$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: TjqAfZXeqflgmqw+4556zF1e3QSNBTprQ/mubRJFm9c= Subject key identifier: 70:32:F0:E0:EE:AB:92:7A:B5:B0:E1:0C:56:12:E7:06:2F:08:DB:1B Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 2DCCB8A25DA86B87630B7F10957D8E2402AB5254 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 13 Signing time: Mon 06 Jul 2026 21:22:47 +0000 Manifest this update: Mon 06 Jul 2026 21:17:47 +0000 Manifest next update: Tue 07 Jul 2026 22:39:47 +0000 Files and hashes: 1: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) 2: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 3: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) 4: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 5: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 6: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: gIHFWeq17NHaBkcQAbKtbtqRoYrqM0QIW1cDE7Eyymk=) 7: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cc:b8:a2:5d:a8:6b:87:63:0b:7f:10:95:7d:8e:24:02:ab:52:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jul 6 21:17:47 2026 GMT Not After : Jul 7 22:39:47 2026 GMT Subject: CN=7032F0E0EEAB927AB5B0E10C5612E7062F08DB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:ba:7e:83:e9:0a:9c:62:b7:18:d9:ca:21: 0b:ff:e1:09:1c:1c:28:b0:47:8c:4f:1f:d4:4c:45: eb:c6:9b:c5:ad:10:81:76:f9:81:2b:60:53:a6:60: c7:e0:71:a6:6f:08:2f:5c:e8:1d:48:1c:2e:d0:9f: d3:d0:80:e6:64:8c:a9:a9:24:23:55:65:85:5f:5d: 61:5a:17:53:ac:3b:0a:b7:c3:19:d5:e3:ff:29:a5: b9:be:be:aa:fc:83:07:d3:ac:9b:38:ed:bf:d2:b9: 94:a1:dc:61:76:58:cf:d9:c3:41:7b:9b:37:c0:0d: ae:f7:bb:a9:f8:44:42:f0:bb:07:e4:f3:7c:62:e6: 97:0e:fa:f9:39:af:7b:a6:fe:22:f7:74:29:1b:a5: 10:de:7a:da:f6:45:98:ab:80:d2:e6:2c:87:8d:8e: 92:7e:4b:a6:60:d3:7e:3f:f6:a8:b6:e4:6f:1c:27: b7:f4:1c:d4:c6:36:8c:46:c8:aa:dd:1b:af:ec:9f: 90:33:15:d1:20:2d:a6:7c:4b:07:7d:53:c3:2a:3b: d5:fd:f6:41:04:b1:9d:bc:2d:35:ce:e4:cb:10:6b: 16:56:5a:40:ad:c5:52:94:0a:91:eb:34:c7:41:fb: 0a:b8:8b:5f:9b:f9:98:7b:2f:78:4b:ff:0d:ee:03: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:32:F0:E0:EE:AB:92:7A:B5:B0:E1:0C:56:12:E7:06:2F:08:DB:1B X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:01:17:78:7a:8e:5d:5e:f2:d3:2b:4d:db:35:46:35:8d:67: 28:ca:b4:6a:09:8c:74:51:a4:b3:58:82:8e:b1:d1:76:34:7b: b2:cf:e6:1b:8b:a6:d6:12:b3:68:5f:77:48:cd:bb:85:15:8f: a2:7b:6f:b4:ec:63:cc:f3:aa:f4:e8:4e:ae:f5:8d:ac:0c:9a: c1:a3:06:19:6d:19:51:7d:4f:b3:3f:11:e9:5e:33:36:eb:5b: 37:92:b1:59:f0:da:a0:a0:c8:e4:49:b8:2b:db:23:36:d8:45: 6e:39:6c:e3:ed:a9:63:40:f2:f3:41:aa:2e:76:c6:95:19:96: fb:68:0a:af:47:f4:7a:3d:43:32:05:29:d3:a5:1f:f4:d2:85: 11:58:f5:42:ae:98:e7:f2:9b:92:a8:1d:86:05:00:87:c2:24: 14:71:14:37:c7:82:98:b1:8a:e0:c5:a6:86:03:58:69:a9:d8: 15:1d:5b:18:5e:e0:71:df:cb:42:09:64:d7:8c:ce:f4:94:64: a6:56:51:f8:8a:53:ac:e5:71:5f:65:d4:56:f4:e1:92:9b:f8: fe:3d:8d:7e:b4:de:00:34:2e:00:bb:4b:f9:d4:d6:7a:17:de: 0e:79:ae:24:8f:5e:a5:7b:61:a2:17:27:c8:ea:8b:22:82:46: e8:54:57:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULcy4ol2oa4djC38QlX2OJAKrUlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA3MDYyMTE3NDdaFw0yNjA3MDcyMjM5NDdaMDMxMTAvBgNV BAMTKDcwMzJGMEUwRUVBQjkyN0FCNUIwRTEwQzU2MTJFNzA2MkYwOERCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKrp+g+kKnGK3GNnKIQv/4Qkc HCiwR4xPH9RMRevGm8WtEIF2+YErYFOmYMfgcaZvCC9c6B1IHC7Qn9PQgOZkjKmp JCNVZYVfXWFaF1OsOwq3wxnV4/8ppbm+vqr8gwfTrJs47b/SuZSh3GF2WM/Zw0F7 mzfADa73u6n4RELwuwfk83xi5pcO+vk5r3um/iL3dCkbpRDeetr2RZirgNLmLIeN jpJ+S6Zg034/9qi25G8cJ7f0HNTGNoxGyKrdG6/sn5AzFdEgLaZ8Swd9U8MqO9X9 9kEEsZ28LTXO5MsQaxZWWkCtxVKUCpHrNMdB+wq4i1+b+Zh7L3hL/w3uAwOHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcDLw4O6rknq1sOEMVhLnBi8I2xswHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQEXeHqOXV7y 0ytN2zVGNY1nKMq0agmMdFGks1iCjrHRdjR7ss/mG4um1hKzaF93SM27hRWPontv tOxjzPOq9OhOrvWNrAyawaMGGW0ZUX1Psz8R6V4zNutbN5KxWfDaoKDI5Em4K9sj NthFbjls4+2pY0Dy80GqLnbGlRmW+2gKr0f0ej1DMgUp06Uf9NKFEVj1Qq6Y5/Kb kqgdhgUAh8IkFHEUN8eCmLGK4MWmhgNYaanYFR1bGF7gcd/LQglk14zO9JRkplZR +IpTrOVxX2XUVvThkpv4/j2NfrTeADQuALtL+dTWehfeDnmuJI9epXthohcnyOqL IoJG6FRXbw== -----END CERTIFICATE-----Generated at Tue Jul 7 10:41:11 2026 by rpki-client