$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: Sl5DGiTBb/NTrzL16fjQplei3/NDgrr/A9SIdu3oAZE= Subject key identifier: CC:A1:EC:C4:5B:AA:0D:3A:77:00:04:65:00:38:59:96:2C:D5:41:4B Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 771AB24D795CE55BE85C7828E91B59660AEAF8E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 13:56:20 +0000 Manifest this update: Fri 24 Jul 2026 13:51:20 +0000 Manifest next update: Sat 25 Jul 2026 16:50:20 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: LeNP39+5JPSheWLDerhE5h91KuvNbkh96oNRBaYLW8U=) 2: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 3: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1a:b2:4d:79:5c:e5:5b:e8:5c:78:28:e9:1b:59:66:0a:ea:f8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Jul 24 13:51:20 2026 GMT Not After : Jul 25 16:50:20 2026 GMT Subject: CN=CCA1ECC45BAA0D3A77000465003859962CD5414B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:f5:34:f5:0a:75:86:e6:f0:95:47:eb:35: 09:1f:b8:1e:bb:7b:8d:f0:de:93:63:cb:b8:c7:bc: 75:af:fe:d9:a0:89:e4:f1:ee:1d:70:69:8f:da:ab: 60:79:f6:26:76:32:80:4c:83:00:d7:39:c7:23:02: 19:40:49:3b:9b:d7:86:80:6f:0c:a9:32:16:eb:ae: 34:89:dd:f4:bb:4d:1a:00:9d:7c:d7:6e:21:83:f6: 43:74:b0:8e:86:87:92:22:05:85:5b:05:b1:9f:54: a2:7a:09:6e:14:28:76:e2:4c:ab:c0:5b:b8:48:f3: bc:ec:74:bc:a2:a3:63:ab:b8:b3:a1:7e:a1:ec:4d: 88:c8:ff:a5:f7:ba:d8:32:f5:72:36:92:92:8c:11: e4:e8:25:05:38:b7:21:c2:06:05:c3:0f:79:a3:a6: 4b:2b:ff:17:c8:9c:3a:7c:68:29:88:20:e2:38:29: 22:9f:b4:38:8c:f4:e1:d7:7c:55:44:f5:b9:e7:8b: 94:ab:fa:9d:11:75:5d:54:d4:1f:a0:0b:e7:ec:d1: 5c:d7:87:04:12:34:34:aa:48:c7:3a:0f:1b:fe:91: b0:4b:10:72:38:81:f4:14:fb:5c:75:23:ab:24:b6: 56:27:8f:d1:d5:9a:30:97:5d:21:38:4c:99:5b:55: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A1:EC:C4:5B:AA:0D:3A:77:00:04:65:00:38:59:96:2C:D5:41:4B X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:10:d8:0d:81:d7:ba:3e:09:5b:b5:2a:f8:03:b7:55:e2:5b: a5:ad:de:84:83:6a:dd:9c:e5:27:4b:c8:dd:e9:9c:fa:59:c3: 7d:9c:12:d3:8d:b3:e1:94:de:ca:67:93:a3:77:de:9d:49:e2: 61:44:c3:3c:82:a7:4e:bd:76:14:dd:25:cf:08:5c:01:e4:e0: 9f:e5:94:4e:7d:5c:e4:22:85:39:12:47:2c:2c:4e:b5:60:41: ee:95:cb:ae:3d:23:ab:a2:61:78:55:07:5b:59:41:bf:53:c3: c2:36:d8:76:b1:39:08:81:ca:99:63:a6:5d:c5:35:95:df:4f: ef:0e:e9:aa:6b:17:86:31:8a:da:a8:3f:9d:8e:79:c0:41:12: fb:88:ce:8c:07:49:5d:e7:be:a0:eb:2b:51:05:7f:ca:28:8b: 37:f1:c9:68:75:4e:9e:b5:a7:73:12:e7:41:a6:3c:9e:84:68: ae:bc:4e:73:75:2b:9d:c6:11:12:31:0a:bc:79:42:bf:db:c5: 18:19:af:80:c3:7f:0b:d4:d6:f1:dd:7f:76:13:fa:42:e4:97: 83:1f:dd:fd:5a:cd:01:63:d7:f4:cd:c8:34:11:34:ef:1b:77: b9:44:8b:45:0f:44:31:bc:53:b1:6c:c9:85:48:6b:89:7f:57: e7:60:1e:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdxqyTXlc5VvoXHgo6RtZZgrq+OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA3MjQxMzUxMjBaFw0yNjA3MjUxNjUwMjBaMDMxMTAvBgNV BAMTKENDQTFFQ0M0NUJBQTBEM0E3NzAwMDQ2NTAwMzg1OTk2MkNENTQxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTl/U09Qp1hubwlUfrNQkfuB67 e43w3pNjy7jHvHWv/tmgieTx7h1waY/aq2B59iZ2MoBMgwDXOccjAhlASTub14aA bwypMhbrrjSJ3fS7TRoAnXzXbiGD9kN0sI6Gh5IiBYVbBbGfVKJ6CW4UKHbiTKvA W7hI87zsdLyio2OruLOhfqHsTYjI/6X3utgy9XI2kpKMEeToJQU4tyHCBgXDD3mj pksr/xfInDp8aCmIIOI4KSKftDiM9OHXfFVE9bnni5Sr+p0RdV1U1B+gC+fs0VzX hwQSNDSqSMc6Dxv+kbBLEHI4gfQU+1x1I6sktlYnj9HVmjCXXSE4TJlbVUw1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzKHsxFuqDTp3AARlADhZlizVQUswHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhDYDYHXuj4J W7Uq+AO3VeJbpa3ehINq3ZzlJ0vI3emc+lnDfZwS042z4ZTeymeTo3fenUniYUTD PIKnTr12FN0lzwhcAeTgn+WUTn1c5CKFORJHLCxOtWBB7pXLrj0jq6JheFUHW1lB v1PDwjbYdrE5CIHKmWOmXcU1ld9P7w7pqmsXhjGK2qg/nY55wEES+4jOjAdJXee+ oOsrUQV/yiiLN/HJaHVOnrWncxLnQaY8noRorrxOc3UrncYREjEKvHlCv9vFGBmv gMN/C9TW8d1/dhP6QuSXgx/d/VrNAWPX9M3INBE07xt3uUSLRQ9EMbxTsWzJhUhr iX9X52Ae3w== -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:11 2026 by rpki-client