$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json) Hash identifier: cfhYkFBYCNNbQr4nl9O0gNqflekF7haqlW3h72R6Aw4= Subject key identifier: EC:CD:1E:E1:67:88:1D:EB:B0:98:CE:9F:2C:1A:57:D8:97:58:7D:3D Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Certificate issuer: /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Certificate serial: 4D0E1C38401A54086A1F28CC1B8E3B34F8EFE555 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft Manifest number: 54 Signing time: Fri 21 Aug 2026 09:49:20 +0000 Manifest this update: Fri 21 Aug 2026 09:44:20 +0000 Manifest next update: Sat 22 Aug 2026 10:34:20 +0000 Files and hashes: 1: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: 3WJMjAf9wJFNgJpbaQG+tTBeRB8Jq62O+9+Ffx8UdP4=) 2: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 10:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:1c:38:40:1a:54:08:6a:1f:28:cc:1b:8e:3b:34:f8:ef:e5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Validity Not Before: Aug 21 09:44:20 2026 GMT Not After : Aug 22 10:34:20 2026 GMT Subject: CN=ECCD1EE167881DEBB098CE9F2C1A57D897587D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:e6:78:bf:58:ff:af:99:64:f6:fe:69:94: 9e:47:3c:80:00:6c:d5:a9:77:14:01:51:78:54:fe: 68:d1:5c:af:29:e6:b1:04:82:31:6b:54:44:e2:99: 0f:fd:71:c3:35:49:7b:84:6e:69:70:40:f0:b2:05: 07:03:25:2c:7a:4b:4b:6a:8a:de:9d:e4:6f:c3:c8: d4:21:6b:8c:77:d4:65:ed:c0:f4:ce:97:4d:de:91: 9e:07:07:82:39:29:da:9f:35:10:9d:07:86:85:6c: cb:86:9b:c3:3a:f9:71:08:2c:25:bd:56:9d:b6:b1: 00:47:ab:83:1b:f2:bf:40:36:b3:3a:41:f5:10:8b: e7:94:1a:4f:be:be:89:7e:cb:e5:58:36:15:f5:4e: 6c:13:cc:e9:39:13:43:22:5f:07:93:14:61:20:95: a2:75:d7:65:c9:ee:58:fd:8e:57:66:b7:ef:6b:25: d8:d8:58:01:52:0f:ac:95:aa:7a:4e:61:80:bb:06: d8:e6:dc:0d:6d:49:19:c0:2b:3f:43:7d:26:25:57: eb:d3:e9:c7:ca:22:15:4d:16:33:73:08:1e:4e:89: 85:8c:bf:44:ed:8f:a0:0c:56:08:d3:74:61:a5:51: 19:67:45:b6:70:db:49:ad:d1:1e:f8:d6:38:05:39: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CD:1E:E1:67:88:1D:EB:B0:98:CE:9F:2C:1A:57:D8:97:58:7D:3D X509v3 Authority Key Identifier: keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:56:da:7d:7c:45:c6:f0:09:a7:5f:99:11:84:a9:4c:ba:44: 39:b7:e7:e7:36:cd:a9:26:b6:2b:ac:5c:f1:99:fd:a2:16:13: 45:23:b9:e8:a1:27:fe:72:ec:c1:5f:1a:18:62:1a:56:f9:4e: 83:f6:2b:48:6b:68:7b:6c:8a:4d:46:b2:a6:32:35:cb:3e:b2: 6d:c1:76:4f:07:fa:9f:03:1c:78:bd:61:0e:e4:27:c3:14:3b: 2b:b4:12:47:e0:93:e0:63:93:75:a0:fa:4b:16:bd:00:da:7f: d0:47:1e:fa:5b:78:63:21:c6:1b:b1:cb:77:7d:84:c4:be:9b: 42:c3:5a:f0:2c:00:07:b4:9d:f3:95:2e:89:3b:fa:11:59:37: 17:16:a9:26:8c:f9:10:bb:32:6a:bc:39:e7:d8:26:ca:cb:a5: 32:34:bd:a2:a4:0c:ee:53:2d:46:16:5f:1c:3d:73:a4:1f:10: cf:58:b8:b8:ba:7d:f0:d1:1c:ba:33:3d:df:15:1e:0e:0e:f3: d9:ef:19:de:1d:56:86:3b:a2:c9:12:ad:8f:52:c8:98:fe:fe: 68:d3:6a:1c:bf:f5:1e:81:c4:10:60:c5:7a:6f:c7:fd:3a:c5: fc:54:bc:44:1a:7c:05:e8:b9:c9:1c:d2:36:ef:9b:a4:77:e4: e6:8b:9d:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTQ4cOEAaVAhqHyjMG447NPjv5VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1 Q0YwODM5MjAeFw0yNjA4MjEwOTQ0MjBaFw0yNjA4MjIxMDM0MjBaMDMxMTAvBgNV BAMTKEVDQ0QxRUUxNjc4ODFERUJCMDk4Q0U5RjJDMUE1N0Q4OTc1ODdEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWuZ4v1j/r5lk9v5plJ5HPIAA bNWpdxQBUXhU/mjRXK8p5rEEgjFrVETimQ/9ccM1SXuEbmlwQPCyBQcDJSx6S0tq it6d5G/DyNQha4x31GXtwPTOl03ekZ4HB4I5KdqfNRCdB4aFbMuGm8M6+XEILCW9 Vp22sQBHq4Mb8r9ANrM6QfUQi+eUGk++vol+y+VYNhX1TmwTzOk5E0MiXweTFGEg laJ112XJ7lj9jldmt+9rJdjYWAFSD6yVqnpOYYC7Btjm3A1tSRnAKz9DfSYlV+vT 6cfKIhVNFjNzCB5OiYWMv0Ttj6AMVgjTdGGlURlnRbZw20mt0R741jgFOUFtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7M0e4WeIHeuwmM6fLBpX2JdYfT0wHwYDVR0j BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3 RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlbafXxFxvAJ p1+ZEYSpTLpEObfn5zbNqSa2K6xc8Zn9ohYTRSO56KEn/nLswV8aGGIaVvlOg/Yr SGtoe2yKTUaypjI1yz6ybcF2Twf6nwMceL1hDuQnwxQ7K7QSR+CT4GOTdaD6Sxa9 ANp/0Ece+lt4YyHGG7HLd32ExL6bQsNa8CwAB7Sd85UuiTv6EVk3FxapJoz5ELsy arw559gmysulMjS9oqQM7lMtRhZfHD1zpB8Qz1i4uLp98NEcujM93xUeDg7z2e8Z 3h1WhjuiyRKtj1LImP7+aNNqHL/1HoHEEGDFem/H/TrF/FS8RBp8Bei5yRzSNu+b pHfk5oudHQ== -----END CERTIFICATE-----Generated at Fri Aug 21 23:11:42 2026 by rpki-client