$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: ZKdsACg5ZZSVh2YZY65MvUW6+fP7sZ7FSJ6hPW5usYs= Subject key identifier: 93:88:87:EB:71:0E:2E:B7:8A:52:71:E3:14:03:67:2F:9A:51:3A:1C Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 4FFB4E7EF1A6472AC710279180394A84F2C3F18D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 3D Signing time: Fri 24 Jul 2026 13:16:16 +0000 Manifest this update: Fri 24 Jul 2026 13:11:16 +0000 Manifest next update: Sat 25 Jul 2026 14:28:16 +0000 Files and hashes: 1: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: P6xK3WFaaAx2pkdqFC6VIqBtVoQ+NlmykTWCCvamDeA=) 2: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 14:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fb:4e:7e:f1:a6:47:2a:c7:10:27:91:80:39:4a:84:f2:c3:f1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Jul 24 13:11:16 2026 GMT Not After : Jul 25 14:28:16 2026 GMT Subject: CN=938887EB710E2EB78A5271E31403672F9A513A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fd:73:cf:62:85:eb:b6:93:02:ec:21:66:28: ef:23:6a:a5:a8:f0:1e:21:5f:40:46:94:1b:8b:58: ba:b7:5e:38:fe:40:d5:61:8d:ff:3a:e4:62:a6:1f: a5:d5:52:00:68:7c:e3:ca:45:79:04:d1:63:fb:e1: 80:d7:f4:99:32:5f:88:d3:2b:46:c3:e3:50:8b:e4: 4d:5a:49:c5:25:fc:19:5c:90:a8:08:b5:a9:44:79: 2f:8c:f0:ca:06:c1:8b:23:9c:c9:b2:17:b3:f3:02: 8e:1d:8c:67:44:df:3b:68:af:37:d7:5d:84:0e:a1: 6a:0e:24:b7:cf:80:11:ee:aa:94:d0:5e:63:3b:a1: e1:95:1b:90:2a:8b:99:77:15:e6:b7:dc:bc:90:39: 0b:41:d1:25:a6:3a:9e:f2:2d:5e:46:da:41:ed:f5: da:38:a4:71:0c:12:3a:38:d8:22:51:c0:ac:bb:d0: 45:75:31:8d:ef:f1:e7:a4:50:60:b9:7a:d5:26:ae: 88:42:2e:37:9b:d4:3b:68:9d:f2:53:2a:c0:e0:f1: 04:36:3f:05:0e:9b:bc:a4:6c:58:97:63:d5:ac:b9: a8:71:68:a3:dd:ae:59:8f:34:97:8f:58:53:09:2c: 6e:6b:16:52:ed:a9:4e:7b:be:ee:05:2b:3b:54:88: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:87:EB:71:0E:2E:B7:8A:52:71:E3:14:03:67:2F:9A:51:3A:1C X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:23:c7:47:91:8c:af:e1:05:04:9d:89:16:b9:42:8a:cb: d0:77:bb:27:ff:76:0f:95:a6:23:8e:df:b0:ea:a8:26:a0:f9: e7:67:f3:b0:f2:f4:b3:0d:3d:b1:24:7a:a0:f6:36:cc:e8:5e: d0:95:62:21:8d:a5:3a:9b:6f:80:0f:aa:69:af:41:0c:54:9c: 03:27:d1:86:b3:d4:75:d4:aa:3f:07:74:c5:6c:43:69:fb:b6: 37:88:07:a7:02:80:5e:df:d5:1f:b9:32:06:5e:0b:6f:32:a3: 15:6c:cd:ce:88:68:2f:b7:f7:79:b3:40:26:ec:46:ea:bf:cf: f0:ae:be:20:df:05:f6:59:ea:44:67:91:de:65:ec:00:88:75: eb:da:5b:45:72:61:c1:56:d2:e2:d0:09:3f:21:97:42:22:9a: 63:0f:34:a1:2b:b3:9b:c2:27:00:5d:72:b0:61:e4:04:43:68: ce:08:97:ad:2b:81:50:2f:92:0e:60:18:be:e2:53:4d:34:ec: dc:56:65:c9:a6:cf:ad:68:7e:10:8a:31:55:29:1a:af:fd:28: 55:f6:c9:df:9c:02:a6:00:67:29:f5:60:75:3f:06:99:cf:6f: cd:98:7b:fa:7a:41:34:86:6b:73:10:fe:1e:b2:70:09:8d:37: 2e:31:62:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT/tOfvGmRyrHECeRgDlKhPLD8Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjA3MjQxMzExMTZaFw0yNjA3MjUxNDI4MTZaMDMxMTAvBgNV BAMTKDkzODg4N0VCNzEwRTJFQjc4QTUyNzFFMzE0MDM2NzJGOUE1MTNBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/XPPYoXrtpMC7CFmKO8jaqWo 8B4hX0BGlBuLWLq3Xjj+QNVhjf865GKmH6XVUgBofOPKRXkE0WP74YDX9JkyX4jT K0bD41CL5E1aScUl/BlckKgItalEeS+M8MoGwYsjnMmyF7PzAo4djGdE3ztorzfX XYQOoWoOJLfPgBHuqpTQXmM7oeGVG5Aqi5l3Fea33LyQOQtB0SWmOp7yLV5G2kHt 9do4pHEMEjo42CJRwKy70EV1MY3v8eekUGC5etUmrohCLjeb1DtonfJTKsDg8QQ2 PwUOm7ykbFiXY9WsuahxaKPdrlmPNJePWFMJLG5rFlLtqU57vu4FKztUiP3fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk4iH63EOLreKUnHjFANnL5pROhwwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVQjx0eRjK/h BQSdiRa5QorL0He7J/92D5WmI47fsOqoJqD552fzsPL0sw09sSR6oPY2zOhe0JVi IY2lOptvgA+qaa9BDFScAyfRhrPUddSqPwd0xWxDafu2N4gHpwKAXt/VH7kyBl4L bzKjFWzNzohoL7f3ebNAJuxG6r/P8K6+IN8F9lnqRGeR3mXsAIh169pbRXJhwVbS 4tAJPyGXQiKaYw80oSuzm8InAF1ysGHkBENozgiXrSuBUC+SDmAYvuJTTTTs3FZl yabPrWh+EIoxVSkar/0oVfbJ35wCpgBnKfVgdT8Gmc9vzZh7+npBNIZrcxD+HrJw CY03LjFiBA== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:28 2026 by rpki-client