$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: V4sGNY0HrgMPqNYclMbqw6q9TzPSBTL/rTw5K9XVhus= Subject key identifier: A1:4D:5B:7E:E8:57:C7:AB:77:03:52:E1:95:3E:6C:EB:BF:F4:09:61 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 3BD6443A609C41078A1CEEC805B717E9F40421EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0100 Signing time: Fri 24 Jul 2026 03:15:14 +0000 Manifest this update: Fri 24 Jul 2026 03:10:14 +0000 Manifest next update: Sat 25 Jul 2026 06:20:14 +0000 Files and hashes: 1: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 2: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 3: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) 4: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 5: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 6: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: e7Xdl6B4idcQ90FYecJttWYgdiu9hAO9ZdYlpJWQ+4k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d6:44:3a:60:9c:41:07:8a:1c:ee:c8:05:b7:17:e9:f4:04:21:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Jul 24 03:10:14 2026 GMT Not After : Jul 25 06:20:14 2026 GMT Subject: CN=A14D5B7EE857C7AB770352E1953E6CEBBFF40961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:56:f6:f5:ef:d7:bb:19:d7:ba:05:cd:37: 4d:09:b0:dc:b8:45:74:e1:66:77:89:36:90:df:83: c2:4d:91:26:e4:0d:e7:1d:e4:91:1f:8a:64:12:47: 4e:e6:b9:de:ce:3c:78:f3:09:8d:b6:a0:67:35:09: 98:f3:ee:e4:8f:a3:58:31:2d:01:0d:88:cc:51:5c: 59:98:3c:d3:19:26:29:8c:0e:eb:1e:d5:de:de:1e: 4f:19:18:21:a7:af:31:8a:1c:14:75:2e:39:8e:33: 5e:5d:3c:6b:69:d0:5a:dc:80:a4:03:3a:1c:b7:d4: 7e:6f:07:72:c6:fc:a0:98:dd:6b:2e:a7:ad:d8:b2: bc:8c:c6:c1:02:fb:8f:f9:c8:18:dd:8b:a8:aa:40: 92:9a:62:f6:84:de:36:e7:ba:25:69:3a:84:2d:99: c2:15:5c:98:80:71:e8:df:78:2f:cc:f3:91:98:5e: e9:fb:b3:8b:f2:c1:32:e7:cb:35:bf:83:1a:53:c4: a0:81:f4:1f:00:6a:28:1e:7a:e8:10:64:53:06:44: cc:8e:60:f3:a9:23:0f:e6:4a:01:01:d7:a8:ef:c0: 1e:a3:aa:8b:2f:d2:c2:6b:a2:56:92:77:02:16:82: dd:59:69:45:73:c6:34:de:72:07:3b:16:d1:82:48: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4D:5B:7E:E8:57:C7:AB:77:03:52:E1:95:3E:6C:EB:BF:F4:09:61 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d1:98:14:3d:0e:7d:6d:fd:1a:5f:bb:81:b2:64:6f:06:24: 76:9b:47:a3:15:ac:40:38:f7:e3:fb:46:50:9c:40:ad:93:57: d4:16:10:72:64:56:b1:0d:fd:34:8e:d7:7a:b1:de:53:5e:27: 09:92:31:0a:50:f6:52:9e:95:07:45:6c:e2:18:a8:36:e3:10: 06:d6:7a:a9:d5:5f:28:f5:92:24:d7:ca:61:74:3b:d1:45:ce: 0e:a0:89:37:66:cc:bd:62:1f:4d:1c:fe:e2:54:d0:ee:93:5f: 64:f7:8b:b9:58:3e:7f:c1:f5:ee:a8:86:2d:8a:2c:99:eb:02: 37:27:f5:f9:82:f1:ed:21:19:99:d0:32:cd:1d:dd:11:13:a2: 50:08:05:5d:ab:6d:cf:64:a8:2d:15:d4:2f:6b:1e:7e:94:a3: d0:2a:20:79:e0:5e:9a:9f:39:9b:25:fa:56:65:1e:91:b9:b5: 66:6a:7d:10:33:b4:ea:8c:18:a4:10:3d:a7:ba:52:7a:16:cb: 20:85:7f:f0:9c:48:79:b4:20:27:98:26:ba:95:41:3a:f3:f3: 0d:d0:ae:f7:a1:19:24:4f:8a:d7:f5:4b:35:95:07:bd:6a:9d: f3:4f:38:8d:15:95:d6:a1:e0:c7:a1:92:00:ed:21:c4:26:ef: 6b:f1:46:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO9ZEOmCcQQeKHO7IBbcX6fQEIewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA3MjQwMzEwMTRaFw0yNjA3MjUwNjIwMTRaMDMxMTAvBgNV BAMTKEExNEQ1QjdFRTg1N0M3QUI3NzAzNTJFMTk1M0U2Q0VCQkZGNDA5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpl1b29e/XuxnXugXNN00JsNy4 RXThZneJNpDfg8JNkSbkDecd5JEfimQSR07mud7OPHjzCY22oGc1CZjz7uSPo1gx LQENiMxRXFmYPNMZJimMDuse1d7eHk8ZGCGnrzGKHBR1LjmOM15dPGtp0FrcgKQD Ohy31H5vB3LG/KCY3Wsup63YsryMxsEC+4/5yBjdi6iqQJKaYvaE3jbnuiVpOoQt mcIVXJiAcejfeC/M85GYXun7s4vywTLnyzW/gxpTxKCB9B8AaigeeugQZFMGRMyO YPOpIw/mSgEB16jvwB6jqosv0sJrolaSdwIWgt1ZaUVzxjTecgc7FtGCSEVPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoU1bfuhXx6t3A1LhlT5s67/0CWEwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9GYFD0OfW39 Gl+7gbJkbwYkdptHoxWsQDj34/tGUJxArZNX1BYQcmRWsQ39NI7XerHeU14nCZIx ClD2Up6VB0Vs4hioNuMQBtZ6qdVfKPWSJNfKYXQ70UXODqCJN2bMvWIfTRz+4lTQ 7pNfZPeLuVg+f8H17qiGLYosmesCNyf1+YLx7SEZmdAyzR3dEROiUAgFXattz2So LRXUL2sefpSj0CogeeBemp85myX6VmUekbm1Zmp9EDO06owYpBA9p7pSehbLIIV/ 8JxIebQgJ5gmupVBOvPzDdCu96EZJE+K1/VLNZUHvWqd8084jRWV1qHgx6GSAO0h xCbva/FG6g== -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:43 2026 by rpki-client