$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: 3dflyz48C6y8G9euFFH18YpdHimLoxTfx07f0ROD5kQ= Subject key identifier: 47:BE:D1:CE:F1:1E:94:95:BA:04:E7:F1:85:FC:B4:16:2C:6A:DB:18 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 6CC7D9D00534740F107D41457A3A89E6569D1276 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 09:33:40 +0000 Manifest this update: Fri 28 Aug 2026 09:28:40 +0000 Manifest next update: Mon 31 Aug 2026 11:12:40 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: SQ8A540Qn3IPrG3yZK40DNPfKt+ywgWCZPS+Hm4JJb0=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c7:d9:d0:05:34:74:0f:10:7d:41:45:7a:3a:89:e6:56:9d:12:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Aug 28 09:28:40 2026 GMT Not After : Aug 31 11:12:40 2026 GMT Subject: CN=47BED1CEF11E9495BA04E7F185FCB4162C6ADB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:a1:80:6a:4a:01:0d:9b:96:7c:f5:73:2c: 47:d2:84:8f:41:2b:53:a2:93:03:93:1c:3a:e7:06: 98:4d:0d:eb:28:2d:c0:07:8e:7a:aa:8c:8e:76:6d: 3d:4e:8e:6c:c7:fb:be:9c:6f:a6:89:a3:e6:38:3d: cb:fa:a5:93:6d:a7:b6:4f:ff:c9:80:03:e0:ba:9b: ad:45:a6:a1:ed:c5:b1:cd:56:3d:8f:d6:2f:9a:80: 85:ca:e3:6e:e1:91:c8:0d:12:2f:33:de:c5:1f:ab: 39:2c:de:d2:38:78:6b:87:b2:27:32:cc:ed:9c:bc: d1:ab:10:84:56:40:98:de:b7:e4:a3:ab:27:08:d9: 68:c5:c1:ac:62:7d:f1:0d:d8:4d:25:b6:5e:d5:d1: 30:c6:8f:04:bb:6b:04:9a:3c:fa:ed:bc:ed:5c:98: f7:53:a1:d1:7d:45:b8:08:3b:0f:c4:8d:da:e5:6c: 78:59:f9:61:df:7a:6f:51:a4:e5:1a:71:db:a6:01: 46:4a:80:a5:57:6f:f3:11:79:b7:27:96:91:57:c8: 6f:0a:9e:fc:f8:8e:1c:5a:04:78:0f:42:85:0d:94: 2e:2d:14:9f:4c:55:b2:f5:9c:38:b7:05:98:1d:dc: f4:31:f7:d3:29:d0:70:eb:ef:ed:1f:45:ad:ca:70: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BE:D1:CE:F1:1E:94:95:BA:04:E7:F1:85:FC:B4:16:2C:6A:DB:18 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:79:aa:10:84:99:12:db:6b:2d:95:29:b1:38:b9:94:73: 0e:0d:44:1a:96:f8:09:93:ae:e3:1c:57:c3:5e:5d:52:69:c9: 38:60:13:60:8e:e3:0a:4f:63:18:76:2d:e3:11:bd:59:14:fa: f4:99:b6:19:c3:01:ca:e1:29:b5:99:ce:4e:d5:fc:94:d7:40: e5:f0:a4:98:2c:0f:a1:94:42:94:c2:84:57:1a:5d:ac:74:9a: e4:aa:b9:71:2e:83:b6:c4:89:9c:23:42:cf:74:15:13:e4:ac: 19:14:6c:7b:d4:fa:1b:a1:ac:9a:24:b3:aa:cb:db:5c:96:bb: 05:db:8d:ef:16:63:00:67:41:6b:fb:6c:68:0f:41:ca:9a:af: 8e:86:a6:3a:7f:c3:2d:72:65:ac:9a:2b:46:5b:55:75:79:f3: b8:fe:8c:c8:32:2a:f6:1e:ff:97:24:7a:b0:28:15:81:2f:98: 9b:f2:d0:eb:db:3a:39:86:83:77:01:d6:25:ae:d8:af:72:cc: ef:8e:2a:40:51:35:c2:db:85:7b:8d:bb:24:11:bb:4c:32:20: 92:63:2c:36:a0:97:04:56:48:b1:85:86:1f:2a:91:d3:80:73: 78:10:d2:d7:2f:15:19:1d:d9:12:9d:d9:b6:a7:97:09:9e:dd: f5:12:3c:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbMfZ0AU0dA8QfUFFejqJ5ladEnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA4MjgwOTI4NDBaFw0yNjA4MzExMTEyNDBaMDMxMTAvBgNV BAMTKDQ3QkVEMUNFRjExRTk0OTVCQTA0RTdGMTg1RkNCNDE2MkM2QURCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4qGAakoBDZuWfPVzLEfShI9B K1OikwOTHDrnBphNDesoLcAHjnqqjI52bT1OjmzH+76cb6aJo+Y4Pcv6pZNtp7ZP /8mAA+C6m61FpqHtxbHNVj2P1i+agIXK427hkcgNEi8z3sUfqzks3tI4eGuHsicy zO2cvNGrEIRWQJjet+SjqycI2WjFwaxiffEN2E0ltl7V0TDGjwS7awSaPPrtvO1c mPdTodF9RbgIOw/EjdrlbHhZ+WHfem9RpOUacdumAUZKgKVXb/MRebcnlpFXyG8K nvz4jhxaBHgPQoUNlC4tFJ9MVbL1nDi3BZgd3PQx99Mp0HDr7+0fRa3KcG6LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR77RzvEelJW6BOfxhfy0Fixq2xgwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkp5qhCEmRLb ay2VKbE4uZRzDg1EGpb4CZOu4xxXw15dUmnJOGATYI7jCk9jGHYt4xG9WRT69Jm2 GcMByuEptZnOTtX8lNdA5fCkmCwPoZRClMKEVxpdrHSa5Kq5cS6DtsSJnCNCz3QV E+SsGRRse9T6G6GsmiSzqsvbXJa7BduN7xZjAGdBa/tsaA9BypqvjoamOn/DLXJl rJorRltVdXnzuP6MyDIq9h7/lyR6sCgVgS+Ym/LQ69s6OYaDdwHWJa7Yr3LM744q QFE1wtuFe427JBG7TDIgkmMsNqCXBFZIsYWGHyqR04BzeBDS1y8VGR3ZEp3ZtqeX CZ7d9RI8zA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:44 2026 by rpki-client