$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json) Hash identifier: ehFWQ/kteJBxyq5yxL0pk31aLvRv6a/23eBicuwr1cw= Subject key identifier: 22:0F:EF:26:81:42:01:0C:D3:F3:3E:25:6E:37:55:2C:37:AB:34:68 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 65B7B4CCD67D346A1E7C5CB1318D572A342BA0D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft Manifest number: B4 Signing time: Tue 14 Jul 2026 03:40:20 +0000 Manifest this update: Tue 14 Jul 2026 03:35:20 +0000 Manifest next update: Wed 15 Jul 2026 03:47:20 +0000 Files and hashes: 1: AS4837.roa (hash: I5t5JfcDj/REI/z+GABxYf6Q1TadCnhkOopdPXIylT8=) 2: AS0.roa (hash: Nw5NQ6ewh24BFR5ycVXUn2J9JL+TMYJsnAclxh0kHEE=) 3: AS141771.roa (hash: acL6A9FBOTix6vMOO6LaaytfCTJ8VG74FAh1dtGJsNE=) 4: AS24547.roa (hash: aThkMpxD23pAJVWAABx08oowIUHQmo7KBJIsg/LhuK4=) 5: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: Y0DViFC8zlFR5kkto+FncKEaVv/bH678gyElc4j2cOk=) 6: AS63619.roa (hash: QOlK6KO1k6Nwt+xpM26BlAcJBueP88oFFRGZhMwc3os=) 7: AS4811.roa (hash: 32TasS6+fouFzGeDGV29KDnDHGS2EZZkaSUqH0j9Hs4=) 8: AS146781.roa (hash: CYdQQlwdflyA5j801ct6fQ7pTh27hC+nUnGbzXcwxdY=) 9: AS17621.roa (hash: FgRK6EJ93pTm3fStKaZDsp5WoaDJ+ZV/uwIlWcN1CfE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b7:b4:cc:d6:7d:34:6a:1e:7c:5c:b1:31:8d:57:2a:34:2b:a0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jul 14 03:35:20 2026 GMT Not After : Jul 15 03:47:20 2026 GMT Subject: CN=220FEF268142010CD3F33E256E37552C37AB3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:f7:b5:5c:73:25:19:7f:3e:4b:06:6a:07: 90:6a:b1:0e:55:fb:3c:8a:66:db:dd:e2:f5:61:92: b4:8f:49:cb:c1:35:7e:92:86:1d:63:9e:21:d5:a6: 12:37:b7:0f:a7:a6:90:0f:bc:47:78:29:82:08:2c: 79:dc:3e:3e:7a:9e:36:0a:17:5e:c2:f8:a4:c6:62: 7d:dd:50:20:5c:1e:db:09:b9:c4:f6:b8:f3:39:ec: 54:49:13:17:15:1e:9c:38:5d:8e:3f:78:d8:21:7e: b4:4f:a6:96:b2:37:13:f0:cd:19:1d:75:cf:1a:7e: cc:58:01:d7:ba:ba:b6:b4:86:7e:f5:26:4b:2d:7a: 89:86:da:9c:84:4d:04:86:7f:4e:bb:ec:97:d8:a1: 27:ff:75:e6:e1:81:4c:ca:8b:89:2b:eb:79:aa:38: b4:4b:88:68:14:48:7d:f7:ff:3a:bc:0e:1f:95:72: 68:17:4c:c5:13:74:c9:b6:31:18:51:ae:17:af:54: 24:2c:b4:87:08:09:d9:05:7d:91:8c:80:4b:a1:68: 98:88:4a:40:6b:eb:24:96:ba:53:86:64:90:55:d6: ca:b2:c7:71:70:34:8d:ae:79:3c:8f:77:52:05:ea: ed:54:6c:71:b2:20:ca:c4:2e:6e:79:6c:06:0c:d5: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:EF:26:81:42:01:0C:D3:F3:3E:25:6E:37:55:2C:37:AB:34:68 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:12:20:d8:2a:83:8a:82:22:07:89:7c:af:b3:b8:37:cc: ce:bb:93:79:ee:44:e7:99:3f:7a:f0:6f:0a:8c:70:56:30:a6: 79:ce:86:06:32:ed:d8:22:fd:34:5a:b4:47:32:7e:d6:c5:a5: d7:d1:05:af:7b:a8:29:39:a4:39:e4:d3:1d:52:7d:15:f2:05: c6:c1:d9:fe:ff:58:0c:09:a9:f6:74:50:f0:03:c6:34:dc:6f: 47:69:ef:19:25:9b:93:0f:0b:22:cb:e5:54:d6:6d:b2:56:cc: ff:c2:7c:fd:f9:ef:f1:63:90:1c:06:a2:fe:98:a7:0b:96:d8: 0b:81:2a:16:d4:6d:b1:91:3f:44:74:99:ed:b9:ec:c5:ec:86: 8e:cb:78:3e:69:d4:c9:21:3b:b9:5a:e1:8e:6d:90:02:af:da: 2c:27:f1:3f:b2:c2:3b:fd:35:d4:c2:ef:50:c9:0c:b6:cb:91: 26:5d:6b:a0:c7:9d:a0:23:50:aa:86:98:9b:5d:65:99:8d:1e: c4:3e:69:b2:d0:b9:60:32:a8:6b:fe:54:01:c0:1c:0d:aa:b8: 83:d0:91:74:8d:49:3b:05:06:c2:ca:66:bd:ef:77:e5:ab:2f: 0a:16:b3:a9:68:7f:f3:a9:03:e1:3e:93:99:50:ef:54:d1:8f: 45:e3:76:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZbe0zNZ9NGoefFyxMY1XKjQroNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA3MTQwMzM1MjBaFw0yNjA3MTUwMzQ3MjBaMDMxMTAvBgNV BAMTKDIyMEZFRjI2ODE0MjAxMENEM0YzM0UyNTZFMzc1NTJDMzdBQjM0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLve1XHMlGX8+SwZqB5BqsQ5V +zyKZtvd4vVhkrSPScvBNX6Shh1jniHVphI3tw+nppAPvEd4KYIILHncPj56njYK F17C+KTGYn3dUCBcHtsJucT2uPM57FRJExcVHpw4XY4/eNghfrRPppayNxPwzRkd dc8afsxYAde6ura0hn71JksteomG2pyETQSGf0677JfYoSf/debhgUzKi4kr63mq OLRLiGgUSH33/zq8Dh+VcmgXTMUTdMm2MRhRrhevVCQstIcICdkFfZGMgEuhaJiI SkBr6ySWulOGZJBV1sqyx3FwNI2ueTyPd1IF6u1UbHGyIMrELm55bAYM1ZO9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIg/vJoFCAQzT8z4lbjdVLDerNGgwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1 MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArD8SINgqg4qC IgeJfK+zuDfMzruTee5E55k/evBvCoxwVjCmec6GBjLt2CL9NFq0RzJ+1sWl19EF r3uoKTmkOeTTHVJ9FfIFxsHZ/v9YDAmp9nRQ8APGNNxvR2nvGSWbkw8LIsvlVNZt slbM/8J8/fnv8WOQHAai/pinC5bYC4EqFtRtsZE/RHSZ7bnsxeyGjst4PmnUySE7 uVrhjm2QAq/aLCfxP7LCO/011MLvUMkMtsuRJl1roMedoCNQqoaYm11lmY0exD5p stC5YDKoa/5UAcAcDaq4g9CRdI1JOwUGwspmve935asvChazqWh/86kD4T6TmVDv VNGPReN2jw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:12 2026 by rpki-client