$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: 1zPxU/jTrcQXFEUANlFxmHs0hS04bL57vH07TW15rS0= Subject key identifier: 41:99:66:3C:CE:7E:F9:F5:22:0F:9E:3D:24:A6:D7:A8:4D:48:97:A5 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 376E0B6C9F75F059271136FC1D57C7E287D1EDB3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: FB Signing time: Fri 24 Jul 2026 17:41:48 +0000 Manifest this update: Fri 24 Jul 2026 17:36:48 +0000 Manifest next update: Sat 25 Jul 2026 21:37:48 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: f2Q1NbXtEscoUPzVaXZiS3l9/nyW6ESwBRXOABWY4HM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6e:0b:6c:9f:75:f0:59:27:11:36:fc:1d:57:c7:e2:87:d1:ed:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Jul 24 17:36:48 2026 GMT Not After : Jul 25 21:37:48 2026 GMT Subject: CN=4199663CCE7EF9F5220F9E3D24A6D7A84D4897A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:ef:8f:f9:f8:c1:ac:36:80:34:19:70:d3: ec:9d:8a:d5:ad:39:64:6f:72:28:05:4b:d9:f1:1b: e1:6d:d5:04:4a:77:81:43:7a:be:70:94:44:9e:4b: 16:7a:8a:88:0f:3e:bd:5b:f5:80:fc:14:cc:46:4c: a7:9d:cb:25:be:c7:e9:d0:7f:30:b9:e6:9d:e3:d0: b0:32:58:1d:42:8b:2f:1e:a1:67:07:e0:9d:79:b2: a7:c3:39:9c:3c:b6:55:21:ff:1c:5a:93:84:17:df: 91:4f:7d:18:b5:8e:65:e8:40:36:8a:de:2d:3b:55: ba:3f:b4:50:4d:0c:c2:6e:f8:36:0b:5a:ac:63:07: 65:2c:2e:59:59:1f:0e:f0:9f:b4:03:cb:08:ab:e5: 99:3f:1f:6e:9c:e0:b4:58:72:d4:1b:ce:5f:e2:e5: f8:d2:8e:da:3a:e7:86:17:57:1e:05:b7:53:c7:35: 42:57:2e:26:28:33:fa:5d:38:5a:33:ac:81:92:18: 58:5e:d5:75:c7:db:bf:e3:a2:db:47:8a:4d:db:65: 32:ae:3c:90:15:8d:24:ed:ef:3b:96:16:e2:b6:5b: 9b:64:93:e5:d2:aa:46:fc:4b:74:44:fc:42:f7:5f: 84:66:ca:ea:87:4c:30:01:21:b9:ad:ad:c1:20:79: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:66:3C:CE:7E:F9:F5:22:0F:9E:3D:24:A6:D7:A8:4D:48:97:A5 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:06:15:ec:fa:c4:8d:1d:f7:cb:5a:d6:4f:14:5a:bd:4c:c2: a8:1e:da:4b:14:a7:be:c3:10:49:e7:84:6a:6c:50:6e:ce:a4: 2e:97:c8:e4:73:5e:ac:83:b9:4b:c9:1f:c7:ed:13:f3:77:3e: 3e:ff:0a:9f:57:7d:f9:80:53:19:22:be:b8:8f:1b:89:1a:6f: b2:e4:db:a1:63:02:42:cc:00:d7:f1:5d:fe:b0:31:37:85:7a: 69:69:66:a1:00:bd:8c:a6:fc:94:e0:df:a0:a4:06:31:fc:0b: 6d:70:2b:5b:30:22:f2:36:2d:a4:b9:38:26:dc:d8:ed:6c:bc: bc:70:50:c3:73:67:56:f5:6a:3b:2b:cd:56:42:ba:ed:b2:63: 7d:36:f2:46:c6:96:c4:ae:10:72:86:8e:77:b7:81:6d:09:6b: 31:cc:df:b6:6d:20:ea:3b:95:a8:af:73:42:a7:ce:ad:1e:ba: eb:04:b3:2a:c1:fd:06:c3:1a:25:eb:b7:c6:d4:98:ce:06:38: f7:bb:de:ec:a4:43:2c:32:e0:9c:79:b4:41:30:23:3f:3a:e0: cb:01:d8:f4:69:14:2f:98:c2:d6:e6:f5:31:56:95:75:7d:1d: 50:51:7f:96:a2:28:20:91:3c:2c:35:83:d9:00:20:9d:f0:e0: 3a:12:6f:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN24LbJ918FknETb8HVfH4ofR7bMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA3MjQxNzM2NDhaFw0yNjA3MjUyMTM3NDhaMDMxMTAvBgNV BAMTKDQxOTk2NjNDQ0U3RUY5RjUyMjBGOUUzRDI0QTZEN0E4NEQ0ODk3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67++P+fjBrDaANBlw0+yditWt OWRvcigFS9nxG+Ft1QRKd4FDer5wlESeSxZ6iogPPr1b9YD8FMxGTKedyyW+x+nQ fzC55p3j0LAyWB1Ciy8eoWcH4J15sqfDOZw8tlUh/xxak4QX35FPfRi1jmXoQDaK 3i07Vbo/tFBNDMJu+DYLWqxjB2UsLllZHw7wn7QDywir5Zk/H26c4LRYctQbzl/i 5fjSjto654YXVx4Ft1PHNUJXLiYoM/pdOFozrIGSGFhe1XXH27/jottHik3bZTKu PJAVjSTt7zuWFuK2W5tkk+XSqkb8S3RE/EL3X4RmyuqHTDABIbmtrcEgeT9lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQZlmPM5++fUiD549JKbXqE1Il6UwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQYV7PrEjR33 y1rWTxRavUzCqB7aSxSnvsMQSeeEamxQbs6kLpfI5HNerIO5S8kfx+0T83c+Pv8K n1d9+YBTGSK+uI8biRpvsuTboWMCQswA1/Fd/rAxN4V6aWlmoQC9jKb8lODfoKQG MfwLbXArWzAi8jYtpLk4JtzY7Wy8vHBQw3NnVvVqOyvNVkK67bJjfTbyRsaWxK4Q coaOd7eBbQlrMczftm0g6juVqK9zQqfOrR666wSzKsH9BsMaJeu3xtSYzgY497ve 7KRDLDLgnHm0QTAjPzrgywHY9GkUL5jC1ub1MVaVdX0dUFF/lqIoIJE8LDWD2QAg nfDgOhJvBA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:09:17 2026 by rpki-client