$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: tin5gGyRCAy5CC+ZfACcMoB+Jb0XSz45Y5o2RB4kASo= Subject key identifier: 3C:C0:48:5D:B7:2E:D7:93:B5:D2:34:C7:2E:A2:F8:9D:8A:D4:63:DD Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 31D618FB769D0B308C648C6707D306125A7F4498 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 010B Signing time: Fri 24 Jul 2026 07:35:38 +0000 Manifest this update: Fri 24 Jul 2026 07:30:38 +0000 Manifest next update: Sat 25 Jul 2026 09:24:38 +0000 Files and hashes: 1: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) 2: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: e1mnhzW3rxZ4xkLk2Lqj3U54C+iZHEF0ASOJiZGrgds=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d6:18:fb:76:9d:0b:30:8c:64:8c:67:07:d3:06:12:5a:7f:44:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Jul 24 07:30:38 2026 GMT Not After : Jul 25 09:24:38 2026 GMT Subject: CN=3CC0485DB72ED793B5D234C72EA2F89D8AD463DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:17:d6:40:a6:e2:6b:ff:e4:f7:c8:cd:55: b3:76:d9:93:27:ae:e3:fe:b1:14:8c:1d:f5:c3:aa: 4e:aa:4c:39:eb:b9:17:e4:8a:ef:27:3d:85:57:78: 7a:98:39:cb:0d:b3:d5:79:51:7e:f7:e5:c7:5f:0d: 66:ba:74:7f:41:3c:3d:7b:88:2b:ea:7c:d5:fc:78: 2b:70:b1:20:d2:cc:ce:24:95:19:44:d0:02:b1:7c: fd:09:31:d8:f7:95:16:1a:03:b4:17:58:ef:97:83: f6:13:79:55:e1:e1:2d:09:84:43:87:22:1f:6f:7e: 69:3b:5d:17:5a:46:dc:dc:bf:f2:28:4b:c0:46:88: 3a:ae:bc:6a:e7:91:72:c3:c4:35:07:82:1e:c8:79: 3b:91:b3:c2:f4:1a:d4:2a:6a:5c:b8:cd:10:20:f3: 24:4b:42:a1:41:2b:52:36:ad:93:4d:c0:1c:2f:50: fa:94:e1:a5:8b:b5:ac:14:05:bd:80:d2:d1:ae:76: 5e:46:b0:bf:5b:89:f9:07:a3:e7:2c:29:12:88:52: 99:66:98:30:c3:b8:b0:7a:70:65:0c:09:a2:a1:05: 39:cd:61:37:40:d7:81:bc:1e:9d:0e:3d:0e:c0:5c: 0f:92:34:82:d3:8e:6c:34:de:22:7c:cc:a6:24:e5: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C0:48:5D:B7:2E:D7:93:B5:D2:34:C7:2E:A2:F8:9D:8A:D4:63:DD X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f7:ef:47:58:0e:71:af:9d:0c:a2:0b:1b:80:59:bc:bb:06: 3d:10:2c:f3:ee:5c:56:38:df:8f:bd:2a:39:4f:41:00:a4:4a: cc:7d:1d:a0:d6:26:50:c4:6e:b0:14:fe:d6:c5:64:ac:77:93: 65:66:68:2e:80:4f:fe:98:55:66:54:d3:61:6f:29:96:b5:1e: 11:91:c0:32:5d:34:bc:86:45:c2:25:8e:56:b1:85:f9:b2:cb: 6b:72:67:2e:39:d3:dd:57:be:d8:a3:af:40:0b:73:86:95:cb: d2:8e:31:99:22:c5:f0:b5:02:7e:dc:be:99:ed:f1:5f:b4:58: c7:ff:c0:38:5b:e7:46:3c:1d:ca:d1:1f:3d:b6:49:01:1c:2e: 7a:d8:86:27:64:04:96:a3:22:b3:ad:27:46:79:64:e4:ee:5c: cd:61:e0:95:e1:ba:fa:42:3b:01:4a:68:7a:2e:c7:ae:95:db: b5:18:35:70:71:cf:b5:f5:c4:ee:d7:f0:f8:58:f5:d4:ec:0a: 0d:28:77:a3:93:eb:ca:f5:bd:7c:e2:85:62:aa:04:eb:92:bd: 4b:e9:18:7a:e9:e1:67:bc:f9:b6:4b:65:39:46:0f:c2:ed:c2: 7f:ec:e6:3f:32:4b:8e:2f:6b:bb:f9:4f:45:d6:aa:69:02:35: 57:b4:d8:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMdYY+3adCzCMZIxnB9MGElp/RJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA3MjQwNzMwMzhaFw0yNjA3MjUwOTI0MzhaMDMxMTAvBgNV BAMTKDNDQzA0ODVEQjcyRUQ3OTNCNUQyMzRDNzJFQTJGODlEOEFENDYzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5hfWQKbia//k98jNVbN22ZMn ruP+sRSMHfXDqk6qTDnruRfkiu8nPYVXeHqYOcsNs9V5UX735cdfDWa6dH9BPD17 iCvqfNX8eCtwsSDSzM4klRlE0AKxfP0JMdj3lRYaA7QXWO+Xg/YTeVXh4S0JhEOH Ih9vfmk7XRdaRtzcv/IoS8BGiDquvGrnkXLDxDUHgh7IeTuRs8L0GtQqaly4zRAg 8yRLQqFBK1I2rZNNwBwvUPqU4aWLtawUBb2A0tGudl5GsL9bifkHo+csKRKIUplm mDDDuLB6cGUMCaKhBTnNYTdA14G8Hp0OPQ7AXA+SNILTjmw03iJ8zKYk5eLVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPMBIXbcu15O10jTHLqL4nYrUY90wHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPfvR1gOca+d DKILG4BZvLsGPRAs8+5cVjjfj70qOU9BAKRKzH0doNYmUMRusBT+1sVkrHeTZWZo LoBP/phVZlTTYW8plrUeEZHAMl00vIZFwiWOVrGF+bLLa3JnLjnT3Ve+2KOvQAtz hpXL0o4xmSLF8LUCfty+me3xX7RYx//AOFvnRjwdytEfPbZJARwuetiGJ2QElqMi s60nRnlk5O5czWHgleG6+kI7AUpoei7HrpXbtRg1cHHPtfXE7tfw+Fj11OwKDSh3 o5PryvW9fOKFYqoE65K9S+kYeunhZ7z5tktlOUYPwu3Cf+zmPzJLji9ru/lPRdaq aQI1V7TYww== -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:32 2026 by rpki-client