$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json) Hash identifier: hEf7SPk11gWBStEZE6deHBnXt5BYT8wYpx9Zw90/qTc= Subject key identifier: B1:FC:D5:72:E6:2F:6C:E7:57:56:D7:90:7A:B1:6D:7E:DA:E4:03:4B Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Certificate serial: 248AE9C2B6DB121945D597FA20BF0A1113A041FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft Manifest number: 02B0 Signing time: Tue 28 Jul 2026 12:56:29 +0000 Manifest this update: Tue 28 Jul 2026 12:51:29 +0000 Manifest next update: Wed 29 Jul 2026 12:58:29 +0000 Files and hashes: 1: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: 0U4l5qnNGsaX/da0B2drdjJyzgoCU+C49ZfsU0Sb3r0=) 2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=) 3: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:e9:c2:b6:db:12:19:45:d5:97:fa:20:bf:0a:11:13:a0:41:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Validity Not Before: Jul 28 12:51:29 2026 GMT Not After : Jul 29 12:58:29 2026 GMT Subject: CN=B1FCD572E62F6CE75756D7907AB16D7EDAE4034B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:87:ca:98:17:41:c2:71:76:b7:e0:f8:39: 6a:04:33:15:b4:94:74:cb:c5:48:b6:9e:0c:ed:21: 40:0d:d1:bd:3c:60:ef:b7:b5:90:b5:b7:32:4d:24: 27:5f:a6:36:0f:53:07:09:06:2c:80:dd:eb:c3:c3: 64:2b:dd:e0:1e:21:bf:af:56:18:08:da:e2:99:a8: b9:83:80:0c:6d:e8:06:ed:ad:2f:70:e7:88:0a:20: 03:ab:3c:c2:95:cc:26:e2:77:7b:41:bc:b1:c7:6b: 7a:e8:b0:72:79:e9:6b:17:1c:c3:32:6b:51:dc:03: 34:73:b7:87:2d:e5:53:cd:87:a7:fd:1a:5a:4e:17: ee:4a:dc:a5:b8:46:ec:87:e8:dd:11:bd:c7:80:e3: cd:fd:8d:0b:3a:10:13:a8:ad:3f:c0:9b:d6:6d:de: 7f:81:51:6a:70:c1:c5:87:dc:7f:fd:7c:0a:6c:ab: fe:c0:4c:fc:90:be:ed:d7:a1:d5:b0:c2:4e:e1:7c: 1f:f3:49:e9:2e:d0:c2:69:d3:e8:73:22:f0:08:f8: de:b0:00:34:e3:ec:38:aa:6e:9a:ea:06:bb:c2:5c: c7:b5:1c:f4:34:df:fd:0b:d1:5d:14:91:e2:e8:c6: aa:f6:c6:a4:7e:67:d3:07:3c:c2:b5:58:8f:61:c6: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FC:D5:72:E6:2F:6C:E7:57:56:D7:90:7A:B1:6D:7E:DA:E4:03:4B X509v3 Authority Key Identifier: keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:df:95:7f:30:74:4f:d2:40:f8:81:2b:ce:8b:95:af:ce:04: d1:0c:41:6e:7b:31:bd:6e:d6:6c:10:fd:0a:0a:cf:b0:17:ba: 05:4b:e8:84:b1:25:28:e5:b6:53:b9:a1:29:ca:9e:1b:bd:91: d9:7a:4a:e8:f9:68:26:ec:36:b3:8f:29:74:3f:26:7b:e9:d9: 7c:51:2a:8a:07:4b:b3:de:f2:dd:d7:69:a1:ce:7e:35:f1:2c: 24:ac:ea:5b:a7:18:80:12:d0:29:b4:ce:f3:f1:56:a7:65:fa: ae:ac:49:67:af:df:49:c4:02:a6:ae:03:09:15:0d:72:94:04: c3:ce:ed:85:f5:dd:bc:5f:cc:8d:21:76:fb:20:4c:36:ce:04: 3c:bd:2e:d5:c1:30:58:2d:73:7e:56:39:b1:c9:54:f8:e5:fc: 80:9c:d5:e9:d9:be:74:48:b8:08:9a:e1:e5:2b:68:c8:df:8a: a4:d5:53:07:73:e0:29:07:37:52:9e:33:45:d8:3f:8e:f8:12: ff:06:37:d9:32:b9:2f:b3:bb:03:13:1f:16:d0:0c:f1:ba:e4: a2:2d:a6:c9:b1:5b:d8:0d:47:3c:6c:c4:39:55:d8:dc:f6:68: 29:7b:be:37:db:ae:f5:ac:5d:48:5a:08:23:61:fc:21:d4:64: 86:ec:cb:c5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJIrpwrbbEhlF1Zf6IL8KEROgQf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg0QzlFNjcxRUFE NDY0RTA0NjIzQkIwNDNGRDYyRTdCQTJBNzdFREQ0MB4XDTI2MDcyODEyNTEyOVoX DTI2MDcyOTEyNTgyOVowMzExMC8GA1UEAxMoQjFGQ0Q1NzJFNjJGNkNFNzU3NTZE NzkwN0FCMTZEN0VEQUU0MDM0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKth8qYF0HCcXa34Pg5agQzFbSUdMvFSLaeDO0hQA3RvTxg77e1kLW3Mk0k J1+mNg9TBwkGLIDd68PDZCvd4B4hv69WGAja4pmouYOADG3oBu2tL3DniAogA6s8 wpXMJuJ3e0G8scdreuiwcnnpaxccwzJrUdwDNHO3hy3lU82Hp/0aWk4X7krcpbhG 7Ifo3RG9x4Djzf2NCzoQE6itP8Cb1m3ef4FRanDBxYfcf/18Cmyr/sBM/JC+7deh 1bDCTuF8H/NJ6S7QwmnT6HMi8Aj43rAANOPsOKpumuoGu8Jcx7Uc9DTf/QvRXRSR 4ujGqvbGpH5n0wc8wrVYj2HG/80CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSx/NVy 5i9s51dW15B6sW1+2uQDSzAfBgNVHSMEGDAWgBRMnmcerUZOBGI7sEP9Yue6Knft 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzEvNEM5RTY3 MUVBRDQ2NEUwNDYyM0JCMDQzRkQ2MkU3QkEyQTc3RURENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvVEo1bkhxMUdU Z1JpTzdCRF9XTG51aXAzN2RRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8xLzRDOUU2NzFFQUQ0NjRFMDQ2MjNCQjA0M0ZENjJFN0JBMkE3N0VE RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBY35V/MHRP0kD4gSvOi5WvzgTRDEFuezG9btZsEP0KCs+w F7oFS+iEsSUo5bZTuaEpyp4bvZHZekro+Wgm7Dazjyl0PyZ76dl8USqKB0uz3vLd 12mhzn418SwkrOpbpxiAEtAptM7z8VanZfqurElnr99JxAKmrgMJFQ1ylATDzu2F 9d28X8yNIXb7IEw2zgQ8vS7VwTBYLXN+VjmxyVT45fyAnNXp2b50SLgImuHlK2jI 34qk1VMHc+ApBzdSnjNF2D+O+BL/BjfZMrkvs7sDEx8W0AzxuuSiLabJsVvYDUc8 bMQ5Vdjc9mgpe7432671rF1IWggjYfwh1GSG7MvF -----END CERTIFICATE-----Generated at Tue Jul 28 16:43:46 2026 by rpki-client