$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json) Hash identifier: 0S7+LmBKH73mZKvwrF2X+spb/dJ/JqCpsbW0eozVAdw= Subject key identifier: 2F:3D:26:E5:D9:28:B2:4C:43:53:B9:D0:35:B7:10:1F:DF:BB:33:FD Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Certificate serial: 41BF493782E47A12128D5FC872701353CF59D568 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 02:15:06 +0000 Manifest this update: Fri 24 Jul 2026 02:10:06 +0000 Manifest next update: Sat 25 Jul 2026 03:58:06 +0000 Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: vgCI5luMTlGjUX10D0k46CLWUpxtQOhKuK0NPICLDdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bf:49:37:82:e4:7a:12:12:8d:5f:c8:72:70:13:53:cf:59:d5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Validity Not Before: Jul 24 02:10:06 2026 GMT Not After : Jul 25 03:58:06 2026 GMT Subject: CN=2F3D26E5D928B24C4353B9D035B7101FDFBB33FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:52:68:b0:10:d0:9d:04:b2:e1:1b:6e:72: 4c:66:e7:9e:13:67:42:72:59:36:ad:29:55:6c:06: 20:f2:73:36:ab:67:fb:52:2a:06:80:53:eb:6f:43: e3:fa:31:5f:22:a4:85:55:f1:05:fe:f2:cf:d4:14: 58:e6:98:f8:4b:51:c9:56:ab:7f:8f:66:6d:56:83: 01:8a:58:ac:0d:05:8a:1a:69:b1:ef:9a:22:90:3d: 6f:64:b8:e4:71:dd:a2:70:5b:32:ad:02:e6:a9:1c: d9:1e:99:34:00:ce:63:c3:6b:46:eb:78:12:8d:29: 57:cc:d3:ba:5f:22:2b:2e:ad:7e:61:c4:53:92:03: 9a:b0:de:6c:b9:dd:6f:50:5f:a8:d4:2a:a7:1f:dd: 1d:f3:d4:6e:39:48:d5:fb:75:f3:b9:d1:7d:d4:96: 9a:f9:97:7f:97:c7:53:86:6a:16:f5:9e:be:fc:36: 00:c4:b4:a7:e8:a7:6a:b3:d9:de:98:98:df:2b:93: 1d:d2:bd:e7:95:88:d0:c1:17:6a:99:13:b1:48:c3: 9c:bd:33:fd:3f:90:2f:75:c5:35:fe:6e:4e:dd:70: 57:33:18:69:4b:66:ef:7d:8e:7d:70:c1:02:76:14: 8b:61:5d:5e:d9:a1:b4:ab:51:c8:f2:02:7a:5e:39: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3D:26:E5:D9:28:B2:4C:43:53:B9:D0:35:B7:10:1F:DF:BB:33:FD X509v3 Authority Key Identifier: keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7d:d4:f4:8b:4c:7e:e1:3d:23:6b:4d:8a:a4:ee:9d:c3:7e: ca:4e:5e:56:b5:64:a6:36:60:a9:ed:60:1d:85:03:ed:85:45: eb:e8:47:cd:01:5f:94:8f:10:5e:14:36:a3:c0:ca:b1:12:6f: e2:e7:77:cf:34:8b:1f:63:8f:12:37:12:ca:d8:6f:5f:cb:2d: 5c:85:c8:70:41:39:65:9a:ec:9b:c6:80:92:6f:3d:cc:3c:2e: e6:1a:b0:d6:e6:7c:95:da:bd:12:1e:0f:98:de:6e:0c:e9:51: 2a:7e:18:60:ea:ac:64:bc:99:75:a4:70:fb:58:14:11:92:cc: fd:e7:43:a5:06:ce:bd:45:3f:b1:a5:31:42:25:41:e4:24:39: b8:1c:70:02:c9:e7:28:8b:57:50:73:26:fe:b4:51:85:c6:5d: 86:9a:e7:2b:fa:c5:70:87:01:b6:aa:5e:7f:42:3a:53:ae:d9: 76:23:ca:bb:4c:3f:4a:dc:cb:d8:a7:1b:e3:18:72:b1:dc:0c: c8:03:3a:95:17:76:3b:6f:01:1a:46:0e:3e:c8:23:e6:f3:a5: 54:7d:3c:4b:fe:b9:00:cf:9f:8e:8d:eb:5d:23:18:a9:c4:e8: c9:b5:48:72:76:87:34:bb:aa:54:93:9e:48:5c:77:65:fc:e1: a1:ac:74:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQb9JN4LkehISjV/IcnATU89Z1WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4 MDI1QTVCMzAeFw0yNjA3MjQwMjEwMDZaFw0yNjA3MjUwMzU4MDZaMDMxMTAvBgNV BAMTKDJGM0QyNkU1RDkyOEIyNEM0MzUzQjlEMDM1QjcxMDFGREZCQjMzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9FJosBDQnQSy4Rtuckxm554T Z0JyWTatKVVsBiDyczarZ/tSKgaAU+tvQ+P6MV8ipIVV8QX+8s/UFFjmmPhLUclW q3+PZm1WgwGKWKwNBYoaabHvmiKQPW9kuORx3aJwWzKtAuapHNkemTQAzmPDa0br eBKNKVfM07pfIisurX5hxFOSA5qw3my53W9QX6jUKqcf3R3z1G45SNX7dfO50X3U lpr5l3+Xx1OGahb1nr78NgDEtKfop2qz2d6YmN8rkx3SveeViNDBF2qZE7FIw5y9 M/0/kC91xTX+bk7dcFczGGlLZu99jn1wwQJ2FIthXV7ZobSrUcjyAnpeOUQPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULz0m5dkoskxDU7nQNbcQH9+7M/0wHwYDVR0j BBgwFoAUwHToD/25uIa0KDjqiAMtxoAlpbMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTcwOTE4Ny8wL0MwNzRFODBGRkRCOUI4ODZCNDI4MzhFQTg4MDMy REM2ODAyNUE1QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4MDI1QTVCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU3MDkxODcvMC9DMDc0RTgwRkZEQjlC ODg2QjQyODM4RUE4ODAzMkRDNjgwMjVBNUIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs33U9ItMfuE9 I2tNiqTuncN+yk5eVrVkpjZgqe1gHYUD7YVF6+hHzQFflI8QXhQ2o8DKsRJv4ud3 zzSLH2OPEjcSythvX8stXIXIcEE5ZZrsm8aAkm89zDwu5hqw1uZ8ldq9Eh4PmN5u DOlRKn4YYOqsZLyZdaRw+1gUEZLM/edDpQbOvUU/saUxQiVB5CQ5uBxwAsnnKItX UHMm/rRRhcZdhprnK/rFcIcBtqpef0I6U67ZdiPKu0w/StzL2Kcb4xhysdwMyAM6 lRd2O28BGkYOPsgj5vOlVH08S/65AM+fjo3rXSMYqcToybVIcnaHNLuqVJOeSFx3 Zfzhoax0FA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:21 2026 by rpki-client