$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: Fk14jG+LseNFDQbXBpj8W43rGVEk6utLg9ezXhcjR7w= Subject key identifier: 7F:5E:DB:D6:79:4D:B7:B0:5D:CC:8D:FA:5D:3A:FB:82:0E:2F:F2:02 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 5C93F7FEFB9259BAA8844BE7A79B5A03A2DE0D7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: 8B Signing time: Thu 23 Jul 2026 20:09:27 +0000 Manifest this update: Thu 23 Jul 2026 20:04:27 +0000 Manifest next update: Fri 24 Jul 2026 23:55:27 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: cEucQpqZqKUaectxceq8Ee7HcdMgRNPilX5+5W/GcfE=) 2: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) 3: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:93:f7:fe:fb:92:59:ba:a8:84:4b:e7:a7:9b:5a:03:a2:de:0d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Jul 23 20:04:27 2026 GMT Not After : Jul 24 23:55:27 2026 GMT Subject: CN=7F5EDBD6794DB7B05DCC8DFA5D3AFB820E2FF202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:46:b3:f9:1a:98:91:96:3e:d2:27:ab:6d: 8e:47:02:a4:ca:a4:de:3f:55:28:ca:3b:3c:09:a6: 1c:c5:14:da:01:a6:f5:bd:96:a3:c4:05:ae:32:ab: d7:bf:7f:b6:a8:b9:02:3f:13:61:00:b7:32:ea:0f: 7f:b7:69:0d:3a:be:9b:39:ca:3b:e6:c1:31:97:e9: de:c3:e6:57:2c:cf:50:94:24:1d:f5:d2:cd:92:d4: b0:66:19:54:ea:59:40:af:e5:30:4e:fe:a8:73:bc: 5c:9c:67:42:d3:9b:49:62:f6:43:89:a4:32:a9:bf: e3:a0:59:32:56:c7:1b:0a:8b:c8:77:07:35:b3:de: 19:85:b5:67:e9:24:f7:1b:f0:d7:a9:a4:bf:df:52: 5b:e8:8e:47:66:7d:fb:30:6a:99:c6:a7:65:ef:d6: ed:5a:f6:47:a6:dd:fc:80:7f:96:ae:f8:b3:73:65: c5:cc:a2:b7:07:cf:e6:52:65:ca:11:06:49:76:64: cb:5c:a2:25:0f:ec:46:76:6c:f9:a7:6b:40:57:ad: 69:c1:31:05:d7:f1:d1:2a:38:4e:01:44:26:42:5c: 98:04:23:dd:70:12:82:7c:72:61:f4:7a:94:80:8f: cd:9e:d7:bd:0d:26:59:5a:ac:13:6a:c2:33:cd:80: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:DB:D6:79:4D:B7:B0:5D:CC:8D:FA:5D:3A:FB:82:0E:2F:F2:02 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:38:db:d6:c7:62:26:4c:67:03:33:f6:7e:38:41:af:40:d9: bd:cf:d4:b9:2e:d8:6e:c8:32:c6:c7:d8:63:8d:70:60:71:9a: c6:85:7a:52:70:8b:60:ef:d6:4e:b0:38:8a:52:43:08:e9:8a: 1a:eb:b8:95:e6:b0:bf:d4:93:ac:23:52:7d:1c:9e:89:38:a2: 85:fe:23:ac:62:e2:9f:22:2f:44:c0:f0:cb:ec:87:89:dd:b0: e3:f0:79:07:27:3c:eb:88:5b:3c:d5:a4:70:e8:23:69:92:4c: c0:a3:c9:04:7b:94:3a:2a:8d:df:69:24:56:e7:85:64:4a:35: ad:bf:55:30:c5:55:c4:9b:00:3b:78:ff:7a:ac:1c:d9:57:75: 38:13:1a:21:8d:ab:a5:24:93:30:f9:05:a3:68:92:dc:93:27: c0:d7:1a:7a:cb:25:9c:0e:c5:e1:41:f5:e7:95:42:94:d1:80: 93:b4:48:15:83:75:05:1d:9c:99:68:ba:8d:9e:c0:44:23:93: 10:4a:d2:ce:7b:3e:eb:a9:a4:bd:58:53:e1:7a:32:2e:f7:bd: f2:44:10:b6:9d:ca:2b:dd:33:30:f8:7e:96:1e:ab:14:3b:44: e0:7e:a9:7f:3e:7c:0e:eb:a2:cd:d3:37:4e:98:63:04:47:fa: 6e:27:07:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXJP3/vuSWbqohEvnp5taA6LeDX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA3MjMyMDA0MjdaFw0yNjA3MjQyMzU1MjdaMDMxMTAvBgNV BAMTKDdGNUVEQkQ2Nzk0REI3QjA1RENDOERGQTVEM0FGQjgyMEUyRkYyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aUaz+RqYkZY+0ierbY5HAqTK pN4/VSjKOzwJphzFFNoBpvW9lqPEBa4yq9e/f7aouQI/E2EAtzLqD3+3aQ06vps5 yjvmwTGX6d7D5lcsz1CUJB310s2S1LBmGVTqWUCv5TBO/qhzvFycZ0LTm0li9kOJ pDKpv+OgWTJWxxsKi8h3BzWz3hmFtWfpJPcb8NeppL/fUlvojkdmffswapnGp2Xv 1u1a9kem3fyAf5au+LNzZcXMorcHz+ZSZcoRBkl2ZMtcoiUP7EZ2bPmna0BXrWnB MQXX8dEqOE4BRCZCXJgEI91wEoJ8cmH0epSAj82e170NJllarBNqwjPNgJ2rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf17b1nlNt7BdzI36XTr7gg4v8gIwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDjb1sdiJkxn AzP2fjhBr0DZvc/UuS7YbsgyxsfYY41wYHGaxoV6UnCLYO/WTrA4ilJDCOmKGuu4 leawv9STrCNSfRyeiTiihf4jrGLinyIvRMDwy+yHid2w4/B5Byc864hbPNWkcOgj aZJMwKPJBHuUOiqN32kkVueFZEo1rb9VMMVVxJsAO3j/eqwc2Vd1OBMaIY2rpSST MPkFo2iS3JMnwNcaesslnA7F4UH155VClNGAk7RIFYN1BR2cmWi6jZ7ARCOTEErS zns+66mkvVhT4XoyLve98kQQtp3KK90zMPh+lh6rFDtE4H6pfz58DuuizdM3Tphj BEf6bicH1Q== -----END CERTIFICATE-----Generated at Fri Jul 24 16:59:05 2026 by rpki-client