$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: 2ZBH6kZQzlzPJGiFHhkjDPFpDTPJcwStUXIziGidYxk= Subject key identifier: 57:47:D1:AC:28:12:E6:EE:4D:4E:0F:B5:E2:8B:ED:01:64:F3:4F:56 Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 5341C5EF4C7A45D698EE3798C280A3B76CF532A3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 43 Signing time: Wed 29 Jul 2026 00:33:00 +0000 Manifest this update: Wed 29 Jul 2026 00:28:00 +0000 Manifest next update: Thu 30 Jul 2026 03:01:00 +0000 Files and hashes: 1: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) 2: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: 1JS0nGDaqPBp/N38KztQLrQ7DWBROgYUQqJyM9Vp/4M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:41:c5:ef:4c:7a:45:d6:98:ee:37:98:c2:80:a3:b7:6c:f5:32:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Jul 29 00:28:00 2026 GMT Not After : Jul 30 03:01:00 2026 GMT Subject: CN=5747D1AC2812E6EE4D4E0FB5E28BED0164F34F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:47:18:03:39:af:a5:b6:42:d3:fc:44:8c: 39:79:62:67:c8:64:4b:1e:1e:0f:2b:8e:4d:61:f7: 22:40:aa:a3:1a:11:46:4f:37:cb:64:ba:e2:a7:62: bc:d1:c0:2c:16:a0:df:df:6b:94:1f:1c:e9:21:5e: ee:2c:1c:e6:d4:e7:ea:69:1b:06:25:10:35:6e:f0: c0:ce:f9:50:78:f8:30:f0:c2:55:ef:b5:44:27:7d: e5:52:95:2f:e8:9f:de:0b:d8:12:ff:8e:3a:b0:98: 70:91:fd:c9:9c:ae:78:81:e0:bf:d1:f4:a5:74:cc: 14:cc:5b:31:3f:e1:54:23:cc:aa:c3:f1:b6:6d:9d: 5e:e0:96:96:b3:13:79:b6:40:1c:a7:86:29:53:ed: a2:91:f1:5f:58:96:f0:37:47:a3:b9:be:3a:8a:a9: 49:a6:ce:9a:71:cc:7c:e9:35:73:15:c1:25:51:62: 2c:b3:2c:06:7a:e2:63:ea:45:9d:30:d4:e5:36:24: 53:45:9f:69:c3:03:d4:15:de:76:2c:20:ae:5a:ac: 01:a3:76:58:fb:6b:92:d1:f8:0c:fa:de:f8:af:3e: 71:f8:4b:c9:c5:a9:75:c5:da:93:c7:21:87:ee:1c: 26:be:ba:e8:5a:e7:10:00:f7:01:c4:1f:57:8f:8e: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:D1:AC:28:12:E6:EE:4D:4E:0F:B5:E2:8B:ED:01:64:F3:4F:56 X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e6:c6:ea:a2:ec:8b:33:89:9d:4c:cc:38:3f:16:ff:42:42: c0:2a:e5:a0:99:06:e0:f3:ca:e0:e6:68:f6:15:7a:22:84:68: 04:9e:3f:5b:c8:71:f3:d5:fb:c4:4b:41:a2:87:f5:75:fa:c4: 62:af:a4:17:54:d8:0a:67:ec:25:77:4e:52:77:31:7e:3a:a2: a1:9f:f1:00:fb:73:9a:bd:10:8d:6f:47:c2:c9:10:91:5e:8e: 66:46:1b:59:fa:62:f5:19:d8:17:ae:6b:a2:73:20:1a:37:9d: 38:0d:1d:c1:ac:6f:46:79:2f:15:c1:bc:b3:87:dc:6f:ac:90: c7:53:6b:d9:92:8f:84:7d:e3:91:5b:15:0e:ab:19:ae:fd:fb: 2c:60:6a:11:b3:36:a3:c5:6c:80:1b:5a:78:36:ca:23:30:eb: 1f:1c:d2:9c:32:52:61:86:dc:6b:e7:56:40:90:5c:75:9e:31: 9e:4f:22:5f:8a:7f:bb:99:86:f4:93:ed:0c:89:57:a7:5c:aa: 5e:ce:04:3b:93:d5:d7:56:be:10:ca:c4:f2:ec:6a:ba:50:f8: 24:c9:c9:a2:75:c1:58:2a:6a:8c:33:39:d9:b4:5c:b8:a1:bc: 11:22:96:18:42:3b:39:74:8a:2d:64:1b:79:b0:48:4e:45:b2: 81:d6:34:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU0HF70x6RdaY7jeYwoCjt2z1MqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjA3MjkwMDI4MDBaFw0yNjA3MzAwMzAxMDBaMDMxMTAvBgNV BAMTKDU3NDdEMUFDMjgxMkU2RUU0RDRFMEZCNUUyOEJFRDAxNjRGMzRGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd50cYAzmvpbZC0/xEjDl5YmfI ZEseHg8rjk1h9yJAqqMaEUZPN8tkuuKnYrzRwCwWoN/fa5QfHOkhXu4sHObU5+pp GwYlEDVu8MDO+VB4+DDwwlXvtUQnfeVSlS/on94L2BL/jjqwmHCR/cmcrniB4L/R 9KV0zBTMWzE/4VQjzKrD8bZtnV7glpazE3m2QBynhilT7aKR8V9YlvA3R6O5vjqK qUmmzppxzHzpNXMVwSVRYiyzLAZ64mPqRZ0w1OU2JFNFn2nDA9QV3nYsIK5arAGj dlj7a5LR+Az63vivPnH4S8nFqXXF2pPHIYfuHCa+uuha5xAA9wHEH1ePjukxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV0fRrCgS5u5NTg+14ovtAWTzT1YwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABebG6qLsizOJ nUzMOD8W/0JCwCrloJkG4PPK4OZo9hV6IoRoBJ4/W8hx89X7xEtBoof1dfrEYq+k F1TYCmfsJXdOUncxfjqioZ/xAPtzmr0QjW9HwskQkV6OZkYbWfpi9RnYF65ronMg GjedOA0dwaxvRnkvFcG8s4fcb6yQx1Nr2ZKPhH3jkVsVDqsZrv37LGBqEbM2o8Vs gBtaeDbKIzDrHxzSnDJSYYbca+dWQJBcdZ4xnk8iX4p/u5mG9JPtDIlXp1yqXs4E O5PV11a+EMrE8uxqulD4JMnJonXBWCpqjDM52bRcuKG8ESKWGEI7OXSKLWQbebBI TkWygdY0pA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:09:15 2026 by rpki-client