$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft File: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft (raw, json) Hash identifier: UcWJ4llnHlImGr1DOGevZ1Yt5F4+TcF8Iq1wyRB69GM= Subject key identifier: 21:7E:BB:72:FD:E1:FB:A6:13:78:32:4C:92:AD:83:71:70:83:A7:D7 Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 5298573FE87989AAB4962B556D484697C2E7E011 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 13:16:16 +0000 Manifest this update: Fri 24 Jul 2026 13:11:16 +0000 Manifest next update: Sat 25 Jul 2026 15:56:16 +0000 Files and hashes: 1: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (hash: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick=) 2: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl (hash: 9bY5txcLfQHjeHZRt7ibMdOegLSRjuqtIBhPkQp2mCY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:98:57:3f:e8:79:89:aa:b4:96:2b:55:6d:48:46:97:c2:e7:e0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Jul 24 13:11:16 2026 GMT Not After : Jul 25 15:56:16 2026 GMT Subject: CN=217EBB72FDE1FBA61378324C92AD83717083A7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:ad:dc:e5:36:58:24:a6:03:38:94:fb:d4: d1:63:64:a0:56:56:2a:e2:20:91:c5:b9:f8:cd:94: a2:2b:b0:c1:65:e8:a5:b8:23:79:37:bf:5f:57:de: 6c:41:e9:4a:46:5d:9d:e1:b1:f1:34:f8:29:aa:01: c1:25:83:bc:84:11:8f:89:84:6f:53:81:6e:a9:f1: 0f:d1:9f:b5:09:60:72:58:e7:ea:dc:ec:09:7a:ca: f2:2b:c8:3f:c6:08:bb:a2:6b:41:0e:b4:ce:cf:dc: 82:d9:41:cf:86:3e:c2:6b:80:4c:4f:7e:a7:c8:ed: 16:5b:7d:4d:e1:8e:e7:3b:cc:41:d3:16:0e:20:bb: 64:07:94:ef:e4:df:92:3b:5e:3b:34:54:10:3c:a4: 9c:d5:91:df:bb:57:04:bc:38:e1:16:55:59:2e:4e: c5:76:46:e1:45:52:ea:a0:c9:5d:a1:cd:e4:2b:91: 5a:06:06:a6:56:0a:a5:6e:82:28:b2:52:c8:37:a7: cf:57:2b:d5:02:f2:b7:b8:da:53:d1:b6:d5:18:b1: 26:65:1a:f2:ba:ef:68:f5:03:a6:b9:d3:70:ab:9a: 71:f5:bc:63:8c:63:42:46:c5:62:82:88:f7:e0:a8: 92:3d:c5:64:ec:4e:0e:76:88:70:3f:78:e1:94:de: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:BB:72:FD:E1:FB:A6:13:78:32:4C:92:AD:83:71:70:83:A7:D7 X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:ac:59:33:12:6f:d5:d6:82:07:78:b8:0b:e2:78:58:05: 94:4e:f9:92:00:76:4a:d5:6d:b7:2c:14:e0:87:ca:1a:bc:3f: c3:8d:3f:09:bb:4b:bd:7a:38:64:fa:1a:c3:b6:10:14:98:55: 87:74:67:d0:c2:45:39:f3:68:a2:db:67:39:a9:a2:fd:05:9a: a7:19:b2:a1:7b:4d:62:47:d4:75:0a:5d:24:c5:1d:55:39:6c: e8:6c:5c:40:ec:02:2a:7e:d2:2f:a6:86:ff:8d:14:c2:ef:cc: f8:c6:38:b9:27:6b:66:e1:01:7b:44:d0:07:69:69:7a:a9:14: 60:88:6e:58:a7:83:bf:19:de:28:10:12:05:4a:05:c1:7e:14: 6b:fe:f7:fe:a8:f4:4f:c9:b2:54:12:1b:b7:0c:33:f6:fe:71: 07:f0:a3:b3:86:00:a6:d6:8a:08:fa:f6:a3:17:cb:40:f8:dc: 26:e5:b5:b0:cf:f7:89:5a:8d:35:ee:53:d0:69:cf:e2:d0:11: 66:e7:7d:ee:62:a8:81:97:99:f4:d1:05:ad:31:28:15:88:a0: 1c:85:e7:ec:8d:94:02:f6:fa:87:65:9d:6d:00:e0:af:6e:41: b9:8e:d6:7b:4e:8f:38:a6:66:c3:0b:5b:d0:03:63:f3:18:e4: 01:cd:4c:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUphXP+h5iaq0litVbUhGl8Ln4BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjA3MjQxMzExMTZaFw0yNjA3MjUxNTU2MTZaMDMxMTAvBgNV BAMTKDIxN0VCQjcyRkRFMUZCQTYxMzc4MzI0QzkyQUQ4MzcxNzA4M0E3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5q3c5TZYJKYDOJT71NFjZKBW ViriIJHFufjNlKIrsMFl6KW4I3k3v19X3mxB6UpGXZ3hsfE0+CmqAcElg7yEEY+J hG9TgW6p8Q/Rn7UJYHJY5+rc7Al6yvIryD/GCLuia0EOtM7P3ILZQc+GPsJrgExP fqfI7RZbfU3hjuc7zEHTFg4gu2QHlO/k35I7Xjs0VBA8pJzVkd+7VwS8OOEWVVku TsV2RuFFUuqgyV2hzeQrkVoGBqZWCqVugiiyUsg3p89XK9UC8re42lPRttUYsSZl GvK672j1A6a503CrmnH1vGOMY0JGxWKCiPfgqJI9xWTsTg52iHA/eOGU3kTjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIX67cv3h+6YTeDJMkq2DcXCDp9cwHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU1NTEzNjEvMC9EMkZGMUQ3QzZERjFE RDc3NUE2MTA2OTcwRDA1RkY0NEJDQUQxOTQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4esWTMSb9XW ggd4uAvieFgFlE75kgB2StVttywU4IfKGrw/w40/CbtLvXo4ZPoaw7YQFJhVh3Rn 0MJFOfNoottnOami/QWapxmyoXtNYkfUdQpdJMUdVTls6GxcQOwCKn7SL6aG/40U wu/M+MY4uSdrZuEBe0TQB2lpeqkUYIhuWKeDvxneKBASBUoFwX4Ua/73/qj0T8my VBIbtwwz9v5xB/Cjs4YAptaKCPr2oxfLQPjcJuW1sM/3iVqNNe5T0GnP4tARZud9 7mKogZeZ9NEFrTEoFYigHIXn7I2UAvb6h2WdbQDgr25BuY7We06POKZmwwtb0ANj 8xjkAc1Mew== -----END CERTIFICATE-----Generated at Sat Jul 25 00:33:15 2026 by rpki-client