$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: wCWek27YXCvOweSRPY6IUjJa4S60E6DAx8bv/lwt6ew= Subject key identifier: C7:AB:C8:30:D9:C2:16:1C:3C:A4:A2:C8:C7:7C:10:A5:55:57:C4:AF Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 42BD9DF2B068662ABC924D2CC1AADA98FF70C87E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: EF Signing time: Tue 14 Jul 2026 17:21:46 +0000 Manifest this update: Tue 14 Jul 2026 17:16:46 +0000 Manifest next update: Wed 15 Jul 2026 20:52:46 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: 80LkJHNu0BOO1ba+S92Vj739NUapxlM+OOwVQFhTfXI=) 3: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:9d:f2:b0:68:66:2a:bc:92:4d:2c:c1:aa:da:98:ff:70:c8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Jul 14 17:16:46 2026 GMT Not After : Jul 15 20:52:46 2026 GMT Subject: CN=C7ABC830D9C2161C3CA4A2C8C77C10A55557C4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:85:a1:a1:f9:87:1c:1d:07:9a:07:cd:43: e1:0c:35:30:76:cc:cc:c4:f5:7f:75:7f:fd:90:90: 9c:d5:34:d9:fb:56:ca:09:07:32:f2:25:b6:82:f8: 22:a9:bc:9c:1a:56:bd:90:02:12:f6:13:0c:1d:b3: 50:9d:46:93:eb:ac:ab:35:5f:c8:cf:ac:bc:32:69: 2f:9c:ba:f5:0d:54:15:37:5e:d3:7b:a7:cc:53:82: d0:c9:3d:31:3c:e0:6c:1e:33:b2:7b:cc:f6:2f:a2: c4:1b:41:98:c4:9c:a7:ab:05:de:3f:06:44:94:6b: 2c:43:fc:ea:e2:7b:4d:14:2e:19:af:7c:34:fa:7b: 1f:28:89:45:dc:54:0c:ad:fa:d3:8a:89:16:48:b2: 58:c7:af:07:65:64:dc:57:58:59:f2:8d:e4:b3:32: 0a:07:30:78:d9:13:34:99:48:96:8e:08:5a:99:60: 2c:88:eb:13:8c:f1:91:69:07:95:e3:65:a8:07:3d: 9a:9e:f4:99:b0:86:61:90:67:fb:8c:ac:99:07:45: 83:9f:fc:b0:78:64:09:2b:a1:f3:05:df:a1:91:a4: b9:aa:b8:e4:65:c3:58:92:1a:8e:14:61:12:6a:66: 64:00:7e:da:10:30:a2:47:85:a3:f9:53:3c:8d:55: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:C8:30:D9:C2:16:1C:3C:A4:A2:C8:C7:7C:10:A5:55:57:C4:AF X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dc:8c:82:0b:7b:69:7f:10:bf:d4:93:ed:10:37:b2:c5:98: 87:55:5a:c2:94:5a:ee:a3:5c:0b:75:e8:eb:6b:52:25:2a:67: 64:60:a4:aa:9c:99:4d:73:f1:6a:b6:8b:a7:6c:e3:9b:f7:32: e9:f8:7a:a1:d3:75:99:6e:c9:4e:de:f5:94:e0:97:85:81:39: f3:b7:24:92:16:b4:7d:ec:b6:68:87:e8:3d:8b:f7:75:ea:d4: ce:c5:eb:3d:fa:07:43:f5:7e:f6:92:ae:d0:64:f4:85:5f:3d: d7:6f:39:62:af:02:1b:83:6a:17:20:cf:89:f2:a0:f4:4d:1b: 25:37:56:78:9e:f1:44:5f:ae:67:e0:0f:52:21:cb:0e:4e:81: b2:2c:f9:a7:f9:35:a9:8e:f1:ef:0e:18:1e:8c:27:bb:1d:b2: cd:0e:4a:1e:24:18:8c:50:03:94:30:85:69:bc:e1:8a:ab:7a: 2b:bc:34:74:8b:d9:f2:ce:4e:97:84:2a:47:5a:02:9a:47:87: b3:56:f2:89:db:92:04:98:9a:b6:02:6d:de:1c:c3:20:0a:2a: e4:02:42:13:55:1f:62:ee:d3:1b:27:12:1b:2e:d2:c0:cd:db: ac:bc:6a:59:78:aa:53:2e:5e:ff:4d:f2:c5:aa:4a:b6:9d:5a: 10:de:8f:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQr2d8rBoZiq8kk0swaramP9wyH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA3MTQxNzE2NDZaFw0yNjA3MTUyMDUyNDZaMDMxMTAvBgNV BAMTKEM3QUJDODMwRDlDMjE2MUMzQ0E0QTJDOEM3N0MxMEE1NTU1N0M0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/4WhofmHHB0HmgfNQ+EMNTB2 zMzE9X91f/2QkJzVNNn7VsoJBzLyJbaC+CKpvJwaVr2QAhL2Ewwds1CdRpPrrKs1 X8jPrLwyaS+cuvUNVBU3XtN7p8xTgtDJPTE84GweM7J7zPYvosQbQZjEnKerBd4/ BkSUayxD/Orie00ULhmvfDT6ex8oiUXcVAyt+tOKiRZIsljHrwdlZNxXWFnyjeSz MgoHMHjZEzSZSJaOCFqZYCyI6xOM8ZFpB5XjZagHPZqe9JmwhmGQZ/uMrJkHRYOf /LB4ZAkrofMF36GRpLmquORlw1iSGo4UYRJqZmQAftoQMKJHhaP5UzyNVXjrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx6vIMNnCFhw8pKLIx3wQpVVXxK8wHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9yMggt7aX8Q v9ST7RA3ssWYh1VawpRa7qNcC3Xo62tSJSpnZGCkqpyZTXPxaraLp2zjm/cy6fh6 odN1mW7JTt71lOCXhYE587ckkha0fey2aIfoPYv3derUzsXrPfoHQ/V+9pKu0GT0 hV891285Yq8CG4NqFyDPifKg9E0bJTdWeJ7xRF+uZ+APUiHLDk6Bsiz5p/k1qY7x 7w4YHownux2yzQ5KHiQYjFADlDCFabzhiqt6K7w0dIvZ8s5Ol4QqR1oCmkeHs1by iduSBJiatgJt3hzDIAoq5AJCE1UfYu7TGycSGy7SwM3brLxqWXiqUy5e/03yxapK tp1aEN6PuA== -----END CERTIFICATE-----Generated at Wed Jul 15 00:21:38 2026 by rpki-client