$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: Xd2PSFmbpTs6NDgFmLhtyg9cLI7ZQ+KpY5FAl42du+8= Subject key identifier: 2F:47:9C:D9:60:9B:BA:6A:A7:B8:62:D8:59:07:10:32:A1:68:20:D0 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 3DBB1B4263951790B809F535745D4F31E64CE0F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 86 Signing time: Thu 23 Jul 2026 18:09:18 +0000 Manifest this update: Thu 23 Jul 2026 18:04:18 +0000 Manifest next update: Fri 24 Jul 2026 21:27:18 +0000 Files and hashes: 1: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) 2: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: tDgQ4YMumPp05itP82t0D0H12BDXN6zUud+0/OFArSQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bb:1b:42:63:95:17:90:b8:09:f5:35:74:5d:4f:31:e6:4c:e0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Jul 23 18:04:18 2026 GMT Not After : Jul 24 21:27:18 2026 GMT Subject: CN=2F479CD9609BBA6AA7B862D859071032A16820D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:bc:70:2c:cf:15:e5:2f:d6:c6:5e:e3:cf: 5a:22:d9:f7:48:5b:6c:f6:af:86:f4:fe:4a:42:15: d4:95:cb:e6:87:50:1e:b6:7e:7c:99:b4:6c:f3:d8: 72:f3:3d:6c:24:2d:8b:66:ca:4f:c5:27:e1:43:1f: c6:94:bd:19:5e:09:a0:26:de:1b:a9:ac:39:1e:64: ae:3f:95:48:07:ea:a5:dc:3b:21:a9:d4:41:ae:5f: a5:73:2b:6d:62:d6:24:b0:80:63:5a:45:82:83:ad: dc:30:f0:88:2e:70:08:47:b2:7f:27:c1:a4:29:c4: 0d:e7:0d:3b:b5:20:5e:8d:ff:76:29:29:ea:14:be: 85:03:87:5d:a7:ab:3d:d7:9e:3d:ac:83:cc:e4:77: 9b:92:dc:e4:c3:be:03:d8:f7:93:df:2a:bb:49:82: 95:e3:b0:dd:1f:0a:50:36:d3:e4:28:84:30:b0:0b: e5:a2:41:af:3a:e8:17:ad:23:20:98:6e:43:31:ac: 3a:33:bb:20:be:7a:82:83:97:26:22:89:38:b7:23: 4d:86:61:25:ee:e3:54:56:41:ed:77:c7:d3:1b:85: 03:e3:8a:47:99:d6:db:e1:6f:6d:b3:12:a5:4d:0c: e3:df:ce:67:0c:ec:d9:f7:5c:74:b7:d6:74:ae:29: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:47:9C:D9:60:9B:BA:6A:A7:B8:62:D8:59:07:10:32:A1:68:20:D0 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1a:c7:d2:0f:00:00:9a:e4:19:97:86:95:d6:8d:78:43:82: 58:ae:b8:59:d5:58:45:99:89:44:4a:01:f0:5b:05:91:54:13: 0a:a2:2b:03:d0:f2:6b:ac:34:ca:94:0b:6b:c1:53:ed:8c:96: da:c9:8f:c7:a5:9a:59:e5:e1:e1:e6:5f:e0:25:cf:25:e6:91: f4:e2:c3:df:56:84:d0:1a:5f:7c:c2:08:30:fa:3c:a5:c8:75: 06:c2:0a:67:6b:f0:93:ef:e3:73:f2:98:25:37:3f:ba:84:7d: ae:b8:11:17:08:03:fa:3a:2f:5a:ca:99:c7:1f:1d:e1:8a:26: e5:0e:9e:f1:c7:9c:fa:b5:3f:fd:05:36:7a:fd:63:58:2c:f6: c0:39:ce:51:6a:4b:3a:75:87:16:c6:fe:17:4d:19:35:07:1d: 0d:31:a5:a9:f1:11:41:53:f2:90:8d:b7:90:9d:85:39:74:87: 69:ca:20:0f:e0:2a:73:6d:0d:1d:43:fb:92:47:62:07:06:94: 2b:4a:ff:7f:a3:e8:6a:cb:31:c9:54:05:92:02:10:3c:16:40: cb:4d:3f:f4:10:81:5e:9a:67:7a:30:39:20:e2:9f:f6:e6:51: 29:11:6d:9f:bd:8f:c3:a7:18:a1:5e:f4:95:22:9d:57:48:1f: 68:c2:16:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPbsbQmOVF5C4CfU1dF1PMeZM4PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA3MjMxODA0MThaFw0yNjA3MjQyMTI3MThaMDMxMTAvBgNV BAMTKDJGNDc5Q0Q5NjA5QkJBNkFBN0I4NjJEODU5MDcxMDMyQTE2ODIwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39bxwLM8V5S/Wxl7jz1oi2fdI W2z2r4b0/kpCFdSVy+aHUB62fnyZtGzz2HLzPWwkLYtmyk/FJ+FDH8aUvRleCaAm 3huprDkeZK4/lUgH6qXcOyGp1EGuX6VzK21i1iSwgGNaRYKDrdww8IgucAhHsn8n waQpxA3nDTu1IF6N/3YpKeoUvoUDh12nqz3Xnj2sg8zkd5uS3OTDvgPY95PfKrtJ gpXjsN0fClA20+QohDCwC+WiQa866BetIyCYbkMxrDozuyC+eoKDlyYiiTi3I02G YSXu41RWQe13x9MbhQPjikeZ1tvhb22zEqVNDOPfzmcM7Nn3XHS31nSuKVPpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL0ec2WCbumqnuGLYWQcQMqFoINAwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxrH0g8AAJrk GZeGldaNeEOCWK64WdVYRZmJREoB8FsFkVQTCqIrA9Dya6w0ypQLa8FT7YyW2smP x6WaWeXh4eZf4CXPJeaR9OLD31aE0BpffMIIMPo8pch1BsIKZ2vwk+/jc/KYJTc/ uoR9rrgRFwgD+jovWsqZxx8d4Yom5Q6e8cec+rU//QU2ev1jWCz2wDnOUWpLOnWH Fsb+F00ZNQcdDTGlqfERQVPykI23kJ2FOXSHacogD+Aqc20NHUP7kkdiBwaUK0r/ f6PoassxyVQFkgIQPBZAy00/9BCBXppnejA5IOKf9uZRKRFtn72Pw6cYoV70lSKd V0gfaMIW2A== -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:56 2026 by rpki-client