$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json) Hash identifier: 7ZlMpib07JsmfxAPLQju/8rmCA9DOvPO8MuaJ+tOXL8= Subject key identifier: 78:8B:E9:FB:C9:45:E1:6B:57:BF:B4:F4:78:04:AB:68:D1:D1:71:8E Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Certificate serial: 7F2D41D99E30146A0ED3226F10E95F4B5D087B34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft Manifest number: FF Signing time: Fri 24 Jul 2026 03:10:13 +0000 Manifest this update: Fri 24 Jul 2026 03:05:13 +0000 Manifest next update: Sat 25 Jul 2026 05:06:13 +0000 Files and hashes: 1: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=) 2: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: C3bGKVsrFQOQUiBfIvki25OGNyWS/zoOkRSdCJAQF3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2d:41:d9:9e:30:14:6a:0e:d3:22:6f:10:e9:5f:4b:5d:08:7b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Validity Not Before: Jul 24 03:05:13 2026 GMT Not After : Jul 25 05:06:13 2026 GMT Subject: CN=788BE9FBC945E16B57BFB4F47804AB68D1D1718E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:8a:31:74:77:79:8a:6f:3b:e8:19:58:f7: a9:ed:48:90:84:3a:2e:93:e9:3f:29:85:a5:08:53: 05:25:f7:74:52:00:e7:76:c7:a8:b9:fc:73:32:a0: dd:8c:fa:66:04:60:23:03:45:cc:31:53:02:13:38: e4:79:36:45:a9:76:8a:fe:bd:09:b1:44:47:f2:96: 33:30:d1:73:c4:61:d2:fd:f7:42:fa:19:f8:06:1e: fa:42:74:08:09:af:9a:45:4b:31:e0:e0:d2:bb:d8: 2b:e8:c2:74:26:1a:95:d8:15:93:3d:1c:b9:39:9b: 99:16:0b:11:00:ab:fd:e3:d9:8c:2f:4e:89:6c:d0: 94:7a:20:87:bc:5d:91:58:6a:22:d5:8e:3d:cd:7d: a2:fc:9a:76:a7:5f:59:6a:6b:e5:f2:87:3d:18:56: 89:62:c5:57:3c:92:9f:98:3f:5f:bb:25:88:07:58: 35:a0:50:8f:d2:3e:9f:09:27:e4:9d:e8:0f:6f:79: a1:70:76:14:c2:bb:6c:bb:d5:25:8e:64:3b:1e:71: 44:90:a4:6d:9b:a3:fa:7e:91:3c:ac:ce:ea:3e:a4: 22:61:30:2e:76:b7:65:ac:01:7c:60:97:8e:e0:5e: 8a:cf:77:92:64:6d:30:99:50:e4:5a:bc:09:60:d3: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:E9:FB:C9:45:E1:6B:57:BF:B4:F4:78:04:AB:68:D1:D1:71:8E X509v3 Authority Key Identifier: keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:00:ff:6e:e2:15:04:84:c3:b7:b0:a3:76:d2:67:a8:3d:fd: 32:b7:04:64:1c:bc:0c:2b:dd:3d:e0:91:44:d6:68:26:bc:4a: 5f:1e:7b:d4:c6:e0:48:0e:62:00:86:b0:bf:b4:9e:e1:5d:85: 11:76:13:04:b0:05:2a:1e:56:82:aa:98:9e:8e:e1:b2:93:8c: f8:08:39:57:67:84:ee:72:f8:ce:45:ff:cd:a3:17:7b:4b:bc: 00:87:e3:74:54:b9:10:9e:ed:91:4f:38:24:1d:d6:1a:ab:d8: 40:71:e9:b9:d5:ca:80:89:9f:c9:35:3b:9b:fd:2e:ca:3c:4f: b2:d3:c9:9d:3b:8e:64:d2:a5:f4:b9:24:b9:ce:97:3b:2d:f4: ff:14:2d:89:08:18:56:ab:d9:17:96:1b:8a:f2:31:cc:82:97: 32:aa:4a:b6:3b:4c:b0:c1:04:ed:80:4b:d8:28:ab:e1:2f:f1: 6c:4d:2f:c2:4b:a8:d3:c4:0f:7d:f8:a1:3b:c1:9d:a1:41:98: fb:d9:ac:5e:14:cc:a3:9d:df:a7:dc:14:6e:6c:62:4c:61:89: 22:0d:a4:7c:7a:c5:70:13:7b:f8:98:31:e9:5c:81:ce:95:61: 8f:69:92:2a:b5:55:c6:1f:af:69:95:d5:61:58:2c:94:4a:56: fd:79:ac:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfy1B2Z4wFGoO0yJvEOlfS10IezQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4 MEU5RThENTAeFw0yNjA3MjQwMzA1MTNaFw0yNjA3MjUwNTA2MTNaMDMxMTAvBgNV BAMTKDc4OEJFOUZCQzk0NUUxNkI1N0JGQjRGNDc4MDRBQjY4RDFEMTcxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQIoxdHd5im876BlY96ntSJCE Oi6T6T8phaUIUwUl93RSAOd2x6i5/HMyoN2M+mYEYCMDRcwxUwITOOR5NkWpdor+ vQmxREfyljMw0XPEYdL990L6GfgGHvpCdAgJr5pFSzHg4NK72CvownQmGpXYFZM9 HLk5m5kWCxEAq/3j2YwvTols0JR6IIe8XZFYaiLVjj3NfaL8mnanX1lqa+Xyhz0Y VolixVc8kp+YP1+7JYgHWDWgUI/SPp8JJ+Sd6A9veaFwdhTCu2y71SWOZDsecUSQ pG2bo/p+kTyszuo+pCJhMC52t2WsAXxgl47gXorPd5JkbTCZUORavAlg01z/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeIvp+8lF4WtXv7T0eASraNHRcY4wHwYDVR0j BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1 NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAD/buIVBITD t7CjdtJnqD39MrcEZBy8DCvdPeCRRNZoJrxKXx571MbgSA5iAIawv7Se4V2FEXYT BLAFKh5WgqqYno7hspOM+Ag5V2eE7nL4zkX/zaMXe0u8AIfjdFS5EJ7tkU84JB3W GqvYQHHpudXKgImfyTU7m/0uyjxPstPJnTuOZNKl9Lkkuc6XOy30/xQtiQgYVqvZ F5YbivIxzIKXMqpKtjtMsMEE7YBL2Cir4S/xbE0vwkuo08QPffihO8GdoUGY+9ms XhTMo53fp9wUbmxiTGGJIg2kfHrFcBN7+Jgx6VyBzpVhj2mSKrVVxh+vaZXVYVgs lEpW/Xmslw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:51 2026 by rpki-client