$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: 0Q4JprDiTzb4+cgwjv+7TP4Xyn7sow8oZNa1ebPkUg0= Subject key identifier: D7:85:A2:3D:C1:6D:93:E4:D2:C1:90:A4:11:96:9B:8E:0D:7F:74:FC Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 4C9DE63D70C201A26A50EACB653A72A3303B3FE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: EB Signing time: Thu 23 Jul 2026 14:58:56 +0000 Manifest this update: Thu 23 Jul 2026 14:53:56 +0000 Manifest next update: Fri 24 Jul 2026 16:00:56 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: OpMoEcWAwrF/QLzg7cg7iolmliHC2lA5cghgD00NJxA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9d:e6:3d:70:c2:01:a2:6a:50:ea:cb:65:3a:72:a3:30:3b:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: Jul 23 14:53:56 2026 GMT Not After : Jul 24 16:00:56 2026 GMT Subject: CN=D785A23DC16D93E4D2C190A411969B8E0D7F74FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:bd:ad:15:4a:a4:13:7d:0b:ee:e2:fd:0c: 11:c6:22:88:e1:28:dd:7d:12:fe:09:37:fa:8f:c3: ae:ef:5c:97:08:3b:43:26:c5:52:40:d5:20:86:8f: ef:86:4b:81:cb:25:f9:7f:ad:80:e4:02:47:eb:f6: 52:12:64:1a:62:bf:dd:9a:31:48:c8:6d:b7:9d:3c: 4a:06:86:d7:7d:a3:11:7d:3f:bb:ab:98:df:52:56: ad:28:4f:ce:b9:f0:44:3b:f0:4f:b2:1c:2d:14:bf: 0b:e1:cc:e7:a9:f5:50:ed:7d:8c:33:b8:ba:91:ac: c1:2b:cb:85:74:71:4d:aa:6d:42:a5:b9:d4:6d:06: 24:25:08:98:d7:30:c8:1f:cf:57:ef:49:d3:2c:fe: fc:78:d4:7c:ec:8d:15:13:f0:76:79:60:a4:db:b0: dc:54:f8:bb:26:c0:d6:58:cc:64:d8:32:a4:f0:cb: 57:29:23:3b:8a:b4:16:f2:f4:09:24:5b:72:eb:81: 8a:1f:a5:41:ef:f1:e6:d1:de:94:f4:92:8a:0c:f1: e3:f6:ab:55:fb:ba:c9:b6:f9:32:bc:89:a9:52:c1: 0e:44:4c:0f:ec:96:b4:9a:df:3f:e1:3f:13:a4:e0: bb:d3:36:82:9f:3f:d6:d4:27:eb:c8:c0:09:24:95: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:A2:3D:C1:6D:93:E4:D2:C1:90:A4:11:96:9B:8E:0D:7F:74:FC X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:00:5b:a4:21:47:ba:80:b8:a4:4c:74:15:09:38:ce:d7:82: da:e6:6a:99:89:1e:96:fa:e5:55:f7:f2:a0:0f:e2:26:75:bf: eb:e0:33:b0:38:66:f7:36:89:b5:a4:f8:c5:07:2a:e9:3d:ac: c0:d0:37:34:1a:1b:7d:90:a8:0f:bb:7e:ba:30:85:70:83:46: 43:d5:22:6b:2c:27:00:bb:aa:f2:58:69:17:f1:7f:88:ab:ea: 61:e2:31:80:41:d5:bf:c1:72:3f:82:c5:81:02:fc:08:fa:24: 84:08:0a:91:ea:34:e0:7d:74:ac:2c:c3:ce:0e:52:6d:45:66: 65:f9:25:c7:2e:e1:af:9c:3d:ad:dc:f3:b1:a1:54:fb:1d:59: dd:60:c3:a6:e7:15:f3:85:78:a7:a3:06:67:1e:0d:38:ef:2e: 7c:82:7c:32:e8:5d:ac:78:c1:48:4b:a8:07:7a:db:ec:d9:16: fd:4c:8d:a7:6c:7c:7f:01:ca:cf:fd:31:84:4e:28:06:fc:0a: 9f:e6:bb:42:61:34:af:08:3c:96:ba:55:3c:40:ba:2b:89:d7: ea:c3:4e:c8:f4:1d:0c:1e:11:1c:74:81:04:7b:cc:ca:e7:48: 6d:ad:ac:29:0e:c9:37:57:dd:50:db:97:db:da:91:f5:a1:df: 76:08:7f:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTJ3mPXDCAaJqUOrLZTpyozA7P+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjA3MjMxNDUzNTZaFw0yNjA3MjQxNjAwNTZaMDMxMTAvBgNV BAMTKEQ3ODVBMjNEQzE2RDkzRTREMkMxOTBBNDExOTY5QjhFMEQ3Rjc0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRr2tFUqkE30L7uL9DBHGIojh KN19Ev4JN/qPw67vXJcIO0MmxVJA1SCGj++GS4HLJfl/rYDkAkfr9lISZBpiv92a MUjIbbedPEoGhtd9oxF9P7urmN9SVq0oT8658EQ78E+yHC0UvwvhzOep9VDtfYwz uLqRrMEry4V0cU2qbUKludRtBiQlCJjXMMgfz1fvSdMs/vx41HzsjRUT8HZ5YKTb sNxU+LsmwNZYzGTYMqTwy1cpIzuKtBby9AkkW3LrgYofpUHv8ebR3pT0kooM8eP2 q1X7usm2+TK8ialSwQ5ETA/slrSa3z/hPxOk4LvTNoKfP9bUJ+vIwAkkldltAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU14WiPcFtk+TSwZCkEZabjg1/dPwwHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVABbpCFHuoC4 pEx0FQk4zteC2uZqmYkelvrlVffyoA/iJnW/6+AzsDhm9zaJtaT4xQcq6T2swNA3 NBobfZCoD7t+ujCFcINGQ9UiaywnALuq8lhpF/F/iKvqYeIxgEHVv8FyP4LFgQL8 CPokhAgKkeo04H10rCzDzg5SbUVmZfklxy7hr5w9rdzzsaFU+x1Z3WDDpucV84V4 p6MGZx4NOO8ufIJ8MuhdrHjBSEuoB3rb7NkW/UyNp2x8fwHKz/0xhE4oBvwKn+a7 QmE0rwg8lrpVPEC6K4nX6sNOyPQdDB4RHHSBBHvMyudIba2sKQ7JN1fdUNuX29qR 9aHfdgh/2g== -----END CERTIFICATE-----Generated at Fri Jul 24 03:53:47 2026 by rpki-client