$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: 0zu8NPZrdKxdP+D+63/C3E18Wa8HQOuxegVkCT4QNWk= Subject key identifier: 34:34:C1:BA:ED:13:90:B4:00:DC:9B:51:3C:9F:AD:99:AB:1C:3D:C6 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 44A2A9FF5D1B7EF4297A4D8DAA4B3FEF68E3E2F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 4C Signing time: Tue 14 Jul 2026 08:50:53 +0000 Manifest this update: Tue 14 Jul 2026 08:45:53 +0000 Manifest next update: Wed 15 Jul 2026 12:18:53 +0000 Files and hashes: 1: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) 2: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: GXEUFlbfYrmM23PRFvwaJsj7rQMhoSDEha+o4WZpJWY=) 3: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a2:a9:ff:5d:1b:7e:f4:29:7a:4d:8d:aa:4b:3f:ef:68:e3:e2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Jul 14 08:45:53 2026 GMT Not After : Jul 15 12:18:53 2026 GMT Subject: CN=3434C1BAED1390B400DC9B513C9FAD99AB1C3DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:9e:8a:67:06:74:1d:df:c9:67:9c:d4:37: dc:1c:13:2e:e0:19:b4:92:70:ff:43:63:02:c4:d4: d8:07:1a:1e:45:c4:37:ad:5a:f5:29:c3:fb:ad:8a: 00:19:e3:c2:5d:08:6f:80:d1:6b:e9:f0:79:4b:a2: 4a:c4:12:46:e5:a7:05:be:d3:6c:ae:1b:2d:08:95: c7:49:e4:d0:d1:72:7e:cf:09:21:fe:fb:96:a1:71: ca:86:77:0d:99:c0:28:16:06:84:86:10:78:4e:ba: 28:6b:d5:a5:b5:1f:2b:27:65:d8:ba:a7:91:87:23: 9b:c0:ed:5d:ca:ce:5b:88:4d:82:a1:d5:d8:6a:79: 88:98:46:af:bf:f6:b3:c8:10:0b:a3:dd:9a:20:b2: 29:0e:3f:d2:d0:e7:69:9b:78:88:e4:d9:66:4d:83: 8a:ac:a3:e6:e3:6d:6e:d6:df:f0:59:eb:0e:15:83: cf:5d:14:c7:19:d4:c9:7f:bb:27:b6:ea:48:e3:10: cf:73:a9:04:f8:36:61:fa:b4:f9:2a:56:97:50:f2: 3d:05:e4:dd:e1:d4:8d:da:08:ba:ad:d6:2d:ed:92: 86:25:f0:dd:62:ff:12:93:87:58:23:a1:fc:1f:9d: 95:42:91:34:b8:34:fd:ed:e3:80:9e:0c:ec:f6:c8: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:34:C1:BA:ED:13:90:B4:00:DC:9B:51:3C:9F:AD:99:AB:1C:3D:C6 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3b:64:50:e6:7f:28:7c:5a:3e:ba:b3:46:3e:39:fa:ee:6a: 43:c8:0b:ce:e7:d4:76:78:4e:07:83:92:69:33:e3:65:24:da: 62:0c:06:0a:ac:7d:fd:f6:6d:c5:4f:93:96:a5:6c:27:82:9f: a7:bc:44:93:ab:95:b2:6d:dc:03:d7:4c:d3:bd:48:4f:3e:aa: 4a:be:9f:4e:58:08:59:b9:c1:ce:ef:a3:9e:99:ee:8f:c2:2e: 5c:c2:cc:4c:da:c8:42:97:7b:8b:25:f0:4f:7b:0e:de:a0:f3: f5:1c:98:98:67:8c:95:84:e0:56:b9:a8:67:33:e2:5b:9d:71: 76:b9:ab:42:d2:0b:db:2d:c6:a3:84:2f:fa:a6:7d:51:c3:3c: a2:f8:87:e3:2a:a5:09:d5:95:cf:4a:86:a6:93:15:59:76:76: 2b:cc:df:da:04:03:48:82:07:4b:80:70:57:10:13:c1:81:9a: c3:38:ab:0f:dd:0b:a8:e0:65:4a:e1:b9:9e:3e:55:60:66:8e: 1a:1c:89:32:d1:d3:d7:38:1b:65:08:7e:ae:78:3f:43:5f:67: 7f:29:23:05:9b:b6:e8:48:9f:39:e1:4b:83:ef:3b:88:3d:94: f2:b6:e4:3a:2e:0d:26:de:7b:6e:f3:1a:3b:bc:3d:0a:93:ee: 93:70:fb:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURKKp/10bfvQpek2Nqks/72jj4vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjA3MTQwODQ1NTNaFw0yNjA3MTUxMjE4NTNaMDMxMTAvBgNV BAMTKDM0MzRDMUJBRUQxMzkwQjQwMERDOUI1MTNDOUZBRDk5QUIxQzNEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZT56KZwZ0Hd/JZ5zUN9wcEy7g GbSScP9DYwLE1NgHGh5FxDetWvUpw/utigAZ48JdCG+A0Wvp8HlLokrEEkblpwW+ 02yuGy0IlcdJ5NDRcn7PCSH++5ahccqGdw2ZwCgWBoSGEHhOuihr1aW1HysnZdi6 p5GHI5vA7V3KzluITYKh1dhqeYiYRq+/9rPIEAuj3ZogsikOP9LQ52mbeIjk2WZN g4qso+bjbW7W3/BZ6w4Vg89dFMcZ1Ml/uye26kjjEM9zqQT4NmH6tPkqVpdQ8j0F 5N3h1I3aCLqt1i3tkoYl8N1i/xKTh1gjofwfnZVCkTS4NP3t44CeDOz2yExRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNDTBuu0TkLQA3JtRPJ+tmascPcYwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTtkUOZ/KHxa PrqzRj45+u5qQ8gLzufUdnhOB4OSaTPjZSTaYgwGCqx9/fZtxU+TlqVsJ4Kfp7xE k6uVsm3cA9dM071ITz6qSr6fTlgIWbnBzu+jnpnuj8IuXMLMTNrIQpd7iyXwT3sO 3qDz9RyYmGeMlYTgVrmoZzPiW51xdrmrQtIL2y3Go4Qv+qZ9UcM8oviH4yqlCdWV z0qGppMVWXZ2K8zf2gQDSIIHS4BwVxATwYGawzirD90LqOBlSuG5nj5VYGaOGhyJ MtHT1zgbZQh+rng/Q19nfykjBZu26EifOeFLg+87iD2U8rbkOi4NJt57bvMaO7w9 CpPuk3D7ig== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:05 2026 by rpki-client