$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: XRiFu9LcaZWSD0olQ2pRl/cj9RZ0BKRQ5pCHYByAM4s= Subject key identifier: E0:61:30:16:3B:C5:EB:C3:C2:06:70:5C:FA:40:15:C4:2F:11:10:7B Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 11F8CE29AF57C70E6B82F1A7A747FE2B5C0F2736 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: F7 Signing time: Fri 24 Jul 2026 07:05:35 +0000 Manifest this update: Fri 24 Jul 2026 07:00:35 +0000 Manifest next update: Sat 25 Jul 2026 10:30:35 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: jjnrPVitGtVIkM9iMfVzUzQeaz45z71SmH5hSrfYMPE=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 10:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f8:ce:29:af:57:c7:0e:6b:82:f1:a7:a7:47:fe:2b:5c:0f:27:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jul 24 07:00:35 2026 GMT Not After : Jul 25 10:30:35 2026 GMT Subject: CN=E06130163BC5EBC3C206705CFA4015C42F11107B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:fe:59:d1:87:fc:14:eb:64:e1:da:53:fa: c7:49:63:3a:79:79:6c:ae:59:c4:61:9c:09:b8:44: 5e:00:1b:f9:d7:7c:84:83:ec:99:cc:57:9f:e5:be: ac:a4:fd:ee:3a:24:ac:8d:42:0b:0e:75:85:22:cd: ed:57:ca:b2:ed:5f:a3:d3:5f:11:06:17:36:ac:3c: 63:18:9b:d1:4e:ae:e7:63:ec:1c:47:83:17:56:6d: d9:79:0f:1f:17:fd:f4:20:fb:2a:30:f1:7e:f8:9b: e8:79:5f:9d:f9:07:19:0e:4b:23:31:48:6d:9a:34: 16:01:61:e4:96:b1:83:a8:df:80:24:d1:f2:f2:6a: 41:58:92:ab:30:db:6b:ae:44:fc:4f:3d:1b:3d:16: 33:4b:20:5f:6d:0e:f3:88:91:d7:ed:bb:b9:9c:e4: f4:83:d4:38:2c:7a:6b:d1:ed:1a:01:bf:22:39:53: e4:fd:7e:2a:0f:fc:21:e7:2a:0a:c6:9e:f2:a3:3c: 2d:ea:15:08:05:65:51:9d:98:75:3c:1c:a5:94:2e: 66:29:36:9c:83:cb:d8:96:c8:60:39:3f:70:3c:e3: be:7b:8e:3d:1e:a9:10:af:38:f6:c7:42:16:30:24: 93:1e:f8:b4:56:ed:35:bb:7f:f2:e9:13:47:39:51: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:30:16:3B:C5:EB:C3:C2:06:70:5C:FA:40:15:C4:2F:11:10:7B X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a3:b3:5c:6f:8a:ab:cf:cc:06:de:c5:e1:f9:91:2e:4d:e8: 9d:72:73:b6:05:00:10:2c:2f:7c:bb:8f:02:d7:7f:30:96:43: 12:a4:7e:71:4b:7f:b5:c0:84:0a:eb:47:cd:d0:ff:6f:f9:b4: e6:4c:e7:c2:6a:88:8c:a2:d1:32:cb:46:98:95:bb:76:2c:b2: 26:8a:27:2d:69:5f:92:1f:d2:95:5b:01:80:9f:ef:47:18:d7: 19:15:3f:ce:e9:bf:e5:48:c4:b3:b5:ce:29:91:57:71:9b:b7: 32:bb:a5:44:d9:1a:47:20:87:0a:bf:1e:8a:02:81:b5:ca:be: a3:a5:fe:58:ab:1e:4d:19:0c:ac:11:e5:c4:2f:13:f3:7c:bd: 34:82:a6:cc:6d:81:02:b7:58:f2:7a:c2:6a:36:36:b0:71:4a: 74:4d:8f:6a:70:fb:eb:a8:dc:96:ac:92:53:a4:38:a9:c8:c8: 18:a1:b5:52:62:e1:f1:30:b9:e8:8c:ef:28:f7:e8:ae:eb:df: 6d:c4:e5:bf:b3:04:c6:29:9f:1a:b2:69:f3:07:04:7d:11:31: 46:d9:9c:64:ff:0f:ac:08:82:61:fa:c8:6b:7a:7a:83:7c:ab: 69:54:2d:a3:ba:d2:ef:5e:24:a4:71:a0:c5:96:4e:dd:ec:44: dd:c8:80:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEfjOKa9Xxw5rgvGnp0f+K1wPJzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA3MjQwNzAwMzVaFw0yNjA3MjUxMDMwMzVaMDMxMTAvBgNV BAMTKEUwNjEzMDE2M0JDNUVCQzNDMjA2NzA1Q0ZBNDAxNUM0MkYxMTEwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+v5Z0Yf8FOtk4dpT+sdJYzp5 eWyuWcRhnAm4RF4AG/nXfISD7JnMV5/lvqyk/e46JKyNQgsOdYUize1XyrLtX6PT XxEGFzasPGMYm9FOrudj7BxHgxdWbdl5Dx8X/fQg+yow8X74m+h5X535BxkOSyMx SG2aNBYBYeSWsYOo34Ak0fLyakFYkqsw22uuRPxPPRs9FjNLIF9tDvOIkdftu7mc 5PSD1DgsemvR7RoBvyI5U+T9fioP/CHnKgrGnvKjPC3qFQgFZVGdmHU8HKWULmYp NpyDy9iWyGA5P3A84757jj0eqRCvOPbHQhYwJJMe+LRW7TW7f/LpE0c5UYG/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4GEwFjvF68PCBnBc+kAVxC8REHswHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKOzXG+Kq8/M Bt7F4fmRLk3onXJztgUAECwvfLuPAtd/MJZDEqR+cUt/tcCECutHzdD/b/m05kzn wmqIjKLRMstGmJW7diyyJoonLWlfkh/SlVsBgJ/vRxjXGRU/zum/5UjEs7XOKZFX cZu3MrulRNkaRyCHCr8eigKBtcq+o6X+WKseTRkMrBHlxC8T83y9NIKmzG2BArdY 8nrCajY2sHFKdE2PanD766jclqySU6Q4qcjIGKG1UmLh8TC56IzvKPforuvfbcTl v7MEximfGrJp8wcEfRExRtmcZP8PrAiCYfrIa3p6g3yraVQto7rS714kpHGgxZZO 3exE3ciAzw== -----END CERTIFICATE-----Generated at Fri Jul 24 22:42:35 2026 by rpki-client