$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: UdngWUI5scz3kjEBRO1rjqxkfBbpGrwMEisgNZwS0us= Subject key identifier: 7C:C5:A7:1D:D5:F6:86:F8:01:ED:C0:82:6E:63:69:CC:84:0E:27:20 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 4624BB3F56085A981B5CCBABAD399965C4480081 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: F7 Signing time: Thu 23 Jul 2026 23:29:50 +0000 Manifest this update: Thu 23 Jul 2026 23:24:50 +0000 Manifest next update: Fri 24 Jul 2026 23:52:50 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: 7292xGgzq+pz/Oj/WvyycEs4B+TBA4fDYkQWajPHrbI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:24:bb:3f:56:08:5a:98:1b:5c:cb:ab:ad:39:99:65:c4:48:00:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jul 23 23:24:50 2026 GMT Not After : Jul 24 23:52:50 2026 GMT Subject: CN=7CC5A71DD5F686F801EDC0826E6369CC840E2720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:35:70:e6:12:51:7b:9f:9f:94:90:9b:32: c8:91:ba:b7:f1:11:c0:c8:55:85:f4:d2:18:9b:fd: e4:f2:ac:07:d4:dd:08:e5:6b:4d:c4:e8:c4:21:f4: 82:43:7a:c0:1c:12:4a:cd:de:d6:bc:ec:10:cc:9a: 98:f1:6f:f6:eb:82:ff:07:b2:bb:82:df:2e:c6:ac: b6:57:d3:f3:2f:b9:f3:ba:db:bd:43:91:ec:32:c9: 77:65:86:9b:8e:dd:81:c6:9e:d0:26:dd:87:e7:b0: 1c:49:b9:40:89:1f:ab:48:96:e6:03:3e:50:f4:5e: b0:5d:51:fb:10:c2:15:3d:02:a9:35:33:69:ff:75: 09:0d:a0:0a:9c:08:b9:75:b9:4b:f8:64:43:c2:94: cd:fc:4b:e7:26:a4:29:a6:11:b3:b1:0b:4e:6e:79: 98:31:8e:ef:5a:b5:33:ca:fd:9f:b2:d4:5d:7a:a3: 8f:62:88:76:e7:a5:a9:83:69:48:47:19:23:f9:cb: ee:77:26:8f:10:53:3f:2a:04:db:ef:f1:d0:9f:51: 9e:8d:eb:44:86:e9:cc:29:59:42:a5:69:2a:ab:08: ea:dc:f9:ce:df:85:13:4a:27:f1:2e:e2:f6:0c:71: 4d:7b:25:45:7d:46:f2:28:6a:79:cc:f7:e1:c0:37: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:A7:1D:D5:F6:86:F8:01:ED:C0:82:6E:63:69:CC:84:0E:27:20 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e6:0a:68:bd:fb:a8:76:7b:b6:0b:9f:e1:56:1c:4d:3b:ec: 34:58:80:1c:3a:74:c2:c3:fc:39:67:3e:d7:e9:33:c4:65:44: 54:cb:e9:9c:5d:50:60:7e:98:60:53:85:c4:a5:1f:f9:da:e4: ed:ef:db:c1:51:44:4d:d0:85:fa:5d:b9:a3:30:30:1d:b3:a1: 16:dc:bd:b6:93:06:48:fb:9d:87:93:80:1c:53:1c:fa:5b:18: 5d:02:7b:01:1b:41:f5:60:9d:35:ea:d5:ff:6b:a5:b6:2b:e7: 4a:4a:08:dc:8c:97:c6:d1:10:c4:b4:00:e6:fd:39:76:63:91: 17:46:30:ed:b1:d5:79:1a:68:f2:76:f2:65:e2:a4:91:6f:bb: 5f:ff:c3:1b:8d:ba:7b:63:3a:e3:76:c4:a0:8e:c7:ad:f0:fd: cb:e1:fd:52:72:aa:2a:91:8d:ee:ee:f2:fa:bf:f0:27:53:4e: d3:16:6a:f0:0a:9b:80:7f:27:76:3c:16:16:fa:0b:6a:99:52: 64:36:5b:a2:56:28:79:92:0f:ff:a5:bf:cf:7c:87:5c:3c:eb: 14:d4:dc:93:b6:50:b5:d9:bb:f4:13:5e:64:10:36:30:12:84: ed:90:bb:d0:34:3a:4a:8a:09:e8:33:e7:ca:8d:b2:fd:db:51: ec:5e:42:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURiS7P1YIWpgbXMurrTmZZcRIAIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA3MjMyMzI0NTBaFw0yNjA3MjQyMzUyNTBaMDMxMTAvBgNV BAMTKDdDQzVBNzFERDVGNjg2RjgwMUVEQzA4MjZFNjM2OUNDODQwRTI3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuzVw5hJRe5+flJCbMsiRurfx EcDIVYX00hib/eTyrAfU3Qjla03E6MQh9IJDesAcEkrN3ta87BDMmpjxb/brgv8H sruC3y7GrLZX0/MvufO6271DkewyyXdlhpuO3YHGntAm3YfnsBxJuUCJH6tIluYD PlD0XrBdUfsQwhU9Aqk1M2n/dQkNoAqcCLl1uUv4ZEPClM38S+cmpCmmEbOxC05u eZgxju9atTPK/Z+y1F16o49iiHbnpamDaUhHGSP5y+53Jo8QUz8qBNvv8dCfUZ6N 60SG6cwpWUKlaSqrCOrc+c7fhRNKJ/Eu4vYMcU17JUV9RvIoannM9+HAN0NHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfMWnHdX2hvgB7cCCbmNpzIQOJyAwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveYKaL37qHZ7 tguf4VYcTTvsNFiAHDp0wsP8OWc+1+kzxGVEVMvpnF1QYH6YYFOFxKUf+drk7e/b wVFETdCF+l25ozAwHbOhFty9tpMGSPudh5OAHFMc+lsYXQJ7ARtB9WCdNerV/2ul tivnSkoI3IyXxtEQxLQA5v05dmORF0Yw7bHVeRpo8nbyZeKkkW+7X//DG426e2M6 43bEoI7HrfD9y+H9UnKqKpGN7u7y+r/wJ1NO0xZq8AqbgH8ndjwWFvoLaplSZDZb olYoeZIP/6W/z3yHXDzrFNTck7ZQtdm79BNeZBA2MBKE7ZC70DQ6SooJ6DPnyo2y /dtR7F5CMA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:39 2026 by rpki-client