$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: VPuf1OMAoTY5hXfm3R4e5YIvE4BTyIssw9uRx0zj3gw= Subject key identifier: AC:D2:4E:8E:05:69:02:6B:00:9B:D5:CF:87:63:56:53:9E:D5:17:4E Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 60E204EAB085BBCDB8A8B59E26889E5A5C250700 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: FA Signing time: Fri 24 Jul 2026 07:45:38 +0000 Manifest this update: Fri 24 Jul 2026 07:40:38 +0000 Manifest next update: Sat 25 Jul 2026 08:12:38 +0000 Files and hashes: 1: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=) 2: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=) 3: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: pN3utqdaUkrgCCEjXK6iWd7tZXbE+GMdGcxiUo8chM4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e2:04:ea:b0:85:bb:cd:b8:a8:b5:9e:26:88:9e:5a:5c:25:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Jul 24 07:40:38 2026 GMT Not After : Jul 25 08:12:38 2026 GMT Subject: CN=ACD24E8E0569026B009BD5CF876356539ED5174E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:35:33:6e:0e:d9:77:90:62:0f:49:19:1c: 9f:26:c9:b0:20:1f:ef:69:4f:45:a5:1a:7d:08:44: 0d:ae:91:7d:a7:e4:71:5f:bf:1a:43:e2:f7:bb:d9: f4:b9:94:40:37:e7:68:4e:69:c2:10:0d:7e:2a:c0: 84:eb:20:42:ce:7d:0a:97:94:3d:37:ae:6f:79:e6: c6:5c:02:06:c9:e5:fc:22:46:d8:79:64:15:0e:76: 12:4a:ff:d2:ea:15:6d:4d:3c:c7:04:97:6e:6c:ae: 01:0f:bf:78:86:73:8f:42:de:f4:91:b1:7c:41:d5: d0:ce:d2:31:2c:99:a9:bb:24:29:db:3b:dd:65:73: 86:40:8c:2f:9f:1c:b6:05:ed:8a:55:ac:35:69:7d: 09:82:90:b0:1c:79:74:8d:27:1e:08:77:22:7b:d7: 84:f0:8c:67:5d:68:7b:eb:59:15:62:05:0a:41:2b: ac:8e:47:bd:dd:a0:8b:b3:47:5c:a4:3c:ff:69:fb: 64:c3:22:67:0d:9f:ca:63:a0:8c:e2:27:db:aa:f2: 93:b1:c1:f7:d5:89:4e:76:2c:47:89:ee:ad:ac:81: 9d:c2:b7:e0:c6:ef:68:cf:5d:5f:07:66:fb:2e:02: 62:c9:9e:00:9d:ad:aa:f4:65:36:c7:6d:e3:32:e3: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:4E:8E:05:69:02:6B:00:9B:D5:CF:87:63:56:53:9E:D5:17:4E X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fd:b3:e2:9e:bd:46:5d:34:bc:59:b8:95:5a:4f:73:c6:6b: 20:1d:51:01:1f:ce:41:6d:66:b9:ba:9c:a6:30:1f:1e:20:b7: 38:9e:56:f6:f2:b2:c9:1e:7d:2e:d4:2f:16:8e:7a:73:32:42: 97:11:71:08:3d:4f:f2:ec:6a:34:9c:53:d9:e3:a1:45:c7:8e: 7d:f9:03:15:43:08:cd:81:b9:92:3d:4f:d9:14:f1:7a:ec:20: 95:c5:43:cd:9c:8f:94:39:2c:93:27:e8:f8:c6:18:9e:06:8a: ab:19:8c:a3:2a:fd:89:35:ab:66:c3:54:6e:88:47:1f:54:17: 9f:59:84:ee:73:8f:fb:26:53:f7:d2:e1:bc:b1:b7:3f:7b:53: 9e:bd:4a:ce:5c:a3:85:1e:32:46:cc:5a:d2:59:80:76:81:64: 74:2d:a8:c2:40:ae:43:aa:70:cd:74:05:ee:82:4e:bc:c2:36: 2f:dc:92:ab:30:0b:0d:fc:8a:4f:d6:f2:7c:02:72:a8:82:ee: 8b:97:a5:a9:16:79:5a:52:69:d1:bf:fd:81:85:d1:be:af:27: 64:28:d8:98:b3:99:77:43:bc:58:e7:a4:fa:d8:e0:42:7a:d2: 64:3c:64:38:6d:44:99:61:96:cf:ae:9f:78:de:81:8e:6e:1a: 38:69:cf:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYOIE6rCFu824qLWeJoieWlwlBwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjA3MjQwNzQwMzhaFw0yNjA3MjUwODEyMzhaMDMxMTAvBgNV BAMTKEFDRDI0RThFMDU2OTAyNkIwMDlCRDVDRjg3NjM1NjUzOUVENTE3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PzUzbg7Zd5BiD0kZHJ8mybAg H+9pT0WlGn0IRA2ukX2n5HFfvxpD4ve72fS5lEA352hOacIQDX4qwITrIELOfQqX lD03rm955sZcAgbJ5fwiRth5ZBUOdhJK/9LqFW1NPMcEl25srgEPv3iGc49C3vSR sXxB1dDO0jEsmam7JCnbO91lc4ZAjC+fHLYF7YpVrDVpfQmCkLAceXSNJx4IdyJ7 14TwjGddaHvrWRViBQpBK6yOR73doIuzR1ykPP9p+2TDImcNn8pjoIziJ9uq8pOx wffViU52LEeJ7q2sgZ3Ct+DG72jPXV8HZvsuAmLJngCdrar0ZTbHbeMy45NVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrNJOjgVpAmsAm9XPh2NWU57VF04wHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv2z4p69Rl00 vFm4lVpPc8ZrIB1RAR/OQW1mubqcpjAfHiC3OJ5W9vKyyR59LtQvFo56czJClxFx CD1P8uxqNJxT2eOhRceOffkDFUMIzYG5kj1P2RTxeuwglcVDzZyPlDkskyfo+MYY ngaKqxmMoyr9iTWrZsNUbohHH1QXn1mE7nOP+yZT99LhvLG3P3tTnr1KzlyjhR4y Rsxa0lmAdoFkdC2owkCuQ6pwzXQF7oJOvMI2L9ySqzALDfyKT9byfAJyqILui5el qRZ5WlJp0b/9gYXRvq8nZCjYmLOZd0O8WOek+tjgQnrSZDxkOG1EmWGWz66feN6B jm4aOGnPJQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:38:55 2026 by rpki-client