma4nTkh0IbZbL WZrsEmiiqVM+dkvG3J5Oa3VHXs7ldj9n0TVVoEZa2o3+5xAU+wKnNELodlfqKtRN 7ClvuWGC7CsqMoL7dwKuDiItAF2CULXAWuWjt5YmhReFmAShf8qNHHbvCSzP9XgB PHJjABTIZQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:55 2026 by rpki-client