$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: kNK5c55fg4TrLkCWr8EAh1mcmwjDwklgGL1zFmpr8Vw= Subject key identifier: 64:95:34:25:05:65:7C:05:BC:2E:C5:D1:6E:FF:C2:D1:21:7F:F3:A9 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 043EBE7D019697BBE3D5CF15583880189456F0CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: F7 Signing time: Fri 24 Jul 2026 00:14:54 +0000 Manifest this update: Fri 24 Jul 2026 00:09:54 +0000 Manifest next update: Sat 25 Jul 2026 01:56:54 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 3: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: O2q4Jb4J6anp7uZmMHs8mx8aacX98rVVZpsBIR3E9dM=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3e:be:7d:01:96:97:bb:e3:d5:cf:15:58:38:80:18:94:56:f0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Jul 24 00:09:54 2026 GMT Not After : Jul 25 01:56:54 2026 GMT Subject: CN=6495342505657C05BC2EC5D16EFFC2D1217FF3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6f:f3:f3:e0:70:ba:30:f7:c3:bf:df:b4:35: 88:24:c6:2b:af:cd:6f:0e:00:c8:e3:b8:90:4d:8e: 80:7b:28:dd:33:d2:e5:2c:9d:48:bd:ec:ac:af:69: c8:e6:d7:21:9c:e7:1e:8e:e6:cb:28:6c:0c:77:e5: 39:b4:3b:ce:6a:d1:e1:8b:9a:73:48:b5:06:88:31: 2e:cb:8b:e2:fc:d1:5b:fc:fe:2b:21:fc:79:e3:e3: 65:39:4c:26:49:aa:17:69:b1:f0:02:1a:50:81:81: 54:78:05:c7:d5:c5:5f:31:a6:1e:10:4c:6a:ed:b3: c5:7a:34:a8:ff:58:36:ea:64:71:c5:25:36:69:05: fd:5e:d5:e7:b2:35:c6:b2:48:67:d0:37:55:f7:2a: 10:9b:08:19:da:1c:45:28:48:4b:d8:96:90:27:b3: 34:be:26:35:07:f8:c4:69:e2:6b:2d:82:c5:27:74: 18:31:09:cb:c6:02:6d:ab:f8:49:d2:d2:e1:16:40: 24:3e:38:a5:0f:cd:9f:ee:5e:00:ba:3b:cf:65:95: 21:cf:20:e3:b3:53:10:74:6e:2f:9c:9f:75:a5:5e: e0:c6:5b:86:d0:88:7a:eb:cd:ca:7f:6b:d3:68:f6: bf:ca:90:83:fa:86:37:24:5a:2f:dd:08:6a:9d:cb: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:34:25:05:65:7C:05:BC:2E:C5:D1:6E:FF:C2:D1:21:7F:F3:A9 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:e5:15:29:e0:c1:f7:8d:e2:4c:52:a2:a8:eb:5e:a5:e8: a8:0a:4e:3b:22:26:a3:f8:e2:8a:b2:f4:42:c4:88:8e:a9:ba: a0:56:1f:00:a1:4f:43:49:40:d1:04:2b:48:50:f2:88:67:40: 75:95:0b:e4:42:ae:48:d6:be:b3:3c:fa:55:09:4f:f8:7a:36: a0:c7:50:93:dd:83:3f:a0:34:f4:26:35:c2:9d:7a:7a:76:b6: de:8e:65:8a:6d:ee:3b:2b:3a:7e:e9:e5:38:34:5d:7a:c9:a8: 26:7b:c7:43:17:da:9a:26:08:e9:ed:88:7d:3b:65:71:2d:44: 75:32:4c:fa:d5:89:c8:2c:b6:44:d1:ba:56:1e:a8:12:4d:18: 9c:2a:11:5f:1b:34:34:82:1a:fb:15:b0:c2:7c:83:e7:72:e5: 0a:80:e5:71:66:a5:b0:d0:56:a0:4a:2f:e6:8f:26:a2:0f:71: ed:e3:c0:ed:e3:e4:11:db:5e:7c:3f:f3:48:4f:1b:7b:08:db: 6e:3e:cb:bf:20:4c:31:62:ac:41:fd:29:b8:3e:ae:b8:09:c7: 0f:b1:24:3f:0e:88:c2:c4:86:1a:38:69:3e:e3:34:a8:02:2f: 70:48:e2:26:fe:f4:18:d7:ff:f2:37:b4:3a:f9:f3:c6:0a:39: ac:37:01:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBD6+fQGWl7vj1c8VWDiAGJRW8M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA3MjQwMDA5NTRaFw0yNjA3MjUwMTU2NTRaMDMxMTAvBgNV BAMTKDY0OTUzNDI1MDU2NTdDMDVCQzJFQzVEMTZFRkZDMkQxMjE3RkYzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWb/Pz4HC6MPfDv9+0NYgkxiuv zW8OAMjjuJBNjoB7KN0z0uUsnUi97Kyvacjm1yGc5x6O5ssobAx35Tm0O85q0eGL mnNItQaIMS7Li+L80Vv8/ish/Hnj42U5TCZJqhdpsfACGlCBgVR4BcfVxV8xph4Q TGrts8V6NKj/WDbqZHHFJTZpBf1e1eeyNcaySGfQN1X3KhCbCBnaHEUoSEvYlpAn szS+JjUH+MRp4mstgsUndBgxCcvGAm2r+EnS0uEWQCQ+OKUPzZ/uXgC6O89llSHP IOOzUxB0bi+cn3WlXuDGW4bQiHrrzcp/a9No9r/KkIP6hjckWi/dCGqdy/bRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZJU0JQVlfAW8LsXRbv/C0SF/86kwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOrlFSngwfeN 4kxSoqjrXqXoqApOOyImo/jiirL0QsSIjqm6oFYfAKFPQ0lA0QQrSFDyiGdAdZUL 5EKuSNa+szz6VQlP+Ho2oMdQk92DP6A09CY1wp16ena23o5lim3uOys6funlODRd esmoJnvHQxfamiYI6e2IfTtlcS1EdTJM+tWJyCy2RNG6Vh6oEk0YnCoRXxs0NIIa +xWwwnyD53LlCoDlcWalsNBWoEov5o8mog9x7ePA7ePkEdtefD/zSE8bewjbbj7L vyBMMWKsQf0puD6uuAnHD7EkPw6IwsSGGjhpPuM0qAIvcEjiJv70GNf/8je0Ovnz xgo5rDcBdQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:41 2026 by rpki-client