$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json) Hash identifier: yqQV3P46ru2Lamva18oGa9tpYUckMCwe/WQSzcwdT3o= Subject key identifier: BD:5B:12:58:C5:4E:D7:C1:2D:EA:C8:7A:1E:5F:7B:48:B9:D3:99:3E Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 5B3D55BB657D681126595A9AB247C76A47D4195D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft Manifest number: C2 Signing time: Fri 24 Jul 2026 05:20:26 +0000 Manifest this update: Fri 24 Jul 2026 05:15:26 +0000 Manifest next update: Sat 25 Jul 2026 07:51:26 +0000 Files and hashes: 1: AS0.roa (hash: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE=) 2: AS63619.roa (hash: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os=) 3: AS17621.roa (hash: FgRK6EJ93pTm3fStKaZDsp5WoaDJ+ZV/uwIlWcN1CfE=) 4: AS24547.roa (hash: aThkMpxD23pAJVWAABx08oowIUHQmo7KBJIsg/LhuK4=) 5: AS4811.roa (hash: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=) 6: AS4837.roa (hash: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8=) 7: AS141771.roa (hash: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE=) 8: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: vtUsLSLeLLgZ/lR1993MQE5ZiDjcMhwkX50d7tCuzn8=) 9: AS146781.roa (hash: CYdQQlwdflyA5j801ct6fQ7pTh27hC+nUnGbzXcwxdY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3d:55:bb:65:7d:68:11:26:59:5a:9a:b2:47:c7:6a:47:d4:19:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jul 24 05:15:26 2026 GMT Not After : Jul 25 07:51:26 2026 GMT Subject: CN=BD5B1258C54ED7C12DEAC87A1E5F7B48B9D3993E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:6a:f5:c6:8c:b9:4e:24:35:eb:02:3e:9b: 88:08:05:d3:9f:06:57:6e:e5:1b:68:42:6c:13:04: 2a:3d:5b:f9:23:68:64:91:8e:35:db:00:b5:a9:f0: 55:9f:9a:2a:75:40:19:2b:8f:2c:b4:53:8c:06:c9: 01:72:3d:1e:cc:98:93:aa:5c:f0:55:dc:4d:28:94: 43:c5:68:58:bc:ce:8f:19:aa:90:f2:3f:aa:43:f4: ff:00:38:75:be:a9:6f:47:40:0e:b8:74:5b:4a:40: ad:49:af:c5:92:d2:b6:ea:33:92:5e:f7:76:7a:be: d8:0c:28:df:db:5f:6a:e1:b5:bf:4f:ba:b3:fd:98: c4:91:3e:0f:31:9e:c9:4c:c7:56:e4:9a:44:6a:ff: 9b:54:71:86:c6:33:e1:eb:13:6d:40:44:23:a8:27: e5:d0:0f:46:00:c8:68:6f:63:61:e8:5d:39:97:a2: 25:ef:23:86:b0:dd:a2:37:57:36:28:8e:d8:7e:3d: 66:ce:b0:89:a0:49:9a:28:d8:b7:f0:55:63:a3:f1: fc:18:3d:82:55:ed:d7:5f:d0:c1:c9:4c:0c:78:aa: 82:95:bd:34:78:30:c3:4f:e6:c9:d5:d2:16:36:4c: 42:af:68:22:f3:31:59:22:b6:a2:6f:ef:5a:b8:6c: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:12:58:C5:4E:D7:C1:2D:EA:C8:7A:1E:5F:7B:48:B9:D3:99:3E X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b7:69:38:92:84:ae:9a:fb:82:1b:66:7d:26:3d:60:95:22: ef:f2:b4:c3:44:90:14:c1:aa:d7:cb:fc:a5:52:29:07:56:39: 17:4b:5e:b5:66:82:05:c7:f4:fa:6c:2b:ae:e6:5c:03:a9:c7: 9d:9a:b2:c1:3e:88:e5:5e:34:b3:2f:4e:af:d9:19:b4:cb:38: 6c:b8:b1:bb:26:93:9e:28:c7:44:7e:b9:ce:29:8e:4b:67:63: 97:5c:64:19:9e:29:e0:3f:64:58:92:3e:8e:9c:87:2d:17:b1: 77:67:b3:fc:a4:c0:36:ca:68:71:b9:fc:77:22:08:19:07:8a: 58:55:87:74:1a:2e:75:a9:c7:8f:65:fb:0f:de:a0:06:c6:02: b6:1c:2a:4a:59:20:d4:83:54:16:22:9c:b8:94:15:3e:6a:6b: c9:50:b7:bf:af:7d:ae:ba:32:41:fe:4f:d8:fb:de:3d:93:00: df:42:ee:3e:1a:ec:c3:54:18:0b:c8:11:7f:dd:56:39:70:a8: fe:0c:1b:43:e6:ed:c6:16:5e:40:ba:81:bb:86:a2:ff:e3:19: fe:3e:86:a9:02:04:8e:87:e2:62:10:6a:8a:cc:94:6c:e0:fe: ea:6c:35:32:f7:dc:a9:cc:85:9d:bb:1f:6f:15:da:ad:7f:fd: 03:c5:42:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWz1Vu2V9aBEmWVqaskfHakfUGV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA3MjQwNTE1MjZaFw0yNjA3MjUwNzUxMjZaMDMxMTAvBgNV BAMTKEJENUIxMjU4QzU0RUQ3QzEyREVBQzg3QTFFNUY3QjQ4QjlEMzk5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YWr1xoy5TiQ16wI+m4gIBdOf Bldu5RtoQmwTBCo9W/kjaGSRjjXbALWp8FWfmip1QBkrjyy0U4wGyQFyPR7MmJOq XPBV3E0olEPFaFi8zo8ZqpDyP6pD9P8AOHW+qW9HQA64dFtKQK1Jr8WS0rbqM5Je 93Z6vtgMKN/bX2rhtb9PurP9mMSRPg8xnslMx1bkmkRq/5tUcYbGM+HrE21ARCOo J+XQD0YAyGhvY2HoXTmXoiXvI4aw3aI3VzYojth+PWbOsImgSZoo2LfwVWOj8fwY PYJV7ddf0MHJTAx4qoKVvTR4MMNP5snV0hY2TEKvaCLzMVkitqJv71q4bGVzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvVsSWMVO18Et6sh6Hl97SLnTmT4wHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1 MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrdpOJKErpr7 ghtmfSY9YJUi7/K0w0SQFMGq18v8pVIpB1Y5F0tetWaCBcf0+mwrruZcA6nHnZqy wT6I5V40sy9Or9kZtMs4bLixuyaTnijHRH65zimOS2djl1xkGZ4p4D9kWJI+jpyH LRexd2ez/KTANspocbn8dyIIGQeKWFWHdBoudanHj2X7D96gBsYCthwqSlkg1INU FiKcuJQVPmpryVC3v699rroyQf5P2PvePZMA30LuPhrsw1QYC8gRf91WOXCo/gwb Q+btxhZeQLqBu4ai/+MZ/j6GqQIEjofiYhBqisyUbOD+6mw1MvfcqcyFnbsfbxXa rX/9A8VCYg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:04 2026 by rpki-client