$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: gisBUteCLuHpEUkT39EGEvp5jC3ANMzziGQSGv3+Zgg= Subject key identifier: 84:EA:CB:EF:E8:D9:C7:21:3D:D0:0A:AE:58:3C:16:70:4E:0F:E7:49 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 2B69A616AB03C71736B20757E246745C6FBEE1ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: FA Signing time: Fri 24 Jul 2026 15:36:35 +0000 Manifest this update: Fri 24 Jul 2026 15:31:35 +0000 Manifest next update: Sat 25 Jul 2026 18:01:35 +0000 Files and hashes: 1: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: ez3eBXhn020Q+wZgJjQw/KqcDRI0plFR2Q0yqpAjEHg=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 3: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 5: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 6: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:69:a6:16:ab:03:c7:17:36:b2:07:57:e2:46:74:5c:6f:be:e1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Jul 24 15:31:35 2026 GMT Not After : Jul 25 18:01:35 2026 GMT Subject: CN=84EACBEFE8D9C7213DD00AAE583C16704E0FE749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:44:ef:ae:88:45:62:57:f4:e5:76:d4:6c:a4: 5f:8c:8a:41:8e:1b:40:5a:1e:10:d4:00:1a:1e:c2: 5c:9e:bb:df:74:93:0f:71:01:3b:53:d3:21:eb:0c: 2e:44:3a:cd:17:b9:8d:74:ae:25:0c:35:65:0c:c3: c8:87:f1:e5:4f:2e:37:ca:22:40:76:fa:c5:82:37: 9d:35:28:a7:54:8e:b0:35:89:a7:15:32:5c:c8:65: 6a:76:ec:6b:9f:b6:85:6e:49:5a:38:59:34:b2:c4: ee:f3:fa:ca:d8:e0:2b:c0:ca:61:98:ee:78:9e:47: aa:ae:71:0b:1b:e6:0d:8c:e4:d9:2e:bc:7a:fa:a3: 67:c2:08:d9:95:a8:79:eb:9c:75:01:dc:5d:47:1b: 6a:11:f8:e2:43:d8:24:8a:1a:fd:3d:64:f5:5f:86: 3b:5a:a6:02:38:9b:59:84:ff:13:93:1a:8d:6a:e7: 2d:1b:de:aa:9e:a7:11:ca:7e:b5:8c:cd:a6:f2:7b: 95:8b:ae:49:67:1c:3f:9c:e5:60:8a:12:b4:6a:92: f5:f4:0b:75:88:db:b7:f5:df:f8:3c:e8:cd:27:6e: 9e:04:2f:13:16:52:5c:7b:0d:97:4c:11:94:ff:3a: 24:dc:21:d9:28:04:42:98:de:29:04:91:b9:8f:a4: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EA:CB:EF:E8:D9:C7:21:3D:D0:0A:AE:58:3C:16:70:4E:0F:E7:49 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:44:46:bf:6d:63:9e:2f:6b:c1:c3:1b:f0:9a:23:17:c0: c0:e0:1b:44:37:74:46:d0:f9:ad:12:76:4c:61:0f:15:77:9a: 04:ee:dd:94:7e:4b:37:8f:91:1e:d3:bd:72:d8:df:78:e0:54: 07:42:d5:6e:e5:73:25:6b:2d:6b:98:7c:16:c4:5a:ed:6c:18: 5c:9c:24:53:32:32:a9:8e:8d:10:94:d2:d7:97:e7:e5:ad:63: 66:ff:af:ab:b2:a2:53:d0:fd:37:2b:4c:9b:0e:cd:ad:70:a2: 70:53:ec:fd:d5:85:32:98:18:b7:7d:6c:c7:17:96:5c:3c:5a: e9:20:10:86:c2:fd:a9:25:2b:8d:8a:1e:3e:c4:c5:ef:ff:db: 1e:ed:5b:74:eb:5c:31:4e:f3:f7:37:8f:da:1c:df:7b:9b:01: 38:10:30:f5:ed:01:5a:90:0c:fc:ef:f5:41:68:a8:bc:1d:32: 9b:55:97:81:b4:80:9a:e3:f7:06:f9:fd:47:8d:8b:e4:ec:d1: 8e:65:e0:b8:44:3a:fa:c8:c5:83:15:2e:c3:67:46:76:a1:3c: e0:b6:b3:06:7f:54:c1:37:6a:db:d8:47:fb:2a:53:34:9a:ad: d0:69:c6:4f:59:2a:71:ae:cc:90:20:34:79:58:0f:97:a3:34: 81:00:e0:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK2mmFqsDxxc2sgdX4kZ0XG++4e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA3MjQxNTMxMzVaFw0yNjA3MjUxODAxMzVaMDMxMTAvBgNV BAMTKDg0RUFDQkVGRThEOUM3MjEzREQwMEFBRTU4M0MxNjcwNEUwRkU3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRO+uiEViV/TldtRspF+MikGO G0BaHhDUABoewlyeu990kw9xATtT0yHrDC5EOs0XuY10riUMNWUMw8iH8eVPLjfK IkB2+sWCN501KKdUjrA1iacVMlzIZWp27GuftoVuSVo4WTSyxO7z+srY4CvAymGY 7nieR6qucQsb5g2M5NkuvHr6o2fCCNmVqHnrnHUB3F1HG2oR+OJD2CSKGv09ZPVf hjtapgI4m1mE/xOTGo1q5y0b3qqepxHKfrWMzabye5WLrklnHD+c5WCKErRqkvX0 C3WI27f13/g86M0nbp4ELxMWUlx7DZdMEZT/OiTcIdkoBEKY3ikEkbmPpJlnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhOrL7+jZxyE90AquWDwWcE4P50kwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBpERr9tY54v a8HDG/CaIxfAwOAbRDd0RtD5rRJ2TGEPFXeaBO7dlH5LN4+RHtO9ctjfeOBUB0LV buVzJWsta5h8FsRa7WwYXJwkUzIyqY6NEJTS15fn5a1jZv+vq7KiU9D9NytMmw7N rXCicFPs/dWFMpgYt31sxxeWXDxa6SAQhsL9qSUrjYoePsTF7//bHu1bdOtcMU7z 9zeP2hzfe5sBOBAw9e0BWpAM/O/1QWiovB0ym1WXgbSAmuP3Bvn9R42L5OzRjmXg uEQ6+sjFgxUuw2dGdqE84LazBn9UwTdq29hH+ypTNJqt0GnGT1kqca7MkCA0eVgP l6M0gQDgCQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:57:27 2026 by rpki-client