$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: hMWWjyzQapn4pxUbISjNXUgQzLqShrP55ac0CDMFxi0= Subject key identifier: 3F:49:0C:B0:10:AB:C4:DD:2C:7B:76:EB:B0:7E:E5:99:CC:72:85:B4 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 0CE8C959982F67BC595901EB2AB058AA700E34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: FE Signing time: Fri 24 Jul 2026 14:21:26 +0000 Manifest this update: Fri 24 Jul 2026 14:16:26 +0000 Manifest next update: Sat 25 Jul 2026 15:57:26 +0000 Files and hashes: 1: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 2: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: 2fflOljBKcOoYzN0WA0wsfqxzTemdfOapmSDuL8adNA=) 3: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 4: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e8:c9:59:98:2f:67:bc:59:59:01:eb:2a:b0:58:aa:70:0e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Jul 24 14:16:26 2026 GMT Not After : Jul 25 15:57:26 2026 GMT Subject: CN=3F490CB010ABC4DD2C7B76EBB07EE599CC7285B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:ad:f0:54:d9:05:3b:cc:03:04:ee:1e:1d: dd:15:56:df:a1:f1:44:77:0a:69:d3:b8:f4:48:5e: d2:ce:88:20:8a:20:8c:dc:56:d7:10:a2:35:5d:92: ad:2a:92:85:0d:78:93:26:0c:84:f3:3b:c0:96:75: ea:3a:65:dd:e4:9b:5f:20:7a:74:aa:ad:6b:6d:1c: 46:28:96:d1:a0:17:7e:55:e6:32:7d:ef:91:5d:16: a8:11:ca:03:f9:4e:c3:2d:1f:da:6a:f0:e5:d7:a2: 22:89:1c:72:69:02:4b:d9:1b:12:3c:5e:9e:3b:84: 57:60:59:98:de:01:9a:ca:13:07:6e:2d:34:d6:32: 4f:de:37:49:1f:4e:ae:b9:d7:32:43:39:ec:6c:21: 5b:cc:91:8e:70:a3:ae:bd:ff:44:28:57:84:f9:c6: 05:ca:d4:1b:05:f2:db:bb:10:69:01:8a:05:e6:6f: 6a:03:a1:36:7a:06:47:e1:29:3b:aa:c4:f6:50:09: f8:0d:50:a0:88:a8:fc:bb:ef:fe:15:f1:f7:b7:46: 85:c7:0e:ec:ab:9e:2e:9a:03:ed:94:e6:59:3e:5f: ce:cc:81:c9:ef:5c:11:d5:5e:33:58:c7:30:aa:b0: d5:75:f2:17:59:cf:f0:b1:e4:df:fd:ab:31:84:b4: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:49:0C:B0:10:AB:C4:DD:2C:7B:76:EB:B0:7E:E5:99:CC:72:85:B4 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:18:81:87:3f:11:a8:7e:22:7b:73:8c:30:b1:24:00:d3:ce: 17:6d:71:d6:d2:7d:d1:56:5a:e1:6e:c6:53:3f:89:f6:1c:90: da:2d:d7:cf:e4:34:99:6b:35:7a:a2:fb:39:f7:ae:56:3d:3e: 28:2b:d1:ac:c0:e1:e6:bb:e1:56:d2:84:ea:08:2e:59:40:3c: 0d:de:2e:96:58:12:58:96:47:11:1b:33:32:35:dd:8b:30:a4: 05:62:6a:61:56:95:e5:d1:a8:ba:e3:62:62:9b:11:a9:74:46: 8c:cd:af:6f:25:ec:09:ca:a1:9e:f4:43:9d:fe:e4:cb:a9:c6: d4:8d:68:a7:cc:68:9d:04:a7:11:e3:cb:ee:b4:1f:48:47:36: 53:70:7c:6d:cd:cd:da:c7:05:f6:0c:40:d9:8e:1c:c6:4c:cb: 6f:18:d8:40:bd:db:3d:94:cc:a0:92:c8:5c:9c:37:02:b1:b5: e5:20:6b:78:65:48:b6:6a:74:77:b7:17:04:c1:96:ab:82:22: cc:ee:3e:82:78:c1:3c:d9:f9:c6:6c:b9:ba:06:09:64:d3:e4: 15:cc:56:c3:dc:f2:3d:18:4b:a9:f7:bc:fb:1a:c2:b8:09:7e: 66:b4:41:ad:d3:41:80:89:84:4e:47:60:76:d2:8f:a0:ac:2e: 10:e4:65:5b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITDOjJWZgvZ7xZWQHrKrBYqnAONDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCMDQxQjA1RUU0N0NFQjM5OTgyMDUxMDNBNTI5MjU3RDQ4 NUM5Q0RGMB4XDTI2MDcyNDE0MTYyNloXDTI2MDcyNTE1NTcyNlowMzExMC8GA1UE AxMoM0Y0OTBDQjAxMEFCQzRERDJDN0I3NkVCQjA3RUU1OTlDQzcyODVCNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYDrfBU2QU7zAME7h4d3RVW36Hx RHcKadO49Ehe0s6IIIogjNxW1xCiNV2SrSqShQ14kyYMhPM7wJZ16jpl3eSbXyB6 dKqta20cRiiW0aAXflXmMn3vkV0WqBHKA/lOwy0f2mrw5deiIokccmkCS9kbEjxe njuEV2BZmN4BmsoTB24tNNYyT943SR9OrrnXMkM57GwhW8yRjnCjrr3/RChXhPnG BcrUGwXy27sQaQGKBeZvagOhNnoGR+EpO6rE9lAJ+A1QoIio/Lvv/hXx97dGhccO 7KueLpoD7ZTmWT5fzsyBye9cEdVeM1jHMKqw1XXyF1nP8LHk3/2rMYS0QPsCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBQ/SQywEKvE3Sx7duuwfuWZzHKFtDAfBgNVHSME GDAWgBSwQbBe5HzrOZggUQOlKSV9SFyc3zAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc5NTM0Mzk0OTgyNDAzLzAvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1 N0Q0ODVDOUNERi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9CMDQxQjA1RUU0N0NFQjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VC Mzk5ODIwNTEwM0E1MjkyNTdENDg1QzlDREYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDGIGHPxGofiJ7 c4wwsSQA084XbXHW0n3RVlrhbsZTP4n2HJDaLdfP5DSZazV6ovs5965WPT4oK9Gs wOHmu+FW0oTqCC5ZQDwN3i6WWBJYlkcRGzMyNd2LMKQFYmphVpXl0ai642JimxGp dEaMza9vJewJyqGe9EOd/uTLqcbUjWinzGidBKcR48vutB9IRzZTcHxtzc3axwX2 DEDZjhzGTMtvGNhAvds9lMygkshcnDcCsbXlIGt4ZUi2anR3txcEwZargiLM7j6C eME82fnGbLm6Bglk0+QVzFbD3PI9GEup97z7GsK4CX5mtEGt00GAiYROR2B20o+g rC4Q5GVb -----END CERTIFICATE-----Generated at Fri Jul 24 19:07:47 2026 by rpki-client