$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: 3tO6iMRq1n78oAXMDc8xD7/AiuCV+/7Z3G5wttimBSs= Subject key identifier: 4B:55:FC:28:3E:51:CF:0D:49:2B:2B:E8:FA:6E:A0:05:19:C2:AC:5E Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 0312CF298B31E6FAC46F33852BE9C48D3046AC99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 47 Signing time: Fri 24 Jul 2026 05:25:27 +0000 Manifest this update: Fri 24 Jul 2026 05:20:27 +0000 Manifest next update: Sat 25 Jul 2026 08:03:27 +0000 Files and hashes: 1: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 2: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 3: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 4: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 5: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 6: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 7: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) 8: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 9: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 10: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 11: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 12: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 13: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 14: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 15: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 16: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: C3Tzq4Z7FzEf26rwzLCu/3IKVjavg1fyDhp5kAbEFQg=) 17: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 18: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 19: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 20: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 21: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 22: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 23: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:12:cf:29:8b:31:e6:fa:c4:6f:33:85:2b:e9:c4:8d:30:46:ac:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Jul 24 05:20:27 2026 GMT Not After : Jul 25 08:03:27 2026 GMT Subject: CN=4B55FC283E51CF0D492B2BE8FA6EA00519C2AC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:65:b9:0e:4e:ad:bb:0b:56:0f:8d:86:a7: fa:e7:e7:a2:cb:e0:17:63:6e:e2:b8:88:e1:92:8c: 49:72:aa:35:69:18:01:fa:3d:26:b4:7b:f6:24:3d: 7d:68:4c:06:5a:7d:c1:34:6d:cd:5a:27:8b:6e:a6: aa:8a:42:66:dc:0e:7b:9d:67:eb:df:d6:96:db:b6: 89:89:c3:64:59:2f:a5:f2:ec:44:93:fd:39:d9:dc: 3a:c7:ac:aa:da:0c:39:1d:3d:d0:27:d1:7d:65:9e: 35:c4:bd:1e:d1:81:86:5c:96:77:5c:45:03:c2:e4: 5e:33:0a:a0:5e:c5:f9:c9:49:78:d6:99:01:32:a1: c8:ea:e4:0e:32:a6:7c:e3:30:98:3d:10:e0:f9:0f: 1e:c8:84:6a:26:20:04:17:03:2a:77:f1:bc:ac:ff: 17:37:d4:fb:58:13:3b:2d:b3:4a:47:b8:94:16:5c: a4:20:c2:64:1f:8f:1f:31:b7:3c:27:90:56:c6:73: 25:c4:3c:f0:0c:88:e9:dc:1f:39:a1:e4:a3:84:44: 31:75:9f:e4:d3:24:f6:31:19:8b:e8:d8:36:f8:9a: 46:89:69:8d:34:18:57:c6:45:2e:dd:5e:7f:9b:f1: cf:90:a5:b6:5f:19:5a:0b:10:17:1a:de:34:53:86: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:FC:28:3E:51:CF:0D:49:2B:2B:E8:FA:6E:A0:05:19:C2:AC:5E X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4d:32:b3:b2:50:fd:63:13:4e:52:58:cb:98:d7:ed:d6:85: 6f:ed:c0:78:6e:db:bc:4a:39:35:2e:c0:43:6a:c4:bb:1f:ee: 8c:c9:d9:62:70:2f:bf:22:4d:f5:d4:fe:94:1d:66:01:20:8d: c6:73:23:64:86:44:3e:dd:8e:db:eb:30:b0:85:e3:0e:f2:b7: 8f:37:8d:a4:50:68:02:98:59:54:3e:6e:20:79:db:b1:8c:54: 56:a3:0c:86:9e:d1:b6:1a:0e:74:b9:00:0c:e3:46:66:a4:06: fb:fc:da:52:fc:97:e6:0b:c1:6d:b2:ff:fb:8a:46:21:22:06: b3:0e:09:9b:eb:15:24:20:00:f1:06:dd:f0:42:0b:08:12:bc: 19:86:d1:79:96:ae:99:d6:db:65:0a:e1:b7:8d:94:cb:a5:d8: 10:06:d6:78:ba:ec:40:05:72:f4:bd:69:6a:f7:8e:5d:88:6e: b0:48:64:41:a9:67:7b:12:5e:33:3f:d4:48:1f:cf:f1:c7:a8: 64:62:33:33:87:c4:58:a4:2a:86:05:b3:4c:ab:43:79:ff:99: 81:e7:41:82:b9:5c:07:e3:59:aa:3b:1f:e2:f3:ec:17:1a:f5: 05:13:b7:1e:1c:70:18:36:d9:e4:68:02:fb:f0:7b:de:50:0a: 9e:44:fb:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxLPKYsx5vrEbzOFK+nEjTBGrJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA3MjQwNTIwMjdaFw0yNjA3MjUwODAzMjdaMDMxMTAvBgNV BAMTKDRCNTVGQzI4M0U1MUNGMEQ0OTJCMkJFOEZBNkVBMDA1MTlDMkFDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLGW5Dk6tuwtWD42Gp/rn56LL 4BdjbuK4iOGSjElyqjVpGAH6PSa0e/YkPX1oTAZafcE0bc1aJ4tupqqKQmbcDnud Z+vf1pbbtomJw2RZL6Xy7EST/TnZ3DrHrKraDDkdPdAn0X1lnjXEvR7RgYZclndc RQPC5F4zCqBexfnJSXjWmQEyocjq5A4ypnzjMJg9EOD5Dx7IhGomIAQXAyp38bys /xc31PtYEzsts0pHuJQWXKQgwmQfjx8xtzwnkFbGcyXEPPAMiOncHzmh5KOERDF1 n+TTJPYxGYvo2Db4mkaJaY00GFfGRS7dXn+b8c+QpbZfGVoLEBca3jRThpQLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS1X8KD5Rzw1JKyvo+m6gBRnCrF4wHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR00ys7JQ/WMT TlJYy5jX7daFb+3AeG7bvEo5NS7AQ2rEux/ujMnZYnAvvyJN9dT+lB1mASCNxnMj ZIZEPt2O2+swsIXjDvK3jzeNpFBoAphZVD5uIHnbsYxUVqMMhp7RthoOdLkADONG ZqQG+/zaUvyX5gvBbbL/+4pGISIGsw4Jm+sVJCAA8Qbd8EILCBK8GYbReZaumdbb ZQrht42Uy6XYEAbWeLrsQAVy9L1paveOXYhusEhkQalnexJeMz/USB/P8ceoZGIz M4fEWKQqhgWzTKtDef+ZgedBgrlcB+NZqjsf4vPsFxr1BRO3HhxwGDbZ5GgC+/B7 3lAKnkT7aw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:45:19 2026 by rpki-client