$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: WiVuL8bQJfsdUq0Whm18oIRdoG+uriBqnD+lGWC8oLw= Subject key identifier: ED:1C:5A:13:54:75:5F:65:E4:9E:65:6A:5F:8C:85:5F:D2:21:BD:DF Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 11C9A1B5AE31C16F19FCEC7FAEE5550E00A7E1DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 90 Signing time: Fri 24 Jul 2026 03:00:12 +0000 Manifest this update: Fri 24 Jul 2026 02:55:12 +0000 Manifest next update: Sat 25 Jul 2026 06:22:12 +0000 Files and hashes: 1: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 2: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) 3: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: 2Tvd57Q5nNLCUgizY1/KrkKElyeJlD07S84EGLvmk1g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c9:a1:b5:ae:31:c1:6f:19:fc:ec:7f:ae:e5:55:0e:00:a7:e1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Jul 24 02:55:12 2026 GMT Not After : Jul 25 06:22:12 2026 GMT Subject: CN=ED1C5A1354755F65E49E656A5F8C855FD221BDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:50:2d:57:04:5c:7a:c1:79:fd:19:45:13: ba:d2:78:38:12:a5:a5:22:40:f3:70:19:37:c1:95: b4:8b:e6:57:9e:d0:6f:ff:47:01:1e:74:dc:68:e8: 75:c2:5c:ad:fa:84:f1:4e:10:ee:3e:ce:1f:a3:3b: c0:69:a2:ad:88:33:e2:3b:01:e0:cd:43:22:f6:4b: 65:12:ca:02:81:16:86:ae:cf:df:d2:b2:54:ea:6c: 0c:4d:c2:89:c6:93:3e:4e:37:9b:19:84:06:df:20: 44:a7:79:5f:5b:38:bc:5c:cb:26:2f:e6:52:b8:80: 50:b6:de:09:46:13:77:61:73:25:41:eb:b5:92:94: fa:ee:16:82:d6:c7:f6:23:06:3a:9d:84:c6:63:f6: b4:9f:f8:ac:14:fd:59:c8:b8:cd:62:45:a6:69:9b: 81:0d:aa:d6:e4:ed:6e:31:ec:b6:ed:0f:a9:3e:9d: bd:7f:02:bc:5b:57:6b:dc:0b:11:62:da:67:6f:eb: 93:fe:a7:dd:d2:d5:46:55:51:9e:4e:ea:ac:62:a2: 4c:7a:6d:1b:86:55:c5:aa:b4:c7:0b:1a:5b:8b:47: 28:be:c7:b0:36:d3:28:23:f4:14:ce:19:b7:bb:11: b3:4d:7f:df:5f:9b:72:b3:a2:ff:b6:f3:ce:96:76: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1C:5A:13:54:75:5F:65:E4:9E:65:6A:5F:8C:85:5F:D2:21:BD:DF X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:89:38:51:24:f7:86:c0:42:04:42:ff:f0:3b:74:08:fa:81: 32:99:87:5b:91:4a:e8:7f:b6:2c:50:22:15:f0:25:2d:79:50: 15:b6:4d:13:2a:29:7d:53:4a:bd:3a:49:86:f9:a2:60:f1:6a: ad:0b:34:38:61:b9:f5:74:0d:86:3f:b8:cf:33:6a:09:c7:6b: f4:01:55:18:fb:48:51:e5:67:27:75:52:d2:b5:37:b5:f8:52: 38:e8:93:03:79:c7:c1:e6:b7:74:e3:ce:5d:68:1c:56:ff:93: 4a:f3:14:a8:f5:09:bd:1a:a4:af:cc:87:ab:de:6c:0e:4e:a1: a6:1a:2c:22:9d:72:ea:83:46:e5:34:c5:1e:0f:4b:07:70:05: 45:a6:6d:c4:79:78:1d:c8:b8:1c:bf:a6:07:2c:a7:55:c1:4b: 62:63:eb:43:98:b9:f0:da:3d:0a:6a:1f:94:c8:6b:0d:ab:19: 31:d3:bf:76:8f:c3:9e:77:04:03:a1:ef:88:25:a0:cc:f2:63: d7:d6:73:a5:e7:dd:fb:60:59:19:c9:19:ff:8f:bc:34:5a:40: 67:3b:10:38:6c:7f:28:a7:a8:75:72:1a:0a:0f:93:cf:a4:2b: ba:e3:c9:b4:cf:5b:b7:e5:52:78:d9:28:f1:0c:63:61:a9:c5: 33:22:dd:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEcmhta4xwW8Z/Ox/ruVVDgCn4dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA3MjQwMjU1MTJaFw0yNjA3MjUwNjIyMTJaMDMxMTAvBgNV BAMTKEVEMUM1QTEzNTQ3NTVGNjVFNDlFNjU2QTVGOEM4NTVGRDIyMUJEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUFAtVwRcesF5/RlFE7rSeDgS paUiQPNwGTfBlbSL5lee0G//RwEedNxo6HXCXK36hPFOEO4+zh+jO8Bpoq2IM+I7 AeDNQyL2S2USygKBFoauz9/SslTqbAxNwonGkz5ON5sZhAbfIESneV9bOLxcyyYv 5lK4gFC23glGE3dhcyVB67WSlPruFoLWx/YjBjqdhMZj9rSf+KwU/VnIuM1iRaZp m4ENqtbk7W4x7LbtD6k+nb1/ArxbV2vcCxFi2mdv65P+p93S1UZVUZ5O6qxiokx6 bRuGVcWqtMcLGluLRyi+x7A20ygj9BTOGbe7EbNNf99fm3Kzov+2886WdnYdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7RxaE1R1X2XknmVqX4yFX9Ihvd8wHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4k4UST3hsBC BEL/8Dt0CPqBMpmHW5FK6H+2LFAiFfAlLXlQFbZNEyopfVNKvTpJhvmiYPFqrQs0 OGG59XQNhj+4zzNqCcdr9AFVGPtIUeVnJ3VS0rU3tfhSOOiTA3nHwea3dOPOXWgc Vv+TSvMUqPUJvRqkr8yHq95sDk6hphosIp1y6oNG5TTFHg9LB3AFRaZtxHl4Hci4 HL+mByynVcFLYmPrQ5i58No9CmoflMhrDasZMdO/do/DnncEA6HviCWgzPJj19Zz pefd+2BZGckZ/4+8NFpAZzsQOGx/KKeodXIaCg+Tz6QruuPJtM9bt+VSeNko8Qxj YanFMyLdFA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:07:01 2026 by rpki-client