$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: nIQcbxSathLsrMI2NUF6grRRFXoXefVO/z3LQ/qmh38= Subject key identifier: 6F:70:18:34:DC:A3:CC:1F:36:E0:43:7C:41:70:A1:26:8E:10:1D:FA Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 401B984E4FCDE61E029FA9CD174FED2076871AB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: 8C Signing time: Thu 23 Jul 2026 10:08:23 +0000 Manifest this update: Thu 23 Jul 2026 10:03:23 +0000 Manifest next update: Fri 24 Jul 2026 13:28:23 +0000 Files and hashes: 1: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: /L0PipXepVi1Y2n+5Ge/yB8w8l/C/aZ7ED0I4VpW4w8=) 2: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1b:98:4e:4f:cd:e6:1e:02:9f:a9:cd:17:4f:ed:20:76:87:1a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Jul 23 10:03:23 2026 GMT Not After : Jul 24 13:28:23 2026 GMT Subject: CN=6F701834DCA3CC1F36E0437C4170A1268E101DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9e:fa:61:51:83:58:9f:7c:17:79:41:55:20: 37:ae:9d:79:e5:3d:59:19:b6:80:0f:d0:13:81:4a: b3:a5:46:55:80:92:b7:35:52:64:84:34:53:47:fb: 54:1d:28:92:47:20:54:e8:fd:c6:3a:5b:4f:64:59: f0:f7:3e:a5:d7:ff:50:d5:2e:9d:a2:26:ed:e2:99: 10:ca:01:fc:61:fb:f5:b5:28:36:79:47:fd:36:e7: 7d:3f:e5:19:0c:25:ce:fc:7d:57:3d:40:55:7e:3e: 39:af:ae:0f:7d:91:cf:51:ae:34:f9:dd:cc:7b:aa: af:d8:a7:ba:38:82:f4:41:2b:24:67:fa:52:ac:3a: dc:f0:ad:37:52:f2:f3:de:8b:fe:3f:58:2b:40:4b: 06:a2:80:8b:66:34:97:42:59:a4:f7:e1:a7:94:9d: 05:e1:b5:5e:dd:b7:2a:01:cd:0a:b5:6b:14:42:bb: 31:f8:08:aa:5d:d3:fe:b0:23:b0:e7:6a:58:61:a6: ae:a1:2f:50:82:89:8f:3a:9e:e8:04:f6:74:fa:9d: 98:46:46:d0:e7:81:6b:a4:97:b4:86:63:48:d4:db: 59:64:e1:13:45:09:60:29:fb:a5:a2:d9:21:4c:a5: f1:35:f3:02:7a:cf:56:cf:cb:86:3d:7c:27:38:9c: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:70:18:34:DC:A3:CC:1F:36:E0:43:7C:41:70:A1:26:8E:10:1D:FA X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:24:48:85:d3:ec:bd:e1:cc:33:d0:43:b5:55:73:2a:bf:2a: 7c:05:35:72:4f:56:94:c0:d7:f5:a1:ec:97:d5:e9:01:0b:14: 53:af:22:1c:99:bd:34:cb:31:ff:44:12:60:b3:a5:67:15:af: dc:e7:a0:2f:fc:ed:dd:70:72:a3:c9:6c:e3:1b:46:f4:50:a3: a1:a4:02:c1:bc:aa:31:ea:4f:6f:38:d8:99:95:cc:e0:f2:84: 2c:5b:8e:d1:8d:ac:14:7e:08:90:6a:b5:1c:c1:77:aa:08:6c: 0a:4e:99:5f:2e:16:58:16:e8:92:65:74:1f:6f:69:39:3b:6d: 62:49:fd:58:d9:28:57:9c:35:38:be:ae:fb:ff:ba:4a:90:f1: 20:3e:9c:30:77:04:1f:c4:bd:80:d7:1c:80:34:a3:19:5b:94: 64:b0:e3:e9:1c:6d:d5:1a:60:08:94:bf:fc:01:66:e9:81:3f: 11:a5:e3:d5:55:58:33:7d:97:a0:9a:4f:6e:52:12:3b:bb:29: df:cb:ac:b5:5f:ce:28:f1:46:02:6d:cf:c5:ed:00:d1:bb:70: cf:ea:47:89:e8:c6:c0:27:5c:4b:f2:66:75:6b:a5:c7:08:a4: a2:ce:f3:b6:52:0c:63:81:fd:44:a5:e2:29:f2:60:0b:90:90: 0d:dd:ee:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQBuYTk/N5h4Cn6nNF0/tIHaHGrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjA3MjMxMDAzMjNaFw0yNjA3MjQxMzI4MjNaMDMxMTAvBgNV BAMTKDZGNzAxODM0RENBM0NDMUYzNkUwNDM3QzQxNzBBMTI2OEUxMDFERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUnvphUYNYn3wXeUFVIDeunXnl PVkZtoAP0BOBSrOlRlWAkrc1UmSENFNH+1QdKJJHIFTo/cY6W09kWfD3PqXX/1DV Lp2iJu3imRDKAfxh+/W1KDZ5R/02530/5RkMJc78fVc9QFV+Pjmvrg99kc9RrjT5 3cx7qq/Yp7o4gvRBKyRn+lKsOtzwrTdS8vPei/4/WCtASwaigItmNJdCWaT34aeU nQXhtV7dtyoBzQq1axRCuzH4CKpd0/6wI7Dnalhhpq6hL1CCiY86nugE9nT6nZhG RtDngWukl7SGY0jU21lk4RNFCWAp+6Wi2SFMpfE18wJ6z1bPy4Y9fCc4nCaDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb3AYNNyjzB824EN8QXChJo4QHfowHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCRIhdPsveHM M9BDtVVzKr8qfAU1ck9WlMDX9aHsl9XpAQsUU68iHJm9NMsx/0QSYLOlZxWv3Oeg L/zt3XByo8ls4xtG9FCjoaQCwbyqMepPbzjYmZXM4PKELFuO0Y2sFH4IkGq1HMF3 qghsCk6ZXy4WWBbokmV0H29pOTttYkn9WNkoV5w1OL6u+/+6SpDxID6cMHcEH8S9 gNccgDSjGVuUZLDj6Rxt1RpgCJS//AFm6YE/EaXj1VVYM32XoJpPblISO7sp38us tV/OKPFGAm3Pxe0A0btwz+pHiejGwCdcS/JmdWulxwikos7ztlIMY4H9RKXiKfJg C5CQDd3ulw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:04 2026 by rpki-client