$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: sEqBgZJ25oUV73nk+/Mx1FaJwy3NP5JlrCzmApJji94= Subject key identifier: 22:CC:87:C0:46:02:6B:F9:F2:CA:D5:BC:87:20:CC:0C:87:2D:00:E2 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 07AC619C8E2C51F12CA2C7C291491EE9577C9E05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 19:36:58 +0000 Manifest this update: Fri 24 Jul 2026 19:31:58 +0000 Manifest next update: Sat 25 Jul 2026 21:55:58 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: ktN/Fca/K3VM9yjjuo5h028CSIcyPT/nANKJ8WelxeQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:61:9c:8e:2c:51:f1:2c:a2:c7:c2:91:49:1e:e9:57:7c:9e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Jul 24 19:31:58 2026 GMT Not After : Jul 25 21:55:58 2026 GMT Subject: CN=22CC87C046026BF9F2CAD5BC8720CC0C872D00E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:3a:2f:f2:7c:ba:d4:bf:f3:46:f8:b1:d9: 07:09:7c:e9:85:fc:ff:da:31:e7:50:32:2e:56:8e: 07:9b:d5:d2:25:7f:58:3b:f9:b6:eb:77:6d:46:85: 12:6b:03:18:9b:ee:0b:3e:69:40:dc:43:96:01:f4: a5:9b:3a:a3:0f:8b:e2:1a:e0:62:46:21:4d:f9:0a: bd:be:bc:72:a0:2f:c1:ec:de:c6:94:4a:b3:89:6d: 77:2f:9b:37:93:6f:4b:2a:09:dc:77:6d:65:71:30: 28:98:11:fe:a9:be:5b:9b:43:03:2b:7f:c6:68:73: 72:f9:e0:be:89:35:ce:b9:51:e7:60:a1:58:7e:32: 5a:c1:a4:5f:3f:e5:16:f8:d6:44:3e:e2:de:bf:3f: 69:25:44:26:9d:71:0a:34:7a:6e:2e:83:5d:1b:1e: eb:27:5c:b7:6d:39:e0:50:5c:fb:c1:ae:44:47:f4: 7d:ef:5f:fb:09:8d:8f:e5:bc:79:9b:a9:20:4a:07: b8:eb:5f:d0:6b:d3:b5:d5:f5:c9:01:ff:e8:49:88: ff:2a:27:7c:61:6f:c7:1c:ca:1f:84:db:a0:0a:a9: fd:97:59:8a:50:46:f7:8a:f2:31:d4:45:68:8e:fa: d8:53:c9:3c:dc:cd:4b:0e:91:13:75:2e:93:f4:37: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CC:87:C0:46:02:6B:F9:F2:CA:D5:BC:87:20:CC:0C:87:2D:00:E2 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:de:fd:b6:9f:47:23:1c:4c:b4:5f:ec:26:1f:4f:d6:d5: 1a:cd:41:29:22:db:fc:bf:d5:aa:26:fc:16:b9:45:3d:26:2d: 47:5e:70:d4:af:08:dc:e5:08:9c:7b:fb:1e:77:71:81:c3:0c: 39:ff:7e:c6:07:da:4d:82:90:79:f4:32:ee:60:45:4d:ac:f6: 19:51:1d:2e:37:16:af:4e:8f:30:ed:6a:9f:a1:0c:88:aa:f5: 10:b0:81:0e:63:9a:88:33:0d:64:5f:b2:6f:9e:56:c1:54:54: f3:4f:dd:20:1d:90:53:0e:3c:b3:96:54:54:66:66:f6:bd:14: ae:f9:9b:3b:7f:3f:32:a8:b4:c8:8d:33:46:3b:cd:03:2f:cf: 33:86:2f:8d:91:19:1a:63:77:a8:24:84:c8:16:f8:66:5b:3e: be:0f:fd:2c:76:4a:33:ed:48:ed:31:aa:b9:1c:d2:e3:54:58: fb:90:6e:8f:dc:e9:84:ab:27:1e:ae:66:44:c0:f3:f8:1e:b3: 35:a7:17:83:4b:ae:62:99:99:82:d1:66:5b:19:85:70:4f:5b: 0e:63:1f:8e:bb:f2:66:de:d2:ce:b1:f0:2b:18:4c:5d:bb:4a: 58:bb:e5:98:50:ba:e9:bc:9d:f0:1d:8e:d0:84:b8:89:02:b6: db:a7:12:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB6xhnI4sUfEsosfCkUke6Vd8ngUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjA3MjQxOTMxNThaFw0yNjA3MjUyMTU1NThaMDMxMTAvBgNV BAMTKDIyQ0M4N0MwNDYwMjZCRjlGMkNBRDVCQzg3MjBDQzBDODcyRDAwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFTov8ny61L/zRvix2QcJfOmF /P/aMedQMi5Wjgeb1dIlf1g7+bbrd21GhRJrAxib7gs+aUDcQ5YB9KWbOqMPi+Ia 4GJGIU35Cr2+vHKgL8Hs3saUSrOJbXcvmzeTb0sqCdx3bWVxMCiYEf6pvlubQwMr f8Zoc3L54L6JNc65UedgoVh+MlrBpF8/5Rb41kQ+4t6/P2klRCadcQo0em4ug10b HusnXLdtOeBQXPvBrkRH9H3vX/sJjY/lvHmbqSBKB7jrX9Br07XV9ckB/+hJiP8q J3xhb8ccyh+E26AKqf2XWYpQRveK8jHURWiO+thTyTzczUsOkRN1LpP0N8MpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIsyHwEYCa/nyytW8hyDMDIctAOIwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh7e/bafRyMc TLRf7CYfT9bVGs1BKSLb/L/Vqib8FrlFPSYtR15w1K8I3OUInHv7HndxgcMMOf9+ xgfaTYKQefQy7mBFTaz2GVEdLjcWr06PMO1qn6EMiKr1ELCBDmOaiDMNZF+yb55W wVRU80/dIB2QUw48s5ZUVGZm9r0UrvmbO38/Mqi0yI0zRjvNAy/PM4YvjZEZGmN3 qCSEyBb4Zls+vg/9LHZKM+1I7TGquRzS41RY+5Buj9zphKsnHq5mRMDz+B6zNacX g0uuYpmZgtFmWxmFcE9bDmMfjrvyZt7SzrHwKxhMXbtKWLvlmFC66byd8B2O0IS4 iQK226cS5g== -----END CERTIFICATE-----Generated at Fri Jul 24 22:40:41 2026 by rpki-client