$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: qwrUCoLrMLLK4GvRFFMsrRHnDRvHG1ZTF4OO8dRWsIs= Subject key identifier: 75:47:C4:7B:E7:44:52:24:78:70:46:93:BA:9B:92:5A:47:18:C4:B4 Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 2F5D9B447B028FD89CE9B9292C9B89D432AB077B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 65 Signing time: Wed 13 May 2026 09:01:03 +0000 Manifest this update: Wed 13 May 2026 08:56:03 +0000 Manifest next update: Thu 14 May 2026 10:59:03 +0000 Files and hashes: 1: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: g3NW2NDF3GX43G6qIHib0ZWFifPMVYOP2O72VnKPvQE=) 2: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5d:9b:44:7b:02:8f:d8:9c:e9:b9:29:2c:9b:89:d4:32:ab:07:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: May 13 08:56:03 2026 GMT Not After : May 14 10:59:03 2026 GMT Subject: CN=7547C47BE744522478704693BA9B925A4718C4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:62:7b:c1:73:4c:0b:cb:93:5f:e4:76:c4: bb:95:79:01:0a:34:a7:7b:36:e2:16:27:4d:71:8b: 8b:65:db:d3:94:7d:5f:16:85:02:a2:1b:e3:8a:11: e8:b3:a2:57:5d:c7:54:3a:6f:9d:4c:9d:b3:f5:5f: b0:d7:eb:5c:95:b4:96:3e:94:63:31:df:54:13:42: a4:f6:03:8e:4b:5d:b3:27:5c:dd:cb:08:76:e5:3e: e3:a3:0e:c5:11:49:9c:5b:f3:a9:b1:a1:22:a9:26: 93:63:8b:12:56:c3:2f:74:97:dc:9d:79:22:dc:c1: 04:4b:e3:1e:90:4a:eb:54:37:d9:02:5d:6e:56:e1: 48:c2:6a:d4:81:b8:88:d3:81:6f:f9:19:4f:28:47: 1a:25:be:a2:ea:b5:98:87:f8:6c:74:53:aa:31:75: 9d:6c:36:7b:14:0e:fc:71:c8:fc:92:bf:05:43:9c: c6:8b:fe:f5:02:22:6b:63:ad:07:88:c7:8b:a0:6b: 10:c3:36:2e:78:00:51:9e:f9:84:dc:09:3f:7a:c0: 57:af:2e:a7:af:d3:f7:6b:2e:64:29:db:5e:fb:da: 14:f3:72:d3:1b:b9:55:f9:b1:a6:a0:86:8f:a2:95: 86:53:b5:29:4a:53:64:12:dc:af:a3:d6:15:2f:2a: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:47:C4:7B:E7:44:52:24:78:70:46:93:BA:9B:92:5A:47:18:C4:B4 X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ea:68:f3:ee:a3:d7:1b:ef:f6:33:fa:e9:f5:32:fa:73:0d: 06:cb:4c:df:85:a2:74:9d:ee:80:75:aa:74:c0:09:f8:d4:c9: 4a:be:46:ed:6f:bb:79:56:a2:cb:1e:b4:47:19:c9:c0:fe:82: 3b:5b:ba:11:a9:0a:88:04:39:df:21:3a:86:e8:04:21:42:10: a9:67:53:f7:b4:24:b0:82:32:be:f2:5f:b0:da:4f:a0:ea:70: a3:8f:1b:4b:96:48:15:0e:7f:ea:7d:e9:db:a5:c2:2d:fc:9c: 0d:c9:e7:89:73:dc:85:cd:1f:3d:77:73:a3:da:82:b0:77:c6: 5b:64:08:ce:2e:bb:fb:0e:cf:c1:97:74:6d:bf:01:c3:dd:3c: 5a:d6:7f:ae:ef:2f:8a:35:3e:e0:1b:25:91:dc:85:fe:f0:7c: 04:f9:e5:c6:df:45:57:14:0d:72:14:f3:d0:61:c7:d0:9e:8c: a2:d1:21:64:c3:e5:d2:8c:9e:a9:68:22:7b:cc:c0:58:91:62: 7f:0c:c7:d4:63:9f:08:a9:fc:11:2a:4d:95:3e:fb:3b:b3:a5: 57:75:6d:79:ec:d7:2d:91:a8:4c:a7:92:e3:19:28:b9:48:87: ae:63:95:e7:7a:25:92:3f:15:fb:f8:13:a2:3a:fb:31:de:a4: c9:c1:8c:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL12bRHsCj9ic6bkpLJuJ1DKrB3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA1MTMwODU2MDNaFw0yNjA1MTQxMDU5MDNaMDMxMTAvBgNV BAMTKDc1NDdDNDdCRTc0NDUyMjQ3ODcwNDY5M0JBOUI5MjVBNDcxOEM0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64mJ7wXNMC8uTX+R2xLuVeQEK NKd7NuIWJ01xi4tl29OUfV8WhQKiG+OKEeizolddx1Q6b51MnbP1X7DX61yVtJY+ lGMx31QTQqT2A45LXbMnXN3LCHblPuOjDsURSZxb86mxoSKpJpNjixJWwy90l9yd eSLcwQRL4x6QSutUN9kCXW5W4UjCatSBuIjTgW/5GU8oRxolvqLqtZiH+Gx0U6ox dZ1sNnsUDvxxyPySvwVDnMaL/vUCImtjrQeIx4ugaxDDNi54AFGe+YTcCT96wFev Lqev0/drLmQp21772hTzctMbuVX5saagho+ilYZTtSlKU2QS3K+j1hUvKmr9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdUfEe+dEUiR4cEaTupuSWkcYxLQwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+po8+6j1xvv 9jP66fUy+nMNBstM34WidJ3ugHWqdMAJ+NTJSr5G7W+7eVaiyx60RxnJwP6CO1u6 EakKiAQ53yE6hugEIUIQqWdT97QksIIyvvJfsNpPoOpwo48bS5ZIFQ5/6n3p26XC LfycDcnniXPchc0fPXdzo9qCsHfGW2QIzi67+w7PwZd0bb8Bw908WtZ/ru8vijU+ 4BslkdyF/vB8BPnlxt9FVxQNchTz0GHH0J6MotEhZMPl0oyeqWgie8zAWJFifwzH 1GOfCKn8ESpNlT77O7OlV3VteezXLZGoTKeS4xkouUiHrmOV53olkj8V+/gTojr7 Md6kycGMig== -----END CERTIFICATE-----Generated at Wed May 13 20:23:42 2026 by rpki-client