$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: aRrQK8893pcIvJ2oTS93Su76g7vPCyOaiVVn0I6F8eo= Subject key identifier: C4:19:C4:A4:BC:D2:48:B2:0E:4D:22:2F:B5:4B:DD:B5:61:3A:8F:E9 Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 6311E2317406230FBB7960BFDE9E839D26BA5CF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 18:46:55 +0000 Manifest this update: Fri 24 Jul 2026 18:41:55 +0000 Manifest next update: Sat 25 Jul 2026 20:27:55 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 4INAltVIa6VH5bonTcEkFf4HkkjmqFVo7+VFZC6YBVM=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:11:e2:31:74:06:23:0f:bb:79:60:bf:de:9e:83:9d:26:ba:5c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Jul 24 18:41:55 2026 GMT Not After : Jul 25 20:27:55 2026 GMT Subject: CN=C419C4A4BCD248B20E4D222FB54BDDB5613A8FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:22:20:81:ab:6d:c8:3a:dd:cf:0b:b6:a0: 91:65:bf:53:8a:e3:2c:0c:96:f5:e0:01:12:6e:c6: a3:8c:74:e1:c0:ef:35:82:ad:0b:fa:22:e7:8b:53: b9:f4:98:9a:3c:28:02:5c:0c:2e:b2:0a:8b:b8:7c: e5:84:5b:2c:fb:30:ce:7a:8a:55:ac:87:a1:21:48: 54:f3:d3:34:f3:ec:4f:b1:9d:fb:c2:69:4d:77:09: 5c:b4:fe:52:15:67:69:b3:0a:92:a6:d7:f4:65:d2: f4:c4:9c:d5:a5:6c:a3:de:c9:7f:7a:74:e5:62:ef: 06:a2:b0:5f:8d:e1:fb:84:45:58:e4:a3:25:2f:14: f4:d3:f6:f9:9f:cf:33:23:bd:30:29:ea:9f:9c:c0: ba:19:f0:59:f7:e6:d2:66:8c:33:b7:a3:66:1e:b3: 5d:be:62:d9:be:a1:63:96:11:f4:dc:1d:fc:c8:d1: 9e:00:f8:ef:9c:72:ab:1f:c5:ab:b0:35:a9:0c:15: 80:d7:fd:b6:54:67:45:bd:a4:26:f8:ba:f7:c7:ca: c7:a4:2f:d7:b5:78:66:f2:b7:22:9f:de:c9:da:f8: c7:f0:97:72:ad:ed:7d:5f:cf:75:71:0b:d1:1e:5b: b1:42:74:af:81:f0:e2:73:62:30:a7:e2:68:a0:bf: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:19:C4:A4:BC:D2:48:B2:0E:4D:22:2F:B5:4B:DD:B5:61:3A:8F:E9 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a4:2d:2e:09:f3:0b:0e:d0:ed:bd:8e:76:64:fd:b3:cd:7b: 04:8a:1d:ae:30:90:5e:43:b2:28:e7:9e:de:60:aa:6e:b5:b4: 05:7f:ef:39:b3:dd:9a:ff:25:e6:48:b1:f0:9f:cc:ac:53:13: 8f:c9:96:5c:b8:73:14:b7:e4:95:d3:94:a1:06:de:c7:09:63: 20:97:b7:2c:83:46:b4:f3:cc:c1:ba:c2:23:3e:d7:8f:05:07: 05:47:3b:73:8d:c7:9b:b4:fc:75:06:82:06:6d:cc:8e:5d:21: 36:e9:8c:ad:1c:6e:28:12:e9:60:08:0d:0b:51:c8:89:19:22: 26:21:b1:8b:5d:ee:b0:d7:ac:8b:53:7c:2c:49:92:05:c0:9a: b6:30:eb:92:71:59:e4:14:c7:ff:d2:10:2f:00:39:42:30:1d: c9:7a:81:54:ad:28:18:ed:99:0b:30:8d:bb:ba:3b:af:8d:43: 98:0a:77:e3:86:4f:c7:60:c1:29:ea:69:17:71:5a:32:70:bb: 5a:f9:60:4d:6c:d2:80:a7:8e:22:37:6d:79:e5:73:29:38:3d: 13:26:3b:6d:0c:57:ac:79:28:ae:53:73:dc:66:a5:32:e5:c9: 8a:ee:65:61:3c:50:4c:2b:9b:e2:c8:e3:b3:7f:d4:3a:9a:7a: 46:77:c3:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYxHiMXQGIw+7eWC/3p6DnSa6XPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA3MjQxODQxNTVaFw0yNjA3MjUyMDI3NTVaMDMxMTAvBgNV BAMTKEM0MTlDNEE0QkNEMjQ4QjIwRTREMjIyRkI1NEJEREI1NjEzQThGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLJyIggattyDrdzwu2oJFlv1OK 4ywMlvXgARJuxqOMdOHA7zWCrQv6IueLU7n0mJo8KAJcDC6yCou4fOWEWyz7MM56 ilWsh6EhSFTz0zTz7E+xnfvCaU13CVy0/lIVZ2mzCpKm1/Rl0vTEnNWlbKPeyX96 dOVi7waisF+N4fuERVjkoyUvFPTT9vmfzzMjvTAp6p+cwLoZ8Fn35tJmjDO3o2Ye s12+Ytm+oWOWEfTcHfzI0Z4A+O+ccqsfxauwNakMFYDX/bZUZ0W9pCb4uvfHysek L9e1eGbytyKf3sna+Mfwl3Kt7X1fz3VxC9EeW7FCdK+B8OJzYjCn4migv2jTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxBnEpLzSSLIOTSIvtUvdtWE6j+kwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKQtLgnzCw7Q 7b2OdmT9s817BIodrjCQXkOyKOee3mCqbrW0BX/vObPdmv8l5kix8J/MrFMTj8mW XLhzFLfkldOUoQbexwljIJe3LINGtPPMwbrCIz7XjwUHBUc7c43Hm7T8dQaCBm3M jl0hNumMrRxuKBLpYAgNC1HIiRkiJiGxi13usNesi1N8LEmSBcCatjDrknFZ5BTH /9IQLwA5QjAdyXqBVK0oGO2ZCzCNu7o7r41DmAp344ZPx2DBKeppF3FaMnC7Wvlg TWzSgKeOIjdteeVzKTg9EyY7bQxXrHkorlNz3GalMuXJiu5lYTxQTCub4sjjs3/U Opp6RnfD5w== -----END CERTIFICATE-----Generated at Fri Jul 24 22:38:56 2026 by rpki-client