$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: J/l3kzzMVKEVzWV3w11fYAi1nM5VcPCLOgW0awIey7s= Subject key identifier: FA:9D:DA:9D:CC:B5:0A:1A:BB:73:5C:E4:CA:0D:9F:C8:23:EF:D4:D2 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 6F2EB8C9A41684768B9DF8743604D2B854C5E0FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: F7 Signing time: Thu 23 Jul 2026 23:29:50 +0000 Manifest this update: Thu 23 Jul 2026 23:24:50 +0000 Manifest next update: Sat 25 Jul 2026 01:43:50 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: 4MScq+e71Mx9rblxCGJrkcuNIjWol9wlZTthrLiss0g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:b8:c9:a4:16:84:76:8b:9d:f8:74:36:04:d2:b8:54:c5:e0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Jul 23 23:24:50 2026 GMT Not After : Jul 25 01:43:50 2026 GMT Subject: CN=FA9DDA9DCCB50A1ABB735CE4CA0D9FC823EFD4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:8e:0b:09:10:e9:6d:db:f9:ca:f8:9b:9b: f3:d1:0f:1d:2f:c7:1b:96:fa:21:82:b8:0d:50:ee: 3f:0a:46:cc:0a:50:2f:71:d2:77:34:01:57:31:20: 11:eb:d7:f4:ac:30:2a:76:4e:63:d6:5d:19:42:28: 62:dc:d2:5f:ec:27:df:da:ee:e4:83:0d:30:25:0c: 9b:55:d4:58:0d:a1:c2:4c:b0:95:71:e2:e7:ac:5d: 41:52:7f:6e:ad:db:e0:58:f1:4e:8a:94:c4:28:4c: 0c:d0:95:25:1f:ec:c0:5d:aa:da:39:83:49:00:41: 3c:a4:d7:a2:03:a5:2a:da:e7:4e:c7:09:54:56:a9: 33:f6:bf:9f:c5:65:dc:c1:d3:89:49:13:bb:68:e5: f7:94:c4:a4:d6:2e:b5:fe:63:9d:a1:c2:b2:d7:7c: f2:d0:b8:d7:bd:c5:be:cb:a7:99:46:27:e9:f7:a0: ca:be:e2:9a:e8:9a:f8:8f:8b:51:13:51:91:5f:df: a8:3f:dd:fc:4c:7f:0d:93:b7:28:56:f7:d0:c1:fa: 6e:98:a1:af:14:25:1b:fb:50:b7:0c:de:ba:fa:95: 44:56:34:08:bc:9b:c8:01:35:49:df:25:61:12:33: 92:c2:3f:31:20:94:20:9c:9c:72:f3:4b:b2:1c:95: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:DA:9D:CC:B5:0A:1A:BB:73:5C:E4:CA:0D:9F:C8:23:EF:D4:D2 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:bb:d8:ee:da:cf:34:2f:4d:c7:2b:51:13:92:28:f6:e1:a7: 31:2f:3f:d7:5b:ac:83:08:42:78:ab:6e:55:d6:c4:22:9e:75: 2e:64:d1:d8:4a:e8:d6:e6:c7:ca:10:63:a9:cd:54:a6:ba:4f: fd:ee:06:a2:5f:87:b5:13:0d:1e:62:4f:1b:12:1c:07:78:0b: 17:1a:f8:27:11:56:da:47:fc:9f:d9:59:28:59:7a:b3:d7:fd: 69:16:28:bd:0b:5b:22:ed:b2:35:65:63:9b:02:04:1a:4b:fc: 5b:d4:81:b1:bb:67:55:f2:cb:5d:7e:69:fb:86:a5:27:39:50: 29:17:cc:4b:be:d9:8c:f1:7d:54:50:df:ca:81:0a:11:aa:e3: 88:63:dc:6e:20:02:8d:8a:0f:bb:a4:d9:3e:83:3f:38:a6:4c: 47:43:b7:d3:62:bc:97:37:9c:da:9f:a7:20:48:a9:dd:28:5e: 51:ac:6a:71:20:ad:cb:82:8e:e2:6f:fb:77:53:33:89:d3:01: bb:0d:7f:7f:35:73:ff:72:2b:61:dd:0d:fe:50:e6:64:da:32: ef:38:e1:8d:d5:37:ff:e8:c6:fb:d1:e9:e8:11:e4:6e:9e:e3: 45:ae:cf:27:a9:b2:4a:d4:ce:cb:0d:76:19:64:53:1f:26:33: 85:f3:13:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUby64yaQWhHaLnfh0NgTSuFTF4P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA3MjMyMzI0NTBaFw0yNjA3MjUwMTQzNTBaMDMxMTAvBgNV BAMTKEZBOUREQTlEQ0NCNTBBMUFCQjczNUNFNENBMEQ5RkM4MjNFRkQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPI4LCRDpbdv5yvibm/PRDx0v xxuW+iGCuA1Q7j8KRswKUC9x0nc0AVcxIBHr1/SsMCp2TmPWXRlCKGLc0l/sJ9/a 7uSDDTAlDJtV1FgNocJMsJVx4uesXUFSf26t2+BY8U6KlMQoTAzQlSUf7MBdqto5 g0kAQTyk16IDpSra507HCVRWqTP2v5/FZdzB04lJE7to5feUxKTWLrX+Y52hwrLX fPLQuNe9xb7Lp5lGJ+n3oMq+4promviPi1ETUZFf36g/3fxMfw2TtyhW99DB+m6Y oa8UJRv7ULcM3rr6lURWNAi8m8gBNUnfJWESM5LCPzEglCCcnHLzS7IclWbDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+p3ancy1Chq7c1zkyg2fyCPv1NIwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbvY7trPNC9N xytRE5Io9uGnMS8/11usgwhCeKtuVdbEIp51LmTR2Ero1ubHyhBjqc1UprpP/e4G ol+HtRMNHmJPGxIcB3gLFxr4JxFW2kf8n9lZKFl6s9f9aRYovQtbIu2yNWVjmwIE Gkv8W9SBsbtnVfLLXX5p+4alJzlQKRfMS77ZjPF9VFDfyoEKEarjiGPcbiACjYoP u6TZPoM/OKZMR0O302K8lzec2p+nIEip3SheUaxqcSCty4KO4m/7d1MzidMBuw1/ fzVz/3IrYd0N/lDmZNoy7zjhjdU3/+jG+9Hp6BHkbp7jRa7PJ6myStTOyw12GWRT HyYzhfMTnw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:05:44 2026 by rpki-client