$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: j/FrCEk0DJiETZj1U7qmSU/jKK4BwMO+DwtkqOLBJdo= Subject key identifier: D7:A8:3F:3E:62:60:E1:C0:D0:5F:29:A5:4A:52:75:0D:9F:80:74:96 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 57621EDB48BD6E9A400004812F2C4A7F48B08943 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 00:44:57 +0000 Manifest this update: Fri 24 Jul 2026 00:39:57 +0000 Manifest next update: Sat 25 Jul 2026 03:31:57 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) 2: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 3: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: enQgIKgU5/cWgRZpnqrSTXubttmrozde0v+JbO1lx9Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:62:1e:db:48:bd:6e:9a:40:00:04:81:2f:2c:4a:7f:48:b0:89:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Jul 24 00:39:57 2026 GMT Not After : Jul 25 03:31:57 2026 GMT Subject: CN=D7A83F3E6260E1C0D05F29A54A52750D9F807496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:a7:18:b0:7c:d9:58:65:96:23:19:69:8e: 62:22:6e:6b:22:6d:48:55:51:9b:fd:08:56:08:07: 37:25:78:c8:e6:29:ea:40:59:e3:a0:c8:d1:ff:84: 1a:a8:b4:97:64:a6:b4:d2:c4:c6:b0:62:e1:bd:b2: ab:d5:43:38:fb:67:bc:ae:09:c8:2f:c0:db:83:c0: 17:86:fc:46:d2:75:8e:5b:c5:08:2c:3a:07:69:ab: 0d:75:12:fc:c7:85:c4:b2:ff:54:b9:ae:2c:03:65: 22:da:69:40:f4:4c:04:fe:43:24:e6:94:e1:d2:86: ff:12:b8:fb:6c:72:79:b1:20:fc:be:df:e7:df:76: 59:4f:2a:0e:16:62:3c:84:a9:d8:be:25:da:0d:88: fb:ef:d1:fd:10:d8:56:ad:7f:40:0d:a1:0f:2b:1d: 59:6c:27:40:39:cd:e8:9c:67:02:cb:bf:ad:cf:10: be:d4:87:37:c9:db:61:a6:d0:26:cd:44:15:39:24: 58:22:72:3e:40:d7:3d:c6:34:05:b4:4c:13:ee:02: 34:54:32:7c:d5:2a:89:66:3d:6c:4c:e7:1e:a4:35: 0c:bf:6b:4c:ac:3e:56:5e:b1:6e:8c:bb:56:f3:89: dc:9b:5f:23:ec:a9:84:35:7c:1d:ea:07:24:0a:7c: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A8:3F:3E:62:60:E1:C0:D0:5F:29:A5:4A:52:75:0D:9F:80:74:96 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9d:09:67:2d:18:2f:f2:71:65:cd:91:71:46:af:e8:c6:41: ad:17:1a:86:eb:cc:76:73:86:ba:d9:66:6a:89:1e:ed:d2:e5: 03:4a:0a:68:90:00:dd:c6:1a:80:85:77:ef:07:e0:7e:41:31: b6:37:cb:20:3d:1c:5b:ca:75:cf:ec:c2:a6:4d:81:ae:4e:6c: 58:b9:df:7f:1c:4a:e9:2d:03:60:0c:23:a8:7f:b4:ca:9c:ab: c4:1d:b0:f0:a2:fc:0f:0d:d1:8a:35:a8:62:58:d4:25:4e:83: 05:93:03:9b:e0:91:86:92:d8:a2:bf:17:8d:91:98:95:60:a2: ca:fb:bf:df:6a:2c:8a:f0:71:73:c7:e1:14:bb:5d:dd:44:79: 7e:ca:7e:66:64:9b:39:ae:7d:fa:bb:57:78:f4:12:81:91:41: 0f:19:88:e5:3a:2f:b9:16:b5:1d:99:c5:29:50:77:09:8f:54: cd:aa:7d:b6:c9:d1:f6:21:7a:f9:61:ed:f3:40:76:e5:df:6c: d5:62:ab:db:8c:a1:67:e7:c5:41:29:b6:b0:d0:e7:01:7e:6d: 06:85:cf:5e:7d:db:d3:2e:be:c1:59:98:61:2b:bb:7f:f2:7d: c0:b9:d6:69:3f:ee:98:73:09:14:fa:ce:c3:f2:03:fa:6a:8d: b7:b5:60:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV2Ie20i9bppAAASBLyxKf0iwiUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjA3MjQwMDM5NTdaFw0yNjA3MjUwMzMxNTdaMDMxMTAvBgNV BAMTKEQ3QTgzRjNFNjI2MEUxQzBEMDVGMjlBNTRBNTI3NTBEOUY4MDc0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcacYsHzZWGWWIxlpjmIibmsi bUhVUZv9CFYIBzcleMjmKepAWeOgyNH/hBqotJdkprTSxMawYuG9sqvVQzj7Z7yu CcgvwNuDwBeG/EbSdY5bxQgsOgdpqw11EvzHhcSy/1S5riwDZSLaaUD0TAT+QyTm lOHShv8SuPtscnmxIPy+3+ffdllPKg4WYjyEqdi+JdoNiPvv0f0Q2Fatf0ANoQ8r HVlsJ0A5zeicZwLLv63PEL7UhzfJ22Gm0CbNRBU5JFgicj5A1z3GNAW0TBPuAjRU MnzVKolmPWxM5x6kNQy/a0ysPlZesW6Mu1bzidybXyPsqYQ1fB3qByQKfKYBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU16g/PmJg4cDQXymlSlJ1DZ+AdJYwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZ0JZy0YL/Jx Zc2RcUav6MZBrRcahuvMdnOGutlmaoke7dLlA0oKaJAA3cYagIV37wfgfkExtjfL ID0cW8p1z+zCpk2Brk5sWLnffxxK6S0DYAwjqH+0ypyrxB2w8KL8Dw3RijWoYljU JU6DBZMDm+CRhpLYor8XjZGYlWCiyvu/32osivBxc8fhFLtd3UR5fsp+ZmSbOa59 +rtXePQSgZFBDxmI5TovuRa1HZnFKVB3CY9Uzap9tsnR9iF6+WHt80B25d9s1WKr 24yhZ+fFQSm2sNDnAX5tBoXPXn3b0y6+wVmYYSu7f/J9wLnWaT/umHMJFPrOw/ID +mqNt7VgXg== -----END CERTIFICATE-----Generated at Fri Jul 24 20:17:52 2026 by rpki-client