$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft File: 4D766E2BA41D99B155DD457741DB970EC3007E71.mft (raw, json) Hash identifier: jPPt9oXw3YeWGXDWCc0XLDpG6mvYbXESSHc4Df7avM4= Subject key identifier: A4:CF:0E:08:42:AD:38:D4:03:70:DE:DE:4A:29:2A:89:66:75:2D:5D Authority key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Certificate issuer: /CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Certificate serial: 63F9224A756463E393D411301AB91694B9498899 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft Manifest number: 29 Signing time: Tue 14 Jul 2026 17:36:48 +0000 Manifest this update: Tue 14 Jul 2026 17:31:48 +0000 Manifest next update: Wed 15 Jul 2026 19:14:48 +0000 Files and hashes: 1: 3130332e3234312e39352e302f32342d3234203d3e203539303130.roa (hash: PSe7EbgdWOhWUl3Vwo/B3/8fvz4znjeR8pQCfVHvk/g=) 2: 4D766E2BA41D99B155DD457741DB970EC3007E71.crl (hash: KLXQjPznu8Gp0/O8AMgEyVsiOsM0Ab0lvBrU08AfA6o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f9:22:4a:75:64:63:e3:93:d4:11:30:1a:b9:16:94:b9:49:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Validity Not Before: Jul 14 17:31:48 2026 GMT Not After : Jul 15 19:14:48 2026 GMT Subject: CN=A4CF0E0842AD38D40370DEDE4A292A8966752D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:1c:28:05:79:03:38:f5:27:00:7e:22:4d: 5b:b9:a4:d9:9d:0c:bc:5d:41:1f:59:90:ef:a1:fa: e9:44:8b:37:a8:8f:05:3e:d6:78:68:7e:ba:ce:8d: 76:47:3c:f9:08:5d:e2:d0:b8:75:92:aa:d5:bb:09: e4:59:6e:ae:e1:4f:40:ee:c2:3d:8e:ea:b9:58:b2: 1f:31:09:16:43:9a:39:87:b4:ab:f7:b4:fb:6d:3c: b8:cf:39:dc:70:ad:41:8f:d8:99:af:34:38:37:29: db:ce:6d:04:68:dc:6a:c8:77:48:91:90:71:02:59: 39:38:f9:9d:34:d1:15:f1:90:e0:6c:db:50:8b:82: 8b:c8:76:e2:c0:05:2e:d6:21:d7:9c:ed:d6:a8:be: 1e:2b:11:63:7c:44:28:29:69:f8:7c:03:4c:47:7a: 5b:38:51:0e:60:86:c0:7d:cc:bf:90:e8:72:33:46: 3d:38:d8:a4:62:12:21:8c:e5:6d:c9:40:4a:53:e0: 2b:34:ac:ff:bf:0d:18:b0:1a:7f:9b:d9:4a:fc:5c: c2:52:ef:bb:e1:1a:3d:a1:43:b5:01:f4:31:38:fb: 06:8f:60:7b:f3:5e:04:f8:50:e1:c1:33:7b:04:8d: fd:91:53:b2:71:90:be:9c:33:55:96:61:c8:aa:4f: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CF:0E:08:42:AD:38:D4:03:70:DE:DE:4A:29:2A:89:66:75:2D:5D X509v3 Authority Key Identifier: keyid:4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:43:ee:4f:84:d1:22:3b:d4:af:e9:b5:44:5a:2a:4a:87: 0f:de:03:98:3b:38:b6:f5:bf:e5:a3:87:9d:ce:86:2c:ea:f6: 69:ef:38:ae:00:20:f7:2e:91:b0:c7:69:9c:29:d5:ff:95:a0: c3:1e:8a:ab:1e:8c:12:fa:64:e4:57:e4:22:1e:de:65:14:72: 89:cd:e0:76:62:05:65:cc:98:f3:c8:a4:12:e5:9f:1f:a5:38: 95:62:6a:8b:4a:be:14:0f:fe:4f:48:9a:36:3a:57:ec:95:82: 4b:25:c6:d3:ed:c7:f5:60:d4:0e:f7:19:87:a2:64:19:3a:28: c7:87:33:1d:3b:d0:ff:42:ae:3f:cc:26:73:31:24:0e:1e:77: 00:bf:f2:f3:fd:0a:b9:e2:a8:2e:ba:8c:5e:7e:9f:a1:93:ec: 17:54:36:b8:b6:8b:08:2c:a8:d6:da:b2:f4:b7:54:25:a0:cc: 76:94:8c:f0:80:34:fa:9d:d6:12:c0:de:a1:dd:4b:f8:9f:f9: 89:67:9a:51:14:d8:bc:f7:68:eb:ad:b8:77:bc:67:23:f4:ab: 34:12:55:be:4b:47:12:11:30:6a:26:d0:fb:2b:fb:e7:35:b3: fc:b9:ed:d7:20:59:ba:84:da:61:f2:c7:c1:cc:b7:5b:19:92: c2:cc:e5:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY/kiSnVkY+OT1BEwGrkWlLlJiJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVD MzAwN0U3MTAeFw0yNjA3MTQxNzMxNDhaFw0yNjA3MTUxOTE0NDhaMDMxMTAvBgNV BAMTKEE0Q0YwRTA4NDJBRDM4RDQwMzcwREVERTRBMjkyQTg5NjY3NTJENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMBwoBXkDOPUnAH4iTVu5pNmd DLxdQR9ZkO+h+ulEizeojwU+1nhofrrOjXZHPPkIXeLQuHWSqtW7CeRZbq7hT0Du wj2O6rlYsh8xCRZDmjmHtKv3tPttPLjPOdxwrUGP2JmvNDg3KdvObQRo3GrId0iR kHECWTk4+Z000RXxkOBs21CLgovIduLABS7WIdec7daovh4rEWN8RCgpafh8A0xH els4UQ5ghsB9zL+Q6HIzRj042KRiEiGM5W3JQEpT4Cs0rP+/DRiwGn+b2Ur8XMJS 77vhGj2hQ7UB9DE4+waPYHvzXgT4UOHBM3sEjf2RU7JxkL6cM1WWYciqT/yXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpM8OCEKtONQDcN7eSikqiWZ1LV0wHwYDVR0j BBgwFoAUTXZuK6QdmbFV3UV3QduXDsMAfnEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc5OTI3MTEyNzE1NDcxMS8wLzRENzY2RTJCQTQxRDk5QjE1NURENDU3NzQxREI5 NzBFQzMwMDdFNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3OTkyNzExMjcxNTQ3MTEvMC80RDc2NkUyQkE0MUQ5 OUIxNTVERDQ1Nzc0MURCOTcwRUMzMDA3RTcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+tD7k+E0SI7 1K/ptURaKkqHD94DmDs4tvW/5aOHnc6GLOr2ae84rgAg9y6RsMdpnCnV/5Wgwx6K qx6MEvpk5FfkIh7eZRRyic3gdmIFZcyY88ikEuWfH6U4lWJqi0q+FA/+T0iaNjpX 7JWCSyXG0+3H9WDUDvcZh6JkGToox4czHTvQ/0KuP8wmczEkDh53AL/y8/0KueKo LrqMXn6foZPsF1Q2uLaLCCyo1tqy9LdUJaDMdpSM8IA0+p3WEsDeod1L+J/5iWea URTYvPdo6624d7xnI/SrNBJVvktHEhEwaibQ+yv75zWz/Lnt1yBZuoTaYfLHwcy3 WxmSwszlqw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:00 2026 by rpki-client