$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: fzMsKEucJWfLs82Ea7838FxQeZprP5QkZmZ1tAZPcb0= Subject key identifier: A5:88:6F:6E:4A:59:C8:09:7B:F3:19:40:57:3C:BD:F3:6F:FC:DC:A4 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 2A5230F4D2AB2B1334AFBA4FEA324066A3969D70 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 01:45:04 +0000 Manifest this update: Fri 24 Jul 2026 01:40:04 +0000 Manifest next update: Sat 25 Jul 2026 03:02:04 +0000 Files and hashes: 1: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: 4kU7k6is6zGkQc/FKRvrvdb4F1xeXZhOUVlnfQfj4XQ=) 2: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) 3: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:30:f4:d2:ab:2b:13:34:af:ba:4f:ea:32:40:66:a3:96:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: Jul 24 01:40:04 2026 GMT Not After : Jul 25 03:02:04 2026 GMT Subject: CN=A5886F6E4A59C8097BF31940573CBDF36FFCDCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:9c:e7:b5:a0:d7:80:ce:37:43:bf:cf:ec: 21:91:1f:2e:4f:0e:b1:34:b4:01:71:57:ad:5b:69: 9e:57:7d:47:73:f3:f7:37:2b:22:61:17:fd:f1:ad: a0:76:ab:a5:8e:40:10:f0:6e:6c:15:d7:2b:e6:db: a4:0c:1a:7c:ba:0f:ce:0f:96:cc:ff:0c:23:b3:02: 17:10:d6:a4:5c:9f:05:87:8a:a9:8c:02:da:d2:d0: 0d:72:fe:ab:b2:97:c9:cd:39:ac:56:f3:20:a2:f6: 51:49:a2:96:26:39:07:05:ec:be:4d:be:88:7b:4d: ff:49:d7:4c:1d:9a:08:72:07:9b:78:27:65:32:16: 72:cd:06:48:9d:67:98:79:f8:10:b8:a4:58:30:7c: 71:a5:08:a0:94:5d:42:c1:92:7f:0b:e8:9f:9a:9a: 58:49:5a:b5:23:22:33:8e:71:f5:26:21:4b:b2:73: 24:1d:4e:56:49:35:60:02:a7:ba:2a:a4:ee:88:2a: 81:43:99:2c:27:55:5b:e7:c8:d5:f1:b6:a3:df:d1: 12:11:ce:cd:70:b2:3a:10:d3:65:3c:67:08:a6:23: 3e:a9:bd:79:c8:14:5c:2f:de:ba:7e:b3:8d:30:f2: c1:83:2d:83:15:6d:dc:24:6e:88:c8:13:41:fa:81: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:88:6F:6E:4A:59:C8:09:7B:F3:19:40:57:3C:BD:F3:6F:FC:DC:A4 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:13:28:12:e5:98:58:2a:62:97:f7:83:f4:cb:0f:89:4f:62: 10:49:b9:bc:a4:75:c9:c2:ba:a9:ce:d6:fc:a7:db:2b:27:ef: da:47:df:2b:b4:12:00:6b:75:bc:3a:6c:b2:ac:7c:de:b2:1b: 95:3c:5f:0f:06:6b:fd:f3:77:5a:c7:07:02:11:8c:0b:61:12: c9:93:b4:b0:aa:03:8e:d2:93:16:d0:15:20:b5:43:97:4a:8a: 07:ce:74:2b:6a:99:df:f1:3c:1f:6b:aa:9d:93:6a:c3:71:8f: 74:22:84:61:11:28:97:c4:0c:48:1c:0a:7e:51:6a:c6:05:37: b2:e9:07:6a:47:ae:cf:7b:11:d8:79:f4:9d:ba:1c:b1:29:b4: 70:0c:99:1a:3b:9d:75:fd:58:a8:5b:d4:3f:f4:e6:38:8a:fc: 40:69:f0:5d:17:1f:62:1c:d4:36:35:17:e2:a2:27:e3:55:1e: 53:85:c3:09:9f:66:43:a9:12:9c:4e:09:82:98:5a:ab:48:9a: 2d:d2:ce:4e:81:51:0c:57:7d:e6:d0:9e:2f:a5:4f:cb:18:41: 9b:7e:32:bc:59:f9:1f:43:32:33:1f:c6:c2:02:be:84:ae:a0: 13:d7:ea:29:0c:24:5f:28:47:47:e3:cd:43:ff:58:01:d7:76: 9c:01:d4:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKlIw9NKrKxM0r7pP6jJAZqOWnXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA3MjQwMTQwMDRaFw0yNjA3MjUwMzAyMDRaMDMxMTAvBgNV BAMTKEE1ODg2RjZFNEE1OUM4MDk3QkYzMTk0MDU3M0NCREYzNkZGQ0RDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcepzntaDXgM43Q7/P7CGRHy5P DrE0tAFxV61baZ5XfUdz8/c3KyJhF/3xraB2q6WOQBDwbmwV1yvm26QMGny6D84P lsz/DCOzAhcQ1qRcnwWHiqmMAtrS0A1y/quyl8nNOaxW8yCi9lFJopYmOQcF7L5N voh7Tf9J10wdmghyB5t4J2UyFnLNBkidZ5h5+BC4pFgwfHGlCKCUXULBkn8L6J+a mlhJWrUjIjOOcfUmIUuycyQdTlZJNWACp7oqpO6IKoFDmSwnVVvnyNXxtqPf0RIR zs1wsjoQ02U8ZwimIz6pvXnIFFwv3rp+s40w8sGDLYMVbdwkbojIE0H6gWDLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpYhvbkpZyAl78xlAVzy982/83KQwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxMoEuWYWCpi l/eD9MsPiU9iEEm5vKR1ycK6qc7W/KfbKyfv2kffK7QSAGt1vDpssqx83rIblTxf DwZr/fN3WscHAhGMC2ESyZO0sKoDjtKTFtAVILVDl0qKB850K2qZ3/E8H2uqnZNq w3GPdCKEYREol8QMSBwKflFqxgU3sukHakeuz3sR2Hn0nbocsSm0cAyZGjuddf1Y qFvUP/TmOIr8QGnwXRcfYhzUNjUX4qIn41UeU4XDCZ9mQ6kSnE4Jgphaq0iaLdLO ToFRDFd95tCeL6VPyxhBm34yvFn5H0MyMx/GwgK+hK6gE9fqKQwkXyhHR+PNQ/9Y Add2nAHUzg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:17 2026 by rpki-client