$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: ckzC7uFtn/XsxVajxqCr9cg05420ZlIq7X17FamfLHE= Subject key identifier: B4:59:3D:67:12:DE:A8:D7:74:5E:B4:BD:C2:FC:BD:FD:88:9F:31:62 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: A5F3EFB9733AAB63BC3BFCF5E992EDCE189A99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: F7 Signing time: Fri 24 Jul 2026 10:56:02 +0000 Manifest this update: Fri 24 Jul 2026 10:51:02 +0000 Manifest next update: Sat 25 Jul 2026 13:04:02 +0000 Files and hashes: 1: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 2: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 3: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 4: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 5: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: 9dNKcFfKKB2ClFqJH58zvyXdzMTwZfu7EPPScRQ+4x8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a5:f3:ef:b9:73:3a:ab:63:bc:3b:fc:f5:e9:92:ed:ce:18:9a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jul 24 10:51:02 2026 GMT Not After : Jul 25 13:04:02 2026 GMT Subject: CN=B4593D6712DEA8D7745EB4BDC2FCBDFD889F3162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:fc:2f:b4:06:43:40:45:bf:89:dc:96:d0: 70:8a:3b:79:82:fe:63:ad:0e:ab:60:29:40:3d:a6: 92:c0:09:f4:01:a4:0c:36:57:60:04:c6:ab:2f:b9: f9:2b:3a:ba:fb:89:56:09:b6:4d:f1:08:f9:5c:47: 43:76:5c:b9:54:8f:57:09:d1:e8:20:64:59:c8:a7: 02:be:5a:14:06:6f:bc:62:88:4e:cd:31:8d:86:15: 42:32:b3:20:f3:9c:3c:51:bb:c8:65:8c:92:83:f5: e0:e1:3a:7a:3c:ac:4e:2e:03:dd:d9:fc:3b:7b:7d: 61:e5:52:6d:62:da:c6:ad:df:2b:55:bd:cf:26:bb: 72:fd:03:22:9c:68:14:19:81:0a:51:56:2d:82:0e: 66:7d:2e:8b:8c:e4:ac:40:cf:7f:aa:86:68:7e:cf: ff:84:3c:ea:e0:ee:5d:5c:b7:fe:70:fa:02:40:b7: 83:5b:a6:3f:34:cf:f1:ab:dd:66:b5:9e:b1:8f:86: c5:07:0f:0d:7e:74:3e:68:b1:86:f9:dd:08:76:cc: 48:ee:db:8a:82:8f:7e:63:50:f5:62:bb:18:f3:be: 58:5d:30:53:7e:38:c1:49:28:2c:84:4d:61:32:a6: ad:bf:2b:d2:4f:ef:c4:78:cc:78:4b:75:cb:51:55: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:3D:67:12:DE:A8:D7:74:5E:B4:BD:C2:FC:BD:FD:88:9F:31:62 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:16:87:b0:6b:da:f7:6f:8b:a1:b8:37:34:68:b3:a4:d5:93: fe:db:27:80:ad:ad:c3:e3:64:52:2f:64:42:49:72:91:fd:39: 10:40:0a:f9:b4:2e:d8:f6:7c:28:ee:03:9b:6b:b0:60:f3:35: a5:12:cd:f4:42:a3:84:db:b7:e4:b7:ab:47:3e:8d:21:f2:f8: bc:f4:01:23:01:67:52:09:8b:b8:9d:21:bc:54:5e:57:df:ed: ab:61:68:c7:0e:b6:ba:b7:09:aa:89:ff:b8:bc:1c:f9:1a:fa: 6d:70:f4:89:f2:fb:88:88:7d:61:ac:8c:3c:66:7d:89:be:03: 30:98:a1:02:56:3f:21:4f:63:ab:62:38:fe:fa:85:3f:d3:3a: f9:9f:1f:ea:86:5c:3e:3d:ab:38:be:ab:f2:9b:d3:e7:22:32: 8b:3f:fa:d5:f7:cf:e4:d6:45:57:3a:8d:72:c2:70:be:1f:e6: b9:d5:68:98:99:e5:cf:6a:bc:6e:1a:6c:87:4e:ab:59:dd:9f: 7c:6b:71:5b:e9:4c:47:3f:2d:02:81:d4:fe:1f:78:51:09:83: a5:e4:91:c3:56:16:16:b4:b5:18:05:df:f0:cf:7e:11:65:65: ba:8d:40:82:aa:08:d5:d3:65:3d:0a:5a:c3:5b:67:29:c3:3f: 5d:be:c3:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAKXz77lzOqtjvDv89emS7c4YmpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA3MjQxMDUxMDJaFw0yNjA3MjUxMzA0MDJaMDMxMTAvBgNV BAMTKEI0NTkzRDY3MTJERUE4RDc3NDVFQjRCREMyRkNCREZEODg5RjMxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8fwvtAZDQEW/idyW0HCKO3mC /mOtDqtgKUA9ppLACfQBpAw2V2AExqsvufkrOrr7iVYJtk3xCPlcR0N2XLlUj1cJ 0eggZFnIpwK+WhQGb7xiiE7NMY2GFUIysyDznDxRu8hljJKD9eDhOno8rE4uA93Z /Dt7fWHlUm1i2sat3ytVvc8mu3L9AyKcaBQZgQpRVi2CDmZ9LouM5KxAz3+qhmh+ z/+EPOrg7l1ct/5w+gJAt4Nbpj80z/Gr3Wa1nrGPhsUHDw1+dD5osYb53Qh2zEju 24qCj35jUPViuxjzvlhdMFN+OMFJKCyETWEypq2/K9JP78R4zHhLdctRVWnDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtFk9ZxLeqNd0XrS9wvy9/YifMWIwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRaHsGva92+L obg3NGizpNWT/tsngK2tw+NkUi9kQklykf05EEAK+bQu2PZ8KO4Dm2uwYPM1pRLN 9EKjhNu35LerRz6NIfL4vPQBIwFnUgmLuJ0hvFReV9/tq2Foxw62urcJqon/uLwc +Rr6bXD0ifL7iIh9YayMPGZ9ib4DMJihAlY/IU9jq2I4/vqFP9M6+Z8f6oZcPj2r OL6r8pvT5yIyiz/61ffP5NZFVzqNcsJwvh/mudVomJnlz2q8bhpsh06rWd2ffGtx W+lMRz8tAoHU/h94UQmDpeSRw1YWFrS1GAXf8M9+EWVluo1AgqoI1dNlPQpaw1tn KcM/Xb7DHw== -----END CERTIFICATE-----Generated at Sat Jul 25 00:51:58 2026 by rpki-client