$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json) Hash identifier: 0+LIhtqY25T/rhuWz9OvtB5Pgv7hItz9b4IMkS1EQ3k= Subject key identifier: E2:84:96:EF:23:AF:E0:47:CF:28:5B:75:38:2E:94:2A:98:00:95:E2 Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Certificate serial: 46030A3BC2425BE788F677C3F4F5DFFBCEF0F761 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft Manifest number: 4A Signing time: Mon 27 Jul 2026 08:18:42 +0000 Manifest this update: Mon 27 Jul 2026 08:13:42 +0000 Manifest next update: Tue 28 Jul 2026 08:33:42 +0000 Files and hashes: 1: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: 0lMfK32VHEeqkwf7DTBBBVetRwLZUb1yzY/EEfem7mQ=) 2: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=) 3: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=) 4: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:03:0a:3b:c2:42:5b:e7:88:f6:77:c3:f4:f5:df:fb:ce:f0:f7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Validity Not Before: Jul 27 08:13:42 2026 GMT Not After : Jul 28 08:33:42 2026 GMT Subject: CN=E28496EF23AFE047CF285B75382E942A980095E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:1c:a2:63:d4:cd:3e:f8:4d:31:f1:13:a6: 48:46:09:21:7a:5f:24:0e:c4:08:ee:00:d1:31:a4: 12:58:9a:be:d9:b2:9e:e9:69:4e:5d:78:d5:a7:32: f9:87:d5:b4:68:12:2e:25:af:90:55:a3:f5:ce:4a: e3:97:4a:3b:b1:76:6a:33:6b:de:b8:5a:3f:22:c3: 06:bd:ac:6f:4f:b7:c8:2f:0b:f5:ac:70:81:f9:a1: 81:61:22:7b:2d:6f:60:be:43:6c:c6:f5:7e:84:c2: 16:23:e3:db:12:9b:b8:f9:0f:b3:19:c0:1a:28:13: 48:7a:66:33:07:34:d7:4a:4e:8e:ec:a3:b2:1d:7d: 3c:16:4e:80:42:6f:e0:de:12:f2:a1:51:62:af:ce: 98:dd:bc:c5:24:29:f6:cd:85:56:82:df:8d:22:2d: 4d:77:33:e9:98:ed:f4:c0:57:af:eb:b3:ce:fb:2b: 1d:48:16:b1:af:11:fe:01:96:a2:0a:23:c6:59:45: 8d:0d:24:f4:5a:3c:15:c4:57:7c:30:9f:2f:88:6e: e0:c3:af:44:d5:df:6f:75:e3:e9:b2:e1:bd:fc:b1: 80:c0:e1:03:e1:dc:41:40:d7:ff:51:90:01:27:d5: 6e:82:30:e6:6c:c2:e5:1f:ea:db:06:d1:a9:82:7c: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:84:96:EF:23:AF:E0:47:CF:28:5B:75:38:2E:94:2A:98:00:95:E2 X509v3 Authority Key Identifier: keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:49:2b:22:cb:24:fd:c4:5a:1b:34:44:f1:a6:13:3c:2a:19: fb:64:45:54:c7:1a:d6:0c:f8:e3:ba:96:d8:9c:c4:6f:35:97: 13:c0:88:e2:5f:d7:16:ee:4a:56:81:1b:80:6d:58:57:0a:80: 42:0e:5a:e1:4a:2a:a6:d2:f2:64:3c:d7:5b:e3:71:a4:6b:b9: d5:90:f6:d6:7a:fa:39:f9:57:e0:9e:b7:aa:58:30:1c:a0:b9: 86:6f:83:f7:ad:e1:09:c1:48:d1:c1:9b:32:b1:cc:c6:97:d3: 65:35:9d:3a:d5:cc:13:28:7f:bc:78:f7:1e:2a:6d:e8:b9:e6: 44:f5:c9:1b:7f:1f:5b:29:d9:83:02:08:7a:30:9e:f2:8e:6c: 06:83:57:63:de:1c:68:e2:54:4a:f6:49:8d:4c:fc:ed:9d:55: 26:b9:57:05:af:85:41:51:c1:32:58:fd:14:c0:b5:e3:91:5e: 30:cd:e3:a1:e0:67:22:2c:44:b0:cb:03:a1:d3:05:a9:21:39: a0:18:17:61:ef:34:88:a6:0e:96:a6:0d:ea:87:d8:28:79:3a: 4f:ca:cf:67:8a:9a:b6:31:9e:38:d0:42:ab:8b:7f:f2:d8:98: 5f:d0:fe:38:08:59:38:5c:1e:72:4d:1a:db:87:cc:a8:b4:ae: 64:13:33:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURgMKO8JCW+eI9nfD9PXf+87w92EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5 OEY4NjQyRTAeFw0yNjA3MjcwODEzNDJaFw0yNjA3MjgwODMzNDJaMDMxMTAvBgNV BAMTKEUyODQ5NkVGMjNBRkUwNDdDRjI4NUI3NTM4MkU5NDJBOTgwMDk1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWxyiY9TNPvhNMfETpkhGCSF6 XyQOxAjuANExpBJYmr7Zsp7paU5deNWnMvmH1bRoEi4lr5BVo/XOSuOXSjuxdmoz a964Wj8iwwa9rG9Pt8gvC/WscIH5oYFhInstb2C+Q2zG9X6EwhYj49sSm7j5D7MZ wBooE0h6ZjMHNNdKTo7so7IdfTwWToBCb+DeEvKhUWKvzpjdvMUkKfbNhVaC340i LU13M+mY7fTAV6/rs877Kx1IFrGvEf4BlqIKI8ZZRY0NJPRaPBXEV3wwny+IbuDD r0TV32914+my4b38sYDA4QPh3EFA1/9RkAEn1W6CMOZswuUf6tsG0amCfHMRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4oSW7yOv4EfPKFt1OC6UKpgAleIwHwYDVR0j BBgwFoAU//lvixPJNqwZettDjifE6Zj4ZC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ1Nzc0MTMwNjQyOTQ2My8wL0ZGRjk2RjhCMTNDOTM2QUMxOTdBREI0MzhFMjdD NEU5OThGODY0MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NTc3NDEzMDY0Mjk0NjMvMC9GRkY5NkY4QjEzQzkz NkFDMTk3QURCNDM4RTI3QzRFOTk4Rjg2NDJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEkrIssk/cRa GzRE8aYTPCoZ+2RFVMca1gz447qW2JzEbzWXE8CI4l/XFu5KVoEbgG1YVwqAQg5a 4UoqptLyZDzXW+NxpGu51ZD21nr6OflX4J63qlgwHKC5hm+D963hCcFI0cGbMrHM xpfTZTWdOtXMEyh/vHj3Hipt6LnmRPXJG38fWynZgwIIejCe8o5sBoNXY94caOJU SvZJjUz87Z1VJrlXBa+FQVHBMlj9FMC145FeMM3joeBnIixEsMsDodMFqSE5oBgX Ye80iKYOlqYN6ofYKHk6T8rPZ4qatjGeONBCq4t/8tiYX9D+OAhZOFweck0a24fM qLSuZBMzdg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:20:16 2026 by rpki-client