$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: IcFe9ovjWwX/4X8DDx6Y0w70GHbgLhuTTNpDPtahkrI= Subject key identifier: 71:E5:5A:E7:25:02:B0:3E:DD:7D:E8:FF:17:DB:6D:2E:9F:1C:A8:F7 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 141F0A220887783FC9BBF17F6DFAA166E6837371 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: AF Signing time: Fri 21 Aug 2026 10:54:26 +0000 Manifest this update: Fri 21 Aug 2026 10:49:26 +0000 Manifest next update: Sat 22 Aug 2026 13:21:26 +0000 Files and hashes: 1: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: I6DMXqbFw0lVWgJ6SLVXIMeToSqdXc6eXh4nXZ9KAl4=) 2: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=) 3: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 13:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1f:0a:22:08:87:78:3f:c9:bb:f1:7f:6d:fa:a1:66:e6:83:73:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Aug 21 10:49:26 2026 GMT Not After : Aug 22 13:21:26 2026 GMT Subject: CN=71E55AE72502B03EDD7DE8FF17DB6D2E9F1CA8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:81:9c:75:4e:02:fb:70:03:b2:f9:ab:0f: 30:0b:97:a5:ee:1d:68:98:96:34:9c:9b:97:ab:52: 0f:9a:a7:e6:cc:4e:87:aa:c3:5f:d7:d8:20:ed:dd: 7e:60:40:f4:6e:45:3e:06:b1:a3:b4:dc:fe:d9:74: d2:4e:b4:8a:22:3c:3d:fd:6d:ac:80:a3:a8:ca:9d: 03:a7:48:ad:90:d4:05:40:08:fc:c2:8d:95:0e:51: d1:5e:ca:fd:06:78:07:d2:55:7e:a8:f3:de:d0:ea: bd:aa:e7:57:72:46:8e:80:6b:c7:eb:5e:d8:a7:9b: 26:6a:62:2d:ea:4d:f8:a5:a3:81:3e:37:87:dc:3b: 87:a8:da:b4:4f:30:4e:0a:2d:b2:25:61:b0:cf:cb: 53:4b:24:7d:2c:d9:1b:e6:e7:6f:5e:b9:c5:56:be: d8:e2:92:ad:3b:27:0d:6b:60:a4:66:99:79:49:29: e4:28:ef:84:36:b9:24:55:17:bf:97:70:2c:e0:90: c6:ad:77:af:2f:06:57:f1:0c:10:6c:69:59:68:6d: a4:d7:80:f9:50:83:16:7a:de:24:c0:09:2d:97:16: fb:a1:12:e4:db:d7:0f:1b:03:84:f7:a9:eb:65:ed: 5b:02:92:14:58:40:0d:8d:81:51:ee:54:0a:11:29: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:5A:E7:25:02:B0:3E:DD:7D:E8:FF:17:DB:6D:2E:9F:1C:A8:F7 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ff:95:6c:cb:04:41:19:5f:f8:cc:c3:4a:b2:01:6b:56:da: 36:56:c6:b6:2c:52:64:9b:76:fb:7a:93:80:8a:4c:8a:b1:75: fc:67:08:fa:8d:e9:3f:90:8f:00:9b:85:ff:e7:64:5e:b4:9e: c4:b9:8b:03:08:23:2d:b3:6a:39:9f:d1:4d:44:91:4c:9f:f0: 99:c1:96:aa:07:c3:19:0b:1a:d6:aa:b3:27:ef:a8:35:db:92: 96:81:9d:b5:5b:57:d1:7a:12:7e:40:8c:b7:90:b1:3c:65:0e: 07:1d:b5:44:d0:8e:43:f4:a9:82:37:22:01:97:88:21:5e:de: 39:f8:61:57:71:14:c4:13:de:4c:99:34:1f:0c:00:19:aa:60: fa:9b:91:9c:ad:62:d0:94:07:da:7e:54:03:6f:43:e8:03:63: 66:20:de:01:cd:7d:6f:1d:1d:8d:60:4e:4f:7c:30:1b:35:08: 1c:cf:df:35:8e:16:36:28:4d:be:a1:ea:e5:29:6a:2a:db:98: 18:2b:e8:11:ab:48:f5:4d:44:80:7e:79:08:58:0d:11:bc:74: 0c:29:e7:90:2b:c0:cd:98:62:a9:ee:3b:54:7d:58:ed:6f:35: cf:48:38:14:27:a6:1f:d6:0c:13:5b:cd:38:bd:2c:6a:8b:fb: 8d:51:48:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFB8KIgiHeD/Ju/F/bfqhZuaDc3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA4MjExMDQ5MjZaFw0yNjA4MjIxMzIxMjZaMDMxMTAvBgNV BAMTKDcxRTU1QUU3MjUwMkIwM0VERDdERThGRjE3REI2RDJFOUYxQ0E4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IYGcdU4C+3ADsvmrDzALl6Xu HWiYljScm5erUg+ap+bMToeqw1/X2CDt3X5gQPRuRT4GsaO03P7ZdNJOtIoiPD39 bayAo6jKnQOnSK2Q1AVACPzCjZUOUdFeyv0GeAfSVX6o897Q6r2q51dyRo6Aa8fr XtinmyZqYi3qTfilo4E+N4fcO4eo2rRPME4KLbIlYbDPy1NLJH0s2Rvm529eucVW vtjikq07Jw1rYKRmmXlJKeQo74Q2uSRVF7+XcCzgkMatd68vBlfxDBBsaVlobaTX gPlQgxZ63iTACS2XFvuhEuTb1w8bA4T3qetl7VsCkhRYQA2NgVHuVAoRKXmXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUceVa5yUCsD7dfej/F9ttLp8cqPcwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJv+VbMsEQRlf +MzDSrIBa1baNlbGtixSZJt2+3qTgIpMirF1/GcI+o3pP5CPAJuF/+dkXrSexLmL AwgjLbNqOZ/RTUSRTJ/wmcGWqgfDGQsa1qqzJ++oNduSloGdtVtX0XoSfkCMt5Cx PGUOBx21RNCOQ/SpgjciAZeIIV7eOfhhV3EUxBPeTJk0HwwAGapg+puRnK1i0JQH 2n5UA29D6ANjZiDeAc19bx0djWBOT3wwGzUIHM/fNY4WNihNvqHq5SlqKtuYGCvo EatI9U1EgH55CFgNEbx0DCnnkCvAzZhiqe47VH1Y7W81z0g4FCemH9YME1vNOL0s aov7jVFIIg== -----END CERTIFICATE-----Generated at Sat Aug 22 00:54:07 2026 by rpki-client