$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: xAADawdQUXFoOTy1HcX9px1hlTNl+vOecJzdS/X0GPw= Subject key identifier: 33:FD:8D:AA:FD:07:3B:13:64:E8:00:EE:62:65:E1:6F:94:05:0E:04 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 6EF511B727DA1465FC014222F49E4331862AAADD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 72 Signing time: Tue 07 Jul 2026 00:38:03 +0000 Manifest this update: Tue 07 Jul 2026 00:33:03 +0000 Manifest next update: Wed 08 Jul 2026 03:59:03 +0000 Files and hashes: 1: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: VNSFUr14bKFfnm6GyQ2NsAl3X1wqCds/ZniManAq2ek=) 2: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 03:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f5:11:b7:27:da:14:65:fc:01:42:22:f4:9e:43:31:86:2a:aa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Jul 7 00:33:03 2026 GMT Not After : Jul 8 03:59:03 2026 GMT Subject: CN=33FD8DAAFD073B1364E800EE6265E16F94050E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:3a:46:1e:ba:e0:63:7d:5a:5c:d3:2f:8d: 00:cc:31:12:da:46:61:47:91:5d:3a:a6:1a:82:14: 86:f0:3c:a5:9c:db:a3:ad:aa:84:a8:27:ec:e7:95: 63:1d:cf:f6:5f:92:32:3c:40:b5:b6:b1:7d:c9:06: d6:61:b9:98:1b:ca:3c:9b:c5:60:b7:41:12:de:b4: b9:c9:02:f3:b1:d1:77:08:9b:ba:fa:45:f5:d5:31: 56:ee:2d:9b:af:7a:b9:a0:11:ac:c5:d9:0a:40:9f: 37:02:c0:44:5e:22:a6:e4:1d:ee:7f:8d:a0:5f:71: d6:c6:6f:39:0a:f0:7f:b8:49:22:26:2c:bd:d8:4f: d8:c3:ee:dc:cc:cc:f2:b0:15:e6:bd:1c:63:43:b6: 8b:2d:a6:48:f5:4d:03:bc:26:87:5d:6d:50:22:3c: c2:c6:ab:a4:6e:1a:01:03:ff:2c:92:1a:93:8e:60: a7:96:e7:0e:b6:2f:82:8c:1a:a4:39:50:65:85:0e: 18:57:c7:0c:70:9e:5c:12:db:e0:74:6e:18:9c:d0: 58:77:75:5e:cf:06:52:f2:e4:a0:1f:04:d8:25:cb: 2d:54:a7:12:bc:0b:98:5a:3e:d5:ac:ea:aa:f7:49: c0:d8:f6:bb:0a:1c:74:ef:3d:f6:dd:d4:78:70:78: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:8D:AA:FD:07:3B:13:64:E8:00:EE:62:65:E1:6F:94:05:0E:04 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:bf:32:28:63:8c:71:0c:d9:9f:17:cd:b9:2a:27:39:a9: 56:cc:3c:17:84:51:df:84:85:60:c8:67:02:3b:b5:27:1d:64: c9:29:c7:51:5a:d5:27:10:41:3f:3e:7f:f3:21:90:08:83:61: 19:9c:da:78:99:d4:02:66:b6:42:a9:49:bc:8c:7e:25:af:e8: 71:00:4e:85:7f:a9:ce:c3:67:21:db:7b:d9:52:22:39:42:9b: bd:8c:d9:ab:71:ae:16:04:12:73:bb:28:fd:85:f0:72:20:45: 4d:80:ae:94:c3:b0:d8:5b:f2:7a:8d:5e:da:62:e2:37:ef:64: 20:fa:31:e0:e0:b8:95:b1:81:79:d0:48:93:7b:e8:45:ba:49: cd:ce:5d:44:ee:00:a5:ed:ee:b0:c9:ac:b0:c7:00:62:97:84: 7d:61:e5:24:c3:16:d6:33:74:2f:a8:0b:36:0b:b5:81:47:e3: d4:eb:79:d9:53:87:07:e6:b1:62:50:da:d1:8c:69:14:8c:8e: dd:b0:b0:dd:17:31:c2:ee:e2:9d:4c:2d:8f:0c:56:f6:14:c1: b9:09:05:33:f2:6e:32:7d:7a:90:da:34:37:48:d8:34:3d:f5: 9b:e3:28:d6:ea:e7:b1:8a:0f:4f:3f:84:28:fd:53:6a:5a:15: 56:52:3a:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbvURtyfaFGX8AUIi9J5DMYYqqt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA3MDcwMDMzMDNaFw0yNjA3MDgwMzU5MDNaMDMxMTAvBgNV BAMTKDMzRkQ4REFBRkQwNzNCMTM2NEU4MDBFRTYyNjVFMTZGOTQwNTBFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yjpGHrrgY31aXNMvjQDMMRLa RmFHkV06phqCFIbwPKWc26OtqoSoJ+znlWMdz/ZfkjI8QLW2sX3JBtZhuZgbyjyb xWC3QRLetLnJAvOx0XcIm7r6RfXVMVbuLZuvermgEazF2QpAnzcCwEReIqbkHe5/ jaBfcdbGbzkK8H+4SSImLL3YT9jD7tzMzPKwFea9HGNDtostpkj1TQO8JoddbVAi PMLGq6RuGgED/yySGpOOYKeW5w62L4KMGqQ5UGWFDhhXxwxwnlwS2+B0bhic0Fh3 dV7PBlLy5KAfBNglyy1UpxK8C5haPtWs6qr3ScDY9rsKHHTvPfbd1HhweNYzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM/2Nqv0HOxNk6ADuYmXhb5QFDgQwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcS/MihjjHEM 2Z8XzbkqJzmpVsw8F4RR34SFYMhnAju1Jx1kySnHUVrVJxBBPz5/8yGQCINhGZza eJnUAma2QqlJvIx+Ja/ocQBOhX+pzsNnIdt72VIiOUKbvYzZq3GuFgQSc7so/YXw ciBFTYCulMOw2Fvyeo1e2mLiN+9kIPox4OC4lbGBedBIk3voRbpJzc5dRO4Ape3u sMmssMcAYpeEfWHlJMMW1jN0L6gLNgu1gUfj1Ot52VOHB+axYlDa0YxpFIyO3bCw 3Rcxwu7inUwtjwxW9hTBuQkFM/JuMn16kNo0N0jYND31m+Mo1urnsYoPTz+EKP1T aloVVlI6AQ== -----END CERTIFICATE-----Generated at Tue Jul 7 10:45:52 2026 by rpki-client