$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: stll2pcDXihJY6q6i9n4DXvtdDDB/nyT6Laa1daA4Fk= Subject key identifier: 84:2A:61:7A:8F:C9:1A:F0:C2:E5:7F:D8:0B:41:B4:91:A9:21:E4:BA Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 4748282B56393A8B6904268DB9EDF49F2DC91E0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: 74 Signing time: Tue 14 Jul 2026 03:00:16 +0000 Manifest this update: Tue 14 Jul 2026 02:55:16 +0000 Manifest next update: Wed 15 Jul 2026 05:23:16 +0000 Files and hashes: 1: 323430323a366663303a3a2f34382d3438203d3e203538383532.roa (hash: gX1O+Y7Fg8167/TNNe2YgVnqeJeg2763IbV/P3KO278=) 2: 3130332e38352e3134372e302f32342d3234203d3e203633373034.roa (hash: zMEuyNgTgVcdgflFqG57R+f9o2g7k78+g4cQ0B5Qa1M=) 3: 3130332e38352e3134372e302f32342d3234203d3e203538383532.roa (hash: wTPF3wn67HZ+cr+CVGr3T0ffcz5692BL7rs8NpZcmIQ=) 4: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: ofPu9n0T8j5q3zD5ogrTtd4X0GowUj02JUsjo+01Y9s=) 5: 3130332e38312e342e302f32322d3232203d3e203633373034.roa (hash: xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=) 6: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 7: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (hash: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk=) 8: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:48:28:2b:56:39:3a:8b:69:04:26:8d:b9:ed:f4:9f:2d:c9:1e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Jul 14 02:55:16 2026 GMT Not After : Jul 15 05:23:16 2026 GMT Subject: CN=842A617A8FC91AF0C2E57FD80B41B491A921E4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:f5:d0:c3:5b:92:fc:bc:6d:a4:9a:9f:53: 58:d7:b0:84:44:57:5d:9d:c6:cc:44:50:a1:62:bf: 10:57:f6:8c:27:e5:12:e3:28:9b:7e:79:72:99:12: 29:1b:fb:cb:f4:92:58:42:59:9c:03:4c:60:a4:86: 78:9a:a5:f5:c9:2b:3c:a5:90:d1:e6:43:6c:b4:d4: 7e:0c:b1:36:4d:f8:c7:da:ee:8e:30:c3:7f:17:47: be:78:9c:9c:68:00:e8:fb:78:8d:b4:6b:09:56:2b: 97:d6:dc:bd:d6:22:62:f5:a8:f6:15:32:a2:29:a2: 30:89:a6:e6:09:78:fb:c5:e9:cd:05:d7:d3:0b:b9: 42:47:bc:8b:9f:f6:7a:66:67:1a:07:53:c2:56:88: 3a:80:94:ac:83:cf:18:6b:3a:be:71:ab:3e:2e:e2: 5b:0e:cb:77:5b:d5:04:ac:4c:9a:f3:ba:d2:c4:e7: 8c:6d:33:de:6b:c8:aa:fc:ec:96:98:3a:d4:d0:f9: a5:00:89:57:d8:85:b4:a4:ca:39:9b:08:16:11:6a: da:35:ef:41:a8:a3:9f:32:4a:a4:da:02:51:4d:d9: e5:c7:fa:22:87:35:fe:ce:56:e5:ee:44:82:e6:4c: e3:8a:86:06:14:29:1a:25:4b:45:56:20:20:2a:ce: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2A:61:7A:8F:C9:1A:F0:C2:E5:7F:D8:0B:41:B4:91:A9:21:E4:BA X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:61:15:ca:58:48:12:e6:a2:e5:88:91:e6:40:97:f9:24:c6: 02:b2:32:67:ba:a5:7e:64:4c:50:59:d1:4b:70:06:5b:2f:c2: af:21:00:b1:7e:95:98:0f:a0:fa:ad:53:e1:49:70:41:9a:8c: 50:58:a9:cc:ed:10:37:13:20:47:6a:d7:3d:7c:3c:df:9f:bf: 75:f0:24:ab:49:82:19:1d:c3:e8:7a:3f:5e:32:49:c9:21:5c: a5:cc:24:c6:53:d9:32:5c:b4:b7:cf:c0:9e:b3:b6:7e:41:63: fa:39:62:d5:42:2e:3c:f6:a3:0a:4d:f1:4e:b7:a0:77:a4:03: 2a:b6:0e:62:dd:bf:f6:75:d4:08:66:1f:2a:40:c5:cd:75:74: 45:74:0a:31:d2:00:56:e6:59:b4:85:d2:ec:c5:8e:a0:d9:27: 5e:f0:81:1f:ee:4f:04:68:44:5a:19:5b:53:f6:17:80:89:c0: 54:7f:b6:cd:a9:4b:17:6b:a7:02:23:06:1e:88:fc:e9:1f:79: 39:96:d2:cf:74:66:ec:44:25:c7:0a:4d:1d:2b:37:00:5a:b4: f1:44:f0:04:26:4e:a4:90:03:9d:e1:23:95:40:80:28:49:f0: 69:a7:75:83:01:db:70:0a:29:9c:6f:99:19:e1:91:22:10:37: f0:61:05:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR0goK1Y5OotpBCaNue30ny3JHg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA3MTQwMjU1MTZaFw0yNjA3MTUwNTIzMTZaMDMxMTAvBgNV BAMTKDg0MkE2MTdBOEZDOTFBRjBDMkU1N0ZEODBCNDFCNDkxQTkyMUU0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiP/XQw1uS/LxtpJqfU1jXsIRE V12dxsxEUKFivxBX9own5RLjKJt+eXKZEikb+8v0klhCWZwDTGCkhniapfXJKzyl kNHmQ2y01H4MsTZN+Mfa7o4ww38XR754nJxoAOj7eI20awlWK5fW3L3WImL1qPYV MqIpojCJpuYJePvF6c0F19MLuUJHvIuf9npmZxoHU8JWiDqAlKyDzxhrOr5xqz4u 4lsOy3db1QSsTJrzutLE54xtM95ryKr87JaYOtTQ+aUAiVfYhbSkyjmbCBYRato1 70Goo58ySqTaAlFN2eXH+iKHNf7OVuXuRILmTOOKhgYUKRolS0VWICAqzpR/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhCpheo/JGvDC5X/YC0G0kakh5LowHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmEVylhIEuai 5YiR5kCX+STGArIyZ7qlfmRMUFnRS3AGWy/CryEAsX6VmA+g+q1T4UlwQZqMUFip zO0QNxMgR2rXPXw835+/dfAkq0mCGR3D6Ho/XjJJySFcpcwkxlPZMly0t8/AnrO2 fkFj+jli1UIuPPajCk3xTregd6QDKrYOYt2/9nXUCGYfKkDFzXV0RXQKMdIAVuZZ tIXS7MWOoNknXvCBH+5PBGhEWhlbU/YXgInAVH+2zalLF2unAiMGHoj86R95OZbS z3Rm7EQlxwpNHSs3AFq08UTwBCZOpJADneEjlUCAKEnwaad1gwHbcAopnG+ZGeGR IhA38GEFGw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:32 2026 by rpki-client