$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: EqcUd2XI0n75+8oGmTXX7cWmB9R3HAQxF9bkUIv4Js4= Subject key identifier: 57:C1:05:DE:FD:BA:8A:96:D3:3B:80:F6:F0:70:1A:2C:BE:1F:87:C2 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 79CC08147969C7D16D2E4177413564A6A2FABE37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: EA Signing time: Tue 14 Jul 2026 01:15:04 +0000 Manifest this update: Tue 14 Jul 2026 01:10:04 +0000 Manifest next update: Wed 15 Jul 2026 05:04:04 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: v6QYM5r6HlCBNxNL1X79/5zHDOR5ZDsNWlyzL7m3oOU=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cc:08:14:79:69:c7:d1:6d:2e:41:77:41:35:64:a6:a2:fa:be:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Jul 14 01:10:04 2026 GMT Not After : Jul 15 05:04:04 2026 GMT Subject: CN=57C105DEFDBA8A96D33B80F6F0701A2CBE1F87C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:e9:30:21:f3:a4:5b:5a:a9:e5:42:0d:14: 71:0f:59:51:5a:44:c9:9e:8b:05:93:e2:96:d4:be: f4:69:02:a7:58:d3:c4:4e:33:7a:d0:53:62:1e:f6: b3:21:a9:8c:6a:8a:c4:e6:e3:5a:19:ec:5a:e2:63: b8:15:d1:9d:01:c6:b5:e6:23:43:78:62:a2:fe:43: 31:11:56:72:c4:45:97:92:ee:0a:f1:39:a3:a3:0c: fc:d7:b5:b6:5b:87:f5:71:b2:93:8f:8e:76:37:ed: 55:fe:e1:93:70:a3:1f:06:dc:fd:8e:ae:a1:32:47: 02:28:f8:86:f0:74:2a:db:83:50:df:eb:fe:02:87: 6b:f6:66:db:ca:46:87:95:b5:f8:12:49:25:57:3a: 09:9e:8e:40:d7:d7:ca:06:08:95:87:dc:f5:6a:8b: 08:26:9e:cf:50:a4:b8:d9:05:3f:89:e6:09:ec:d3: 31:12:4a:ca:36:e9:6a:2a:ba:19:fb:a6:5e:f0:23: e1:1c:a3:c6:36:b8:22:de:a7:6e:82:0b:3b:92:97: b6:02:1f:b4:b1:29:24:8d:2b:4f:24:c3:6f:7c:21: d5:6d:d9:d5:12:6e:82:2d:e1:6e:3b:73:3e:4c:03: be:13:4e:c5:95:4b:f4:39:58:39:c2:10:00:3a:ee: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C1:05:DE:FD:BA:8A:96:D3:3B:80:F6:F0:70:1A:2C:BE:1F:87:C2 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1d:9e:45:c4:c1:e1:46:40:4e:8c:4f:75:2f:71:d0:b7:bb: 26:99:1a:eb:38:c1:73:c4:e2:51:8f:e1:f4:81:e0:18:2b:f1: a6:e1:e7:f3:3a:a7:ef:34:60:ae:78:ce:1c:9e:0c:da:2b:9a: 19:00:b3:3c:39:27:23:2e:52:c8:f5:d0:26:d7:47:eb:1c:a4: e8:00:fe:5f:1a:20:9b:97:c8:eb:b2:51:9e:c7:34:dc:47:70: c5:a9:f1:82:9f:4b:15:cc:45:33:b2:bf:8b:ed:2f:b6:79:66: 77:71:4b:26:fd:5f:8a:f2:9f:fe:e7:c5:b6:f6:53:08:96:54: 0f:7e:86:52:4e:2a:7b:47:16:5d:e5:bf:fc:dc:fb:84:d9:0f: d9:c1:01:31:f5:26:2d:f9:7d:fa:24:4a:1b:19:a4:95:87:e8: 11:3f:1d:37:52:17:fb:30:16:a4:1e:6d:22:0d:1a:af:b8:d3: ab:c3:0e:eb:8c:3b:d1:79:7c:2c:08:c9:f8:f4:b4:8d:8b:cc: 9a:e6:c4:69:10:96:f5:43:c3:76:3d:0c:b1:24:69:fc:86:aa: e4:3b:4f:a2:9e:92:7e:76:97:ce:01:8d:59:05:f7:34:e6:51: a5:9b:ab:f9:50:ac:73:c0:0a:9e:1a:6a:d4:6e:e3:57:12:b0: f9:6b:e8:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUecwIFHlpx9FtLkF3QTVkpqL6vjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA3MTQwMTEwMDRaFw0yNjA3MTUwNTA0MDRaMDMxMTAvBgNV BAMTKDU3QzEwNURFRkRCQThBOTZEMzNCODBGNkYwNzAxQTJDQkUxRjg3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WukwIfOkW1qp5UINFHEPWVFa RMmeiwWT4pbUvvRpAqdY08ROM3rQU2Ie9rMhqYxqisTm41oZ7FriY7gV0Z0BxrXm I0N4YqL+QzERVnLERZeS7grxOaOjDPzXtbZbh/VxspOPjnY37VX+4ZNwox8G3P2O rqEyRwIo+IbwdCrbg1Df6/4Ch2v2ZtvKRoeVtfgSSSVXOgmejkDX18oGCJWH3PVq iwgmns9QpLjZBT+J5gns0zESSso26Woquhn7pl7wI+Eco8Y2uCLep26CCzuSl7YC H7SxKSSNK08kw298IdVt2dUSboIt4W47cz5MA74TTsWVS/Q5WDnCEAA67rH1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV8EF3v26ipbTO4D28HAaLL4fh8IwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx2eRcTB4UZA ToxPdS9x0Le7Jpka6zjBc8TiUY/h9IHgGCvxpuHn8zqn7zRgrnjOHJ4M2iuaGQCz PDknIy5SyPXQJtdH6xyk6AD+Xxogm5fI67JRnsc03Edwxanxgp9LFcxFM7K/i+0v tnlmd3FLJv1fivKf/ufFtvZTCJZUD36GUk4qe0cWXeW//Nz7hNkP2cEBMfUmLfl9 +iRKGxmklYfoET8dN1IX+zAWpB5tIg0ar7jTq8MO64w70Xl8LAjJ+PS0jYvMmubE aRCW9UPDdj0MsSRp/Iaq5DtPop6SfnaXzgGNWQX3NOZRpZur+VCsc8AKnhpq1G7j VxKw+WvoWQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:54 2026 by rpki-client