$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft File: 4D766E2BA41D99B155DD457741DB970EC3007E71.mft (raw, json) Hash identifier: aJALb2cySxhn7jwgbv4Ld5olO61zIaaxKNE2ahUgsZo= Subject key identifier: F5:29:DA:89:BF:18:DE:18:44:05:EC:1F:66:D1:A0:C5:F6:F0:7C:F5 Authority key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Certificate issuer: /CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Certificate serial: 2D746ED7F336958367B249F697E373C374C9F723 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft Manifest number: 65 Signing time: Fri 28 Aug 2026 06:48:07 +0000 Manifest this update: Fri 28 Aug 2026 06:43:07 +0000 Manifest next update: Mon 31 Aug 2026 16:13:07 +0000 Files and hashes: 1: 4D766E2BA41D99B155DD457741DB970EC3007E71.crl (hash: X71lShlmDoOEB39odvfYwekxCASuFutHPcNaaor0+ew=) 2: 3130332e3234312e39352e302f32342d3234203d3e203539303130.roa (hash: PSe7EbgdWOhWUl3Vwo/B3/8fvz4znjeR8pQCfVHvk/g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:6e:d7:f3:36:95:83:67:b2:49:f6:97:e3:73:c3:74:c9:f7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Validity Not Before: Aug 28 06:43:07 2026 GMT Not After : Aug 31 16:13:07 2026 GMT Subject: CN=F529DA89BF18DE184405EC1F66D1A0C5F6F07CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:11:97:63:1b:e8:9c:02:a1:fa:b9:d3:ad: 77:03:bd:54:75:f6:4b:50:fc:32:60:11:4b:a6:a7: 91:66:95:c1:d1:e9:72:34:d8:c5:5f:f0:77:2b:dc: e5:fb:68:2c:a4:7c:bd:6d:15:9f:46:af:01:6f:30: 81:ad:ff:4c:23:4e:76:83:83:cd:ec:49:ca:df:d6: 21:84:11:1f:18:09:cb:99:0c:e1:21:3e:77:7e:0c: 78:38:ac:8b:f3:b4:80:87:71:6a:ce:53:36:ac:31: 00:d8:c8:fb:6a:dd:d5:dc:9d:25:20:41:c4:2b:73: b8:57:51:e1:6b:7d:82:cd:17:45:bb:60:30:b9:23: f9:82:65:b9:64:8c:60:ae:58:02:09:91:43:56:5c: 6a:2c:d9:2c:24:31:79:e8:a3:53:47:9f:00:58:65: a6:c4:a4:bf:ac:0e:29:25:78:77:68:6c:54:dc:b0: 1e:c3:7a:29:50:66:b1:97:e0:ab:e9:27:07:1d:33: 13:1c:2c:c0:b8:e3:7e:99:a5:a3:ba:be:79:f2:7a: 61:22:ad:44:55:8f:31:ec:83:20:01:82:e4:f0:00: 11:7d:3a:c0:b5:c7:8b:74:48:ad:85:4d:d9:19:cf: 8b:71:da:7e:90:0c:56:7c:8e:81:b6:dc:e6:fb:78: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:29:DA:89:BF:18:DE:18:44:05:EC:1F:66:D1:A0:C5:F6:F0:7C:F5 X509v3 Authority Key Identifier: keyid:4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:74:7c:69:e6:e8:db:e6:86:bf:3f:75:13:0d:46:e6:fb: 16:86:37:df:ad:f1:c9:7e:ff:16:57:ca:57:27:d9:36:56:7e: 07:cf:98:58:1b:d4:a9:20:46:61:e4:1b:78:57:6a:45:7b:20: 6e:23:0a:b5:6b:68:41:02:36:c8:cb:92:dc:83:e8:d6:5f:77: 48:f6:fe:a2:77:5b:e6:cb:2d:9d:dd:28:04:b4:57:9e:d2:73: 74:e7:cc:50:07:a0:0e:4d:9f:33:50:a7:6a:97:a2:3b:db:50: 09:eb:84:35:38:8d:26:24:9c:8c:1d:13:55:b8:b7:72:08:7d: 55:eb:5f:ae:ad:fa:14:3f:ee:41:18:fb:c9:2c:9d:2b:5b:c0: 8b:f1:16:55:d8:7c:48:28:e3:d8:d3:cc:1d:12:47:1a:41:94: 37:75:ee:4b:96:e6:f2:e6:ce:26:63:fe:91:ad:49:9b:d5:8b: 09:48:39:a8:9e:17:40:17:6e:28:c9:89:d8:10:ab:fa:e1:2f: 96:7d:9b:05:df:fc:a0:f9:b5:02:0c:fd:2b:bb:13:32:df:c9: b3:2d:c5:45:5e:b1:46:8a:48:35:31:1c:d1:c9:7d:0d:15:7f: 6c:73:f7:42:21:ab:29:8b:fa:3b:16:99:e4:62:ad:66:25:7e: a9:d0:60:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULXRu1/M2lYNnskn2l+Nzw3TJ9yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVD MzAwN0U3MTAeFw0yNjA4MjgwNjQzMDdaFw0yNjA4MzExNjEzMDdaMDMxMTAvBgNV BAMTKEY1MjlEQTg5QkYxOERFMTg0NDA1RUMxRjY2RDFBMEM1RjZGMDdDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSBGXYxvonAKh+rnTrXcDvVR1 9ktQ/DJgEUump5FmlcHR6XI02MVf8Hcr3OX7aCykfL1tFZ9GrwFvMIGt/0wjTnaD g83sScrf1iGEER8YCcuZDOEhPnd+DHg4rIvztICHcWrOUzasMQDYyPtq3dXcnSUg QcQrc7hXUeFrfYLNF0W7YDC5I/mCZblkjGCuWAIJkUNWXGos2SwkMXnoo1NHnwBY ZabEpL+sDikleHdobFTcsB7DeilQZrGX4KvpJwcdMxMcLMC4436ZpaO6vnnyemEi rURVjzHsgyABguTwABF9OsC1x4t0SK2FTdkZz4tx2n6QDFZ8joG23Ob7eCGdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9Snaib8Y3hhEBewfZtGgxfbwfPUwHwYDVR0j BBgwFoAUTXZuK6QdmbFV3UV3QduXDsMAfnEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc5OTI3MTEyNzE1NDcxMS8wLzRENzY2RTJCQTQxRDk5QjE1NURENDU3NzQxREI5 NzBFQzMwMDdFNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3OTkyNzExMjcxNTQ3MTEvMC80RDc2NkUyQkE0MUQ5 OUIxNTVERDQ1Nzc0MURCOTcwRUMzMDA3RTcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX710fGnm6Nvm hr8/dRMNRub7FoY3363xyX7/FlfKVyfZNlZ+B8+YWBvUqSBGYeQbeFdqRXsgbiMK tWtoQQI2yMuS3IPo1l93SPb+ondb5sstnd0oBLRXntJzdOfMUAegDk2fM1Cnapei O9tQCeuENTiNJiScjB0TVbi3cgh9Vetfrq36FD/uQRj7ySydK1vAi/EWVdh8SCjj 2NPMHRJHGkGUN3XuS5bm8ubOJmP+ka1Jm9WLCUg5qJ4XQBduKMmJ2BCr+uEvln2b Bd/8oPm1Agz9K7sTMt/Jsy3FRV6xRopINTEc0cl9DRV/bHP3QiGrKYv6OxaZ5GKt ZiV+qdBgqg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:09:27 2026 by rpki-client