$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: zK0A5rMxWHQp/hut7MCeKvn6iow+7QKJEw5bPf+jUyc= Subject key identifier: C9:FB:8F:42:45:44:D1:1E:1F:DF:FE:53:03:A4:38:1E:3C:47:CE:E2 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 1EBBB2B14A9EBCC22325D96164CC181BA7ADE270 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: F8 Signing time: Thu 23 Jul 2026 15:44:02 +0000 Manifest this update: Thu 23 Jul 2026 15:39:02 +0000 Manifest next update: Fri 24 Jul 2026 18:38:02 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: MO7+v8eUzHXb2Q33A5osUQMNAzjnzLKbr+6RQZDq/Z0=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bb:b2:b1:4a:9e:bc:c2:23:25:d9:61:64:cc:18:1b:a7:ad:e2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Jul 23 15:39:02 2026 GMT Not After : Jul 24 18:38:02 2026 GMT Subject: CN=C9FB8F424544D11E1FDFFE5303A4381E3C47CEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:11:e8:5e:3f:79:22:b0:17:53:86:0f:a7: 34:75:6a:53:f4:85:89:96:fa:22:24:80:d4:ad:46: 54:32:fc:5e:38:51:df:ad:26:15:c2:16:41:05:64: a0:44:d8:3c:50:ec:04:9b:49:44:76:01:9d:89:8e: 03:2c:55:be:3b:e9:ef:65:40:4b:4a:9e:30:b6:e9: cb:ce:a5:01:67:c6:4e:4a:d1:92:46:70:90:3f:cd: 1f:85:fb:ae:d4:85:97:92:6f:56:14:d7:90:62:6a: 8f:fa:29:a7:7f:44:42:3a:14:03:e8:20:20:a4:1e: f6:30:94:0c:5a:c3:1b:2b:f1:1a:dd:c3:22:64:55: fb:65:28:06:4a:be:4d:8d:7b:98:f4:34:3f:c0:6c: 04:6b:c3:61:bf:29:a4:96:db:93:bc:c7:f2:90:7a: 49:48:e5:bb:66:a8:04:9e:1b:e1:41:5f:34:31:08: c0:12:48:f6:42:01:96:7d:4c:de:cf:f2:c2:67:12: dd:2d:e9:0a:5d:9e:82:17:39:2c:42:3a:03:f1:0a: c6:e8:7a:43:12:69:9f:6d:4c:88:ee:0d:2d:ce:27: ac:dc:35:40:8e:54:bf:b3:64:71:e5:86:07:b1:57: e1:71:33:4e:f8:37:ee:32:2f:fb:b3:7f:30:ac:8e: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FB:8F:42:45:44:D1:1E:1F:DF:FE:53:03:A4:38:1E:3C:47:CE:E2 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:bf:f5:e4:30:21:39:05:4c:1f:6f:3f:e4:38:d9:47:71:e6: 03:e8:a8:1a:5d:b6:0d:26:3a:c9:b8:5b:0c:e4:7f:b1:91:66: 53:41:50:ae:a0:49:4f:49:67:68:3d:7c:29:4c:cf:0b:6d:8c: c3:bb:ac:a3:1e:d0:60:6c:b8:ba:63:b8:ee:cb:f3:f3:1e:4e: 54:e9:ef:42:93:74:7a:a9:ce:44:42:3c:4c:8d:99:1c:ff:eb: 29:0e:3a:30:bf:12:83:fe:bf:3f:ee:11:1e:41:ef:d9:84:05: 64:f6:f4:f9:ef:2f:f6:ff:69:7b:c4:ea:cf:08:e8:a8:62:2d: 84:87:c7:db:e9:5b:1f:2f:2f:1e:2a:1f:31:52:d0:9e:cc:78: 07:4b:e6:63:aa:9d:c4:7a:54:2f:6c:eb:0b:7b:c1:02:ea:f8: fa:c9:8c:89:75:f6:84:2a:5d:c5:1f:a7:f2:a0:e5:39:a7:34: 1f:cc:9e:07:d2:b0:d4:10:53:d3:b4:50:69:c9:56:3a:bc:15: 6c:ef:86:62:2d:7a:5e:64:2a:b4:a7:67:fd:1b:19:68:96:fa: 8f:f1:e9:02:cb:8d:49:80:0d:0a:fc:98:76:01:f9:f6:fb:da: 6b:74:07:87:cb:d9:ee:3e:7e:3a:65:3e:46:93:e3:3c:ee:16: eb:af:cf:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHruysUqevMIjJdlhZMwYG6et4nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA3MjMxNTM5MDJaFw0yNjA3MjQxODM4MDJaMDMxMTAvBgNV BAMTKEM5RkI4RjQyNDU0NEQxMUUxRkRGRkU1MzAzQTQzODFFM0M0N0NFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCanhHoXj95IrAXU4YPpzR1alP0 hYmW+iIkgNStRlQy/F44Ud+tJhXCFkEFZKBE2DxQ7ASbSUR2AZ2JjgMsVb476e9l QEtKnjC26cvOpQFnxk5K0ZJGcJA/zR+F+67UhZeSb1YU15Biao/6Kad/REI6FAPo ICCkHvYwlAxawxsr8RrdwyJkVftlKAZKvk2Ne5j0ND/AbARrw2G/KaSW25O8x/KQ eklI5btmqASeG+FBXzQxCMASSPZCAZZ9TN7P8sJnEt0t6QpdnoIXOSxCOgPxCsbo ekMSaZ9tTIjuDS3OJ6zcNUCOVL+zZHHlhgexV+FxM074N+4yL/uzfzCsjhWPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyfuPQkVE0R4f3/5TA6Q4HjxHzuIwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7/15DAhOQVM H28/5DjZR3HmA+ioGl22DSY6ybhbDOR/sZFmU0FQrqBJT0lnaD18KUzPC22Mw7us ox7QYGy4umO47svz8x5OVOnvQpN0eqnOREI8TI2ZHP/rKQ46ML8Sg/6/P+4RHkHv 2YQFZPb0+e8v9v9pe8TqzwjoqGIthIfH2+lbHy8vHiofMVLQnsx4B0vmY6qdxHpU L2zrC3vBAur4+smMiXX2hCpdxR+n8qDlOac0H8yeB9Kw1BBT07RQaclWOrwVbO+G Yi16XmQqtKdn/RsZaJb6j/HpAsuNSYANCvyYdgH59vvaa3QHh8vZ7j5+OmU+RpPj PO4W66/Pzg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:19 2026 by rpki-client