$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft File: 4D766E2BA41D99B155DD457741DB970EC3007E71.mft (raw, json) Hash identifier: 6k1iVUiBEyw3pD8+RL726WLEHk2XhKwxezrB6XLW3Xg= Subject key identifier: A9:E3:77:1D:31:60:95:14:AA:27:68:47:8C:C1:A9:86:0A:A2:30:A1 Authority key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Certificate issuer: /CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Certificate serial: 47EDECEB963700006A86DDE63DD4EAFE18717456 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft Manifest number: 3C Signing time: Wed 29 Jul 2026 03:53:23 +0000 Manifest this update: Wed 29 Jul 2026 03:48:23 +0000 Manifest next update: Thu 30 Jul 2026 07:14:23 +0000 Files and hashes: 1: 3130332e3234312e39352e302f32342d3234203d3e203539303130.roa (hash: PSe7EbgdWOhWUl3Vwo/B3/8fvz4znjeR8pQCfVHvk/g=) 2: 4D766E2BA41D99B155DD457741DB970EC3007E71.crl (hash: o6KzviHwxSEk4kI2TCENT2CEItcGCjjWfdOLYfUZ5G8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ed:ec:eb:96:37:00:00:6a:86:dd:e6:3d:d4:ea:fe:18:71:74:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Validity Not Before: Jul 29 03:48:23 2026 GMT Not After : Jul 30 07:14:23 2026 GMT Subject: CN=A9E3771D31609514AA2768478CC1A9860AA230A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:6c:7b:0a:93:1b:82:df:94:78:95:21:2e: 56:6e:99:b3:a8:ec:d1:db:48:3a:03:70:31:c1:46: 19:68:bb:66:17:00:d2:78:d9:72:6b:cb:ae:df:8f: 79:fd:ca:44:48:4c:6c:ec:ad:16:13:9c:57:98:25: bf:83:0e:c4:14:8d:cb:f4:07:19:fb:3d:12:9b:86: 65:87:30:72:96:05:2d:75:d8:9b:5f:15:54:2f:d0: 56:b9:2d:1f:b3:2a:09:5e:56:b0:9e:ee:82:ab:cf: f4:19:73:77:2d:ec:66:a8:5e:0f:64:92:ab:b8:2a: 70:fd:47:3c:09:f7:db:99:53:6a:fd:92:c0:db:e0: 90:b5:e0:41:d2:10:81:dc:02:b9:aa:a0:93:e3:49: 60:f3:8e:b4:93:d8:ff:3b:05:1e:c3:78:7c:e7:df: f3:d0:99:3b:9f:33:55:9f:97:3e:fd:c5:fd:37:98: c0:66:c1:be:bb:4b:f8:b8:a2:b6:e5:9d:c9:79:10: 37:b8:a1:d5:bd:9e:88:60:33:32:1f:26:81:c8:37: 1e:1d:69:f8:4b:2f:12:12:f4:6a:08:50:f7:a2:64: 9a:d2:e2:f5:90:10:10:73:53:5c:13:4a:75:34:de: fc:d2:dc:01:f6:47:72:10:92:87:a8:7b:eb:3c:d1: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:77:1D:31:60:95:14:AA:27:68:47:8C:C1:A9:86:0A:A2:30:A1 X509v3 Authority Key Identifier: keyid:4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d1:fc:87:dd:08:61:1c:c0:18:9d:3d:75:9b:2f:74:36:fe: 83:49:3a:b5:ce:ac:b0:0e:b7:26:7b:d1:fa:09:72:16:b8:bb: 64:c7:ac:2e:f6:0f:29:4c:eb:f9:f7:38:4a:40:6d:3f:86:e8: de:67:d7:17:d2:8b:ec:9b:87:63:6a:dc:4b:e9:46:57:a8:38: 21:74:e5:94:8c:6c:42:02:53:a6:15:5a:d0:1f:5f:c3:fe:8a: 24:ef:bd:92:ee:ce:3a:44:27:7a:5d:bf:6a:c9:bb:71:4d:c8: 42:80:52:8b:b4:c4:f0:2a:80:9e:dd:b8:4b:3f:05:a3:af:4c: ce:ed:d5:c6:a4:a2:21:7c:e9:36:18:15:b3:22:52:88:04:2f: 9c:3d:db:93:75:34:bd:eb:0b:f1:b6:2e:db:e8:f0:b8:52:54: 37:db:22:52:df:81:8b:d6:a6:98:7c:a8:18:dd:c3:4e:a6:42: e8:71:55:5e:57:8b:67:67:b0:d5:5c:85:02:9a:64:27:10:30: 94:23:20:46:10:52:44:ea:17:56:cd:04:47:8f:72:81:20:5f: 99:8d:a4:af:4c:e6:c0:6c:b3:bc:fa:49:57:2b:80:a5:fc:4e: f1:e6:10:74:13:80:95:d3:01:52:61:ce:68:02:a0:c1:f9:9d: 50:7d:4c:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR+3s65Y3AABqht3mPdTq/hhxdFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVD MzAwN0U3MTAeFw0yNjA3MjkwMzQ4MjNaFw0yNjA3MzAwNzE0MjNaMDMxMTAvBgNV BAMTKEE5RTM3NzFEMzE2MDk1MTRBQTI3Njg0NzhDQzFBOTg2MEFBMjMwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRWx7CpMbgt+UeJUhLlZumbOo 7NHbSDoDcDHBRhlou2YXANJ42XJry67fj3n9ykRITGzsrRYTnFeYJb+DDsQUjcv0 Bxn7PRKbhmWHMHKWBS112JtfFVQv0Fa5LR+zKgleVrCe7oKrz/QZc3ct7GaoXg9k kqu4KnD9RzwJ99uZU2r9ksDb4JC14EHSEIHcArmqoJPjSWDzjrST2P87BR7DeHzn 3/PQmTufM1Wflz79xf03mMBmwb67S/i4orblncl5EDe4odW9nohgMzIfJoHINx4d afhLLxIS9GoIUPeiZJrS4vWQEBBzU1wTSnU03vzS3AH2R3IQkoeoe+s80dV3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqeN3HTFglRSqJ2hHjMGphgqiMKEwHwYDVR0j BBgwFoAUTXZuK6QdmbFV3UV3QduXDsMAfnEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc5OTI3MTEyNzE1NDcxMS8wLzRENzY2RTJCQTQxRDk5QjE1NURENDU3NzQxREI5 NzBFQzMwMDdFNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3OTkyNzExMjcxNTQ3MTEvMC80RDc2NkUyQkE0MUQ5 OUIxNTVERDQ1Nzc0MURCOTcwRUMzMDA3RTcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdH8h90IYRzA GJ09dZsvdDb+g0k6tc6ssA63JnvR+glyFri7ZMesLvYPKUzr+fc4SkBtP4bo3mfX F9KL7JuHY2rcS+lGV6g4IXTllIxsQgJTphVa0B9fw/6KJO+9ku7OOkQnel2/asm7 cU3IQoBSi7TE8CqAnt24Sz8Fo69Mzu3VxqSiIXzpNhgVsyJSiAQvnD3bk3U0vesL 8bYu2+jwuFJUN9siUt+Bi9ammHyoGN3DTqZC6HFVXleLZ2ew1VyFAppkJxAwlCMg RhBSROoXVs0ER49ygSBfmY2kr0zmwGyzvPpJVyuApfxO8eYQdBOAldMBUmHOaAKg wfmdUH1Msw== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client