$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: 7pOD34UtsG7c44L1bWMpeAICGz2XASRcf1Ay/ZXaKbU= Subject key identifier: A3:3A:06:C4:1D:F5:0B:6B:36:A3:C7:DB:D1:43:83:B0:D3:02:50:B1 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 3F026A058F6487775EA0F9C8D1355118757DBF56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 0117 Signing time: Fri 24 Jul 2026 03:45:17 +0000 Manifest this update: Fri 24 Jul 2026 03:40:17 +0000 Manifest next update: Sat 25 Jul 2026 04:31:17 +0000 Files and hashes: 1: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: H+T3tD+1v4R0+O2hfacr9uRaV/ff3MqvgXW/lwSX50g=) 2: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) 3: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:02:6a:05:8f:64:87:77:5e:a0:f9:c8:d1:35:51:18:75:7d:bf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jul 24 03:40:17 2026 GMT Not After : Jul 25 04:31:17 2026 GMT Subject: CN=A33A06C41DF50B6B36A3C7DBD14383B0D30250B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ab:b3:a7:24:b8:f5:31:8e:09:27:b3:d6:3c: 7b:69:b4:8f:92:d4:aa:19:dc:e4:0b:26:f0:48:b7: bd:f5:1e:3f:1a:5d:96:4c:33:55:6e:fc:02:96:a5: 05:c6:c2:01:74:a9:d0:33:27:59:c0:95:d9:78:32: 12:7a:e6:9c:34:85:7f:43:1c:b4:2a:10:c6:b9:ff: db:99:36:ea:24:92:bd:69:de:89:4c:fc:0c:7d:36: e7:8a:d2:5c:b3:98:a3:dc:2a:12:1c:55:80:1a:2a: ee:22:f9:a4:4d:3d:12:3a:f8:6b:32:4c:96:5f:6c: e7:ad:9f:8e:e7:78:52:ca:da:f2:29:d4:1a:2d:6a: c2:5e:ab:c5:5b:42:51:2e:48:ad:3e:a2:13:cf:13: e2:5e:ec:a8:ba:93:ea:30:be:82:90:82:74:f9:b9: e5:16:50:26:85:44:35:19:9f:6f:5e:e8:41:c3:2c: a9:aa:ac:87:a9:e9:1a:16:10:e0:c9:fd:77:eb:c0: d4:de:bf:84:38:de:ed:59:ea:54:ab:54:b7:1c:98: 1b:6e:37:c7:71:41:64:02:9a:03:b2:30:9e:3a:06: 3b:77:c5:84:ae:25:a5:1a:a4:69:fc:4b:0f:db:ad: a6:5a:bd:26:cf:b7:a5:3b:18:60:41:29:21:8e:80: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:06:C4:1D:F5:0B:6B:36:A3:C7:DB:D1:43:83:B0:D3:02:50:B1 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a0:47:c1:a6:01:bc:c7:01:33:4c:4c:cc:3d:e0:b9:5f:20: 32:78:aa:59:6c:6c:f8:ec:a9:11:d6:e1:a1:b7:8a:b4:81:3c: c5:3e:fc:4a:33:10:18:d5:51:f4:79:91:f2:69:cc:63:84:18: d2:d2:62:44:40:72:bc:b1:b7:96:6e:3e:4b:a5:69:53:ac:9e: ae:34:6e:4b:45:19:c3:d0:a0:7b:53:ba:c9:ee:23:74:68:fb: 94:65:52:d9:ff:40:41:ba:96:8b:e3:b3:c5:25:1c:de:66:a0: 7b:d7:20:4f:91:fe:7e:61:5f:09:89:ee:24:51:d2:2b:17:a8: 3d:04:39:87:b8:ee:f7:5d:69:68:53:22:99:91:69:5b:71:b1: a7:21:a6:c5:43:62:be:de:0e:d2:10:5a:86:31:f2:cf:b8:e2: ea:d2:8c:4b:0c:70:2e:fb:1e:8f:0c:15:bf:93:88:e7:b1:90: 57:3d:27:33:5a:f5:3d:c8:92:3b:c7:60:26:5c:60:bf:a8:fb: a6:64:8e:9a:79:f0:15:fb:cb:fc:a8:16:e0:e7:29:72:08:1d: 4b:1c:fe:8d:ea:83:b6:46:b7:45:14:1f:96:59:bd:71:89:3d: 16:18:dc:89:b0:27:99:51:dc:10:41:da:d8:a0:ce:1c:61:2d: 58:39:98:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPwJqBY9kh3deoPnI0TVRGHV9v1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA3MjQwMzQwMTdaFw0yNjA3MjUwNDMxMTdaMDMxMTAvBgNV BAMTKEEzM0EwNkM0MURGNTBCNkIzNkEzQzdEQkQxNDM4M0IwRDMwMjUwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1q7OnJLj1MY4JJ7PWPHtptI+S 1KoZ3OQLJvBIt731Hj8aXZZMM1Vu/AKWpQXGwgF0qdAzJ1nAldl4MhJ65pw0hX9D HLQqEMa5/9uZNuokkr1p3olM/Ax9NueK0lyzmKPcKhIcVYAaKu4i+aRNPRI6+Gsy TJZfbOetn47neFLK2vIp1BotasJeq8VbQlEuSK0+ohPPE+Je7Ki6k+owvoKQgnT5 ueUWUCaFRDUZn29e6EHDLKmqrIep6RoWEODJ/XfrwNTev4Q43u1Z6lSrVLccmBtu N8dxQWQCmgOyMJ46Bjt3xYSuJaUapGn8Sw/braZavSbPt6U7GGBBKSGOgOqbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUozoGxB31C2s2o8fb0UODsNMCULEwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaBHwaYBvMcB M0xMzD3guV8gMniqWWxs+OypEdbhobeKtIE8xT78SjMQGNVR9HmR8mnMY4QY0tJi REByvLG3lm4+S6VpU6yerjRuS0UZw9Cge1O6ye4jdGj7lGVS2f9AQbqWi+OzxSUc 3mage9cgT5H+fmFfCYnuJFHSKxeoPQQ5h7ju911paFMimZFpW3GxpyGmxUNivt4O 0hBahjHyz7ji6tKMSwxwLvsejwwVv5OI57GQVz0nM1r1PciSO8dgJlxgv6j7pmSO mnnwFfvL/KgW4OcpcggdSxz+jeqDtka3RRQfllm9cYk9FhjcibAnmVHcEEHa2KDO HGEtWDmYhg== -----END CERTIFICATE-----Generated at Fri Jul 24 13:54:11 2026 by rpki-client