$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: uKcQ5VNfLwIOsqk+f9x7LRDnpX9k8JK3Rn2JPYr0r/o= Subject key identifier: 3C:4C:5D:B2:A0:F7:1C:EE:B6:96:E8:C2:83:37:1D:1B:D0:4F:51:44 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 2EC71DD3089BEB40E80F02FCB50DF7246F5A3759 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: EA Signing time: Tue 14 Jul 2026 03:55:21 +0000 Manifest this update: Tue 14 Jul 2026 03:50:21 +0000 Manifest next update: Wed 15 Jul 2026 04:48:21 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: 8uZs6Exurc+T7/3qTA4LfNUQka+oWhWlrmfNVTB9o+U=) 2: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) 3: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c7:1d:d3:08:9b:eb:40:e8:0f:02:fc:b5:0d:f7:24:6f:5a:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Jul 14 03:50:21 2026 GMT Not After : Jul 15 04:48:21 2026 GMT Subject: CN=3C4C5DB2A0F71CEEB696E8C283371D1BD04F5144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:a1:cc:90:16:37:1a:45:a5:b8:88:e5:f6: 39:c5:a6:b7:de:8d:3c:06:7e:9e:78:de:8f:b1:41: a2:6c:85:0a:00:b1:ae:cb:4d:15:66:18:73:d9:16: af:35:74:60:a2:46:04:d4:b9:19:04:81:9d:06:53: e2:53:b3:94:90:2e:06:82:26:33:34:5e:a1:e5:67: a2:8c:3a:cc:57:0d:21:21:ff:f2:61:ed:16:27:43: 21:d7:b6:a2:94:9f:07:75:21:88:44:62:3d:84:47: 34:a5:f1:7c:32:64:e9:09:99:ee:d4:35:74:b3:e2: da:06:f2:28:09:10:8e:1b:98:c4:78:4f:4c:2c:a0: 20:54:a3:78:50:a7:b9:ba:5b:46:30:fa:41:5b:4e: 54:08:b8:1e:f1:11:31:af:0f:87:10:f0:0e:66:14: 8e:fc:c3:97:13:dd:ae:f3:b5:f8:64:32:f3:52:7f: 4f:e1:a0:1b:25:25:7f:e0:34:b3:7c:78:5c:4f:91: 16:d6:3d:d6:17:21:fa:c7:be:53:13:d6:71:18:d2: 1c:34:48:9b:e3:62:20:d4:8b:9d:bd:03:e9:b8:3e: 15:b7:6b:39:21:ce:1e:d6:59:0e:d2:14:9a:a7:44: 01:b9:1c:16:74:0d:7f:88:7f:e6:df:8b:ee:58:49: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:5D:B2:A0:F7:1C:EE:B6:96:E8:C2:83:37:1D:1B:D0:4F:51:44 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:61:79:3d:9f:b4:8d:a7:3f:a7:f3:94:33:60:fd:7c:f5:f6: 39:b0:f7:48:16:87:dc:06:ce:cd:24:c4:2e:87:da:24:20:17: ae:e7:23:eb:c3:09:9f:f3:17:0f:33:b2:c9:6a:82:17:05:9f: b9:dc:3b:51:87:83:10:81:6a:69:8c:ed:e1:b7:49:08:ad:74: a6:56:f0:d8:09:de:e3:ad:fe:0c:c5:97:87:bb:ba:72:3d:46: 87:e0:ba:be:78:52:1c:ab:99:04:fa:74:4a:ad:80:2b:9b:7a: 05:f6:dc:40:01:6b:fd:ed:99:7c:62:3b:ea:2f:2f:fc:39:2e: 36:85:7a:e7:91:f1:57:00:34:dd:97:27:4c:a5:50:cc:83:79: 46:e4:fa:8a:12:b8:2c:8e:96:b4:27:6f:ab:87:c3:c4:18:75: bd:6f:bd:e0:be:c6:b8:a5:53:9a:b0:c8:8f:f9:bc:97:61:21: 31:07:21:68:4f:3b:fd:17:e8:c9:1d:dc:86:65:7c:c6:e0:e9: f3:9b:e6:86:65:fd:d0:56:fb:ea:fb:d1:e1:43:bf:26:c6:3e: 21:29:47:8b:27:22:ba:76:bd:c9:f1:cf:d7:4f:44:f5:e3:7b: 3f:44:a0:23:1c:46:99:03:98:fc:89:33:1d:22:12:b6:9a:e3: bd:bd:6e:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULscd0wib60DoDwL8tQ33JG9aN1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA3MTQwMzUwMjFaFw0yNjA3MTUwNDQ4MjFaMDMxMTAvBgNV BAMTKDNDNEM1REIyQTBGNzFDRUVCNjk2RThDMjgzMzcxRDFCRDA0RjUxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bKHMkBY3GkWluIjl9jnFprfe jTwGfp543o+xQaJshQoAsa7LTRVmGHPZFq81dGCiRgTUuRkEgZ0GU+JTs5SQLgaC JjM0XqHlZ6KMOsxXDSEh//Jh7RYnQyHXtqKUnwd1IYhEYj2ERzSl8XwyZOkJme7U NXSz4toG8igJEI4bmMR4T0wsoCBUo3hQp7m6W0Yw+kFbTlQIuB7xETGvD4cQ8A5m FI78w5cT3a7ztfhkMvNSf0/hoBslJX/gNLN8eFxPkRbWPdYXIfrHvlMT1nEY0hw0 SJvjYiDUi529A+m4PhW3azkhzh7WWQ7SFJqnRAG5HBZ0DX+If+bfi+5YScM7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPExdsqD3HO62lujCgzcdG9BPUUQwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2F5PZ+0jac/ p/OUM2D9fPX2ObD3SBaH3AbOzSTELofaJCAXrucj68MJn/MXDzOyyWqCFwWfudw7 UYeDEIFqaYzt4bdJCK10plbw2Ane463+DMWXh7u6cj1Gh+C6vnhSHKuZBPp0Sq2A K5t6BfbcQAFr/e2ZfGI76i8v/DkuNoV655HxVwA03ZcnTKVQzIN5RuT6ihK4LI6W tCdvq4fDxBh1vW+94L7GuKVTmrDIj/m8l2EhMQchaE87/RfoyR3chmV8xuDp85vm hmX90Fb76vvR4UO/JsY+ISlHiyciuna9yfHP109E9eN7P0SgIxxGmQOY/IkzHSIS tprjvb1uHQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:05 2026 by rpki-client