$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json) Hash identifier: h2Lwg/sXTwTs/y3eoFElhHC/Cpl6prjMxqbZqKcKMH0= Subject key identifier: 7F:29:E1:81:0A:91:13:0F:67:7D:CF:1C:13:A0:8D:E8:38:F4:A8:0E Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Certificate serial: 2780FE9E08D8649028340F18A34CC3EBED844DFE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft Manifest number: 17 Signing time: Mon 06 Jul 2026 15:42:07 +0000 Manifest this update: Mon 06 Jul 2026 15:37:07 +0000 Manifest next update: Tue 07 Jul 2026 18:16:07 +0000 Files and hashes: 1: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=) 2: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: R8qmGmAOgViQzQbgjZ2+emaL0xZE1HrIi15vA1y1SDU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 18:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:80:fe:9e:08:d8:64:90:28:34:0f:18:a3:4c:c3:eb:ed:84:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Validity Not Before: Jul 6 15:37:07 2026 GMT Not After : Jul 7 18:16:07 2026 GMT Subject: CN=7F29E1810A91130F677DCF1C13A08DE838F4A80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:c0:da:7e:69:3b:06:66:84:3d:09:26:e8: 9b:00:c9:84:36:c1:f2:12:4b:d2:e5:83:68:3b:f3: a4:ef:4c:31:cb:35:ec:12:6d:8b:25:56:f2:f9:99: 06:92:f0:b2:a8:4b:87:38:c0:23:10:be:ea:24:8b: 8f:07:92:78:3f:d3:1c:89:b6:a3:98:c1:2e:52:f5: bd:6c:74:a9:94:c4:fb:a0:86:a0:93:14:61:20:a6: ab:bb:30:47:54:57:cb:85:1f:a5:5f:d9:3a:99:df: 99:cc:8a:ce:36:d5:8d:2e:cc:66:05:b6:e7:e2:28: bb:04:ab:29:21:15:4b:57:2a:c6:82:2e:66:1b:91: a5:a5:2f:0a:37:fa:e8:52:3d:67:6a:1e:d7:11:ee: 60:8c:cf:b3:df:ca:ad:12:58:9f:55:7a:94:31:0e: 65:d3:5d:99:c5:bf:3e:6f:67:dd:95:58:b2:a0:61: ac:f6:df:e0:76:d8:9d:a6:3f:d9:22:4d:df:86:c0: 11:62:48:57:4e:fc:df:7f:c8:3c:26:54:3a:18:a5: 31:02:b1:76:e0:e4:62:c6:66:8b:b0:7d:bc:fe:21: 12:cc:fa:07:07:a4:95:17:4b:fb:98:aa:e6:28:b6: 5e:dc:88:64:16:00:35:95:84:32:d9:8e:bf:d3:68: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:29:E1:81:0A:91:13:0F:67:7D:CF:1C:13:A0:8D:E8:38:F4:A8:0E X509v3 Authority Key Identifier: keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:e0:81:20:8e:3e:1b:e8:29:14:0b:c4:2c:50:25:ba:ea: 36:94:fb:8d:2d:5e:56:c2:3b:d6:ac:c4:ca:aa:92:70:09:f2: c5:e7:36:11:07:d9:9c:34:87:31:1e:76:55:f1:f4:03:3f:73: d1:08:98:de:52:43:e3:2c:0f:9b:b9:1e:0b:e1:4c:ad:8c:79: 15:c2:69:08:f7:a7:5d:31:ea:fc:66:10:13:5e:35:85:68:81: 76:48:66:6d:13:ac:5c:ca:c7:9c:5a:45:b2:21:7b:74:2b:d0: 2f:7d:d2:c0:eb:5d:26:4b:dc:f5:d5:2e:7b:df:a8:9c:a2:b1: 00:b1:eb:d9:5a:42:46:2c:7c:56:be:3e:fa:51:7b:4a:7c:2c: c1:13:dd:2a:a2:d3:ad:50:b1:1e:69:3a:d2:95:a6:d0:eb:ea: 7d:bf:e3:0d:80:1e:88:ea:28:e0:62:0b:c7:b2:43:d2:b0:91: c6:d1:c4:85:f1:b5:3b:27:9f:70:b3:23:85:5f:13:cf:51:b9: a2:d4:62:d7:c3:d4:3d:c5:8f:ab:28:48:5c:da:e1:26:27:ac: 31:44:76:66:35:1b:22:9e:1b:76:47:62:46:53:21:d7:99:39: d0:38:4c:be:94:ff:15:56:51:b2:2b:38:39:df:38:d6:d8:7c: 1f:8c:85:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ4D+ngjYZJAoNA8Yo0zD6+2ETf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1 Q0YwODM5MjAeFw0yNjA3MDYxNTM3MDdaFw0yNjA3MDcxODE2MDdaMDMxMTAvBgNV BAMTKDdGMjlFMTgxMEE5MTEzMEY2NzdEQ0YxQzEzQTA4REU4MzhGNEE4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRK8Dafmk7BmaEPQkm6JsAyYQ2 wfISS9Llg2g786TvTDHLNewSbYslVvL5mQaS8LKoS4c4wCMQvuoki48Hkng/0xyJ tqOYwS5S9b1sdKmUxPughqCTFGEgpqu7MEdUV8uFH6Vf2TqZ35nMis421Y0uzGYF tufiKLsEqykhFUtXKsaCLmYbkaWlLwo3+uhSPWdqHtcR7mCMz7Pfyq0SWJ9VepQx DmXTXZnFvz5vZ92VWLKgYaz23+B22J2mP9kiTd+GwBFiSFdO/N9/yDwmVDoYpTEC sXbg5GLGZouwfbz+IRLM+gcHpJUXS/uYquYotl7ciGQWADWVhDLZjr/TaGS5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfynhgQqREw9nfc8cE6CN6Dj0qA4wHwYDVR0j BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3 RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWrggSCOPhvo KRQLxCxQJbrqNpT7jS1eVsI71qzEyqqScAnyxec2EQfZnDSHMR52VfH0Az9z0QiY 3lJD4ywPm7keC+FMrYx5FcJpCPenXTHq/GYQE141hWiBdkhmbROsXMrHnFpFsiF7 dCvQL33SwOtdJkvc9dUue9+onKKxALHr2VpCRix8Vr4++lF7SnwswRPdKqLTrVCx Hmk60pWm0Ovqfb/jDYAeiOoo4GILx7JD0rCRxtHEhfG1OyefcLMjhV8Tz1G5otRi 18PUPcWPqyhIXNrhJiesMUR2ZjUbIp4bdkdiRlMh15k50DhMvpT/FVZRsis4Od84 1th8H4yFew== -----END CERTIFICATE-----Generated at Tue Jul 7 10:41:47 2026 by rpki-client