$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: qdkHBjDNhTc8giKAfJafldZo3YI8LHxsONxHh2fbxn0= Subject key identifier: A1:F2:4B:52:00:DC:FD:CB:1B:E7:39:BB:55:FC:5C:F9:8F:E4:75:D8 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 7111ADF458ACB122AEF73047D8E6840A140CB762 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: EA Signing time: Tue 14 Jul 2026 07:55:46 +0000 Manifest this update: Tue 14 Jul 2026 07:50:46 +0000 Manifest next update: Wed 15 Jul 2026 11:21:46 +0000 Files and hashes: 1: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 2: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 3: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: xqH2Wr6PNWIWqtTz7PvfH4t/mRp6Q4lCyXcbdS1Xg8o=) 5: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:11:ad:f4:58:ac:b1:22:ae:f7:30:47:d8:e6:84:0a:14:0c:b7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Jul 14 07:50:46 2026 GMT Not After : Jul 15 11:21:46 2026 GMT Subject: CN=A1F24B5200DCFDCB1BE739BB55FC5CF98FE475D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:f5:1e:1b:3a:a3:d1:f9:3e:ca:15:c3:d1: 2d:6c:07:08:26:c1:cb:ad:b6:80:ba:62:bb:77:e0: 1e:c0:d1:a1:2d:21:18:60:68:e8:e1:2d:fa:2d:d6: 19:6c:b3:7b:50:15:59:41:85:d2:3d:b3:ab:6f:f7: 1d:dd:51:69:24:c4:ff:02:43:9c:a4:3c:61:fd:b3: 9f:85:f2:5b:46:53:42:2a:50:8e:b3:16:c3:41:2b: b1:bc:e1:87:12:10:c8:d3:3d:69:29:d6:df:50:10: 47:87:fd:53:22:8f:05:81:58:9f:3c:9d:e3:4e:df: f7:59:fc:b5:f3:0e:0b:3b:a2:53:12:20:ca:40:bb: 80:e7:1f:a0:a2:79:c2:9f:bf:a6:d3:a4:bc:82:9a: 72:33:c4:5f:9f:b4:bd:81:de:8a:d1:df:94:d4:0a: 3e:99:f1:43:48:ed:74:31:f5:f0:d4:28:89:d4:77: 28:7a:3c:39:5e:cf:5c:92:d7:06:0e:aa:c6:c8:55: fe:07:1b:3c:eb:90:13:6c:11:7f:29:c3:fe:9d:de: 35:23:27:3a:be:48:00:95:f4:b0:30:a5:4b:af:6d: c6:04:6f:ac:1d:11:d4:cd:0d:c6:21:1d:c4:47:a2: 8f:ad:e8:71:16:0a:5c:7d:4a:cc:cc:fc:00:b8:eb: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:4B:52:00:DC:FD:CB:1B:E7:39:BB:55:FC:5C:F9:8F:E4:75:D8 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:57:d1:73:c8:7e:24:0d:1f:f7:29:04:50:29:03:b8:a2:b1: a1:27:f1:63:8a:45:ab:a9:68:1d:b0:25:0e:c1:8d:8b:13:5b: a6:91:4b:bf:da:b9:1e:3d:da:25:0e:85:00:89:02:1e:5d:39: 79:d9:82:27:e8:69:1d:bd:f6:73:94:7b:6c:c5:85:b4:9e:49: 74:52:0e:44:b9:1b:49:d2:3c:d6:a7:42:ce:e7:2e:7e:0a:c6: e3:80:5d:0d:d5:40:6a:84:26:c4:ab:0a:94:11:7a:80:24:a8: f9:69:aa:e3:5d:06:60:4a:55:79:34:bc:d3:49:69:2a:95:1b: ff:ed:e7:d0:79:17:d4:4d:66:e5:7e:e7:b4:da:21:c6:c3:27: 7e:3b:e1:77:fa:60:af:8a:a9:e2:2b:d0:93:10:c9:ec:24:c4: c0:d8:28:d2:4d:bd:a4:43:e6:78:89:db:b3:9b:17:ab:ea:3b: 3f:dc:be:51:96:77:c6:c3:46:80:b5:cb:5e:95:14:5a:a4:52: 80:30:6b:f8:3a:97:1c:44:cb:0f:76:c9:63:31:0f:d4:ee:d3: b3:25:db:f2:e4:90:9b:4b:91:5a:4c:3c:43:c3:28:d7:68:2e: 6d:76:73:7f:25:95:68:86:e4:51:a3:d1:05:b4:da:93:13:21: aa:53:cf:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcRGt9FissSKu9zBH2OaEChQMt2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA3MTQwNzUwNDZaFw0yNjA3MTUxMTIxNDZaMDMxMTAvBgNV BAMTKEExRjI0QjUyMDBEQ0ZEQ0IxQkU3MzlCQjU1RkM1Q0Y5OEZFNDc1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jvUeGzqj0fk+yhXD0S1sBwgm wcuttoC6Yrt34B7A0aEtIRhgaOjhLfot1hlss3tQFVlBhdI9s6tv9x3dUWkkxP8C Q5ykPGH9s5+F8ltGU0IqUI6zFsNBK7G84YcSEMjTPWkp1t9QEEeH/VMijwWBWJ88 neNO3/dZ/LXzDgs7olMSIMpAu4DnH6CiecKfv6bTpLyCmnIzxF+ftL2B3orR35TU Cj6Z8UNI7XQx9fDUKInUdyh6PDlez1yS1wYOqsbIVf4HGzzrkBNsEX8pw/6d3jUj Jzq+SACV9LAwpUuvbcYEb6wdEdTNDcYhHcRHoo+t6HEWClx9SszM/AC463enAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUofJLUgDc/csb5zm7Vfxc+Y/kddgwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1fRc8h+JA0f 9ykEUCkDuKKxoSfxY4pFq6loHbAlDsGNixNbppFLv9q5Hj3aJQ6FAIkCHl05edmC J+hpHb32c5R7bMWFtJ5JdFIORLkbSdI81qdCzucufgrG44BdDdVAaoQmxKsKlBF6 gCSo+Wmq410GYEpVeTS800lpKpUb/+3n0HkX1E1m5X7ntNohxsMnfjvhd/pgr4qp 4ivQkxDJ7CTEwNgo0k29pEPmeInbs5sXq+o7P9y+UZZ3xsNGgLXLXpUUWqRSgDBr +DqXHETLD3bJYzEP1O7TsyXb8uSQm0uRWkw8Q8Mo12gubXZzfyWVaIbkUaPRBbTa kxMhqlPPPQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:22 2026 by rpki-client