$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: lxTVlRTzLZj3dHRQb0EQ35KoDySmhvjMbqLvsPtSiFQ= Subject key identifier: 9C:5E:E1:F0:C8:00:56:58:36:5D:C2:2A:EE:59:F3:3B:64:A2:B8:54 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 281A60AA2A13B7341EDB47C47240E580EA2A8EEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 29 Signing time: Thu 23 Jul 2026 18:24:19 +0000 Manifest this update: Thu 23 Jul 2026 18:19:19 +0000 Manifest next update: Fri 24 Jul 2026 19:18:19 +0000 Files and hashes: 1: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) 2: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 3: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 4: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 5: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) 6: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) 7: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: pMnkRmpm63SSnowUQobuHFvyg+q1mfGzHbBn0ozRopo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1a:60:aa:2a:13:b7:34:1e:db:47:c4:72:40:e5:80:ea:2a:8e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jul 23 18:19:19 2026 GMT Not After : Jul 24 19:18:19 2026 GMT Subject: CN=9C5EE1F0C8005658365DC22AEE59F33B64A2B854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:be:c7:37:93:75:b7:cb:ab:4b:55:bf:c1: 68:81:cf:fc:4f:d1:b4:5f:c0:bf:ec:c3:29:41:2c: 9b:32:be:1a:98:e9:df:0a:88:6e:40:8b:42:10:fe: 7f:58:bf:24:66:e4:ba:4f:c7:57:83:a7:ac:84:a1: 06:2c:96:be:45:a3:c3:09:80:a9:8d:2a:fe:3b:57: 8a:8b:6b:c5:fe:2f:1b:ca:63:f8:31:09:50:a7:5a: 26:b7:ac:71:67:25:c1:5a:cc:1e:ac:76:f3:81:a8: 16:16:b0:39:c0:83:6b:ed:13:db:a6:19:56:97:ec: 7a:c1:27:51:a9:6b:44:e6:39:05:64:30:46:5d:01: f1:ad:8e:05:0e:9e:d4:bf:40:6d:8f:23:29:5a:1c: 38:fc:c9:6c:b2:67:97:11:37:b4:39:fd:4e:5c:ad: a1:1f:a3:31:ea:33:96:c7:c5:2f:76:01:9a:46:d6: 66:ae:78:6e:c9:c3:64:ee:d0:47:5d:a0:fa:82:76: 15:a6:03:a4:63:d6:08:e0:4c:1e:ef:ed:b3:85:76: 89:b6:9d:b5:70:d1:ab:22:4f:44:69:84:c7:75:a1: 52:dc:03:db:ed:c1:5f:c0:ee:97:e8:13:4b:d1:77: 42:06:78:08:07:ef:9b:09:40:30:5d:98:34:9a:61: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5E:E1:F0:C8:00:56:58:36:5D:C2:2A:EE:59:F3:3B:64:A2:B8:54 X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3d:be:b6:62:cb:ee:78:cc:b2:e0:22:11:a8:68:b8:88:8b: 3c:32:bd:63:11:13:33:a3:11:6a:20:6c:39:e4:41:a9:99:05: 4e:99:36:96:77:ef:5b:89:d8:fc:85:99:d8:c2:3d:64:fd:ee: bc:1b:f0:97:16:bf:66:7f:1b:3f:f5:81:73:f6:cf:79:d9:e6: b3:2f:aa:09:ed:4a:ff:85:f2:30:4d:f8:9e:ec:b5:9e:ed:0f: b2:78:3b:67:29:de:63:ca:d7:18:a8:18:6f:24:3c:47:be:60: ed:a3:ff:78:a0:77:98:dd:97:f7:e7:dc:5f:dd:6e:59:6b:c0: a4:92:6e:e8:90:50:14:7a:92:4e:57:e0:51:0b:d3:f1:2d:4e: 8e:f6:40:3c:30:b9:3a:da:04:a3:bf:73:12:e0:09:fe:dc:19: c2:cd:92:18:62:62:43:e6:e7:1e:51:22:46:24:72:69:a5:ee: 92:94:4b:02:2a:37:fa:10:7b:26:d1:3b:87:22:9f:11:dd:9d: f4:bd:72:fa:f5:ac:96:d9:52:b3:e9:db:68:1f:d9:28:a9:66: ed:78:9d:7d:4d:80:5f:32:09:21:a4:44:cc:b3:b0:45:f1:04: e7:27:1f:46:d4:e0:a9:13:d5:74:7e:f4:9f:09:01:d0:58:aa: 71:62:7b:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKBpgqioTtzQe20fEckDlgOoqju4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA3MjMxODE5MTlaFw0yNjA3MjQxOTE4MTlaMDMxMTAvBgNV BAMTKDlDNUVFMUYwQzgwMDU2NTgzNjVEQzIyQUVFNTlGMzNCNjRBMkI4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYr7HN5N1t8urS1W/wWiBz/xP 0bRfwL/swylBLJsyvhqY6d8KiG5Ai0IQ/n9YvyRm5LpPx1eDp6yEoQYslr5Fo8MJ gKmNKv47V4qLa8X+LxvKY/gxCVCnWia3rHFnJcFazB6sdvOBqBYWsDnAg2vtE9um GVaX7HrBJ1Gpa0TmOQVkMEZdAfGtjgUOntS/QG2PIylaHDj8yWyyZ5cRN7Q5/U5c raEfozHqM5bHxS92AZpG1maueG7Jw2Tu0EddoPqCdhWmA6Rj1gjgTB7v7bOFdom2 nbVw0asiT0RphMd1oVLcA9vtwV/A7pfoE0vRd0IGeAgH75sJQDBdmDSaYVN3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnF7h8MgAVlg2XcIq7lnzO2SiuFQwHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD2+tmLL7njM suAiEahouIiLPDK9YxETM6MRaiBsOeRBqZkFTpk2lnfvW4nY/IWZ2MI9ZP3uvBvw lxa/Zn8bP/WBc/bPednmsy+qCe1K/4XyME34nuy1nu0Psng7ZyneY8rXGKgYbyQ8 R75g7aP/eKB3mN2X9+fcX91uWWvApJJu6JBQFHqSTlfgUQvT8S1OjvZAPDC5OtoE o79zEuAJ/twZws2SGGJiQ+bnHlEiRiRyaaXukpRLAio3+hB7JtE7hyKfEd2d9L1y +vWsltlSs+nbaB/ZKKlm7XidfU2AXzIJIaREzLOwRfEE5ycfRtTgqRPVdH70nwkB 0FiqcWJ7Qg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:57 2026 by rpki-client