$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: Wuc2j8SFCjut2gVUkUxgC83MKouZuHR9+d7Nq13uy5A= Subject key identifier: 16:A9:7E:2B:2C:63:97:FB:75:7D:37:2F:26:4B:B7:85:6E:E6:4B:9F Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 13654536C0E44CCBFBD78972AF6A5130B448F742 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: FB Signing time: Sun 26 Jul 2026 19:37:24 +0000 Manifest this update: Sun 26 Jul 2026 19:32:24 +0000 Manifest next update: Mon 27 Jul 2026 20:19:24 +0000 Files and hashes: 1: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: U4r5LPLEWYuHfnaOjlKzV8wHOWeOvhJ1Y6h1hKFrQdk=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 3: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:65:45:36:c0:e4:4c:cb:fb:d7:89:72:af:6a:51:30:b4:48:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Jul 26 19:32:24 2026 GMT Not After : Jul 27 20:19:24 2026 GMT Subject: CN=16A97E2B2C6397FB757D372F264BB7856EE64B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:b5:bf:7f:30:37:e3:60:a8:46:6f:e5:ab: 80:94:ad:ed:ae:3b:5a:82:ea:b2:7f:f2:c8:25:e9: e3:48:ec:56:1c:c9:cd:47:15:ca:8e:81:96:38:1c: dd:f9:96:0e:da:a4:0d:c6:63:a6:92:c3:fb:07:4a: 4e:27:e2:10:41:1a:2a:c6:dc:5f:ea:48:25:e9:e6: 4d:21:c1:95:dc:9c:46:e8:7e:11:44:05:c8:4d:01: d8:9d:08:6e:44:62:11:f6:e8:9a:d1:14:b4:50:5e: ed:8d:01:3a:9c:d7:04:33:b9:9c:46:a8:a3:d6:15: 6a:e9:1c:33:e7:44:20:0e:4b:b4:e4:34:91:e6:df: a3:e1:ea:71:33:e3:78:af:68:9c:80:1c:9b:bf:15: b2:e8:44:c7:16:8f:72:8d:27:1d:01:48:24:60:53: f4:af:c7:1f:d5:fc:3a:8f:be:6a:5e:41:6c:26:1f: 23:4f:10:41:9c:fc:eb:d8:3f:db:12:da:a9:f3:4a: 95:65:62:56:c0:42:fd:1e:b6:9c:ed:15:95:e4:6c: 8d:cc:2e:9a:c5:5c:3b:3a:3c:11:cb:77:a0:20:8a: 48:05:cc:d6:d3:40:d2:ff:6b:08:92:bd:af:ee:35: 24:7b:19:7c:ca:78:90:54:29:bd:12:15:16:8d:44: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A9:7E:2B:2C:63:97:FB:75:7D:37:2F:26:4B:B7:85:6E:E6:4B:9F X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a9:17:8f:bf:13:26:25:a1:de:2c:80:b3:90:f3:7e:2b:42: f0:d2:8c:0a:ba:20:54:74:d4:ea:51:88:6b:51:56:e1:ae:cb: 2c:c8:b4:eb:1b:7e:9d:1c:d0:87:ad:ec:ab:bd:7f:38:a3:bb: 79:b4:7b:af:bb:63:b2:51:9d:b4:29:af:a3:4f:35:d6:c1:3f: 5e:de:e2:46:ba:e1:51:14:c4:be:c3:65:f6:20:6c:4f:67:82: 04:6e:e2:99:ff:c1:b8:11:23:bc:47:9b:4d:5c:fe:69:a4:36: a0:b2:a6:71:8a:7e:e6:14:70:e6:5d:e5:60:e3:5a:27:f3:d5: 4c:e4:21:f6:80:1d:4f:7f:2f:92:45:9f:3e:89:56:5e:c2:c8: e4:b2:16:87:09:ef:ce:11:7a:f7:ed:d6:ba:9c:d2:7f:59:70: 9a:71:7f:f3:1e:38:17:31:17:bf:c1:b7:b9:17:af:42:9f:17: 0f:81:af:62:5e:a8:fe:48:b0:10:a7:9e:78:65:ac:5b:1b:98: f1:ff:21:d2:56:d8:06:c8:77:cf:f0:95:bd:be:e6:02:92:b1: fe:a8:5b:22:54:98:bf:02:85:d4:31:bb:05:b8:aa:8e:49:2e: f2:98:bb:0e:c7:6a:35:fb:7d:ee:7a:5d:46:8e:ba:86:d9:cb: fc:f8:ba:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE2VFNsDkTMv714lyr2pRMLRI90IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA3MjYxOTMyMjRaFw0yNjA3MjcyMDE5MjRaMDMxMTAvBgNV BAMTKDE2QTk3RTJCMkM2Mzk3RkI3NTdEMzcyRjI2NEJCNzg1NkVFNjRCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DLW/fzA342CoRm/lq4CUre2u O1qC6rJ/8sgl6eNI7FYcyc1HFcqOgZY4HN35lg7apA3GY6aSw/sHSk4n4hBBGirG 3F/qSCXp5k0hwZXcnEbofhFEBchNAdidCG5EYhH26JrRFLRQXu2NATqc1wQzuZxG qKPWFWrpHDPnRCAOS7TkNJHm36Ph6nEz43ivaJyAHJu/FbLoRMcWj3KNJx0BSCRg U/Svxx/V/DqPvmpeQWwmHyNPEEGc/OvYP9sS2qnzSpVlYlbAQv0etpztFZXkbI3M LprFXDs6PBHLd6AgikgFzNbTQNL/awiSva/uNSR7GXzKeJBUKb0SFRaNRJuJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFql+Kyxjl/t1fTcvJku3hW7mS58wHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKkXj78TJiWh 3iyAs5DzfitC8NKMCrogVHTU6lGIa1FW4a7LLMi06xt+nRzQh63sq71/OKO7ebR7 r7tjslGdtCmvo0811sE/Xt7iRrrhURTEvsNl9iBsT2eCBG7imf/BuBEjvEebTVz+ aaQ2oLKmcYp+5hRw5l3lYONaJ/PVTOQh9oAdT38vkkWfPolWXsLI5LIWhwnvzhF6 9+3WupzSf1lwmnF/8x44FzEXv8G3uRevQp8XD4GvYl6o/kiwEKeeeGWsWxuY8f8h 0lbYBsh3z/CVvb7mApKx/qhbIlSYvwKF1DG7Bbiqjkku8pi7DsdqNft97npdRo66 htnL/Pi6/g== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:10 2026 by rpki-client