$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: leBNJ31VwOXhb1xb0DrMte3/7sKMr2gbv40oG4dZRKs= Subject key identifier: BA:28:D3:3B:2D:02:E0:5D:74:BA:13:05:3D:88:27:0B:79:22:63:30 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 7160CDB746B568E6D1BFA80E1C31B14A10CDF280 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: FA Signing time: Fri 24 Jul 2026 04:05:19 +0000 Manifest this update: Fri 24 Jul 2026 04:00:19 +0000 Manifest next update: Sat 25 Jul 2026 06:39:19 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: T1U8yTx4Hc/UscVDV+R2A44o1mkR4BzZEQuslPYaMZE=) 2: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:60:cd:b7:46:b5:68:e6:d1:bf:a8:0e:1c:31:b1:4a:10:cd:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Jul 24 04:00:19 2026 GMT Not After : Jul 25 06:39:19 2026 GMT Subject: CN=BA28D33B2D02E05D74BA13053D88270B79226330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:6a:ff:26:b0:76:33:dd:dd:0d:df:d7:4a: c5:34:ef:09:f2:f7:c8:0c:84:be:b5:05:e5:03:de: 43:ce:88:e8:98:c1:bb:c1:c4:19:7a:78:20:37:5f: 2e:ce:ff:4a:40:4b:4a:69:9a:f9:c8:cf:d9:91:7f: 8d:55:33:26:2a:3a:d0:e6:a7:08:25:74:4b:e0:51: 25:5e:96:05:43:0a:aa:f0:81:d9:76:af:74:79:70: fd:4a:fe:12:cd:4f:78:d6:74:53:9c:58:b9:f0:27: 49:90:be:49:41:6f:34:da:c9:b3:3a:77:2c:2e:24: 6a:67:62:46:a4:28:05:59:ef:97:83:d8:7e:83:74: a6:66:4f:a8:56:77:a0:e3:7d:88:af:6c:e2:5c:2e: 0d:49:c0:d7:a9:cc:53:6c:29:3a:fe:f3:06:94:f9: 4e:ed:07:59:14:f0:15:ca:b7:50:48:c9:b7:f8:82: 2b:d3:16:8d:48:ac:24:e4:9b:48:7a:86:fe:75:d5: 2b:ae:ec:00:44:19:47:67:c1:ca:ce:1c:50:bf:90: 46:a9:e8:7b:35:eb:b4:6e:43:a2:25:9d:4f:2c:d3: 67:2c:60:ef:36:18:83:10:01:c9:91:d7:32:61:bc: f1:6e:5b:62:b2:19:67:d9:15:5d:02:dc:40:fa:9d: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:D3:3B:2D:02:E0:5D:74:BA:13:05:3D:88:27:0B:79:22:63:30 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0d:aa:28:0c:e5:ef:fe:d2:a2:e6:81:05:a9:27:44:fe:44: 8c:4d:c1:37:7b:01:dc:83:da:e6:81:a6:04:55:98:77:12:f9: 93:5e:83:c6:55:b3:28:5d:b6:c9:66:1a:8e:35:4e:a7:55:88: 19:f5:13:45:e2:31:19:bb:03:ad:17:14:61:2e:e0:76:e2:af: af:1d:50:8e:47:52:f6:0f:e3:30:3c:cb:2f:b0:f9:47:05:9b: 2b:89:00:ee:25:a8:70:89:82:2f:e2:f7:aa:89:a1:e2:42:1b: b6:73:7f:d4:5a:de:b4:3f:18:7c:d7:15:73:16:5c:13:30:36: cc:88:1f:20:5d:ef:d2:09:2c:fa:f2:f9:69:8e:23:fb:b2:04: c7:7a:23:44:87:82:6e:0a:1c:e1:4a:2c:b5:16:aa:da:9a:db: 67:b3:3d:11:fb:2c:63:f1:b0:66:8f:eb:4a:5b:3a:51:a0:fa: 89:14:0f:ef:19:ac:65:e9:41:f7:3e:27:64:0b:5d:01:24:c7: 1c:6a:8d:37:b5:45:f9:be:cb:23:64:23:d7:c9:dc:6b:57:1d: 33:7b:ec:75:43:a4:d7:e9:c2:00:5e:56:75:17:83:ef:22:ca: 10:9e:03:16:37:80:b5:8e:4b:27:d2:f0:82:5e:b9:9d:e1:ce: f0:f5:06:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcWDNt0a1aObRv6gOHDGxShDN8oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA3MjQwNDAwMTlaFw0yNjA3MjUwNjM5MTlaMDMxMTAvBgNV BAMTKEJBMjhEMzNCMkQwMkUwNUQ3NEJBMTMwNTNEODgyNzBCNzkyMjYzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm82r/JrB2M93dDd/XSsU07wny 98gMhL61BeUD3kPOiOiYwbvBxBl6eCA3Xy7O/0pAS0ppmvnIz9mRf41VMyYqOtDm pwgldEvgUSVelgVDCqrwgdl2r3R5cP1K/hLNT3jWdFOcWLnwJ0mQvklBbzTaybM6 dywuJGpnYkakKAVZ75eD2H6DdKZmT6hWd6DjfYivbOJcLg1JwNepzFNsKTr+8waU +U7tB1kU8BXKt1BIybf4givTFo1IrCTkm0h6hv511Suu7ABEGUdnwcrOHFC/kEap 6Hs167RuQ6IlnU8s02csYO82GIMQAcmR1zJhvPFuW2KyGWfZFV0C3ED6ndNdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuijTOy0C4F10uhMFPYgnC3kiYzAwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsg2qKAzl7/7S ouaBBaknRP5EjE3BN3sB3IPa5oGmBFWYdxL5k16DxlWzKF22yWYajjVOp1WIGfUT ReIxGbsDrRcUYS7gduKvrx1QjkdS9g/jMDzLL7D5RwWbK4kA7iWocImCL+L3qomh 4kIbtnN/1FretD8YfNcVcxZcEzA2zIgfIF3v0gks+vL5aY4j+7IEx3ojRIeCbgoc 4UostRaq2prbZ7M9EfssY/GwZo/rSls6UaD6iRQP7xmsZelB9z4nZAtdASTHHGqN N7VF+b7LI2Qj18nca1cdM3vsdUOk1+nCAF5WdReD7yLKEJ4DFjeAtY5LJ9Lwgl65 neHO8PUGTA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:25:18 2026 by rpki-client