$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: ZQS5j5b77lhY2VWJThmCe/ry656C/sz5BiuoH7DBk5E= Subject key identifier: 8E:24:F7:43:43:99:6B:72:9C:A8:00:85:6A:28:F2:25:A4:CE:A3:FE Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: 57D472650B332CAE8D61EBD69F1E160FE69B5EEA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 03:35:16 +0000 Manifest this update: Fri 24 Jul 2026 03:30:16 +0000 Manifest next update: Sat 25 Jul 2026 05:41:16 +0000 Files and hashes: 1: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 2: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: YFtt+DD84SOG9H2+y0iZq3uyocYuWUbbQIA3jFdrV1s=) 3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d4:72:65:0b:33:2c:ae:8d:61:eb:d6:9f:1e:16:0f:e6:9b:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Jul 24 03:30:16 2026 GMT Not After : Jul 25 05:41:16 2026 GMT Subject: CN=8E24F74343996B729CA800856A28F225A4CEA3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:33:39:97:e7:b3:f5:21:70:15:32:79:fb: 8d:46:77:29:b1:80:2d:1a:60:f9:83:41:1b:b3:16: c8:54:04:ed:9d:5d:83:d3:e2:49:da:8d:24:a7:d0: 58:75:03:2e:c8:5e:7d:9d:1c:43:fb:eb:6e:77:ad: c0:0a:ad:67:ac:af:3e:32:bc:87:e4:f8:c2:9a:7d: 76:db:72:69:be:52:de:27:f4:7d:7d:de:ab:f6:4a: 8e:48:63:6e:ec:01:ac:43:d2:85:56:a7:c5:a9:a7: 59:4e:61:92:79:14:8c:4d:ff:24:ff:4c:85:e1:6b: 93:06:fb:18:0d:49:1b:32:14:29:43:0a:83:58:e1: 3a:ea:2e:24:b8:8f:78:f1:87:5b:66:f8:96:25:08: 4e:32:97:40:bc:c9:2b:81:d0:59:9b:1a:6e:f6:8f: 9d:17:46:5b:99:d2:8e:f6:e2:22:b3:7c:75:a1:09: 98:14:38:ee:49:7c:fb:62:9b:1c:3e:c3:ca:0f:26: dc:30:57:7d:29:e1:b8:5b:5b:ff:8f:e2:5a:f6:97: 38:d3:31:c8:c5:ab:1a:64:a8:80:38:c3:1d:bf:d3: a2:c8:f7:45:f0:99:6d:9f:25:62:e9:9a:46:23:0b: 0b:a4:09:31:1d:a0:b7:72:da:56:f6:d3:4c:ad:10: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:24:F7:43:43:99:6B:72:9C:A8:00:85:6A:28:F2:25:A4:CE:A3:FE X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:8c:55:36:cc:07:ed:43:9e:85:19:a6:45:b6:f3:db:12:87: 70:e2:c9:fe:90:39:d6:6f:27:43:17:43:61:f5:aa:6c:bf:17: ff:b2:a3:ce:7a:8b:e8:40:3a:5f:82:f8:9e:d3:e5:31:08:c2: 55:33:dd:df:e7:38:45:65:4d:ad:4f:21:59:cc:b5:50:61:d3: 3a:c8:8a:f3:aa:33:04:26:21:c8:c7:19:0b:c9:70:5b:a4:36: 74:33:14:8b:77:46:db:02:06:dc:af:c2:0a:10:96:c3:ac:14: 29:71:c9:96:d4:c9:ee:72:06:5c:a7:5b:27:9d:78:00:c6:2f: 48:f3:80:2d:75:9d:ab:8d:84:1d:59:a5:95:9e:4b:8f:38:ec: 2d:ec:b7:ba:df:a9:c5:07:56:e5:9f:de:75:5b:aa:f5:c5:13: 09:cd:cf:cb:f9:53:a9:52:6f:44:be:74:c6:71:1c:d8:f8:cb: 8d:e7:9d:30:c2:3b:d9:2f:05:9d:1c:4b:56:d5:bc:a7:2f:23: 50:69:f2:25:d5:43:6d:2c:45:60:c8:b1:21:b2:04:c4:d6:2c: 5b:0f:79:63:92:b5:15:d5:6b:c5:68:ba:65:21:db:01:be:32: e5:a6:17:e2:a6:85:e9:91:7f:be:b0:c5:3e:32:d5:6c:25:41: e9:50:11:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV9RyZQszLK6NYevWnx4WD+abXuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjA3MjQwMzMwMTZaFw0yNjA3MjUwNTQxMTZaMDMxMTAvBgNV BAMTKDhFMjRGNzQzNDM5OTZCNzI5Q0E4MDA4NTZBMjhGMjI1QTRDRUEzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FTM5l+ez9SFwFTJ5+41Gdymx gC0aYPmDQRuzFshUBO2dXYPT4knajSSn0Fh1Ay7IXn2dHEP76253rcAKrWesrz4y vIfk+MKafXbbcmm+Ut4n9H193qv2So5IY27sAaxD0oVWp8Wpp1lOYZJ5FIxN/yT/ TIXha5MG+xgNSRsyFClDCoNY4TrqLiS4j3jxh1tm+JYlCE4yl0C8ySuB0FmbGm72 j50XRluZ0o724iKzfHWhCZgUOO5JfPtimxw+w8oPJtwwV30p4bhbW/+P4lr2lzjT McjFqxpkqIA4wx2/06LI90XwmW2fJWLpmkYjCwukCTEdoLdy2lb200ytEMmjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjiT3Q0OZa3KcqACFaijyJaTOo/4wHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4xVNswH7UOe hRmmRbbz2xKHcOLJ/pA51m8nQxdDYfWqbL8X/7KjznqL6EA6X4L4ntPlMQjCVTPd 3+c4RWVNrU8hWcy1UGHTOsiK86ozBCYhyMcZC8lwW6Q2dDMUi3dG2wIG3K/CChCW w6wUKXHJltTJ7nIGXKdbJ514AMYvSPOALXWdq42EHVmllZ5LjzjsLey3ut+pxQdW 5Z/edVuq9cUTCc3Py/lTqVJvRL50xnEc2PjLjeedMMI72S8FnRxLVtW8py8jUGny JdVDbSxFYMixIbIExNYsWw95Y5K1FdVrxWi6ZSHbAb4y5aYX4qaF6ZF/vrDFPjLV bCVB6VAR/Q== -----END CERTIFICATE-----Generated at Fri Jul 24 18:42:56 2026 by rpki-client