$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: 1Jqi+0/k8ox1Kp7PFerfUqsDgrB0bd4SYsAwkJ2OZVw= Subject key identifier: E1:61:FC:E2:7A:40:93:48:C1:4E:51:5E:2F:CC:B7:50:48:3D:4D:20 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 19E7874A650F6DF69DA2E78416706876EB4D6E46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 2F Signing time: Tue 28 Jul 2026 10:11:37 +0000 Manifest this update: Tue 28 Jul 2026 10:06:37 +0000 Manifest next update: Wed 29 Jul 2026 11:52:37 +0000 Files and hashes: 1: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: SRBzYJVi+6fFBOmlBkO/OPYbxEi/kPzWZMio/oQy0nY=) 2: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 3: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) 4: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 5: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 6: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) 7: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e7:87:4a:65:0f:6d:f6:9d:a2:e7:84:16:70:68:76:eb:4d:6e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jul 28 10:06:37 2026 GMT Not After : Jul 29 11:52:37 2026 GMT Subject: CN=E161FCE27A409348C14E515E2FCCB750483D4D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:34:42:4a:cc:e4:c3:15:21:70:18:50:c8: 0e:c0:b6:0f:7b:d4:b7:20:37:85:a3:fc:4a:40:cb: 92:04:1c:4e:21:ed:9e:1d:af:14:38:fa:b7:54:29: fd:89:ed:54:c3:68:1f:8b:c8:d5:7b:32:de:39:0b: 5c:a7:b2:8d:dd:fa:6f:0b:2a:0b:43:a9:f1:c9:96: 4b:7c:e1:dc:7a:a1:38:6d:6e:78:1f:17:54:c5:fd: ca:e7:34:66:69:8c:8f:00:4a:e0:ce:31:f5:4f:11: f4:4e:c8:73:c8:35:fb:e6:6d:da:f4:87:45:b1:50: bd:48:59:cb:19:4a:46:e1:69:af:ed:bf:b3:56:9b: 4a:f0:e8:63:15:df:e1:7c:2f:5b:63:45:1f:74:a7: 46:02:96:87:bb:b2:3e:d4:a6:4e:05:cd:5c:69:27: 9d:ca:a9:95:0f:f4:2e:1f:40:31:9b:59:c2:36:ce: 81:3c:ee:56:93:3f:5a:89:d5:98:5c:42:bf:0f:a5: 1f:e8:30:b9:03:2f:f3:e6:98:25:5f:8c:98:3f:68: e1:fa:1d:a9:09:42:53:72:6b:4c:d6:a7:c3:c6:2a: 17:f4:d6:61:b4:9d:84:a2:8b:84:93:ae:82:57:63: 1b:e2:8c:81:db:b3:90:4e:21:c1:dd:15:7f:db:87: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:61:FC:E2:7A:40:93:48:C1:4E:51:5E:2F:CC:B7:50:48:3D:4D:20 X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:de:e2:fd:a0:1b:06:67:04:49:fa:66:24:17:89:a7:02:0d: 11:26:51:aa:f8:b9:2a:7d:b1:08:ff:23:8c:8a:4c:b7:b2:0d: c6:5c:b7:98:81:04:33:e5:6d:78:6b:2a:56:ec:bd:f5:3e:d4: b3:f3:0b:90:2e:4d:f5:24:34:1f:72:9c:d9:0f:1d:ea:ba:12: 42:ce:b7:6f:36:6e:75:f7:27:6e:11:14:5c:8e:fe:11:95:9a: 6b:19:ee:d7:36:a6:6a:6f:94:e4:c9:5b:b2:fc:02:c6:b2:97: 7e:03:44:9b:0c:dc:f0:09:8b:2a:d1:39:66:a4:1b:3c:d7:2b: 06:19:9c:d7:9d:42:ce:c7:58:1a:16:3d:ac:5e:5e:56:66:e8: 89:f0:de:d6:73:1e:7a:72:5a:fd:86:87:05:09:f9:b7:d0:61: c4:7f:8c:12:42:69:6b:1f:cd:5b:b4:ae:55:b3:62:2f:b5:f3: b1:fa:fe:05:04:a5:9b:5d:84:6c:fa:c0:6a:7e:47:65:13:69: 1b:fa:e5:6e:77:b6:d4:52:a8:c2:2c:3a:a0:fa:14:ba:1c:07: 52:69:2c:9b:06:45:af:02:6e:3e:cc:03:3a:4c:8b:a8:b1:79: 15:37:a2:e3:b2:82:2a:aa:4f:9b:f0:1a:7d:7b:c4:6b:d0:a6: ee:46:7b:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGeeHSmUPbfadoueEFnBodutNbkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA3MjgxMDA2MzdaFw0yNjA3MjkxMTUyMzdaMDMxMTAvBgNV BAMTKEUxNjFGQ0UyN0E0MDkzNDhDMTRFNTE1RTJGQ0NCNzUwNDgzRDREMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUjRCSszkwxUhcBhQyA7Atg97 1LcgN4Wj/EpAy5IEHE4h7Z4drxQ4+rdUKf2J7VTDaB+LyNV7Mt45C1ynso3d+m8L KgtDqfHJlkt84dx6oThtbngfF1TF/crnNGZpjI8ASuDOMfVPEfROyHPINfvmbdr0 h0WxUL1IWcsZSkbhaa/tv7NWm0rw6GMV3+F8L1tjRR90p0YCloe7sj7Upk4FzVxp J53KqZUP9C4fQDGbWcI2zoE87laTP1qJ1ZhcQr8PpR/oMLkDL/PmmCVfjJg/aOH6 HakJQlNya0zWp8PGKhf01mG0nYSii4STroJXYxvijIHbs5BOIcHdFX/bh4AvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4WH84npAk0jBTlFeL8y3UEg9TSAwHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt7i/aAbBmcE SfpmJBeJpwINESZRqvi5Kn2xCP8jjIpMt7INxly3mIEEM+VteGsqVuy99T7Us/ML kC5N9SQ0H3Kc2Q8d6roSQs63bzZudfcnbhEUXI7+EZWaaxnu1zamam+U5MlbsvwC xrKXfgNEmwzc8AmLKtE5ZqQbPNcrBhmc151CzsdYGhY9rF5eVmboifDe1nMeenJa /YaHBQn5t9BhxH+MEkJpax/NW7SuVbNiL7Xzsfr+BQSlm12EbPrAan5HZRNpG/rl bne21FKowiw6oPoUuhwHUmksmwZFrwJuPswDOkyLqLF5FTei47KCKqpPm/AafXvE a9Cm7kZ70w== -----END CERTIFICATE-----Generated at Tue Jul 28 22:14:02 2026 by rpki-client