$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: C38I+inm/f6OT0FBJj2Z6Cd6msHUSBrmP44RWHGaQ0o= Subject key identifier: 38:43:B9:02:6F:A3:46:04:37:F4:F0:F3:8E:CE:F3:46:04:D4:AD:7A Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 73D8CE4A89C443D3D764C1832EAC7BA00400CEA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: AE Signing time: Fri 29 May 2026 17:43:04 +0000 Manifest this update: Fri 29 May 2026 17:38:04 +0000 Manifest next update: Sat 30 May 2026 21:41:04 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: k62Tkhn2OQwbgndDoFMaDq+CsAV4KyizRmAgoIDcERU=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 3: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d8:ce:4a:89:c4:43:d3:d7:64:c1:83:2e:ac:7b:a0:04:00:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: May 29 17:38:04 2026 GMT Not After : May 30 21:41:04 2026 GMT Subject: CN=3843B9026FA3460437F4F0F38ECEF34604D4AD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:62:aa:4a:73:8a:d3:80:a5:f7:a4:f5:28: 17:51:f2:26:40:01:5b:0b:33:26:d8:ea:95:8a:6f: 52:70:90:24:ac:c3:51:df:7f:9a:ee:7a:3d:95:fc: d4:9d:0b:41:c4:24:46:ac:21:fb:52:1b:d2:02:fa: 78:5c:47:fc:f6:65:24:58:67:6e:97:27:f8:1f:e7: 00:bf:1d:a8:4d:80:1f:ed:6f:8d:ce:67:c6:4c:80: 06:34:64:d6:7c:22:6d:ae:3c:e4:d2:bd:58:a4:4b: 2b:5f:f6:7a:e2:16:c9:9f:e9:81:95:1c:f4:70:97: 84:6b:a3:d9:9d:c9:a8:52:cd:9f:a5:af:7c:d4:00: 84:be:1d:f2:df:4f:16:a2:4f:c6:bb:88:14:e6:bb: 2d:a0:ff:60:c1:55:be:d5:70:0f:5b:fc:92:ab:ae: c4:cc:84:c1:7b:22:f6:2d:69:d3:dd:1e:4a:5d:00: 07:3a:43:8e:cd:7c:b4:15:51:12:9b:35:79:aa:6a: d4:87:9d:df:26:29:cc:17:be:ae:f2:d4:68:49:a4: bf:2a:98:a3:09:23:22:9b:70:28:0b:dd:a7:b5:59: e3:25:38:95:40:a0:a9:9d:b9:c9:f0:a4:2b:70:0b: 32:08:9e:10:27:bc:ba:2f:9b:20:9f:30:2d:d7:a1: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:B9:02:6F:A3:46:04:37:F4:F0:F3:8E:CE:F3:46:04:D4:AD:7A X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:78:3f:0e:2c:cd:3b:4e:29:9b:d3:45:4d:74:4a:42:c2:b5: 1b:77:37:14:8b:1c:a3:55:0a:d6:bc:e5:c4:59:16:41:22:72: d2:61:fa:80:f2:e8:bc:9f:ea:5d:44:38:38:41:ab:7c:6f:ec: df:2c:1a:c9:b2:94:bc:73:10:1f:1c:7b:0d:a2:cc:b7:99:ba: fd:c2:dc:ad:cf:b9:9d:1d:93:5e:41:18:b1:88:5d:10:2f:f5: 31:99:cb:50:3b:32:84:12:57:e8:b1:48:7b:82:83:57:84:8c: 14:72:b2:16:8d:ad:6f:ef:e4:72:6d:76:15:a5:13:ba:47:da: b7:2d:52:1d:8c:44:8d:bd:6e:f6:97:8c:4c:bc:04:f5:dd:9c: 4b:9e:a3:65:8e:31:80:ed:98:73:42:41:e3:2a:0a:cc:88:3e: b3:8d:0f:26:d3:aa:17:fd:ec:b9:c1:05:54:b6:16:6e:66:03: 3e:6a:d3:83:6c:38:0b:29:04:56:8f:8d:12:d7:14:08:7f:57: 08:b9:66:0e:ac:f1:51:7f:f9:99:ca:b2:6c:82:53:9a:5f:89: 0c:9b:a6:3d:59:d1:16:fa:4a:8a:f5:0a:b2:49:f3:2c:be:43: 54:d4:cc:64:06:70:29:3b:6d:19:1f:9e:24:f8:66:5d:d3:c0: 8f:4f:2b:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc9jOSonEQ9PXZMGDLqx7oAQAzqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA1MjkxNzM4MDRaFw0yNjA1MzAyMTQxMDRaMDMxMTAvBgNV BAMTKDM4NDNCOTAyNkZBMzQ2MDQzN0Y0RjBGMzhFQ0VGMzQ2MDRENEFEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqmKqSnOK04Cl96T1KBdR8iZA AVsLMybY6pWKb1JwkCSsw1Hff5ruej2V/NSdC0HEJEasIftSG9IC+nhcR/z2ZSRY Z26XJ/gf5wC/HahNgB/tb43OZ8ZMgAY0ZNZ8Im2uPOTSvVikSytf9nriFsmf6YGV HPRwl4Rro9mdyahSzZ+lr3zUAIS+HfLfTxaiT8a7iBTmuy2g/2DBVb7VcA9b/JKr rsTMhMF7IvYtadPdHkpdAAc6Q47NfLQVURKbNXmqatSHnd8mKcwXvq7y1GhJpL8q mKMJIyKbcCgL3ae1WeMlOJVAoKmducnwpCtwCzIInhAnvLovmyCfMC3XoWIhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOEO5Am+jRgQ39PDzjs7zRgTUrXowHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyng/DizNO04p m9NFTXRKQsK1G3c3FIsco1UK1rzlxFkWQSJy0mH6gPLovJ/qXUQ4OEGrfG/s3ywa ybKUvHMQHxx7DaLMt5m6/cLcrc+5nR2TXkEYsYhdEC/1MZnLUDsyhBJX6LFIe4KD V4SMFHKyFo2tb+/kcm12FaUTukfaty1SHYxEjb1u9peMTLwE9d2cS56jZY4xgO2Y c0JB4yoKzIg+s40PJtOqF/3sucEFVLYWbmYDPmrTg2w4CykEVo+NEtcUCH9XCLlm DqzxUX/5mcqybIJTml+JDJumPVnRFvpKivUKsknzLL5DVNTMZAZwKTttGR+eJPhm XdPAj08rgA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client