$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: i770xOPD01kTKyyB61l5ojcjZghgo3up3ZLQBvOHb64= Subject key identifier: A1:26:7F:C9:1E:E5:7E:C8:06:2D:79:92:4B:3A:F8:0A:F3:C6:5E:93 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 75707D61DE0E5F78EB4751466C356B1A344ED1CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 98 Signing time: Tue 12 May 2026 22:15:48 +0000 Manifest this update: Tue 12 May 2026 22:10:48 +0000 Manifest next update: Thu 14 May 2026 00:01:48 +0000 Files and hashes: 1: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 2: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 3: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: Dv5+v5U6rFP22s6G0sp+zPZRj91ASvc2810wAK9zetE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:70:7d:61:de:0e:5f:78:eb:47:51:46:6c:35:6b:1a:34:4e:d1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: May 12 22:10:48 2026 GMT Not After : May 14 00:01:48 2026 GMT Subject: CN=A1267FC91EE57EC8062D79924B3AF80AF3C65E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:6a:09:c0:ac:0c:7f:86:6a:fe:d7:fb:c5: ed:1f:9d:d0:4d:ce:6a:41:d9:29:ff:a6:32:12:c4: 3f:1d:a3:00:84:b0:04:38:7d:81:79:3d:57:d6:84: 1a:f0:6b:bb:30:66:2b:e6:ce:41:e6:79:a1:c0:29: 37:7c:6d:1d:41:5a:e8:71:b6:51:2b:3e:69:4d:d6: d2:5a:60:21:e0:53:51:91:65:31:8f:ad:10:6e:96: 20:5b:c8:85:9e:64:cc:17:cc:cc:12:fc:33:17:5c: 39:36:bf:74:3a:5a:9d:ff:45:dd:c1:17:36:c3:c2: db:73:15:5c:e1:56:f1:20:8b:00:22:08:d5:e8:d8: c6:89:80:6a:67:02:05:96:0b:f0:50:72:25:1c:7d: b3:7a:d5:9d:cb:61:85:34:49:11:b0:f3:12:bf:63: b7:45:4f:46:55:21:13:ce:b4:e0:02:c2:3a:27:f0: f1:10:f8:03:a0:57:8b:c4:a0:9d:70:ff:97:d8:e9: 71:e8:53:07:e6:28:98:17:c7:44:33:21:ba:1d:27: 85:13:15:43:61:93:9b:de:d9:c4:6a:dd:11:6d:d7: 33:db:a9:40:f7:c6:0f:c2:a7:d5:bf:b5:74:5d:48: 4d:18:02:9f:cb:a6:29:57:f7:ff:1f:b7:9b:4f:0d: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:26:7F:C9:1E:E5:7E:C8:06:2D:79:92:4B:3A:F8:0A:F3:C6:5E:93 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:88:d6:eb:0f:6c:fe:c4:f0:95:df:f6:13:d0:9e:c7:5e:63: 8f:0e:db:7f:7a:5b:4a:5f:b8:9c:52:b0:d0:bc:95:ec:4c:23: 33:be:28:cb:c3:4f:60:2c:67:45:23:2e:a1:e5:ba:10:74:2c: 08:3a:c9:ab:23:6d:b0:31:6b:9f:fa:31:c5:b1:f6:48:82:6b: 3e:2c:27:70:13:31:5b:fc:4f:dd:09:35:ec:c9:97:69:d7:27: 27:42:93:c0:c1:d1:d4:11:80:79:0a:c9:36:ca:10:32:cb:f2: 7b:7b:d7:10:37:dc:3e:62:07:f4:d3:75:4f:fc:4c:d5:b8:66: b5:cc:89:cf:9d:49:55:bf:19:d2:e1:b1:a5:e4:77:95:b2:a6: 8c:d0:5c:84:cc:84:82:b3:62:af:85:72:67:14:70:9a:28:de: bd:de:92:a0:18:a5:80:b2:1c:93:a8:24:7c:5a:9f:6d:b9:54: 8d:a2:21:7f:c7:ee:df:0e:61:ac:e6:18:da:43:4e:08:5e:e5: 88:e2:b6:a8:6c:fc:b5:d6:e0:21:e8:53:19:2a:09:cd:03:ae: a9:12:1c:6b:62:7b:a0:a0:6f:c9:05:87:a3:fd:73:e7:b3:0e: c4:ad:16:b3:24:11:25:81:f1:c9:93:59:1e:95:a5:cb:1f:46: da:fd:04:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdXB9Yd4OX3jrR1FGbDVrGjRO0cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA1MTIyMjEwNDhaFw0yNjA1MTQwMDAxNDhaMDMxMTAvBgNV BAMTKEExMjY3RkM5MUVFNTdFQzgwNjJENzk5MjRCM0FGODBBRjNDNjVFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vWoJwKwMf4Zq/tf7xe0fndBN zmpB2Sn/pjISxD8dowCEsAQ4fYF5PVfWhBrwa7swZivmzkHmeaHAKTd8bR1BWuhx tlErPmlN1tJaYCHgU1GRZTGPrRBuliBbyIWeZMwXzMwS/DMXXDk2v3Q6Wp3/Rd3B FzbDwttzFVzhVvEgiwAiCNXo2MaJgGpnAgWWC/BQciUcfbN61Z3LYYU0SRGw8xK/ Y7dFT0ZVIRPOtOACwjon8PEQ+AOgV4vEoJ1w/5fY6XHoUwfmKJgXx0QzIbodJ4UT FUNhk5ve2cRq3RFt1zPbqUD3xg/Cp9W/tXRdSE0YAp/LpilX9/8ft5tPDTgjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoSZ/yR7lfsgGLXmSSzr4CvPGXpMwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ojW6w9s/sTw ld/2E9Cex15jjw7bf3pbSl+4nFKw0LyV7EwjM74oy8NPYCxnRSMuoeW6EHQsCDrJ qyNtsDFrn/oxxbH2SIJrPiwncBMxW/xP3Qk17MmXadcnJ0KTwMHR1BGAeQrJNsoQ Msvye3vXEDfcPmIH9NN1T/xM1bhmtcyJz51JVb8Z0uGxpeR3lbKmjNBchMyEgrNi r4VyZxRwmijevd6SoBilgLIck6gkfFqfbblUjaIhf8fu3w5hrOYY2kNOCF7liOK2 qGz8tdbgIehTGSoJzQOuqRIca2J7oKBvyQWHo/1z57MOxK0WsyQRJYHxyZNZHpWl yx9G2v0E4A== -----END CERTIFICATE-----Generated at Wed May 13 14:19:23 2026 by rpki-client