$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: hO4qxoLNLyBL9PeWCbnjM6M11vJvWqVQuFF0iEKaxgk= Subject key identifier: 08:53:DA:53:9C:C5:2B:D7:BA:5B:BF:1D:B9:12:D7:3B:1D:26:A4:54 Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 4FEE18D52B16A6AA578CF892D9F08121F1E182DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: EB Signing time: Tue 14 Jul 2026 08:45:52 +0000 Manifest this update: Tue 14 Jul 2026 08:40:52 +0000 Manifest next update: Wed 15 Jul 2026 09:27:52 +0000 Files and hashes: 1: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 2: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: 1v3KAKNyf1nRoxiC3vu0qP6RGngGlGI8yMIsnUeMhFs=) 3: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) 4: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ee:18:d5:2b:16:a6:aa:57:8c:f8:92:d9:f0:81:21:f1:e1:82:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: Jul 14 08:40:52 2026 GMT Not After : Jul 15 09:27:52 2026 GMT Subject: CN=0853DA539CC52BD7BA5BBF1DB912D73B1D26A454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:a5:16:68:e4:0c:22:e6:3b:09:85:a7:89: 2b:f1:7e:c6:3a:79:00:85:2e:32:9f:ec:2c:27:3a: a4:24:fa:a8:46:4a:2a:d3:0a:32:07:24:0c:45:f5: d9:25:95:7f:d2:5a:95:b4:5e:96:10:51:03:fe:ba: 9f:7e:d4:18:10:92:48:17:a1:9f:cf:16:d3:26:87: 24:a2:0a:65:cb:aa:29:31:b4:3e:b9:6d:c7:b7:df: 24:14:07:45:cc:1f:2c:4e:47:51:5b:0b:fb:9c:d7: 95:0c:15:66:c0:ae:af:30:71:73:f8:d7:70:6f:8f: 2a:91:85:0b:1e:ae:d2:7e:2f:45:4f:0c:49:97:42: 27:50:72:aa:9f:27:09:bf:de:5b:44:ee:7b:7e:f7: 68:92:b9:77:5f:48:30:ef:1e:28:19:13:35:8a:54: b0:ff:c6:29:2e:ba:04:97:e2:e1:b5:50:57:19:4c: 3c:bf:f7:b8:81:65:17:9b:10:c6:2a:d9:71:45:f5: 90:29:2f:94:74:7b:e6:39:b3:86:96:5a:27:2f:a6: fc:f8:aa:2c:58:0b:18:d8:44:8f:f6:bb:8e:d5:fe: b0:9b:c5:33:ec:b1:4d:2a:fc:c9:60:10:f5:75:46: 81:d0:d1:e3:03:7e:06:1b:66:77:49:96:e8:f9:97: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:DA:53:9C:C5:2B:D7:BA:5B:BF:1D:B9:12:D7:3B:1D:26:A4:54 X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:75:09:4a:b0:a7:58:c1:f5:21:65:08:ef:58:80:70:a4: f4:66:00:13:8e:dd:21:fe:4b:97:6f:3b:f1:7f:7b:4b:34:c7: c7:80:cb:fa:41:44:76:2f:f6:74:0c:2f:cd:fb:9f:8c:d7:55: 49:58:c8:c3:c5:95:b1:bf:9f:64:42:68:36:21:c0:13:99:da: 6b:e9:9f:88:dc:ba:f0:e7:99:c0:32:3b:1c:77:44:76:2b:a4: 16:db:3c:ff:9f:57:28:52:2b:e2:85:95:d0:9a:82:8d:6b:8e: b6:01:7a:e9:20:ee:f9:b0:c0:4b:0c:f8:f1:25:80:a9:1a:8a: 93:d5:7f:a1:f0:32:4a:b9:e0:2d:2f:10:dd:80:c1:b9:12:a6: 5a:de:de:11:86:c3:a6:15:26:1a:25:ae:25:8a:a0:47:99:e3: 59:82:e5:31:5e:fe:e4:2d:96:82:18:67:c0:27:3c:1a:b9:2d: f6:6d:ab:94:be:86:0c:88:e5:cb:01:bc:ef:88:52:b5:5f:7e: 2b:db:ba:4e:9b:71:c7:19:8e:05:42:d8:ad:9e:42:a4:3e:54: 4f:9f:d9:5a:a1:e0:4a:c3:71:de:7f:72:65:84:10:de:d4:a6: 44:97:88:a3:e0:fa:2a:6e:ef:b0:d6:49:41:43:40:00:18:a0: 51:4c:94:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT+4Y1SsWpqpXjPiS2fCBIfHhgtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjA3MTQwODQwNTJaFw0yNjA3MTUwOTI3NTJaMDMxMTAvBgNV BAMTKDA4NTNEQTUzOUNDNTJCRDdCQTVCQkYxREI5MTJENzNCMUQyNkE0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEqUWaOQMIuY7CYWniSvxfsY6 eQCFLjKf7CwnOqQk+qhGSirTCjIHJAxF9dkllX/SWpW0XpYQUQP+up9+1BgQkkgX oZ/PFtMmhySiCmXLqikxtD65bce33yQUB0XMHyxOR1FbC/uc15UMFWbArq8wcXP4 13BvjyqRhQsertJ+L0VPDEmXQidQcqqfJwm/3ltE7nt+92iSuXdfSDDvHigZEzWK VLD/xikuugSX4uG1UFcZTDy/97iBZRebEMYq2XFF9ZApL5R0e+Y5s4aWWicvpvz4 qixYCxjYRI/2u47V/rCbxTPssU0q/MlgEPV1RoHQ0eMDfgYbZndJluj5l+rfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCFPaU5zFK9e6W78duRLXOx0mpFQwHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrp1CUqwp1jB 9SFlCO9YgHCk9GYAE47dIf5Ll2878X97SzTHx4DL+kFEdi/2dAwvzfufjNdVSVjI w8WVsb+fZEJoNiHAE5naa+mfiNy68OeZwDI7HHdEdiukFts8/59XKFIr4oWV0JqC jWuOtgF66SDu+bDASwz48SWAqRqKk9V/ofAySrngLS8Q3YDBuRKmWt7eEYbDphUm GiWuJYqgR5njWYLlMV7+5C2WghhnwCc8Grkt9m2rlL6GDIjlywG874hStV9+K9u6 TptxxxmOBULYrZ5CpD5UT5/ZWqHgSsNx3n9yZYQQ3tSmRJeIo+D6Km7vsNZJQUNA ABigUUyUyw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:22 2026 by rpki-client