$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json) Hash identifier: 2wEzRFD54sxTSHdbVb2Nr8JHVUQN8zYRs/xKhVciDDw= Subject key identifier: 31:FD:E4:1E:C8:82:FB:C1:44:5C:09:94:E1:2D:D6:86:7C:D6:F3:D6 Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 489532D81FF841E739F18519B4D9F1F58EB4F48B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft Manifest number: 72 Signing time: Fri 24 Jul 2026 09:35:55 +0000 Manifest this update: Fri 24 Jul 2026 09:30:55 +0000 Manifest next update: Sat 25 Jul 2026 12:49:55 +0000 Files and hashes: 1: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=) 2: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=) 3: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=) 4: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: 2GVUp4Une4LgvjGeSLamv84wfx20zvKBPGStuG7Excg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:95:32:d8:1f:f8:41:e7:39:f1:85:19:b4:d9:f1:f5:8e:b4:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: Jul 24 09:30:55 2026 GMT Not After : Jul 25 12:49:55 2026 GMT Subject: CN=31FDE41EC882FBC1445C0994E12DD6867CD6F3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:33:74:ed:2d:77:a9:25:bb:b6:b7:f1:75: 00:a7:c1:db:59:59:04:71:d4:13:3a:7e:c4:f8:16: 15:9d:41:ed:00:ee:46:89:be:9a:d6:6f:e6:0c:97: e4:ee:85:cb:39:f4:ef:74:da:96:58:de:d8:0b:db: 60:4f:6f:7f:8f:26:fb:ce:80:eb:90:0b:64:cb:05: 91:99:a2:72:2c:8a:ba:96:d1:d0:0e:e0:f8:39:77: 08:f3:52:90:56:f6:07:1b:c2:21:b7:78:9f:64:92: c1:f4:75:ec:63:5e:2f:09:41:e0:9e:7a:ee:58:1b: 80:d7:14:6d:ba:fc:11:0e:15:74:9b:ef:62:2b:5a: 3b:60:09:33:22:41:79:98:a1:9a:bf:fa:0a:46:19: ad:ed:de:26:85:a8:7f:3d:48:39:e8:bd:e6:1b:6f: 2a:37:2b:3a:b5:e6:0b:50:a4:51:33:57:65:e5:97: 47:57:c0:26:d2:dc:68:3e:e5:06:3b:d8:9f:43:8b: 74:97:a7:41:80:06:53:dd:99:1b:7e:66:a2:3d:05: cf:67:da:94:ba:56:97:24:19:2e:e7:3e:16:36:c3: 4d:95:42:d5:04:2d:2f:e9:f3:10:d9:9a:fa:01:d6: 7b:14:c8:d7:f0:e1:40:51:10:9c:8b:af:f9:94:1d: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FD:E4:1E:C8:82:FB:C1:44:5C:09:94:E1:2D:D6:86:7C:D6:F3:D6 X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:56:74:e8:62:08:c9:76:1a:b9:b9:76:71:a9:6d:ab:b0:a3: d5:0c:1f:9e:4e:db:85:10:db:96:50:4a:8c:55:f2:2b:ee:aa: fb:dd:1b:83:00:49:2b:ab:09:20:6b:09:9f:77:58:7c:80:62: 62:72:33:49:d1:c7:e1:dc:96:06:d5:01:0b:5d:cc:e2:75:1b: 02:ec:6f:18:95:60:e5:d8:51:90:6b:e1:74:01:ef:4f:d3:ee: 72:3f:bf:21:d5:24:99:66:55:5e:78:58:44:35:55:09:74:90: c4:0f:fc:45:ab:66:d6:12:10:b6:0d:ae:bd:ac:e4:ca:1f:f5: 5b:a6:9d:e8:92:e8:9f:ce:c0:ad:32:ba:b9:6f:b3:46:1e:01: 59:2e:1f:89:4b:35:61:be:e3:0a:61:75:76:f0:e4:76:4a:0b: ec:f3:be:02:db:83:ad:9f:03:d0:3d:2c:31:31:0d:f0:e0:7a: 21:a2:aa:47:4d:e1:ff:33:2b:87:a7:6a:a7:31:17:c4:ef:56: 6a:81:2b:f8:7b:be:44:28:9a:2d:37:7c:af:b1:76:70:17:8f: a1:32:10:11:51:7b:47:bf:c5:df:68:17:0d:e4:39:89:b0:79: ec:e7:b2:81:26:f8:43:16:87:6b:d7:3e:70:25:5c:b0:a9:84: 09:8c:cd:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSJUy2B/4Qec58YUZtNnx9Y609IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjA3MjQwOTMwNTVaFw0yNjA3MjUxMjQ5NTVaMDMxMTAvBgNV BAMTKDMxRkRFNDFFQzg4MkZCQzE0NDVDMDk5NEUxMkRENjg2N0NENkYzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjDN07S13qSW7trfxdQCnwdtZ WQRx1BM6fsT4FhWdQe0A7kaJvprWb+YMl+Tuhcs59O902pZY3tgL22BPb3+PJvvO gOuQC2TLBZGZonIsirqW0dAO4Pg5dwjzUpBW9gcbwiG3eJ9kksH0dexjXi8JQeCe eu5YG4DXFG26/BEOFXSb72IrWjtgCTMiQXmYoZq/+gpGGa3t3iaFqH89SDnoveYb byo3Kzq15gtQpFEzV2Xll0dXwCbS3Gg+5QY72J9Di3SXp0GABlPdmRt+ZqI9Bc9n 2pS6VpckGS7nPhY2w02VQtUELS/p8xDZmvoB1nsUyNfw4UBREJyLr/mUHUOFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMf3kHsiC+8FEXAmU4S3WhnzW89YwHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIxNTc2OTAyNTMwODI2MzEvMC9BNENGN0Y3MDlFMDYy ODQ5RTZCRjg0RTE0NDc0QTAzMjBFQUI3ODBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFZ06GIIyXYa ubl2caltq7Cj1Qwfnk7bhRDbllBKjFXyK+6q+90bgwBJK6sJIGsJn3dYfIBiYnIz SdHH4dyWBtUBC13M4nUbAuxvGJVg5dhRkGvhdAHvT9Pucj+/IdUkmWZVXnhYRDVV CXSQxA/8Ratm1hIQtg2uvazkyh/1W6ad6JLon87ArTK6uW+zRh4BWS4fiUs1Yb7j CmF1dvDkdkoL7PO+AtuDrZ8D0D0sMTEN8OB6IaKqR03h/zMrh6dqpzEXxO9WaoEr +Hu+RCiaLTd8r7F2cBePoTIQEVF7R7/F32gXDeQ5ibB57OeygSb4QxaHa9c+cCVc sKmECYzNRw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:25:02 2026 by rpki-client