$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: 7Hw1rn3rvY9/XsTqCbqq9TGr5b3LUs/vfj/tU97aF28= Subject key identifier: 4B:A4:4F:6E:7C:D0:F4:3E:E7:E5:72:45:80:A1:CF:5C:0D:E8:8E:19 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 1621567E1056A6FF359BEFFFFF9E761CBE5E5BAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 0124 Signing time: Fri 24 Jul 2026 11:21:04 +0000 Manifest this update: Fri 24 Jul 2026 11:16:04 +0000 Manifest next update: Sat 25 Jul 2026 15:12:04 +0000 Files and hashes: 1: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=) 2: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=) 3: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=) 4: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 5: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=) 6: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=) 7: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 8: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 9: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 10: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: 5gHuBWCUWRnYTj6NTIsmVhS7ClmrqsUwaDi5HWpDAW0=) 11: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=) 12: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=) 13: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=) 14: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 15: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=) 16: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=) 17: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 18: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=) 19: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=) 20: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:21:56:7e:10:56:a6:ff:35:9b:ef:ff:ff:9e:76:1c:be:5e:5b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Jul 24 11:16:04 2026 GMT Not After : Jul 25 15:12:04 2026 GMT Subject: CN=4BA44F6E7CD0F43EE7E5724580A1CF5C0DE88E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:cc:ed:35:c0:25:9a:35:90:d5:89:53:bb: 5c:cc:27:5c:7f:77:1c:59:07:07:0b:8f:40:2a:84: d4:43:e6:b6:19:3c:84:30:c5:bd:a1:43:51:d4:89: e5:33:3c:ea:19:a6:84:30:42:0e:af:eb:d8:96:e3: db:e3:46:a8:aa:4b:0c:1e:30:94:7d:ff:30:f4:50: 8d:53:2d:c4:60:be:b5:95:a0:32:2f:07:a7:09:6f: cf:94:2b:c6:25:e5:eb:a6:d6:0b:b6:f6:23:10:cc: ca:e0:06:31:fb:46:e7:7a:b1:eb:a6:18:74:6e:4d: bc:e7:a7:d2:98:38:18:62:da:20:13:04:e2:a1:d6: a9:c7:1a:9b:e8:2e:8c:47:75:59:00:e1:a1:2d:d7: 46:74:5f:33:52:1e:25:43:d4:0a:47:29:37:99:43: 9b:ed:6b:d7:b9:ad:2d:19:1c:f6:9a:98:a0:7d:93: 1a:dd:b7:ec:de:15:c9:9f:2c:89:3c:a5:df:4b:41: 4e:e5:31:dd:77:85:c6:e8:db:4d:f6:af:6f:e0:a2: 01:df:ea:ff:b9:e4:17:87:7f:97:c8:8b:c1:d6:20: db:f3:ba:bd:21:18:42:5d:67:9e:60:9b:d4:4b:9f: e4:5f:fe:64:a8:22:ab:6c:49:a3:6f:bb:a8:dc:95: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:4F:6E:7C:D0:F4:3E:E7:E5:72:45:80:A1:CF:5C:0D:E8:8E:19 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ed:8b:07:fb:9a:06:ad:17:09:4a:44:11:cc:9d:01:7d:7a: 50:9b:b9:bd:91:46:b9:86:0a:99:95:69:5d:b9:eb:46:17:54: 3b:12:11:32:3b:a1:86:d3:34:3d:44:2e:eb:d3:29:92:0a:6f: 74:73:f4:e9:5e:a4:98:47:24:7a:df:0b:46:14:07:81:3b:3b: ef:45:1d:13:bc:73:de:ed:d0:8a:9c:96:88:15:dd:28:aa:3a: 31:71:58:1b:8e:21:b8:82:d3:38:ed:79:c9:78:ee:0f:16:e2: 08:1d:74:cb:9f:17:8d:a4:a5:b3:37:c1:be:1c:01:cd:ef:c3: 17:4d:e7:c0:00:5b:ed:99:a1:67:4a:00:2c:80:37:08:89:b6: c8:8d:09:8d:c0:bc:3c:42:4d:46:4c:2e:33:95:38:31:b3:b8: bb:de:40:b2:9d:8d:23:76:f3:0e:41:ec:3f:1b:9e:45:7b:a8: de:1d:93:cf:da:48:66:5a:5f:8e:4a:0b:c7:34:7b:16:6e:15: 13:4c:65:31:60:ef:b8:fb:cb:db:93:14:64:8f:05:31:fb:cb: f0:17:5f:51:80:a4:05:b9:39:63:61:9d:47:f7:51:e5:69:f5: 87:7e:8c:1f:e0:74:f8:ce:79:a9:d2:ed:ff:b1:3c:fe:36:8c: a4:6c:9a:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFiFWfhBWpv81m+///552HL5eW60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA3MjQxMTE2MDRaFw0yNjA3MjUxNTEyMDRaMDMxMTAvBgNV BAMTKDRCQTQ0RjZFN0NEMEY0M0VFN0U1NzI0NTgwQTFDRjVDMERFODhFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27sztNcAlmjWQ1YlTu1zMJ1x/ dxxZBwcLj0AqhNRD5rYZPIQwxb2hQ1HUieUzPOoZpoQwQg6v69iW49vjRqiqSwwe MJR9/zD0UI1TLcRgvrWVoDIvB6cJb8+UK8Yl5eum1gu29iMQzMrgBjH7Rud6seum GHRuTbznp9KYOBhi2iATBOKh1qnHGpvoLoxHdVkA4aEt10Z0XzNSHiVD1ApHKTeZ Q5vta9e5rS0ZHPaamKB9kxrdt+zeFcmfLIk8pd9LQU7lMd13hcbo2032r2/gogHf 6v+55BeHf5fIi8HWINvzur0hGEJdZ55gm9RLn+Rf/mSoIqtsSaNvu6jclTpNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS6RPbnzQ9D7n5XJFgKHPXA3ojhkwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO2LB/uaBq0X CUpEEcydAX16UJu5vZFGuYYKmZVpXbnrRhdUOxIRMjuhhtM0PUQu69MpkgpvdHP0 6V6kmEcket8LRhQHgTs770UdE7xz3u3QipyWiBXdKKo6MXFYG44huILTOO15yXju DxbiCB10y58XjaSlszfBvhwBze/DF03nwABb7ZmhZ0oALIA3CIm2yI0JjcC8PEJN RkwuM5U4MbO4u95Asp2NI3bzDkHsPxueRXuo3h2Tz9pIZlpfjkoLxzR7Fm4VE0xl MWDvuPvL25MUZI8FMfvL8BdfUYCkBbk5Y2GdR/dR5Wn1h36MH+B0+M55qdLt/7E8 /jaMpGya4A== -----END CERTIFICATE-----Generated at Fri Jul 24 21:09:10 2026 by rpki-client