$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: k07mK8BDU3dFofSPb/lOtP0JBUQ2EIqZhjwDX0g5esI= Subject key identifier: 2D:9A:3E:7F:72:11:0E:AE:80:AE:8B:A1:55:57:4E:CA:67:B7:03:73 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 4997968E4E0E7D88A892D01EE869635677176A8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: FC Signing time: Fri 24 Jul 2026 13:31:18 +0000 Manifest this update: Fri 24 Jul 2026 13:26:18 +0000 Manifest next update: Sat 25 Jul 2026 14:19:18 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: BzqYDcqICm0cnI6oVLMp5yxo0tng3NgDgjWAraxBMOI=) 2: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 3: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 14:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:97:96:8e:4e:0e:7d:88:a8:92:d0:1e:e8:69:63:56:77:17:6a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Jul 24 13:26:18 2026 GMT Not After : Jul 25 14:19:18 2026 GMT Subject: CN=2D9A3E7F72110EAE80AE8BA155574ECA67B70373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:2e:5d:51:f3:c4:fa:4b:6d:19:87:57:61: a0:ba:2a:fd:d4:72:bc:29:ab:a6:54:dd:3d:78:9b: 83:b2:6e:57:33:07:d6:3e:0e:6b:ac:30:c3:47:62: 0b:7c:89:44:b5:84:80:c2:59:d3:15:4a:03:1f:d3: 5e:7c:17:85:58:8d:ac:a0:a9:14:8a:44:4b:12:7d: c4:3b:fc:55:dc:1b:40:a3:69:84:03:a7:2e:60:35: 39:36:97:94:bc:35:48:f7:5d:b4:94:b3:87:24:3b: 6f:91:67:e0:84:01:d2:53:db:b6:45:4e:0f:5d:24: 4c:81:e4:c0:0d:be:eb:80:39:5d:da:02:21:38:71: 40:71:f6:93:b8:58:3e:e5:bb:4f:ad:aa:c4:9e:66: f4:98:ed:90:a9:9e:76:b8:d2:40:9a:5c:ff:68:e8: e9:5e:08:47:f8:e4:1f:cd:4d:2e:da:bd:01:02:b8: 0b:65:f9:4d:73:2f:94:29:a7:09:ad:c2:29:c8:57: 7e:0c:93:ce:5b:f7:0e:c7:d5:8c:ce:4e:8c:98:26: ec:f4:23:3f:49:d0:5f:6e:0f:b8:29:ef:c6:8d:10: f7:2d:5a:1a:36:80:c7:04:97:4f:df:22:b2:da:99: 2b:19:fd:23:33:7f:54:b6:23:a4:7c:1f:57:bb:9f: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:3E:7F:72:11:0E:AE:80:AE:8B:A1:55:57:4E:CA:67:B7:03:73 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7f:ab:cf:0b:56:fd:a6:3b:55:d2:f9:25:25:9c:52:a2:a8: 72:e0:28:45:5b:71:70:26:37:9c:61:0f:8b:3b:b9:b5:3e:2c: ed:c1:59:13:b6:9a:36:13:eb:bb:7b:b0:5d:b7:16:88:09:4e: dc:46:13:71:7f:81:6d:12:1a:13:35:a0:0d:13:18:3b:5c:71: 87:3b:8c:fd:c7:c6:a1:c7:55:a4:a6:d0:66:a3:8e:06:36:14: b9:1e:d7:04:76:e0:31:1c:aa:5e:ef:5b:bf:eb:70:8f:79:c2: 70:a1:92:3b:ad:5a:f8:99:dc:ff:96:4a:58:91:ac:00:c4:9d: d7:25:91:20:fd:05:4c:75:28:f0:97:83:f2:14:c5:e6:eb:9f: 0a:be:de:d2:c1:9c:2d:27:f9:a7:03:bc:80:2c:dc:da:e7:20: bf:bf:e3:82:df:b7:2e:6e:a5:d5:cc:69:95:4d:82:16:b6:92: e9:3f:a8:98:c3:9b:9b:07:c9:9d:a6:e0:4a:3d:de:d0:8b:be: 04:57:18:3a:7d:18:3b:23:06:ab:f9:ec:cd:eb:94:46:1a:db: 54:08:89:0c:17:f7:03:4d:b0:a2:cd:9d:01:74:74:c2:21:cd: 1c:5c:78:5b:d3:44:23:a3:1b:fc:a3:81:22:00:ee:e4:2c:ef: e7:43:e6:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSZeWjk4OfYioktAe6GljVncXao4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA3MjQxMzI2MThaFw0yNjA3MjUxNDE5MThaMDMxMTAvBgNV BAMTKDJEOUEzRTdGNzIxMTBFQUU4MEFFOEJBMTU1NTc0RUNBNjdCNzAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgS5dUfPE+kttGYdXYaC6Kv3U crwpq6ZU3T14m4OyblczB9Y+DmusMMNHYgt8iUS1hIDCWdMVSgMf0158F4VYjayg qRSKREsSfcQ7/FXcG0CjaYQDpy5gNTk2l5S8NUj3XbSUs4ckO2+RZ+CEAdJT27ZF Tg9dJEyB5MANvuuAOV3aAiE4cUBx9pO4WD7lu0+tqsSeZvSY7ZCpnna40kCaXP9o 6OleCEf45B/NTS7avQECuAtl+U1zL5QppwmtwinIV34Mk85b9w7H1YzOToyYJuz0 Iz9J0F9uD7gp78aNEPctWho2gMcEl0/fIrLamSsZ/SMzf1S2I6R8H1e7n5kRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULZo+f3IRDq6ArouhVVdOyme3A3MwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3+rzwtW/aY7 VdL5JSWcUqKocuAoRVtxcCY3nGEPizu5tT4s7cFZE7aaNhPru3uwXbcWiAlO3EYT cX+BbRIaEzWgDRMYO1xxhzuM/cfGocdVpKbQZqOOBjYUuR7XBHbgMRyqXu9bv+tw j3nCcKGSO61a+Jnc/5ZKWJGsAMSd1yWRIP0FTHUo8JeD8hTF5uufCr7e0sGcLSf5 pwO8gCzc2ucgv7/jgt+3Lm6l1cxplU2CFraS6T+omMObmwfJnabgSj3e0Iu+BFcY On0YOyMGq/nszeuURhrbVAiJDBf3A02wos2dAXR0wiHNHFx4W9NEI6Mb/KOBIgDu 5Czv50PmSw== -----END CERTIFICATE-----Generated at Fri Jul 24 22:31:52 2026 by rpki-client