$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: shGa6K7a6iwFZAzQtOBU5RNfCr4To3lqGJ8VeiWHw8A= Subject key identifier: 7F:41:57:B4:4E:82:78:98:80:0E:B1:ED:D3:DD:D5:8D:D8:2A:B2:CC Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 71A46BA2A674BAADA47FA797943D0BE1FD5F9486 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: EA Signing time: Tue 14 Jul 2026 09:51:01 +0000 Manifest this update: Tue 14 Jul 2026 09:46:01 +0000 Manifest next update: Wed 15 Jul 2026 12:29:01 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 3: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: MFO2ZVFSqicVc2lYrCJSpoO6gT9RGy9Q8eP0Dj1yKJk=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:6b:a2:a6:74:ba:ad:a4:7f:a7:97:94:3d:0b:e1:fd:5f:94:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Jul 14 09:46:01 2026 GMT Not After : Jul 15 12:29:01 2026 GMT Subject: CN=7F4157B44E827898800EB1EDD3DDD58DD82AB2CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:49:8a:c9:31:14:1e:b9:e8:3d:c9:a8:90: e7:f1:1b:cd:75:d2:22:ea:6d:f5:1c:a8:4f:62:60: 1c:c7:38:5d:83:2c:c9:3e:48:c8:d8:8b:55:93:c9: af:1d:31:2c:27:dc:31:33:1d:09:fa:2a:73:c7:d1: 41:8f:cc:94:c5:7b:64:1b:11:f4:2e:b4:fb:d1:81: 51:88:77:c6:d1:34:e5:80:58:0b:bd:33:20:2a:43: 7e:ff:b8:e0:f3:41:95:a0:bb:a9:9b:3b:f5:61:96: d4:c9:7c:32:be:68:30:60:af:16:1c:37:66:43:9a: 5e:79:a8:da:b3:ef:31:32:f0:f8:e1:98:ad:e5:46: ba:2f:34:82:99:fc:34:72:c4:35:d0:a7:fe:c9:d9: 95:4b:b5:95:55:10:aa:9f:1f:b8:65:94:5e:1e:c7: d4:86:5c:26:52:3c:6f:52:f7:f7:f7:9a:ac:fa:3e: da:c6:ac:98:1e:5b:cc:10:80:6f:75:55:9a:d1:8d: 85:68:0a:03:df:15:1f:e4:98:db:ac:67:81:f9:a9: ee:4a:a9:ed:b3:f0:32:1d:3a:19:06:da:55:5a:a8: 19:65:32:d3:5c:8a:7f:54:26:75:60:51:d9:c9:4c: 5e:92:2d:0a:68:96:e6:7f:87:f8:35:af:cc:58:9a: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:57:B4:4E:82:78:98:80:0E:B1:ED:D3:DD:D5:8D:D8:2A:B2:CC X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:64:3a:1e:73:10:c5:f7:2e:c3:aa:54:ba:ce:f8:36:09:6d: c8:50:de:bc:eb:50:3e:4c:d3:03:b6:f8:2c:40:95:6c:e6:c3: 3e:a2:8b:e5:53:5a:35:a0:ae:5d:f7:c9:af:62:09:a5:1f:33: 9f:f5:c9:25:a5:30:d3:4c:7a:46:69:3f:da:1d:3f:67:c8:9b: 50:00:c9:53:8f:f4:b4:6c:c7:5b:c1:2d:16:81:65:c2:01:37: c2:d1:fe:0b:bd:1a:aa:97:cd:a6:10:20:63:c8:17:06:f8:08: df:d6:db:e1:c5:ba:a5:fa:38:c4:64:d4:c9:4e:f2:35:c7:62: ef:09:67:f1:ea:87:1e:e6:dc:58:49:7b:a9:54:ab:a0:84:d2: 7a:19:2f:04:fd:89:76:78:f5:44:16:98:a2:d2:8a:bb:f1:b9: 36:43:88:40:f3:e7:93:48:93:7b:61:d7:89:ef:fa:35:aa:46: 75:b0:71:91:c6:f3:45:ef:a9:30:e6:93:9a:d7:4c:68:ea:a7: 5c:26:6f:99:73:6c:ba:91:29:e5:28:01:bc:04:50:08:c5:a5: d0:d2:2a:6b:f5:28:5d:cc:18:b8:ba:60:ef:44:f9:39:d3:7f: 1b:c8:0b:a5:bb:57:74:6c:0e:df:f9:88:33:96:7f:97:54:24: 10:69:c1:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcaRroqZ0uq2kf6eXlD0L4f1flIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA3MTQwOTQ2MDFaFw0yNjA3MTUxMjI5MDFaMDMxMTAvBgNV BAMTKDdGNDE1N0I0NEU4Mjc4OTg4MDBFQjFFREQzRERENThERDgyQUIyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ0mKyTEUHrnoPcmokOfxG811 0iLqbfUcqE9iYBzHOF2DLMk+SMjYi1WTya8dMSwn3DEzHQn6KnPH0UGPzJTFe2Qb EfQutPvRgVGId8bRNOWAWAu9MyAqQ37/uODzQZWgu6mbO/VhltTJfDK+aDBgrxYc N2ZDml55qNqz7zEy8PjhmK3lRrovNIKZ/DRyxDXQp/7J2ZVLtZVVEKqfH7hllF4e x9SGXCZSPG9S9/f3mqz6PtrGrJgeW8wQgG91VZrRjYVoCgPfFR/kmNusZ4H5qe5K qe2z8DIdOhkG2lVaqBllMtNcin9UJnVgUdnJTF6SLQpoluZ/h/g1r8xYmhU3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf0FXtE6CeJiADrHt093VjdgqsswwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWQ6HnMQxfcu w6pUus74NgltyFDevOtQPkzTA7b4LECVbObDPqKL5VNaNaCuXffJr2IJpR8zn/XJ JaUw00x6Rmk/2h0/Z8ibUADJU4/0tGzHW8EtFoFlwgE3wtH+C70aqpfNphAgY8gX BvgI39bb4cW6pfo4xGTUyU7yNcdi7wln8eqHHubcWEl7qVSroITSehkvBP2Jdnj1 RBaYotKKu/G5NkOIQPPnk0iTe2HXie/6NapGdbBxkcbzRe+pMOaTmtdMaOqnXCZv mXNsupEp5SgBvARQCMWl0NIqa/UoXcwYuLpg70T5OdN/G8gLpbtXdGwO3/mIM5Z/ l1QkEGnBug== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:05 2026 by rpki-client