$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: GAgDfbvAmo0CdT2W4Bw+aykL69oTU27kYnzlwmPpvjQ= Subject key identifier: CA:96:46:8D:D1:F2:39:DB:AD:10:AA:14:73:EC:5E:07:D7:97:3E:6E Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 61A68AD51909210B9611F6F6823B28BF1A6688E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 12:41:11 +0000 Manifest this update: Fri 24 Jul 2026 12:36:11 +0000 Manifest next update: Sat 25 Jul 2026 14:16:11 +0000 Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: Z6CRaqaecX50UzLzyRHtTsLIt9VRYmD3xBgEAgbKX9s=) 2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 14:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a6:8a:d5:19:09:21:0b:96:11:f6:f6:82:3b:28:bf:1a:66:88:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: Jul 24 12:36:11 2026 GMT Not After : Jul 25 14:16:11 2026 GMT Subject: CN=CA96468DD1F239DBAD10AA1473EC5E07D7973E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:3e:68:d9:57:2b:84:8d:a6:ed:71:c2:59: a5:26:92:bb:ea:3e:32:ce:3a:f0:60:d5:dc:20:46: dd:4d:a7:80:ac:4c:82:05:ae:da:73:66:f1:b0:6e: 69:78:3b:38:69:df:b8:d3:33:cc:1e:5c:29:62:ac: c0:9d:fc:ab:8d:71:d8:76:a3:93:67:28:b1:cd:c0: c2:ac:76:5e:71:34:13:1d:37:d6:f4:b1:6d:da:cc: 73:dd:0f:d6:67:bd:65:2d:eb:39:a9:8b:4e:3c:99: 0a:14:6b:37:06:de:74:80:51:59:80:bc:0c:20:6d: 9a:c5:29:bd:82:09:94:59:51:db:1d:29:f4:57:48: fa:63:42:52:6c:48:92:3f:ee:ef:80:14:39:8b:48: c9:80:bb:53:88:49:25:a7:a0:59:60:2a:c0:c8:90: c3:1c:57:71:09:7a:8d:12:b5:a6:7f:91:23:d7:98: b0:98:7a:69:b8:02:35:fd:83:96:93:ff:e5:2b:46: 3f:87:72:e1:3e:cf:19:5d:f3:ac:b8:c8:fc:87:c4: 0c:44:70:79:fc:94:bb:92:7c:45:e1:ca:4a:9d:90: ef:07:e4:22:ca:05:7d:e4:e9:34:b5:8c:83:f6:45: f1:9a:1f:41:c6:16:b3:34:a5:06:21:29:30:96:4d: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:46:8D:D1:F2:39:DB:AD:10:AA:14:73:EC:5E:07:D7:97:3E:6E X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:14:45:42:7e:16:97:9f:7a:6f:0c:a2:75:25:f6:b8:38:7f: 02:57:aa:6e:c5:fe:3b:f9:0f:15:bd:95:5b:70:78:55:94:9d: 56:48:dc:cc:6f:28:04:dc:a9:88:a7:99:0a:ba:ac:1d:48:96: d3:74:1b:e9:d2:a9:79:88:a7:fe:47:86:9d:a0:b0:4a:5b:e9: 99:83:2c:d2:a6:a1:5a:88:28:69:16:05:22:7a:5b:d3:bd:b8: a3:1d:2c:95:bb:7a:fe:89:35:fc:70:35:cc:50:13:87:44:84: 6f:81:98:82:6e:02:27:ee:04:a4:34:b9:79:d7:a1:38:ab:59: 27:f9:9f:51:67:2d:5e:ae:5e:c4:bf:87:ef:f6:10:76:40:0b: 4b:8b:45:f8:88:cd:10:e1:a8:d2:5a:b4:98:5a:d9:77:94:a8: 63:69:08:0a:35:05:d1:ea:a1:08:60:5d:cd:32:4a:3b:7c:d3: 65:04:6b:17:f0:87:04:e9:89:d1:28:2d:f7:56:48:8f:af:82: 63:aa:94:d0:bc:97:99:09:b7:eb:65:a4:bf:15:3d:0e:ff:1e: 92:5c:ef:e0:fb:45:9e:12:d5:2d:1d:50:6f:65:73:04:a7:c9: 67:4c:67:4e:10:67:f5:ff:c0:a8:79:9c:41:79:3e:e6:8d:e9: cb:4c:0e:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYaaK1RkJIQuWEfb2gjsovxpmiOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjA3MjQxMjM2MTFaFw0yNjA3MjUxNDE2MTFaMDMxMTAvBgNV BAMTKENBOTY0NjhERDFGMjM5REJBRDEwQUExNDczRUM1RTA3RDc5NzNFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4j5o2VcrhI2m7XHCWaUmkrvq PjLOOvBg1dwgRt1Np4CsTIIFrtpzZvGwbml4Ozhp37jTM8weXClirMCd/KuNcdh2 o5NnKLHNwMKsdl5xNBMdN9b0sW3azHPdD9ZnvWUt6zmpi048mQoUazcG3nSAUVmA vAwgbZrFKb2CCZRZUdsdKfRXSPpjQlJsSJI/7u+AFDmLSMmAu1OISSWnoFlgKsDI kMMcV3EJeo0StaZ/kSPXmLCYemm4AjX9g5aT/+UrRj+HcuE+zxld86y4yPyHxAxE cHn8lLuSfEXhykqdkO8H5CLKBX3k6TS1jIP2RfGaH0HGFrM0pQYhKTCWTec5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUypZGjdHyOdutEKoUc+xeB9eXPm4wHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1hRFQn4Wl596 bwyidSX2uDh/AleqbsX+O/kPFb2VW3B4VZSdVkjczG8oBNypiKeZCrqsHUiW03Qb 6dKpeYin/keGnaCwSlvpmYMs0qahWogoaRYFInpb0724ox0slbt6/ok1/HA1zFAT h0SEb4GYgm4CJ+4EpDS5edehOKtZJ/mfUWctXq5exL+H7/YQdkALS4tF+IjNEOGo 0lq0mFrZd5SoY2kICjUF0eqhCGBdzTJKO3zTZQRrF/CHBOmJ0Sgt91ZIj6+CY6qU 0LyXmQm362WkvxU9Dv8eklzv4PtFnhLVLR1Qb2VzBKfJZ0xnThBn9f/AqHmcQXk+ 5o3py0wOjQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:41:07 2026 by rpki-client