$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: yTHkuJwod6RMH+66Rj6shWrIsHhTQhGPGjNE4fV1OpI= Subject key identifier: AC:F6:AB:EB:BD:E3:FB:94:8A:44:1B:D3:5E:6F:0B:7B:BE:E1:76:48 Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 7203F83EB80F3D34AA61B31E0A4BB1FE38C38D73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 39 Signing time: Tue 21 Jul 2026 12:33:47 +0000 Manifest this update: Tue 21 Jul 2026 12:28:47 +0000 Manifest next update: Wed 22 Jul 2026 16:28:47 +0000 Files and hashes: 1: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) 2: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: Dlba/i2xDDAFN4/y+uYUVxeXVm2eXOg2Q/xXwfEw6b0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 16:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:03:f8:3e:b8:0f:3d:34:aa:61:b3:1e:0a:4b:b1:fe:38:c3:8d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Jul 21 12:28:47 2026 GMT Not After : Jul 22 16:28:47 2026 GMT Subject: CN=ACF6ABEBBDE3FB948A441BD35E6F0B7BBEE17648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:ed:56:6b:49:9e:11:92:a8:07:87:25:04: 32:53:5a:1d:fa:06:ea:c6:a1:16:22:19:87:3f:14: 48:e8:68:9b:e9:ce:42:55:68:b5:b1:a3:47:36:81: ac:99:4c:84:dd:4e:53:a0:ca:ef:f1:96:dc:f5:59: 52:bd:f2:38:26:96:59:0d:36:94:d5:3b:06:8c:ac: 09:f9:94:51:c4:b2:f5:13:ee:ed:1f:43:7b:ff:5a: 36:99:e7:da:8d:aa:6c:96:c8:a9:39:2e:f7:02:57: 97:81:bc:df:1b:fc:cd:33:1e:5b:fc:cd:d7:ab:01: 20:16:b5:cb:8a:68:58:f2:4c:44:aa:66:26:bb:15: 73:aa:2d:fe:e3:98:a4:a7:43:17:66:05:d6:c6:aa: b9:dd:46:d0:2a:6e:f8:9c:b6:be:ac:2f:37:cc:5a: 65:52:d6:10:a0:69:8f:78:39:53:48:57:d2:46:4d: 0f:8b:65:2d:af:9d:45:0a:ad:9f:34:be:e6:1b:69: a1:4f:0c:96:8f:25:1f:21:7c:c4:ea:b8:82:08:e8: 46:cc:ed:ed:31:46:fe:60:de:b9:5f:f6:98:3b:f9: 9d:e2:be:6e:94:6d:30:cb:88:d9:68:ae:5e:12:99: 00:5e:e7:e1:e8:b7:f7:2a:1a:8b:53:71:42:9a:d4: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:AB:EB:BD:E3:FB:94:8A:44:1B:D3:5E:6F:0B:7B:BE:E1:76:48 X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:24:21:00:ac:cc:17:79:f8:04:db:22:5a:3a:82:e4:0e: ce:c7:9c:c9:e6:0e:62:41:2c:5b:fb:24:b7:a9:68:21:c7:56: d9:38:9d:07:47:9f:e5:f0:26:41:b8:ba:a5:7f:80:11:c8:13: 5f:38:13:6e:1d:6e:9c:d7:a5:46:1e:83:ba:2d:eb:15:75:bf: dd:f4:64:23:c8:b3:7b:c9:d6:a4:c2:bd:d3:23:87:98:44:3e: 94:1f:d5:c3:f5:e6:2c:77:e6:18:6e:17:ec:f3:8b:6b:01:94: 48:1f:36:cf:1e:e5:09:b5:d0:1a:c9:ff:68:80:f6:c1:9c:67: 8d:96:b5:ef:18:3c:94:0c:5f:5e:4b:01:45:59:b6:bc:6f:49: dc:e3:90:5d:5a:68:e0:17:ec:16:86:7d:29:22:05:e0:1b:58: ee:13:fe:82:3f:69:ac:1b:93:82:a8:0f:60:89:96:1a:87:bc: 9d:f8:80:7e:d8:da:39:05:71:9b:13:ec:1f:60:6c:2e:47:9d: 3a:30:29:51:01:78:0f:15:a3:66:55:38:66:ce:fe:75:de:c1: 28:8f:01:10:a9:f6:8c:b0:95:d9:4c:0a:86:09:cf:7b:61:9c: a0:3e:a9:24:12:e8:e7:3f:eb:e4:ee:6c:7e:47:0d:60:48:e0: 5d:8c:22:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcgP4PrgPPTSqYbMeCkux/jjDjXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjA3MjExMjI4NDdaFw0yNjA3MjIxNjI4NDdaMDMxMTAvBgNV BAMTKEFDRjZBQkVCQkRFM0ZCOTQ4QTQ0MUJEMzVFNkYwQjdCQkVFMTc2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5u1Wa0meEZKoB4clBDJTWh36 BurGoRYiGYc/FEjoaJvpzkJVaLWxo0c2gayZTITdTlOgyu/xltz1WVK98jgmllkN NpTVOwaMrAn5lFHEsvUT7u0fQ3v/WjaZ59qNqmyWyKk5LvcCV5eBvN8b/M0zHlv8 zderASAWtcuKaFjyTESqZia7FXOqLf7jmKSnQxdmBdbGqrndRtAqbvictr6sLzfM WmVS1hCgaY94OVNIV9JGTQ+LZS2vnUUKrZ80vuYbaaFPDJaPJR8hfMTquIII6EbM 7e0xRv5g3rlf9pg7+Z3ivm6UbTDLiNlorl4SmQBe5+Hot/cqGotTcUKa1I6jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrPar673j+5SKRBvTXm8Le77hdkgwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeckIQCszBd5 +ATbIlo6guQOzsecyeYOYkEsW/skt6loIcdW2TidB0ef5fAmQbi6pX+AEcgTXzgT bh1unNelRh6Dui3rFXW/3fRkI8ize8nWpMK90yOHmEQ+lB/Vw/XmLHfmGG4X7POL awGUSB82zx7lCbXQGsn/aID2wZxnjZa17xg8lAxfXksBRVm2vG9J3OOQXVpo4Bfs FoZ9KSIF4BtY7hP+gj9prBuTgqgPYImWGoe8nfiAftjaOQVxmxPsH2BsLkedOjAp UQF4DxWjZlU4Zs7+dd7BKI8BEKn2jLCV2UwKhgnPe2GcoD6pJBLo5z/r5O5sfkcN YEjgXYwiqQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:13:41 2026 by rpki-client