$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft (raw, json) Hash identifier: WUwyIMCf7IRdax1+mIOW94sDE6caol1EbqzJcZutL7U= Subject key identifier: 55:2B:7B:FC:64:08:6D:E0:A0:17:4F:B8:D7:08:4E:12:23:41:D0:C3 Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Certificate issuer: /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Certificate serial: 3DCFC66C8BE454426C9904D97858B2CEC4D6BF56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft Manifest number: 6F Signing time: Thu 03 Sep 2026 09:38:32 +0000 Manifest this update: Thu 03 Sep 2026 09:33:32 +0000 Manifest next update: Sun 06 Sep 2026 11:32:32 +0000 Files and hashes: 1: 3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (hash: 1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=) 2: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl (hash: P7yURq2X5bo5MkJmLoSOUoIsNIsx7p4lFWypSYHpLcs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cf:c6:6c:8b:e4:54:42:6c:99:04:d9:78:58:b2:ce:c4:d6:bf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Validity Not Before: Sep 3 09:33:32 2026 GMT Not After : Sep 6 11:32:32 2026 GMT Subject: CN=552B7BFC64086DE0A0174FB8D7084E122341D0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:9a:ab:71:c7:30:c9:30:a5:7f:0c:2c:1a: ef:9d:30:c8:e1:ae:d3:9e:74:31:fc:7e:85:60:5d: b8:7a:74:3f:8e:e7:d9:8f:9d:eb:ce:04:42:94:70: f9:be:d5:cb:bb:bf:bf:6d:4e:e9:35:96:eb:4b:84: fb:38:14:42:23:4a:32:5e:f2:de:3a:06:db:55:dd: cc:18:06:a8:57:5a:9e:10:52:84:eb:75:0c:e1:3e: bc:dd:e8:0f:7e:9d:14:8d:f0:f7:1d:4f:73:f1:3b: 3c:86:d0:b9:17:08:b1:10:ea:e5:dd:01:44:99:c5: 1e:3e:4d:c1:82:89:6b:9c:7a:b4:1e:dd:0c:18:ad: 38:7f:ff:72:bc:6a:c2:19:e6:50:23:18:bd:5e:2c: 60:99:7e:d1:d9:d0:20:35:15:19:c1:4a:e7:dc:a2: 6b:6f:24:2d:fa:95:37:3c:b8:48:86:b3:54:55:02: 27:00:29:0a:ea:b8:92:13:79:44:09:3f:b0:9f:a0: 4e:01:5b:7e:e1:4c:c4:89:67:7e:97:ce:41:dd:64: 68:32:2b:3f:3d:c3:37:f9:7c:0c:64:ff:18:1f:85: 9e:dd:82:57:c2:cb:e8:b8:f1:fc:11:69:c8:3a:35: a5:2d:03:8c:37:73:71:b7:c4:91:10:43:87:81:1f: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2B:7B:FC:64:08:6D:E0:A0:17:4F:B8:D7:08:4E:12:23:41:D0:C3 X509v3 Authority Key Identifier: keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:20:50:91:94:4c:33:5a:8b:5f:31:46:9c:52:ee:52:56:f7: 06:fd:8c:67:c3:48:a0:56:2c:ea:c4:6c:c8:c8:09:13:34:a9: 5d:02:41:b7:9d:66:97:87:60:d0:2e:0b:8d:28:08:01:e9:a1: c0:27:19:59:7b:5d:5f:cf:c1:ce:cc:1a:5b:46:88:21:08:9f: 91:ba:e6:36:cd:59:1f:f8:12:63:c1:d0:75:66:22:b2:c5:7a: 6b:33:3a:14:d6:ea:83:6d:d9:d1:37:6d:47:7e:ad:95:da:79: cc:cd:d5:2f:2b:49:35:64:e5:34:cd:ef:2e:f5:2f:ea:b4:d4: 6a:2c:e4:6d:9a:c4:cd:77:20:5f:e3:2d:6b:a1:1e:c2:7d:7a: d8:69:7d:d4:77:1e:cc:b3:fb:94:14:69:38:34:b8:b1:94:64: 07:4c:fe:95:7c:b8:eb:ad:4b:62:ad:85:69:eb:6e:6f:fa:27: 1e:2a:e2:c1:ba:ca:52:9f:7f:f4:64:8a:db:fb:70:87:f4:cc: 4e:25:3b:38:20:74:4d:55:70:5d:24:29:ef:2c:25:d5:e0:2a: c3:39:7c:e8:2a:b5:d0:d3:7f:65:a6:ac:c2:7d:73:7f:48:18: 02:24:91:e7:3c:d2:40:a7:07:a7:9d:50:ed:f1:a8:3a:d6:97: 65:5c:78:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPc/GbIvkVEJsmQTZeFiyzsTWv1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEw RTExNEExQzAeFw0yNjA5MDMwOTMzMzJaFw0yNjA5MDYxMTMyMzJaMDMxMTAvBgNV BAMTKDU1MkI3QkZDNjQwODZERTBBMDE3NEZCOEQ3MDg0RTEyMjM0MUQwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivpqrcccwyTClfwwsGu+dMMjh rtOedDH8foVgXbh6dD+O59mPnevOBEKUcPm+1cu7v79tTuk1lutLhPs4FEIjSjJe 8t46BttV3cwYBqhXWp4QUoTrdQzhPrzd6A9+nRSN8PcdT3PxOzyG0LkXCLEQ6uXd AUSZxR4+TcGCiWucerQe3QwYrTh//3K8asIZ5lAjGL1eLGCZftHZ0CA1FRnBSufc omtvJC36lTc8uEiGs1RVAicAKQrquJITeUQJP7CfoE4BW37hTMSJZ36XzkHdZGgy Kz89wzf5fAxk/xgfhZ7dglfCy+i48fwRacg6NaUtA4w3c3G3xJEQQ4eBH6TNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVSt7/GQIbeCgF0+41whOEiNB0MMwHwYDVR0j BBgwFoAUTvX6uVlKHUa5/KLO+v0S6g4RShwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAxNjAzNTQ0MzE0Njc3NS8wLzRFRjVGQUI5NTk0QTFENDZCOUZDQTJDRUZBRkQx MkVBMEUxMTRBMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMTYwMzU0NDMxNDY3NzUvMC80RUY1RkFCOTU5NEEx RDQ2QjlGQ0EyQ0VGQUZEMTJFQTBFMTE0QTFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCBQkZRMM1qL XzFGnFLuUlb3Bv2MZ8NIoFYs6sRsyMgJEzSpXQJBt51ml4dg0C4LjSgIAemhwCcZ WXtdX8/BzswaW0aIIQifkbrmNs1ZH/gSY8HQdWYissV6azM6FNbqg23Z0TdtR36t ldp5zM3VLytJNWTlNM3vLvUv6rTUaizkbZrEzXcgX+Mta6Eewn162Gl91HcezLP7 lBRpODS4sZRkB0z+lXy4661LYq2Faetub/onHiriwbrKUp9/9GSK2/twh/TMTiU7 OCB0TVVwXSQp7ywl1eAqwzl86Cq10NN/Zaaswn1zf0gYAiSR5zzSQKcHp51Q7fGo OtaXZVx4GQ== -----END CERTIFICATE-----Generated at Sat Sep 5 05:27:20 2026 by rpki-client