$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: x0nOYOBerAvpz+j4AaVSWowx4V1KJdh6CC47leyq5Uo= Subject key identifier: 3D:D3:19:C1:F4:C9:8C:FB:59:81:6C:FB:D2:5B:D8:F3:67:C9:66:80 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 594EB2A61AE160E4B0635511FBC77893A1D83602 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 89 Signing time: Fri 24 Jul 2026 03:10:13 +0000 Manifest this update: Fri 24 Jul 2026 03:05:13 +0000 Manifest next update: Sat 25 Jul 2026 04:21:13 +0000 Files and hashes: 1: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: 07plVQ6rqscl+3339zRpQ0yPwJgWYY9JWh48TDQZDk0=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4e:b2:a6:1a:e1:60:e4:b0:63:55:11:fb:c7:78:93:a1:d8:36:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Jul 24 03:05:13 2026 GMT Not After : Jul 25 04:21:13 2026 GMT Subject: CN=3DD319C1F4C98CFB59816CFBD25BD8F367C96680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:28:58:1c:a6:65:3a:d0:87:fb:4f:51:2c: 51:4f:1e:3b:e2:32:43:9b:8a:40:2e:00:eb:a2:35: 2e:97:8a:f8:68:cc:86:06:35:b3:a8:d2:2c:45:db: 8e:b5:f8:02:85:1b:80:23:29:0b:ec:30:05:2e:b9: c1:d3:3f:6f:1f:22:1b:b8:fe:b8:06:5a:d6:7e:b4: ca:af:ce:0e:af:d8:29:5e:b3:b8:e9:90:b5:94:c6: 32:6a:1f:fd:85:76:ea:a6:60:f4:9f:7e:2c:d8:77: 9a:f2:65:84:e6:58:e1:a1:31:50:64:07:1a:b5:af: d4:14:20:11:fe:3e:7b:e5:a5:18:0e:9e:ac:5b:84: 81:29:f4:24:15:93:ec:67:b3:ef:9e:fe:6a:6b:63: 1e:a0:f2:ef:c8:ed:e5:28:d5:f4:37:79:5e:bc:ae: 15:57:d1:82:de:7d:e9:65:bc:64:2c:81:b0:4c:cc: 9c:59:fe:dc:32:32:fb:3f:b9:de:d8:f6:9f:fd:bc: 93:4a:f4:49:51:78:c3:cc:44:04:95:f3:3f:f2:1e: 49:19:07:92:93:f3:17:f3:bf:0d:da:a7:8a:f4:6e: 62:cc:f1:e8:6e:ec:a9:6d:d2:0a:42:85:c2:38:e8: 9c:8a:95:a9:8b:f5:10:f7:6e:5c:ed:e9:11:1e:88: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D3:19:C1:F4:C9:8C:FB:59:81:6C:FB:D2:5B:D8:F3:67:C9:66:80 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3e:1f:cf:41:34:99:a9:8a:d7:9d:55:e1:ac:ab:b0:35:1d: 38:7a:84:58:4a:50:29:2c:5d:b7:42:42:2b:96:7b:c8:d8:70: b5:da:fd:0c:85:08:63:77:21:3d:bf:76:bf:bc:23:5b:1f:38: 14:f3:7e:8c:3d:14:e7:6a:6a:ff:28:89:ac:67:98:b9:76:02: 7d:1e:f4:f8:7d:59:49:a6:b7:8b:6c:b9:1e:95:e6:5b:ae:2a: ae:72:b6:32:3e:90:74:5a:64:36:5d:3c:0e:64:c9:3d:28:2f: 2a:7a:9f:36:89:21:6b:ef:1b:d1:1d:89:91:2d:49:98:28:8e: 7c:47:ec:2f:ca:d5:5d:94:aa:4c:76:e5:cc:1e:19:fb:5c:bc: 8f:8c:94:03:26:19:09:4d:b6:31:04:af:87:d0:e8:ab:1c:5d: a7:4f:8e:41:9f:78:7e:88:7e:40:ea:68:4c:01:db:d1:84:53: 98:b0:48:f1:f5:d0:eb:8b:9b:47:87:f2:58:68:e9:0f:6c:37: 62:b1:66:a4:6d:5d:6d:55:6c:85:e7:aa:eb:e5:e9:8d:0c:e1: a2:78:37:f3:55:b4:4b:7a:68:aa:52:99:a2:55:bf:78:a3:63: 2b:db:95:5e:67:9d:57:2f:05:80:21:f6:74:2c:4b:4f:f3:6f: 97:29:35:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWU6yphrhYOSwY1UR+8d4k6HYNgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA3MjQwMzA1MTNaFw0yNjA3MjUwNDIxMTNaMDMxMTAvBgNV BAMTKDNERDMxOUMxRjRDOThDRkI1OTgxNkNGQkQyNUJEOEYzNjdDOTY2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GyhYHKZlOtCH+09RLFFPHjvi MkObikAuAOuiNS6XivhozIYGNbOo0ixF2461+AKFG4AjKQvsMAUuucHTP28fIhu4 /rgGWtZ+tMqvzg6v2Cles7jpkLWUxjJqH/2FduqmYPSffizYd5ryZYTmWOGhMVBk Bxq1r9QUIBH+PnvlpRgOnqxbhIEp9CQVk+xns++e/mprYx6g8u/I7eUo1fQ3eV68 rhVX0YLefellvGQsgbBMzJxZ/twyMvs/ud7Y9p/9vJNK9ElReMPMRASV8z/yHkkZ B5KT8xfzvw3ap4r0bmLM8ehu7Klt0gpChcI46JyKlamL9RD3blzt6REeiFR5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPdMZwfTJjPtZgWz70lvY82fJZoAwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj4fz0E0mamK 151V4ayrsDUdOHqEWEpQKSxdt0JCK5Z7yNhwtdr9DIUIY3chPb92v7wjWx84FPN+ jD0U52pq/yiJrGeYuXYCfR70+H1ZSaa3i2y5HpXmW64qrnK2Mj6QdFpkNl08DmTJ PSgvKnqfNokha+8b0R2JkS1JmCiOfEfsL8rVXZSqTHblzB4Z+1y8j4yUAyYZCU22 MQSvh9Doqxxdp0+OQZ94foh+QOpoTAHb0YRTmLBI8fXQ64ubR4fyWGjpD2w3YrFm pG1dbVVsheeq6+XpjQzhong381W0S3poqlKZolW/eKNjK9uVXmedVy8FgCH2dCxL T/Nvlyk1nQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:34:01 2026 by rpki-client