$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft File: 4D766E2BA41D99B155DD457741DB970EC3007E71.mft (raw, json) Hash identifier: 1twF9VWdnSwFmX23OxZ8ilgB8sn+ST4FNq1fl9AypoU= Subject key identifier: C1:25:38:CD:EF:01:42:80:98:5F:CA:8A:D3:4C:3A:E6:AF:6C:BA:B9 Authority key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Certificate issuer: /CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Certificate serial: 1A20680A6651AEB51DE55D37A03503E0E612BB30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft Manifest number: 35 Signing time: Thu 23 Jul 2026 20:24:27 +0000 Manifest this update: Thu 23 Jul 2026 20:19:27 +0000 Manifest next update: Fri 24 Jul 2026 21:49:27 +0000 Files and hashes: 1: 3130332e3234312e39352e302f32342d3234203d3e203539303130.roa (hash: PSe7EbgdWOhWUl3Vwo/B3/8fvz4znjeR8pQCfVHvk/g=) 2: 4D766E2BA41D99B155DD457741DB970EC3007E71.crl (hash: K/QnoCNVeiIQxIpvirdv+TmVroyxARRrTy/oI3pMgRI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:20:68:0a:66:51:ae:b5:1d:e5:5d:37:a0:35:03:e0:e6:12:bb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Validity Not Before: Jul 23 20:19:27 2026 GMT Not After : Jul 24 21:49:27 2026 GMT Subject: CN=C12538CDEF014280985FCA8AD34C3AE6AF6CBAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0a:9f:50:17:a6:66:e1:5d:56:ae:0f:1d:e4: 49:27:3d:13:9b:3e:8d:ec:34:5f:b3:93:61:c7:b1: 4b:12:b0:4d:62:bd:57:e2:f3:fd:82:8c:aa:da:e9: c6:e4:a7:7c:43:e1:ff:f4:49:be:54:97:c2:73:a4: 05:ff:4f:22:98:7d:27:69:06:bc:3d:07:fe:64:0f: a9:fd:42:dc:ff:42:35:00:a9:b9:4c:ca:69:fe:f0: 4b:ce:8b:ac:b5:e2:41:9c:ea:d1:5a:fc:9d:a6:16: 00:2b:bf:c8:02:d3:f7:5d:1d:65:e3:86:b3:63:07: eb:06:ab:e3:ec:2e:8a:df:2d:e8:91:ff:38:ac:79: ea:2d:39:c7:83:76:d0:f1:a4:03:47:d1:e1:42:dd: a0:f9:cd:bd:a6:29:37:4b:f1:20:db:47:55:27:ac: 1e:ed:55:39:46:5f:8e:e0:f5:6b:dc:55:c7:13:ae: ea:d9:cc:c1:60:cd:8d:4e:d5:57:d3:be:55:f2:cd: aa:a7:1b:30:b5:37:b3:79:80:a4:73:8b:10:7b:66: 4b:b2:8c:37:24:8e:c1:b1:cc:53:d4:c3:db:f0:17: 83:0b:77:3f:ee:cb:b8:c7:44:63:f2:60:9a:6e:bc: 50:2f:16:a9:8b:ed:ec:3b:df:68:9b:f6:df:78:bd: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:38:CD:EF:01:42:80:98:5F:CA:8A:D3:4C:3A:E6:AF:6C:BA:B9 X509v3 Authority Key Identifier: keyid:4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:69:b7:9f:3a:45:1b:69:22:3a:a3:d2:1d:33:fa:76:d2:01: c8:3f:9f:f8:14:52:d0:8b:29:1f:7a:7f:38:ec:88:d2:a1:a0: d6:41:5b:87:22:b6:b8:70:af:f1:d0:b1:4f:5e:1a:ea:18:99: c3:01:b5:26:c4:bd:97:69:2e:5d:18:65:17:bc:11:28:dd:58: 64:39:85:72:8d:4b:9d:18:fc:aa:36:99:00:92:c0:86:a8:45: d9:60:41:65:69:ed:4a:00:a2:8d:39:27:4a:be:21:c9:c3:b9: d2:3d:fe:4c:34:76:7e:ef:a3:c0:d7:50:b4:57:5b:f8:71:1f: 5e:5f:e7:5c:d0:cc:95:0b:96:83:52:94:86:3c:79:72:e6:0e: 55:e1:08:11:f2:21:bf:02:bc:d4:f5:41:cc:7b:e8:fc:fc:f3: e4:21:33:73:66:06:e6:6c:19:d1:94:83:b3:52:da:b5:19:5f: 08:f7:11:9b:8a:25:91:7b:1b:ea:90:ca:30:4e:f1:3e:56:50: 4a:22:44:10:91:54:ec:8b:68:22:d5:5f:0a:2a:bc:76:ad:cd: eb:4b:ba:6f:2d:9b:3b:65:e4:ab:48:2b:73:cc:28:72:01:5f: e0:13:6f:14:a8:30:b6:05:30:9f:3f:6f:1c:7b:18:93:d2:70: 5f:73:8a:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGiBoCmZRrrUd5V03oDUD4OYSuzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVD MzAwN0U3MTAeFw0yNjA3MjMyMDE5MjdaFw0yNjA3MjQyMTQ5MjdaMDMxMTAvBgNV BAMTKEMxMjUzOENERUYwMTQyODA5ODVGQ0E4QUQzNEMzQUU2QUY2Q0JBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCp9QF6Zm4V1Wrg8d5EknPROb Po3sNF+zk2HHsUsSsE1ivVfi8/2CjKra6cbkp3xD4f/0Sb5Ul8JzpAX/TyKYfSdp Brw9B/5kD6n9Qtz/QjUAqblMymn+8EvOi6y14kGc6tFa/J2mFgArv8gC0/ddHWXj hrNjB+sGq+PsLorfLeiR/ziseeotOceDdtDxpANH0eFC3aD5zb2mKTdL8SDbR1Un rB7tVTlGX47g9WvcVccTrurZzMFgzY1O1VfTvlXyzaqnGzC1N7N5gKRzixB7Zkuy jDckjsGxzFPUw9vwF4MLdz/uy7jHRGPyYJpuvFAvFqmL7ew732ib9t94vRHjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwSU4ze8BQoCYX8qK00w65q9surkwHwYDVR0j BBgwFoAUTXZuK6QdmbFV3UV3QduXDsMAfnEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc5OTI3MTEyNzE1NDcxMS8wLzRENzY2RTJCQTQxRDk5QjE1NURENDU3NzQxREI5 NzBFQzMwMDdFNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3OTkyNzExMjcxNTQ3MTEvMC80RDc2NkUyQkE0MUQ5 OUIxNTVERDQ1Nzc0MURCOTcwRUMzMDA3RTcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGm3nzpFG2ki OqPSHTP6dtIByD+f+BRS0IspH3p/OOyI0qGg1kFbhyK2uHCv8dCxT14a6hiZwwG1 JsS9l2kuXRhlF7wRKN1YZDmFco1LnRj8qjaZAJLAhqhF2WBBZWntSgCijTknSr4h ycO50j3+TDR2fu+jwNdQtFdb+HEfXl/nXNDMlQuWg1KUhjx5cuYOVeEIEfIhvwK8 1PVBzHvo/Pzz5CEzc2YG5mwZ0ZSDs1LatRlfCPcRm4olkXsb6pDKME7xPlZQSiJE EJFU7ItoItVfCiq8dq3N60u6by2bO2Xkq0grc8wocgFf4BNvFKgwtgUwnz9vHHsY k9JwX3OKLw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:28:58 2026 by rpki-client