$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: GQIx7p5keewuTMYl15QM+a89sez97xRkniNry0kpk78= Subject key identifier: 0D:57:8F:41:31:9B:FD:84:38:DD:EF:5C:66:82:E8:84:38:BF:7D:34 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 7BF4CBE32BC5455BB5A5E019111A12052B89C722 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: 8F Signing time: Fri 24 Jul 2026 04:35:22 +0000 Manifest this update: Fri 24 Jul 2026 04:30:22 +0000 Manifest next update: Sat 25 Jul 2026 08:31:22 +0000 Files and hashes: 1: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) 2: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: oTdbRhIme3ecWoT1om47UmKD13w8OGcLq2Zfs/w92c4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f4:cb:e3:2b:c5:45:5b:b5:a5:e0:19:11:1a:12:05:2b:89:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Jul 24 04:30:22 2026 GMT Not After : Jul 25 08:31:22 2026 GMT Subject: CN=0D578F41319BFD8438DDEF5C6682E88438BF7D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:b1:75:30:3d:41:1f:5c:11:30:ae:b2:24: 54:18:c5:5a:6d:d7:fc:67:23:cb:2a:0a:aa:9a:2b: 97:8e:0f:5f:36:c6:77:7a:39:5e:ea:0d:e0:69:b1: 7e:80:5d:39:5c:92:fb:f3:b1:a2:b0:72:77:10:df: da:ff:d3:ab:ab:d8:77:26:82:3a:40:7b:ca:59:f5: 52:38:fb:20:b0:2d:f7:97:d6:62:88:ff:69:1c:d2: 59:60:cf:52:7c:09:76:06:95:fe:db:0b:a6:31:2c: 8c:71:9a:fb:34:b1:8d:6a:a5:06:00:4b:7f:3a:d8: 36:ba:27:32:1c:2e:7d:f0:ae:d5:c8:85:74:4f:3c: 43:92:52:f4:ba:f1:d3:61:6e:fe:91:ae:6e:34:a0: 9b:d4:0a:df:78:7c:a8:3f:38:e4:5d:a3:7d:9a:53: 6f:cb:4e:80:03:6b:8f:53:7d:94:aa:bb:5e:47:08: ce:4d:b0:75:7e:81:20:2e:0e:41:41:21:ef:72:f7: 58:c0:5c:85:95:1e:fc:db:c2:9f:4c:fb:e2:4d:a5: f5:75:e3:36:fe:60:0b:b4:9f:6d:0d:11:f3:90:c4: ea:26:0a:8f:33:09:71:fe:97:f9:22:f5:4f:57:3a: d3:91:5f:c9:9c:3e:73:3e:80:29:75:9c:65:6e:40: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:57:8F:41:31:9B:FD:84:38:DD:EF:5C:66:82:E8:84:38:BF:7D:34 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5f:eb:d5:d7:d2:be:4e:66:e4:8f:09:c9:40:f0:f6:cd:70: cf:f1:76:cd:f5:43:59:d4:18:89:c3:b4:e4:c3:d1:3e:60:bd: 96:40:18:a6:f2:3e:13:87:2d:80:96:84:60:ed:27:b7:71:04: 0c:de:0f:f9:36:49:3a:65:41:c4:ed:1d:fc:dd:9b:48:c2:0c: 40:37:23:ed:e8:fe:f5:a9:c8:d6:c0:f1:dd:23:24:05:b8:a2: 92:c0:15:bb:14:ce:90:28:8a:d5:7a:b1:55:29:94:01:34:24: 71:e9:cb:09:93:e4:8c:bc:1d:c8:0c:b5:60:90:be:ed:f5:7f: fe:72:8e:f2:99:23:85:7c:67:7b:ac:4c:29:af:a3:60:79:f7: 46:ee:39:9a:40:b0:aa:fc:c7:e0:c4:ba:70:55:a0:63:2c:4f: 60:f9:02:23:9b:69:cd:76:f0:38:ab:a1:6f:97:c8:28:dc:ae: b3:22:18:11:98:4a:0b:00:87:68:fe:ce:8b:6e:25:8a:aa:12: b4:a5:d1:93:ee:32:ca:8d:a5:6f:d7:a2:c1:53:33:1f:60:68: f3:0b:d1:24:66:e9:86:c1:a2:e7:e8:7e:ee:63:6e:a2:eb:de: 0e:33:44:2b:22:a0:1e:16:5e:8c:6d:d5:9e:d2:75:19:e7:21: fa:43:1e:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe/TL4yvFRVu1peAZERoSBSuJxyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjA3MjQwNDMwMjJaFw0yNjA3MjUwODMxMjJaMDMxMTAvBgNV BAMTKDBENTc4RjQxMzE5QkZEODQzOERERUY1QzY2ODJFODg0MzhCRjdEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65rF1MD1BH1wRMK6yJFQYxVpt 1/xnI8sqCqqaK5eOD182xnd6OV7qDeBpsX6AXTlckvvzsaKwcncQ39r/06ur2Hcm gjpAe8pZ9VI4+yCwLfeX1mKI/2kc0llgz1J8CXYGlf7bC6YxLIxxmvs0sY1qpQYA S3862Da6JzIcLn3wrtXIhXRPPEOSUvS68dNhbv6Rrm40oJvUCt94fKg/OORdo32a U2/LToADa49TfZSqu15HCM5NsHV+gSAuDkFBIe9y91jAXIWVHvzbwp9M++JNpfV1 4zb+YAu0n20NEfOQxOomCo8zCXH+l/ki9U9XOtORX8mcPnM+gCl1nGVuQNdrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDVePQTGb/YQ43e9cZoLohDi/fTQwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl/r1dfSvk5m 5I8JyUDw9s1wz/F2zfVDWdQYicO05MPRPmC9lkAYpvI+E4ctgJaEYO0nt3EEDN4P +TZJOmVBxO0d/N2bSMIMQDcj7ej+9anI1sDx3SMkBbiiksAVuxTOkCiK1XqxVSmU ATQkcenLCZPkjLwdyAy1YJC+7fV//nKO8pkjhXxne6xMKa+jYHn3Ru45mkCwqvzH 4MS6cFWgYyxPYPkCI5tpzXbwOKuhb5fIKNyusyIYEZhKCwCHaP7Oi24liqoStKXR k+4yyo2lb9eiwVMzH2Bo8wvRJGbphsGi5+h+7mNuouveDjNEKyKgHhZejG3VntJ1 Gech+kMeHw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:57:26 2026 by rpki-client