$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json) Hash identifier: qDpGsf+0Ui20Zu7R0pqyctAr1Yy++IIw7L7u0gxRiOU= Subject key identifier: 74:FA:62:AC:3F:AD:3C:FA:23:D4:B9:0F:5C:1B:D1:F9:EE:AC:9D:A5 Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Certificate serial: 7FAB1954E8ABBE7625C78AED589C2065983DCAE6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft Manifest number: 02A9 Signing time: Thu 23 Jul 2026 10:06:27 +0000 Manifest this update: Thu 23 Jul 2026 10:01:27 +0000 Manifest next update: Fri 24 Jul 2026 13:41:27 +0000 Files and hashes: 1: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=) 2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=) 3: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: 6T3J0DXlFaxlUfLd5FV/3WrYq4YNR3HljQGOcfzvpHc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ab:19:54:e8:ab:be:76:25:c7:8a:ed:58:9c:20:65:98:3d:ca:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4 Validity Not Before: Jul 23 10:01:27 2026 GMT Not After : Jul 24 13:41:27 2026 GMT Subject: CN=74FA62AC3FAD3CFA23D4B90F5C1BD1F9EEAC9DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:fa:04:4c:d2:b0:1a:36:32:9a:6c:38:6f: a0:42:24:61:cd:e9:7d:16:b9:fb:4d:bd:79:29:d8: c2:f6:0d:fc:b9:0d:d6:dc:67:05:54:90:55:7f:b6: 15:87:e6:e9:0c:a4:f3:16:5e:38:8f:1e:4d:8a:0a: 0b:cd:6c:3b:af:67:2f:9a:7c:6f:b0:9b:b7:0d:6a: a4:73:cf:cf:4f:db:bc:f5:5c:d6:ce:a9:ea:86:c0: 6a:f4:e7:ca:9d:e7:f0:df:84:43:7b:aa:69:e7:1e: 4b:98:90:d0:4e:36:ad:6a:f9:d3:f7:39:4e:65:fb: 80:08:ba:e4:e9:20:7c:ed:76:5d:b7:e5:51:54:42: d5:00:0d:cd:e9:28:ad:bc:06:c1:af:ec:56:b7:66: dc:5e:f4:02:07:8b:da:2c:bd:c3:a3:7c:0c:b7:58: ec:e4:fd:aa:e6:5d:e0:76:f8:e0:c3:ea:1b:df:32: dd:59:67:cb:69:b7:fb:c5:4a:32:7a:da:e6:d6:eb: a3:43:5b:72:db:38:a5:f0:b9:2d:7e:67:6a:7e:9a: 25:6d:58:c3:26:3b:1a:de:9e:1d:38:84:2a:ac:f4: ea:88:03:53:48:ce:fc:21:7d:73:e8:9a:e5:cf:a5: 36:ac:35:07:c1:16:0b:f2:f4:cc:5d:eb:db:c8:a7: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FA:62:AC:3F:AD:3C:FA:23:D4:B9:0F:5C:1B:D1:F9:EE:AC:9D:A5 X509v3 Authority Key Identifier: keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d8:4a:8a:e9:4f:67:43:f3:5a:d7:b4:cf:33:fc:bb:9c:eb: a9:e5:66:dd:ac:05:9b:09:fc:23:99:0e:e6:fa:a2:20:9f:4e: 3a:7a:26:41:31:3d:ae:29:d6:c8:09:a5:55:e6:a7:32:bc:2d: 63:2a:82:71:98:f4:4d:a4:f9:67:da:99:8f:92:38:27:d4:92: b9:95:5d:11:d4:c1:4c:22:3b:8e:71:bd:9e:cf:d1:0e:16:bd: 4e:91:6d:04:51:df:2d:12:00:cf:3c:e7:ae:70:98:ef:cc:7b: b6:d9:9f:3b:8e:51:20:32:f8:f7:e1:14:0e:9d:8a:b9:94:83: 71:0d:e7:71:3d:5c:dc:d5:27:56:07:ae:0a:81:3b:ab:c1:c8: 66:9e:9c:0e:76:5c:b1:6d:69:7e:c6:12:83:c5:c2:2f:04:f5: 10:8a:fa:07:8e:e6:10:f8:aa:cb:9c:9b:2b:55:8d:1c:48:6d: 93:20:21:a8:fa:ee:80:b8:c6:6e:ab:86:e0:5f:83:f8:cd:b1: 1c:1f:21:00:b9:df:d6:48:f3:1c:7b:1a:58:e2:96:a5:7b:78: 80:dd:fc:b2:e5:c3:76:b8:44:d7:d7:06:ce:62:68:91:1b:63: 8b:fb:96:8b:6f:28:62:90:5e:63:be:5a:80:82:38:1d:51:45: da:b8:1a:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf6sZVOirvnYlx4rtWJwgZZg9yuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg0QzlFNjcxRUFE NDY0RTA0NjIzQkIwNDNGRDYyRTdCQTJBNzdFREQ0MB4XDTI2MDcyMzEwMDEyN1oX DTI2MDcyNDEzNDEyN1owMzExMC8GA1UEAxMoNzRGQTYyQUMzRkFEM0NGQTIzRDRC OTBGNUMxQkQxRjlFRUFDOURBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9a+gRM0rAaNjKabDhvoEIkYc3pfRa5+029eSnYwvYN/LkN1txnBVSQVX+2 FYfm6Qyk8xZeOI8eTYoKC81sO69nL5p8b7Cbtw1qpHPPz0/bvPVc1s6p6obAavTn yp3n8N+EQ3uqaeceS5iQ0E42rWr50/c5TmX7gAi65OkgfO12XbflUVRC1QANzeko rbwGwa/sVrdm3F70AgeL2iy9w6N8DLdY7OT9quZd4Hb44MPqG98y3Vlny2m3+8VK Mnra5tbro0Nbcts4pfC5LX5nan6aJW1YwyY7Gt6eHTiEKqz06ogDU0jO/CF9c+ia 5c+lNqw1B8EWC/L0zF3r28inl60CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBR0+mKs P608+iPUuQ9cG9H57qydpTAfBgNVHSMEGDAWgBRMnmcerUZOBGI7sEP9Yue6Knft 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzEvNEM5RTY3 MUVBRDQ2NEUwNDYyM0JCMDQzRkQ2MkU3QkEyQTc3RURENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvVEo1bkhxMUdU Z1JpTzdCRF9XTG51aXAzN2RRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8xLzRDOUU2NzFFQUQ0NjRFMDQ2MjNCQjA0M0ZENjJFN0JBMkE3N0VE RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBf2EqK6U9nQ/Na17TPM/y7nOup5WbdrAWbCfwjmQ7m+qIg n046eiZBMT2uKdbICaVV5qcyvC1jKoJxmPRNpPln2pmPkjgn1JK5lV0R1MFMIjuO cb2ez9EOFr1OkW0EUd8tEgDPPOeucJjvzHu22Z87jlEgMvj34RQOnYq5lINxDedx PVzc1SdWB64KgTurwchmnpwOdlyxbWl+xhKDxcIvBPUQivoHjuYQ+KrLnJsrVY0c SG2TICGo+u6AuMZuq4bgX4P4zbEcHyEAud/WSPMcexpY4pale3iA3fyy5cN2uETX 1wbOYmiRG2OL+5aLbyhikF5jvlqAgjgdUUXauBps -----END CERTIFICATE-----Generated at Fri Jul 24 06:13:50 2026 by rpki-client