$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: AYIaBVqZZ6y8wKCZ0eNd9M2Y0gps/vVkgo5SYsW8kmc= Subject key identifier: C1:8D:18:3C:DD:C7:01:43:F9:40:26:E0:FE:32:60:D5:43:75:15:32 Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 78C0B3A829878ABDE0E1CA1E015B6F99D7BEDE84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 8F Signing time: Fri 24 Jul 2026 16:16:36 +0000 Manifest this update: Fri 24 Jul 2026 16:11:36 +0000 Manifest next update: Sat 25 Jul 2026 17:30:36 +0000 Files and hashes: 1: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: nqnkma5DZl6ZT3i1Y9uCsaSzMCOvi7nGAlHVu1K90bI=) 2: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) 3: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c0:b3:a8:29:87:8a:bd:e0:e1:ca:1e:01:5b:6f:99:d7:be:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Jul 24 16:11:36 2026 GMT Not After : Jul 25 17:30:36 2026 GMT Subject: CN=C18D183CDDC70143F94026E0FE3260D543751532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:fd:e8:47:29:e5:4e:9d:e7:f1:96:5b:f5: 68:3c:74:6b:2b:fe:11:57:9b:15:06:37:bb:05:dc: a8:0e:dd:f4:93:40:f2:90:b9:0f:e3:48:4b:5f:6d: 03:62:77:4c:45:ec:2f:3f:9f:57:ca:e5:cf:ab:61: 69:ce:a1:a9:d8:4f:49:6e:9d:ab:9c:13:42:5f:7e: e5:9a:0b:9e:48:36:c0:72:60:60:09:5b:38:63:12: f7:af:cf:76:30:78:af:17:83:06:e7:44:cc:7b:c1: da:0b:ff:f2:18:04:87:79:b4:e0:2e:98:a9:9b:f7: 68:55:a5:37:49:24:29:17:d2:ac:25:ec:8e:32:12: 10:4a:b1:85:f7:a7:85:a6:65:5a:0a:6b:a3:84:11: b4:0e:7d:02:bf:8d:cc:32:11:4f:1f:ae:06:6f:a3: a5:55:48:36:02:3d:04:0f:55:94:19:35:47:82:84: 75:9b:f7:4e:4b:99:61:e3:c9:40:ca:f2:c3:98:07: a3:9d:be:e0:0f:67:83:f9:2b:c6:c3:e4:1f:a7:5c: 36:ee:26:ad:1f:29:9d:c0:11:37:ae:11:a8:59:a3: 60:15:52:4b:6c:1d:87:28:86:93:21:01:7a:db:a0: 48:43:8d:9c:dc:5f:91:92:7d:fe:7a:3d:ba:ca:71: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:18:3C:DD:C7:01:43:F9:40:26:E0:FE:32:60:D5:43:75:15:32 X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d5:ec:12:f7:93:3e:51:84:cc:63:56:a5:61:de:02:a3:ec: 72:6c:53:eb:b5:6f:7d:e6:ec:b3:99:c5:5f:2b:44:42:89:bf: 04:37:ab:fe:3d:2a:33:41:55:5a:41:c7:5d:7f:54:3f:03:eb: 6a:6c:80:27:64:db:94:8c:0c:f3:7c:5c:29:0d:80:a0:5e:8f: 25:69:a8:ac:cb:a3:6d:63:64:bd:b2:0b:94:3a:5b:fc:a3:c7: 4b:c3:12:63:e2:17:f2:a3:63:9e:18:d3:5c:42:36:c4:99:89: 06:a6:e3:3e:cd:db:49:55:a2:54:c7:3b:3f:ce:e7:2f:c1:02: c6:2d:1f:8e:9b:f8:5e:14:c9:b4:1a:c3:44:b4:53:bf:bd:b8: c0:d2:29:c0:0c:5c:27:c2:53:93:ab:dd:bc:a7:8b:b5:70:db: bf:43:be:7e:85:55:4f:f4:75:40:ff:1a:7a:c5:aa:8b:e1:30: f3:75:b2:e2:40:22:ad:f1:eb:ca:a1:80:5d:81:39:bb:2f:a4: db:90:68:50:15:9b:08:e7:5c:35:06:c0:87:8b:41:fb:ea:ff: d7:66:a0:04:e0:51:61:30:27:e4:df:e1:90:90:1c:ce:11:1a: 2c:3c:6b:24:0f:8c:aa:fd:30:5a:03:ea:f5:95:fe:dd:22:99: 4d:e1:64:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeMCzqCmHir3g4coeAVtvmde+3oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA3MjQxNjExMzZaFw0yNjA3MjUxNzMwMzZaMDMxMTAvBgNV BAMTKEMxOEQxODNDRERDNzAxNDNGOTQwMjZFMEZFMzI2MEQ1NDM3NTE1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Nv3oRynlTp3n8ZZb9Wg8dGsr /hFXmxUGN7sF3KgO3fSTQPKQuQ/jSEtfbQNid0xF7C8/n1fK5c+rYWnOoanYT0lu naucE0JffuWaC55INsByYGAJWzhjEvevz3YweK8XgwbnRMx7wdoL//IYBId5tOAu mKmb92hVpTdJJCkX0qwl7I4yEhBKsYX3p4WmZVoKa6OEEbQOfQK/jcwyEU8frgZv o6VVSDYCPQQPVZQZNUeChHWb905LmWHjyUDK8sOYB6OdvuAPZ4P5K8bD5B+nXDbu Jq0fKZ3AETeuEahZo2AVUktsHYcohpMhAXrboEhDjZzcX5GSff56PbrKcQHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwY0YPN3HAUP5QCbg/jJg1UN1FTIwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedXsEveTPlGE zGNWpWHeAqPscmxT67Vvfebss5nFXytEQom/BDer/j0qM0FVWkHHXX9UPwPramyA J2TblIwM83xcKQ2AoF6PJWmorMujbWNkvbILlDpb/KPHS8MSY+IX8qNjnhjTXEI2 xJmJBqbjPs3bSVWiVMc7P87nL8ECxi0fjpv4XhTJtBrDRLRTv724wNIpwAxcJ8JT k6vdvKeLtXDbv0O+foVVT/R1QP8aesWqi+Ew83Wy4kAirfHryqGAXYE5uy+k25Bo UBWbCOdcNQbAh4tB++r/12agBOBRYTAn5N/hkJAczhEaLDxrJA+Mqv0wWgPq9ZX+ 3SKZTeFkrQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:55:00 2026 by rpki-client