$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: hh4u2kQKZMwvwRiPYkfLKPLKC09q6GHgBQFuv7WPi5g= Subject key identifier: A0:DA:64:7F:0B:E3:6F:9F:94:D5:B2:EA:28:AB:EE:A2:80:1F:29:E9 Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 3F55C8510512667FD3536719321181EE23B91137 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: E5 Signing time: Fri 24 Jul 2026 22:52:21 +0000 Manifest this update: Fri 24 Jul 2026 22:47:21 +0000 Manifest next update: Sun 26 Jul 2026 01:30:21 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: StnLNdPaOs6RX6ZDQSkpRDQzPdRc+zQBYYOqXYCLA4E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:55:c8:51:05:12:66:7f:d3:53:67:19:32:11:81:ee:23:b9:11:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Jul 24 22:47:21 2026 GMT Not After : Jul 26 01:30:21 2026 GMT Subject: CN=A0DA647F0BE36F9F94D5B2EA28ABEEA2801F29E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:77:e4:93:8a:4a:45:4e:7e:66:81:6c:d2: f0:20:7d:1b:f4:92:cd:e6:ad:4b:17:82:34:b8:8e: 89:fd:e1:ba:88:2a:be:4e:48:b2:88:20:61:5c:3c: aa:68:b9:fd:3f:60:75:9c:52:97:35:1e:d2:df:60: a1:cb:ff:f5:62:28:00:ad:e5:b0:d4:ea:dd:47:ee: 1c:d6:17:e6:3c:d4:73:07:50:c3:0b:fb:6b:fb:0d: 84:c9:68:05:9f:d6:6d:fe:58:b1:64:56:ec:c8:69: 8e:73:61:53:66:70:76:8e:17:e4:0a:6a:d0:85:60: 2b:c4:eb:c7:4f:36:12:9e:f0:71:16:96:8e:e9:1d: a1:69:2a:0a:b5:61:ef:03:db:e7:73:18:00:41:b0: 61:cf:7c:6e:49:8f:ab:00:24:07:13:22:88:a3:3a: 67:78:38:27:55:e6:b4:d3:57:39:b3:1f:0c:51:b5: 61:ca:34:72:f3:b5:4a:af:06:69:a4:41:4c:93:ae: 6b:94:10:2a:d8:a6:69:0b:94:c2:f1:b6:d3:99:c4: 38:a7:83:1b:63:a8:fc:5b:25:38:e6:8d:3c:8b:4b: 52:7a:91:65:c4:3d:d2:0d:2b:33:7f:a3:5d:41:fb: e8:1c:b5:9d:16:c0:9b:d6:38:c4:f9:85:03:37:2d: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:64:7F:0B:E3:6F:9F:94:D5:B2:EA:28:AB:EE:A2:80:1F:29:E9 X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4d:8c:10:3d:18:22:90:79:c2:3e:0a:d8:0f:38:a3:d3:db: 01:3f:fb:a3:7d:fb:15:89:7d:f1:08:c3:ee:9b:42:c4:b2:d8: 00:7f:4e:fc:3d:b6:b5:a5:5b:a7:61:43:f4:f7:78:3c:be:1a: ab:2c:a0:26:a7:c9:b5:0d:f4:f3:87:60:53:1c:b7:4b:09:d9: 44:dd:66:ce:94:ca:e0:47:6f:52:22:3b:ce:e3:88:46:39:e1: d4:6b:b2:1c:49:cd:04:b7:1b:a5:63:f8:0b:be:a7:5b:85:67: 53:49:47:32:be:c4:0a:fe:ae:f9:55:a4:ec:51:b7:f6:46:e9: 81:bf:fe:6e:09:9a:81:2d:60:cd:85:22:93:81:0a:08:04:4b: e8:33:cb:c7:ea:db:f9:38:3b:77:71:e6:e4:98:b8:d3:bd:ef: cc:b7:e7:16:ab:32:9a:e0:88:0d:0d:7e:cc:11:ce:0c:d7:7b: 61:68:ba:88:1b:0d:f7:58:4e:38:7a:3b:7d:b0:6a:e4:07:47: a7:9f:d1:57:a2:e6:e7:1b:87:5b:8c:41:44:a7:01:39:94:0e: 81:3f:8d:75:ba:4f:25:e6:88:ef:e4:34:1d:ad:4e:92:ee:eb: 27:18:04:38:d4:d2:52:d2:29:85:ab:cc:5e:86:cc:2a:a1:29: fb:5b:3d:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP1XIUQUSZn/TU2cZMhGB7iO5ETcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjA3MjQyMjQ3MjFaFw0yNjA3MjYwMTMwMjFaMDMxMTAvBgNV BAMTKEEwREE2NDdGMEJFMzZGOUY5NEQ1QjJFQTI4QUJFRUEyODAxRjI5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNr3fkk4pKRU5+ZoFs0vAgfRv0 ks3mrUsXgjS4jon94bqIKr5OSLKIIGFcPKpouf0/YHWcUpc1HtLfYKHL//ViKACt 5bDU6t1H7hzWF+Y81HMHUMML+2v7DYTJaAWf1m3+WLFkVuzIaY5zYVNmcHaOF+QK atCFYCvE68dPNhKe8HEWlo7pHaFpKgq1Ye8D2+dzGABBsGHPfG5Jj6sAJAcTIoij Omd4OCdV5rTTVzmzHwxRtWHKNHLztUqvBmmkQUyTrmuUECrYpmkLlMLxttOZxDin gxtjqPxbJTjmjTyLS1J6kWXEPdINKzN/o11B++gctZ0WwJvWOMT5hQM3LYt5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoNpkfwvjb5+U1bLqKKvuooAfKekwHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk2MED0YIpB5 wj4K2A84o9PbAT/7o337FYl98QjD7ptCxLLYAH9O/D22taVbp2FD9Pd4PL4aqyyg JqfJtQ3084dgUxy3SwnZRN1mzpTK4EdvUiI7zuOIRjnh1GuyHEnNBLcbpWP4C76n W4VnU0lHMr7ECv6u+VWk7FG39kbpgb/+bgmagS1gzYUik4EKCARL6DPLx+rb+Tg7 d3Hm5Ji4073vzLfnFqsymuCIDQ1+zBHODNd7YWi6iBsN91hOOHo7fbBq5AdHp5/R V6Lm5xuHW4xBRKcBOZQOgT+NdbpPJeaI7+Q0Ha1Oku7rJxgEONTSUtIphavMXobM KqEp+1s9Tw== -----END CERTIFICATE-----Generated at Sat Jul 25 02:04:25 2026 by rpki-client