$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: PObSDsoV/S7FLAeNEnp7EpvJH4tyRxJHE6joZBRW8BY= Subject key identifier: 93:BC:16:FC:05:8B:AB:6D:E5:64:3C:FD:50:AC:CE:F1:45:AB:1A:57 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 7299478C8F70FD849B182D6003981C009BAFF387 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: F9 Signing time: Thu 23 Jul 2026 20:29:28 +0000 Manifest this update: Thu 23 Jul 2026 20:24:28 +0000 Manifest next update: Fri 24 Jul 2026 21:52:28 +0000 Files and hashes: 1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) 3: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 4: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: QlbyM7rZRGLKSdHswc93bbtMMumFinZy6681qY8GE6U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:99:47:8c:8f:70:fd:84:9b:18:2d:60:03:98:1c:00:9b:af:f3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Jul 23 20:24:28 2026 GMT Not After : Jul 24 21:52:28 2026 GMT Subject: CN=93BC16FC058BAB6DE5643CFD50ACCEF145AB1A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:ec:88:1d:0c:a0:b8:79:1f:3e:49:5b:25: 6a:18:46:b3:cb:92:09:80:16:5a:0a:be:14:ee:cb: ce:70:f6:65:3e:44:ef:67:ed:65:54:25:60:ff:38: 00:53:30:56:ac:36:32:1b:1e:0c:b6:da:5f:f7:eb: 28:eb:1c:70:66:d0:fd:7c:03:04:42:69:15:5b:73: fa:6e:bc:1c:e2:4e:5d:2e:06:89:bc:e9:87:c4:5e: 66:f6:fe:67:cc:14:39:e5:12:20:96:41:93:f6:17: ac:c5:f6:5c:5b:7a:7e:45:54:d1:b0:fb:9d:74:14: 8c:c0:01:83:37:a3:2f:3f:90:99:a0:75:b5:47:53: 7d:68:d4:86:eb:83:cb:1a:51:e2:7c:a3:fc:40:fd: 08:f6:f7:f3:64:2c:5f:cf:5a:05:08:62:88:c7:29: 5f:7e:6a:23:f6:6f:0f:0c:49:2d:db:82:b1:30:02: 02:64:6b:dc:c2:1c:41:59:73:bd:36:fd:ea:48:c6: 47:84:95:f4:cb:9a:f6:bf:f7:a7:2e:75:ae:7f:48: 5c:35:50:73:18:19:ff:05:cf:33:c0:ee:33:7e:fd: 94:ca:8f:73:f8:4a:7e:04:43:db:dd:7d:ae:6e:75: 00:77:3d:69:d7:99:72:e4:31:79:bb:76:e0:6d:55: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BC:16:FC:05:8B:AB:6D:E5:64:3C:FD:50:AC:CE:F1:45:AB:1A:57 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:16:46:af:1e:0e:9f:93:04:ee:46:41:27:53:86:35:d7:12: 83:d4:a2:e1:2e:62:f5:a3:e7:88:f8:81:23:7f:da:54:65:b9: fc:e9:39:e5:29:b5:ed:d0:a0:4d:8f:25:1a:ee:91:82:8c:db: 20:8d:17:c2:14:e7:03:fb:ea:e9:7e:78:06:10:4c:fc:a2:d2: 12:5e:a9:e6:02:a5:d9:e2:ef:1f:59:2c:80:54:29:7d:ec:07: b7:b1:a6:5c:11:45:11:b7:ec:03:d5:b7:53:d6:5a:81:2c:c9: 12:4f:1e:ab:f6:8b:5e:68:9d:11:bc:84:d3:1c:a4:2b:50:90: ec:f9:4d:94:da:65:f7:31:f9:6d:81:d5:93:2e:d6:c0:d0:44: ce:74:1c:7b:9d:df:25:5e:91:b5:5c:9b:83:09:c6:a0:f0:2d: 8a:91:c6:74:bb:13:d9:b0:9b:de:c2:73:92:33:a0:f5:c4:f8: 59:e1:9a:77:ce:fe:c5:d3:d2:b8:8e:df:d5:ff:62:b8:9a:15: 86:a3:bf:05:d3:fa:df:f1:d2:5e:fd:9f:b2:ea:39:93:79:b7: f9:c6:14:c0:b9:cf:92:76:9a:d4:ab:8c:a0:d6:5a:e7:de:19: 4d:ae:ea:cc:0c:b6:47:a6:e8:a8:d6:8a:2c:cb:30:c8:b0:59: c8:77:f8:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcplHjI9w/YSbGC1gA5gcAJuv84cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA3MjMyMDI0MjhaFw0yNjA3MjQyMTUyMjhaMDMxMTAvBgNV BAMTKDkzQkMxNkZDMDU4QkFCNkRFNTY0M0NGRDUwQUNDRUYxNDVBQjFBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TOyIHQyguHkfPklbJWoYRrPL kgmAFloKvhTuy85w9mU+RO9n7WVUJWD/OABTMFasNjIbHgy22l/36yjrHHBm0P18 AwRCaRVbc/puvBziTl0uBom86YfEXmb2/mfMFDnlEiCWQZP2F6zF9lxben5FVNGw +510FIzAAYM3oy8/kJmgdbVHU31o1Ibrg8saUeJ8o/xA/Qj29/NkLF/PWgUIYojH KV9+aiP2bw8MSS3bgrEwAgJka9zCHEFZc702/epIxkeElfTLmva/96cuda5/SFw1 UHMYGf8FzzPA7jN+/ZTKj3P4Sn4EQ9vdfa5udQB3PWnXmXLkMXm7duBtVRGvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk7wW/AWLq23lZDz9UKzO8UWrGlcwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRZGrx4On5ME 7kZBJ1OGNdcSg9Si4S5i9aPniPiBI3/aVGW5/Ok55Sm17dCgTY8lGu6RgozbII0X whTnA/vq6X54BhBM/KLSEl6p5gKl2eLvH1ksgFQpfewHt7GmXBFFEbfsA9W3U9Za gSzJEk8eq/aLXmidEbyE0xykK1CQ7PlNlNpl9zH5bYHVky7WwNBEznQce53fJV6R tVybgwnGoPAtipHGdLsT2bCb3sJzkjOg9cT4WeGad87+xdPSuI7f1f9iuJoVhqO/ BdP63/HSXv2fsuo5k3m3+cYUwLnPknaa1KuMoNZa594ZTa7qzAy2R6boqNaKLMsw yLBZyHf4LQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:24 2026 by rpki-client