$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: UmivwyrJ7gjVowASj7LqA+YL8scEdBsjcSZFgB1qWXg= Subject key identifier: C4:D0:AE:29:F1:8F:04:52:4C:15:41:31:C3:4A:8A:36:26:12:D0:77 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 1990EBD089049CF8D84BA194AA138276371E013D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 50 Signing time: Fri 21 Aug 2026 19:15:31 +0000 Manifest this update: Fri 21 Aug 2026 19:10:31 +0000 Manifest next update: Sat 22 Aug 2026 21:19:31 +0000 Files and hashes: 1: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 2: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) 3: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: D7y9j+FJdmsfL1rDho8pnLfOxAE3X+hO7Gbo5Oqp8dA=) 4: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) 5: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 6: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 7: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:90:eb:d0:89:04:9c:f8:d8:4b:a1:94:aa:13:82:76:37:1e:01:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Aug 21 19:10:31 2026 GMT Not After : Aug 22 21:19:31 2026 GMT Subject: CN=C4D0AE29F18F04524C154131C34A8A362612D077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:56:9d:c0:ee:ff:b3:5d:b4:49:45:45:bd: b9:6a:2a:69:2f:79:e2:76:b0:b1:12:8d:db:b8:ad: f2:bb:df:7b:2b:55:64:17:99:45:9e:e1:fa:9b:4f: 8c:02:0e:42:e1:23:5a:9f:7b:e2:64:59:06:aa:04: 44:3d:8b:d9:85:70:c3:0c:fd:01:6d:43:c8:4a:3a: e9:85:15:a6:8b:21:2a:b6:a8:b7:36:f6:29:a5:ec: af:1f:ca:1d:4b:dc:17:e7:3b:d8:02:bd:4b:9f:23: 2d:18:07:5f:0d:ad:3e:af:af:17:43:de:d1:9d:4a: e2:7a:0b:bc:a1:a2:0a:e8:c7:a0:a1:f0:04:f9:9c: fc:b0:fe:72:0f:f5:9c:c3:3f:1e:b9:d6:55:4c:2b: 8a:6c:b1:bc:34:1f:da:db:9b:44:1d:28:d3:03:cf: b3:b9:3c:90:a8:38:8e:e8:0d:46:6a:2b:1d:37:93: 8d:4c:3a:f0:cf:9b:fd:06:e0:d6:08:65:c4:0e:cf: 77:22:a8:92:85:f8:a3:80:89:3d:6d:06:62:da:3a: 36:5d:f3:be:ec:ef:68:65:ea:af:d9:16:ca:8b:3d: 7d:45:bf:31:98:f5:90:a9:0e:9a:7f:b3:d6:5b:74: ea:17:15:e7:ba:26:91:41:f5:dc:36:28:13:23:ad: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:AE:29:F1:8F:04:52:4C:15:41:31:C3:4A:8A:36:26:12:D0:77 X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b7:d8:c2:4a:4a:b9:35:9a:a2:b7:9f:4b:4a:f0:b7:ef:8f: 45:30:4a:87:ee:f2:3a:48:0a:48:3e:3a:29:4b:81:00:e2:08: 87:ea:99:c9:8a:4b:96:b4:80:2c:7f:66:16:0f:8f:6c:99:b9: ab:92:c3:f4:d2:a6:76:15:6f:42:de:7d:a2:4a:23:ee:c8:71: 30:95:e7:20:5d:88:c5:8d:d1:88:72:5e:6f:1d:79:61:a9:a0: 7c:1f:7a:cf:05:8f:8c:96:85:bb:dc:83:ad:68:07:e8:1b:31: 51:c4:b4:46:b8:fb:2e:d0:25:e8:8d:1e:82:8d:45:99:ab:0d: 13:f3:de:b4:04:e5:09:93:1d:e3:8c:0c:3d:42:c0:d0:e7:21: eb:0d:a1:e3:84:ef:28:5a:ea:c6:47:81:4a:6f:56:7e:02:b7: 85:e0:64:34:41:81:81:c2:34:89:01:69:5a:8e:9a:f9:2c:c0: 1f:0b:b7:ef:47:97:5b:f5:67:23:8d:09:2a:cc:b8:33:02:21: 0d:78:74:12:f9:c5:79:f6:80:44:7d:0a:a0:e4:f9:68:cb:12: bd:f6:3c:3d:43:2b:70:6f:33:79:8a:6a:d4:87:88:27:b1:4e: 64:42:54:43:b6:50:c4:ed:12:6b:2b:eb:92:df:1f:16:77:f9: c6:74:c3:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGZDr0IkEnPjYS6GUqhOCdjceAT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA4MjExOTEwMzFaFw0yNjA4MjIyMTE5MzFaMDMxMTAvBgNV BAMTKEM0RDBBRTI5RjE4RjA0NTI0QzE1NDEzMUMzNEE4QTM2MjYxMkQwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqVadwO7/s120SUVFvblqKmkv eeJ2sLESjdu4rfK733srVWQXmUWe4fqbT4wCDkLhI1qfe+JkWQaqBEQ9i9mFcMMM /QFtQ8hKOumFFaaLISq2qLc29iml7K8fyh1L3BfnO9gCvUufIy0YB18NrT6vrxdD 3tGdSuJ6C7yhogrox6Ch8AT5nPyw/nIP9ZzDPx651lVMK4pssbw0H9rbm0QdKNMD z7O5PJCoOI7oDUZqKx03k41MOvDPm/0G4NYIZcQOz3ciqJKF+KOAiT1tBmLaOjZd 877s72hl6q/ZFsqLPX1FvzGY9ZCpDpp/s9ZbdOoXFee6JpFB9dw2KBMjrYpbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxNCuKfGPBFJMFUExw0qKNiYS0HcwHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLfYwkpKuTWa orefS0rwt++PRTBKh+7yOkgKSD46KUuBAOIIh+qZyYpLlrSALH9mFg+PbJm5q5LD 9NKmdhVvQt59okoj7shxMJXnIF2IxY3RiHJebx15YamgfB96zwWPjJaFu9yDrWgH 6BsxUcS0Rrj7LtAl6I0ego1FmasNE/PetATlCZMd44wMPULA0Och6w2h44TvKFrq xkeBSm9WfgK3heBkNEGBgcI0iQFpWo6a+SzAHwu370eXW/VnI40JKsy4MwIhDXh0 EvnFefaARH0KoOT5aMsSvfY8PUMrcG8zeYpq1IeIJ7FOZEJUQ7ZQxO0Sayvrkt8f Fnf5xnTDKw== -----END CERTIFICATE-----Generated at Sat Aug 22 00:53:40 2026 by rpki-client