$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: 2cytwcFp3IZs78YGtnya98/lnr1H8pm28WBXgzneN04= Subject key identifier: EE:E6:5E:1C:F7:99:29:C4:FB:27:07:69:4C:C4:8A:65:E5:B2:83:25 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 70434E13B5659BC0360E769636F8114D45FE70A0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 05:50:30 +0000 Manifest this update: Fri 24 Jul 2026 05:45:30 +0000 Manifest next update: Sat 25 Jul 2026 09:15:30 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: 5k9nXldFI0hn5mEMyA4vfSUkiJ59jg2e230TG2IYvz0=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:43:4e:13:b5:65:9b:c0:36:0e:76:96:36:f8:11:4d:45:fe:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Jul 24 05:45:30 2026 GMT Not After : Jul 25 09:15:30 2026 GMT Subject: CN=EEE65E1CF79929C4FB2707694CC48A65E5B28325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:aa:e8:f8:10:f9:4c:b0:03:cd:bf:df:93: d5:f0:e8:a2:c1:42:1a:db:f4:23:0a:dc:c7:16:41: 87:c5:00:10:a9:22:91:f7:f7:ba:3e:f8:ac:e8:79: a9:b8:aa:59:1d:2a:b5:f0:d8:80:50:0f:82:76:d3: 06:7a:6e:01:42:d6:ac:06:74:91:4b:7d:41:80:26: 89:ed:5f:1c:70:7d:9c:19:b1:e0:3a:aa:ce:0f:fc: b1:7b:fc:8c:bf:94:16:68:1b:61:1d:75:c8:01:8a: a0:d6:e4:23:34:17:b5:d1:e9:f1:63:c3:04:f6:8e: 86:c2:39:3e:3e:f2:2f:b7:f7:d6:e7:8a:30:96:4b: 99:17:8f:1f:c9:0b:c9:e0:39:cc:c5:8e:37:65:aa: f3:c5:0b:e6:73:5e:b8:4c:e4:87:7b:fb:74:07:59: af:c3:c6:5d:9f:56:b0:b4:75:ef:8f:2f:1f:a6:0d: 8e:32:fa:7d:98:29:e7:3e:22:75:c4:70:fb:08:fe: 6a:42:8f:53:e0:f6:f6:d9:3f:a5:68:14:c1:ff:82: 82:ee:df:43:60:0f:ac:d9:97:37:12:0b:61:0c:9e: ca:81:c8:e0:dc:4f:e9:5b:7f:67:1e:5d:7a:b8:b0: 1c:47:10:1f:17:c6:17:58:56:5d:54:54:03:3e:53: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:5E:1C:F7:99:29:C4:FB:27:07:69:4C:C4:8A:65:E5:B2:83:25 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:15:24:86:7d:ea:bb:b6:cc:48:fe:e4:ee:f5:ae:6c:94: b9:86:69:2c:ef:58:4c:2c:42:2c:04:f8:2f:45:66:d2:54:b9: a6:02:43:7d:46:dc:72:0b:ae:33:f4:b6:cc:c1:2a:08:e5:3b: 05:0d:d0:0f:d7:05:b9:c6:f8:5a:51:c7:a8:88:3c:84:29:b1: 66:bf:34:3b:24:55:bf:6b:52:f0:f4:be:8b:61:75:3f:23:35: 31:a4:d9:98:43:5a:5e:28:71:fc:3f:03:aa:31:7c:e8:75:fc: 01:35:9f:98:a5:70:f8:1d:ca:2a:03:00:af:d1:7c:be:c8:83: 74:70:11:cd:7b:3c:c4:02:d9:0e:0c:5a:6d:b3:28:b2:07:88: cc:ca:72:b0:2b:04:ce:41:83:ba:03:ec:2b:bb:ee:39:b6:80: 0b:ae:7a:75:51:27:67:28:a5:78:0d:cf:c2:53:17:ea:83:b9: e4:2b:72:f8:81:3c:28:36:94:fc:18:53:23:cf:af:93:81:9b: da:af:ca:15:68:bd:76:51:f4:74:68:97:38:b9:74:2a:ae:67: 1b:5a:72:3a:20:0c:4f:dd:c0:02:83:7f:9e:c9:e6:8a:c3:69: 9b:ad:b7:58:d9:1d:59:c6:ed:fd:15:cc:d2:a6:fa:fb:48:0e: a6:3d:ec:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcENOE7Vlm8A2DnaWNvgRTUX+cKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA3MjQwNTQ1MzBaFw0yNjA3MjUwOTE1MzBaMDMxMTAvBgNV BAMTKEVFRTY1RTFDRjc5OTI5QzRGQjI3MDc2OTRDQzQ4QTY1RTVCMjgzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv6ro+BD5TLADzb/fk9Xw6KLB Qhrb9CMK3McWQYfFABCpIpH397o++Kzoeam4qlkdKrXw2IBQD4J20wZ6bgFC1qwG dJFLfUGAJontXxxwfZwZseA6qs4P/LF7/Iy/lBZoG2EddcgBiqDW5CM0F7XR6fFj wwT2jobCOT4+8i+399bnijCWS5kXjx/JC8ngOczFjjdlqvPFC+ZzXrhM5Id7+3QH Wa/Dxl2fVrC0de+PLx+mDY4y+n2YKec+InXEcPsI/mpCj1Pg9vbZP6VoFMH/goLu 30NgD6zZlzcSC2EMnsqByODcT+lbf2ceXXq4sBxHEB8XxhdYVl1UVAM+UyA9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7uZeHPeZKcT7JwdpTMSKZeWygyUwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlgVJIZ96ru2 zEj+5O71rmyUuYZpLO9YTCxCLAT4L0Vm0lS5pgJDfUbccguuM/S2zMEqCOU7BQ3Q D9cFucb4WlHHqIg8hCmxZr80OyRVv2tS8PS+i2F1PyM1MaTZmENaXihx/D8DqjF8 6HX8ATWfmKVw+B3KKgMAr9F8vsiDdHARzXs8xALZDgxabbMosgeIzMpysCsEzkGD ugPsK7vuObaAC656dVEnZyileA3PwlMX6oO55Cty+IE8KDaU/BhTI8+vk4Gb2q/K FWi9dlH0dGiXOLl0Kq5nG1pyOiAMT93AAoN/nsnmisNpm623WNkdWcbt/RXM0qb6 +0gOpj3s8Q== -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:47 2026 by rpki-client