$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: 2ySleCypu7tuxMG0dQtaFQKFJJGrdMtiNmpiLB6JGt4= Subject key identifier: 31:C8:0C:63:F6:51:18:45:34:37:8C:3C:14:99:48:C8:56:9C:96:B7 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 374BA726DF46DECFB6DADD175C4B1AAF6AEE3781 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 05:15:25 +0000 Manifest this update: Fri 24 Jul 2026 05:10:25 +0000 Manifest next update: Sat 25 Jul 2026 06:24:25 +0000 Files and hashes: 1: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 2: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) 3: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 4: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: m7XopbTWppUTfTqYMRvYoliHiY7myXWUF1+4tOPYqE8=) 5: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4b:a7:26:df:46:de:cf:b6:da:dd:17:5c:4b:1a:af:6a:ee:37:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Jul 24 05:10:25 2026 GMT Not After : Jul 25 06:24:25 2026 GMT Subject: CN=31C80C63F651184534378C3C149948C8569C96B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:bd:96:db:81:34:5a:fe:ca:64:c7:03:64: 8d:19:8d:b6:1c:1b:04:6f:33:9d:71:8e:96:7f:cc: 05:e1:4f:19:37:8c:55:90:e2:47:b4:05:cc:bb:53: af:b0:ee:79:2b:c8:f0:3c:8f:7e:09:e6:53:bd:39: 90:29:6c:8f:d8:f0:c3:f2:b5:79:45:31:fb:55:dc: bf:7e:5d:ee:42:0b:1c:dd:4b:41:7e:c2:f4:84:8a: 41:04:cd:45:9f:24:3b:b5:9e:bd:fd:31:57:bd:05: b9:02:5c:04:f1:ab:b6:0a:30:71:48:e1:a0:3d:61: ee:e1:8a:ea:27:6a:a6:e0:89:31:8a:81:c4:97:26: 41:11:67:73:4f:5c:f5:3a:6b:12:3e:24:a7:38:4e: 5e:c8:8f:79:cf:ea:07:28:56:fc:bd:1b:21:8e:54: 85:32:f4:54:76:e0:43:c1:08:42:2f:e0:70:7b:06: c7:51:5a:b5:2a:cb:35:1e:91:c6:1c:58:9b:7a:a3: b7:7a:2a:3f:fd:bf:08:0f:2e:7b:2c:f9:57:6e:48: 94:8d:85:1c:eb:c6:91:1e:f5:50:a7:6b:ca:aa:38: 55:56:92:f5:0e:d6:f2:d5:2f:a9:b4:f9:61:bf:a3: a9:a6:04:f5:44:35:11:76:1c:90:9e:43:dd:20:f4: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:0C:63:F6:51:18:45:34:37:8C:3C:14:99:48:C8:56:9C:96:B7 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:09:d7:ad:ea:c0:24:1a:cc:ac:f8:ed:61:f8:1a:34:f8:d6: ac:1d:af:d1:fe:69:37:0c:80:7b:30:24:1f:53:1d:11:4e:a5: fe:63:6b:59:2a:20:24:ad:bb:7f:52:86:b0:d5:96:e7:59:6a: 8b:cc:23:b1:0e:0b:e2:ea:ad:9c:e0:45:c1:e6:5b:56:61:4b: 28:a3:48:de:7b:db:8e:45:55:7d:c8:9a:63:78:c3:c1:cc:ea: 1d:1b:8a:e2:92:be:04:fc:ba:05:71:c2:82:3d:66:c8:4c:5b: ed:45:cb:64:a4:64:b7:36:01:28:6e:85:99:41:2b:d2:5b:b8: 5a:b2:d5:e4:b0:39:83:6e:48:0b:c3:7a:97:50:2a:50:4c:62: 58:c3:d7:93:f2:40:5e:a3:01:b6:7c:b4:7d:55:8f:ae:01:ae: fe:c6:0b:65:cd:2b:57:da:d8:fb:df:56:9e:b1:b7:52:2d:11: d3:28:00:5f:1b:77:ed:94:92:65:fa:df:99:b5:7e:c7:6e:33: 10:84:22:f4:15:d9:bd:f0:c7:15:e9:c2:3a:ad:27:0d:4c:61: 89:63:94:d6:32:f3:ce:47:50:c4:d3:2d:d3:de:56:13:0b:3e: e6:19:12:9a:a5:78:42:55:3e:4b:b8:28:bb:7d:0f:21:69:6e: 14:9f:7d:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN0unJt9G3s+22t0XXEsar2ruN4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjA3MjQwNTEwMjVaFw0yNjA3MjUwNjI0MjVaMDMxMTAvBgNV BAMTKDMxQzgwQzYzRjY1MTE4NDUzNDM3OEMzQzE0OTk0OEM4NTY5Qzk2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazb2W24E0Wv7KZMcDZI0ZjbYc GwRvM51xjpZ/zAXhTxk3jFWQ4ke0Bcy7U6+w7nkryPA8j34J5lO9OZApbI/Y8MPy tXlFMftV3L9+Xe5CCxzdS0F+wvSEikEEzUWfJDu1nr39MVe9BbkCXATxq7YKMHFI 4aA9Ye7hiuonaqbgiTGKgcSXJkERZ3NPXPU6axI+JKc4Tl7Ij3nP6gcoVvy9GyGO VIUy9FR24EPBCEIv4HB7BsdRWrUqyzUekcYcWJt6o7d6Kj/9vwgPLnss+VduSJSN hRzrxpEe9VCna8qqOFVWkvUO1vLVL6m0+WG/o6mmBPVENRF2HJCeQ90g9CizAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMcgMY/ZRGEU0N4w8FJlIyFaclrcwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAnXrerAJBrM rPjtYfgaNPjWrB2v0f5pNwyAezAkH1MdEU6l/mNrWSogJK27f1KGsNWW51lqi8wj sQ4L4uqtnOBFweZbVmFLKKNI3nvbjkVVfciaY3jDwczqHRuK4pK+BPy6BXHCgj1m yExb7UXLZKRktzYBKG6FmUEr0lu4WrLV5LA5g25IC8N6l1AqUExiWMPXk/JAXqMB tny0fVWPrgGu/sYLZc0rV9rY+99WnrG3Ui0R0ygAXxt37ZSSZfrfmbV+x24zEIQi 9BXZvfDHFenCOq0nDUxhiWOU1jLzzkdQxNMt095WEws+5hkSmqV4QlU+S7gou30P IWluFJ99fg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:32:21 2026 by rpki-client