$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: sXqzHlNCJlhv1cQ6c87UTD+JfJtCzagSW+y9HEB8HcM= Subject key identifier: 89:AB:EB:1C:52:F3:3F:25:BE:90:1F:5E:EB:45:05:78:47:A1:35:2F Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 5E568563CC4C17683172FDE5C8FAEE3F273F35B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: C5 Signing time: Thu 23 Jul 2026 23:34:50 +0000 Manifest this update: Thu 23 Jul 2026 23:29:50 +0000 Manifest next update: Sat 25 Jul 2026 01:08:50 +0000 Files and hashes: 1: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: 7e26cLDOSypRjyNwW3Bc01/Tf2lzLbDPs59x8p/Q8KA=) 2: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:56:85:63:cc:4c:17:68:31:72:fd:e5:c8:fa:ee:3f:27:3f:35:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Jul 23 23:29:50 2026 GMT Not After : Jul 25 01:08:50 2026 GMT Subject: CN=89ABEB1C52F33F25BE901F5EEB45057847A1352F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:36:bd:ae:90:ba:55:a3:00:a8:a7:de:e2: 65:80:c7:2d:f5:a4:42:cd:f9:23:89:0a:c9:ca:81: fb:a5:07:64:eb:3d:a0:f1:97:47:c9:1b:49:10:93: b1:d2:5f:87:a8:f1:c7:97:44:64:ae:95:51:e3:5f: 25:10:97:68:81:f7:de:ac:94:53:85:19:a1:43:94: dc:df:c1:29:ff:09:8c:95:7c:2c:6f:d8:a6:84:02: d9:5e:28:d9:35:4d:05:df:76:6a:43:aa:90:36:1c: 80:d3:a2:e8:f3:e5:85:ba:fc:28:4a:06:30:60:ca: c0:93:e0:23:5b:a7:b9:a9:d0:2f:5f:45:a2:25:81: a7:34:ec:55:81:78:82:dd:98:39:7b:62:91:e7:2d: f4:0b:32:4d:16:2f:54:1c:e5:d4:0f:32:83:c4:c9: 87:6b:43:bf:84:f7:48:37:db:19:e8:5a:9e:21:c5: 99:68:bf:e8:e5:85:ea:d0:33:58:f7:3e:8f:73:1d: 46:ee:9c:50:27:13:6b:4b:06:42:89:b3:83:c0:34: 50:c5:06:d7:ec:bd:a9:17:15:68:b9:13:47:cb:1c: 0e:1c:59:de:0d:1e:cb:b3:d4:b8:d6:e7:c8:5f:46: 19:83:47:52:38:22:0a:6b:1b:48:4a:fc:41:f9:14: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:EB:1C:52:F3:3F:25:BE:90:1F:5E:EB:45:05:78:47:A1:35:2F X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:11:80:51:93:80:11:4d:f2:1a:89:39:b2:91:ff:c2:22:ac: 9e:c4:d4:03:53:ff:f4:7e:4b:7e:b7:77:b0:35:15:a2:20:e1: e1:e4:87:34:27:7a:2a:22:dd:10:4c:c1:6c:e9:02:d4:86:ab: ea:0a:a8:c2:dc:ba:94:42:57:9a:06:6b:02:60:f4:32:b8:73: 99:ce:ed:a9:6f:57:f6:6f:89:28:fb:93:21:ae:b4:eb:fa:c3: 6b:62:26:ba:3b:4c:70:53:68:4e:e6:e1:49:6c:cb:d2:f8:05: 97:14:b7:9e:43:a1:ae:0d:ae:3f:cf:15:4d:2e:70:dc:a8:8b: 32:f8:0e:79:e8:9f:a7:e5:80:f1:99:47:1d:d7:83:ab:4e:67: 52:41:a8:57:e8:04:df:ec:00:21:5e:50:b9:99:7f:5d:23:c6: 15:d2:47:d4:95:24:7d:12:4c:00:5a:46:ab:72:bd:24:88:7e: 3f:47:10:55:73:45:6d:7f:bb:a5:e5:a0:bc:bd:4c:7d:a9:14: b6:09:ac:6f:08:2c:ad:31:c1:d5:62:da:8b:2d:d0:e4:5e:3f: 6a:a1:db:41:6b:6f:37:dc:31:2a:e4:71:fe:3b:66:a5:3f:ba: 6a:e8:2a:bc:d9:d1:4f:80:b0:df:80:ab:1a:1c:00:3d:a7:e6: 6e:b7:af:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXlaFY8xMF2gxcv3lyPruPyc/NbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA3MjMyMzI5NTBaFw0yNjA3MjUwMTA4NTBaMDMxMTAvBgNV BAMTKDg5QUJFQjFDNTJGMzNGMjVCRTkwMUY1RUVCNDUwNTc4NDdBMTM1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jDa9rpC6VaMAqKfe4mWAxy31 pELN+SOJCsnKgfulB2TrPaDxl0fJG0kQk7HSX4eo8ceXRGSulVHjXyUQl2iB996s lFOFGaFDlNzfwSn/CYyVfCxv2KaEAtleKNk1TQXfdmpDqpA2HIDToujz5YW6/ChK BjBgysCT4CNbp7mp0C9fRaIlgac07FWBeILdmDl7YpHnLfQLMk0WL1Qc5dQPMoPE yYdrQ7+E90g32xnoWp4hxZlov+jlherQM1j3Po9zHUbunFAnE2tLBkKJs4PANFDF BtfsvakXFWi5E0fLHA4cWd4NHsuz1LjW58hfRhmDR1I4IgprG0hK/EH5FBy9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiavrHFLzPyW+kB9e60UFeEehNS8wHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBGAUZOAEU3y Gok5spH/wiKsnsTUA1P/9H5Lfrd3sDUVoiDh4eSHNCd6KiLdEEzBbOkC1Iar6gqo wty6lEJXmgZrAmD0Mrhzmc7tqW9X9m+JKPuTIa606/rDa2ImujtMcFNoTubhSWzL 0vgFlxS3nkOhrg2uP88VTS5w3KiLMvgOeeifp+WA8ZlHHdeDq05nUkGoV+gE3+wA IV5QuZl/XSPGFdJH1JUkfRJMAFpGq3K9JIh+P0cQVXNFbX+7peWgvL1MfakUtgms bwgsrTHB1WLaiy3Q5F4/aqHbQWtvN9wxKuRx/jtmpT+6augqvNnRT4Cw34CrGhwA PafmbrevIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:52 2026 by rpki-client