$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: E3saGbGDu5z8+p6g0CE/TApFMnzeHtURPcOBPqiNIG4= Subject key identifier: DA:D1:39:3F:42:C3:B2:4E:AF:92:5D:51:7D:A5:4B:64:BD:B9:0F:C2 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 6537D8ECEFF474D142C5E7BB391A4084C84E4596 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 05:00:24 +0000 Manifest this update: Fri 24 Jul 2026 04:55:24 +0000 Manifest next update: Sat 25 Jul 2026 05:21:24 +0000 Files and hashes: 1: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 2: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: JkWq3BhZYgkMxQ51m4PK9n65ACwb+jXtIypGPGNTDtw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:37:d8:ec:ef:f4:74:d1:42:c5:e7:bb:39:1a:40:84:c8:4e:45:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jul 24 04:55:24 2026 GMT Not After : Jul 25 05:21:24 2026 GMT Subject: CN=DAD1393F42C3B24EAF925D517DA54B64BDB90FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:09:bb:fe:1c:13:6d:2a:22:37:0b:0b:55: ec:c4:f9:ee:f2:92:05:63:69:64:b9:04:60:bd:fc: 17:7c:2a:0e:2d:e4:4c:46:50:17:27:b6:87:88:88: 70:1c:ce:2c:ad:8d:5d:71:60:86:85:12:b7:db:2b: 06:12:77:4b:23:53:3d:59:3f:90:f9:aa:b0:c2:03: 6f:03:1c:4a:0d:3c:2b:f5:54:b8:17:9a:a8:5a:1f: 68:9d:24:fb:2c:7e:99:92:63:db:64:ff:54:94:bf: 5f:8e:16:87:7d:b1:d8:06:33:33:cc:d5:2d:99:74: dd:7f:c1:f2:51:b6:6a:a7:09:1c:4c:38:15:f8:a6: c8:9b:4d:64:aa:18:23:da:28:0b:7a:ff:72:74:19: bb:4b:c0:94:d3:2c:44:cc:12:51:18:d4:d5:b1:9c: e7:88:72:59:ca:6b:16:4f:52:b0:0a:85:72:18:3d: 65:99:0c:30:52:87:a1:6f:19:7e:ec:34:b5:62:df: 59:4b:aa:c5:3b:e1:df:2e:85:84:3f:94:fe:e8:f8: 2f:29:5b:7a:90:3f:66:a0:96:7b:4b:53:b7:aa:86: ae:c3:69:4a:78:c8:59:28:6d:48:c0:50:4d:68:b7: d6:fb:a3:82:6d:7b:b6:af:02:7c:fd:d4:02:91:b6: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:39:3F:42:C3:B2:4E:AF:92:5D:51:7D:A5:4B:64:BD:B9:0F:C2 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:91:c1:51:40:4f:80:e9:01:3e:0f:73:01:e4:24:c7:6a:fa: 82:5c:f8:f5:4b:a4:83:e6:b0:04:d2:d7:2a:bf:be:0a:2d:0f: 39:73:89:51:6c:ea:d5:22:08:12:d4:0d:64:fc:45:2a:d7:0f: d1:58:6e:4e:c8:73:20:85:c6:d2:63:e6:e8:c0:40:29:10:43: 97:59:15:8b:cd:92:12:0c:26:58:22:43:53:41:85:cd:68:e2: 63:e6:09:9c:12:a5:83:08:09:0a:3d:2d:70:65:e4:b2:e9:58: 1a:34:be:70:a1:88:a0:2a:b4:95:df:d8:1b:a7:2a:a5:b2:80: 49:46:94:b2:89:c6:a8:cf:b2:a0:de:89:b6:61:f0:f1:d5:85: 3a:ed:4e:4f:5e:68:b2:7a:29:07:f0:ce:b3:5d:de:ea:0f:d2: eb:64:c4:55:47:8e:4b:0a:eb:98:06:13:2b:90:42:4c:c9:e3: b5:7d:7b:d6:44:99:d9:3a:45:6f:2a:7d:e6:48:c0:6f:5c:a3: c0:ae:1c:00:d2:84:1c:63:44:f1:d7:bf:5f:4d:7e:b5:ce:86: 7f:28:ec:89:a6:e2:d9:72:fc:5e:30:a1:93:c2:cb:59:0d:ae: af:a9:66:9c:e0:34:fd:55:d9:40:83:b4:26:0e:5b:cb:5b:4d: 13:48:4e:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZTfY7O/0dNFCxee7ORpAhMhORZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA3MjQwNDU1MjRaFw0yNjA3MjUwNTIxMjRaMDMxMTAvBgNV BAMTKERBRDEzOTNGNDJDM0IyNEVBRjkyNUQ1MTdEQTU0QjY0QkRCOTBGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/Qm7/hwTbSoiNwsLVezE+e7y kgVjaWS5BGC9/Bd8Kg4t5ExGUBcntoeIiHAcziytjV1xYIaFErfbKwYSd0sjUz1Z P5D5qrDCA28DHEoNPCv1VLgXmqhaH2idJPssfpmSY9tk/1SUv1+OFod9sdgGMzPM 1S2ZdN1/wfJRtmqnCRxMOBX4psibTWSqGCPaKAt6/3J0GbtLwJTTLETMElEY1NWx nOeIclnKaxZPUrAKhXIYPWWZDDBSh6FvGX7sNLVi31lLqsU74d8uhYQ/lP7o+C8p W3qQP2aglntLU7eqhq7DaUp4yFkobUjAUE1ot9b7o4Jte7avAnz91AKRtjRDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2tE5P0LDsk6vkl1RfaVLZL25D8IwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJHBUUBPgOkB Pg9zAeQkx2r6glz49Uukg+awBNLXKr++Ci0POXOJUWzq1SIIEtQNZPxFKtcP0Vhu TshzIIXG0mPm6MBAKRBDl1kVi82SEgwmWCJDU0GFzWjiY+YJnBKlgwgJCj0tcGXk sulYGjS+cKGIoCq0ld/YG6cqpbKASUaUsonGqM+yoN6JtmHw8dWFOu1OT15osnop B/DOs13e6g/S62TEVUeOSwrrmAYTK5BCTMnjtX171kSZ2TpFbyp95kjAb1yjwK4c ANKEHGNE8de/X01+tc6Gfyjsiabi2XL8XjChk8LLWQ2ur6lmnOA0/VXZQIO0Jg5b y1tNE0hO8g== -----END CERTIFICATE-----Generated at Fri Jul 24 19:49:51 2026 by rpki-client