$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: DYRCymuQufi7Op/5WC9QC+fL207Q63hk+LKXuo3GeZw= Subject key identifier: CB:0F:30:F4:94:3D:C0:58:55:F7:D5:9F:CD:2A:47:82:CB:B7:ED:CC Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 19F5D4D724B968BB12E95203F61E57F3BC9B757C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 8E Signing time: Fri 24 Jul 2026 14:01:22 +0000 Manifest this update: Fri 24 Jul 2026 13:56:22 +0000 Manifest next update: Sat 25 Jul 2026 16:54:22 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: 0c2ZQ2SFJoS5bs5kcKHLhGn6rD/YCPjetgTZRQKjkvI=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f5:d4:d7:24:b9:68:bb:12:e9:52:03:f6:1e:57:f3:bc:9b:75:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Jul 24 13:56:22 2026 GMT Not After : Jul 25 16:54:22 2026 GMT Subject: CN=CB0F30F4943DC05855F7D59FCD2A4782CBB7EDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:bc:59:1d:57:de:46:32:5a:a1:df:13:a9: 67:c3:dd:cb:21:a8:35:1e:09:f4:30:98:e3:ea:5b: 43:53:b6:73:22:e8:a9:e1:c2:9a:a3:9e:15:44:a1: 61:68:1b:31:58:a9:5c:0f:48:71:2c:8f:f5:83:59: 21:69:18:82:07:9c:e6:ae:3a:74:11:49:d4:af:f7: f5:11:de:65:29:ac:db:b3:f3:5b:bb:d3:43:5d:68: ac:05:9b:7f:04:dd:24:16:58:03:0a:79:0c:bc:e3: e6:ca:3f:6e:ee:ea:10:d8:b9:2a:f2:e4:14:a7:40: b5:bb:ed:36:33:89:4b:d1:47:42:8a:ad:68:6e:47: d0:65:4e:6d:03:27:fa:0d:5f:e9:d9:f0:18:a9:cb: 54:7b:81:dc:05:f4:50:94:10:51:a7:5b:3f:f1:09: 5a:9a:8a:08:9c:6c:1b:16:ab:22:07:05:c0:7f:eb: 33:cc:8f:cf:05:a0:7e:05:30:95:08:a5:e4:11:40: 03:82:c3:ce:3b:5b:cf:e0:37:0d:88:12:bf:b5:fc: ab:c4:1f:7e:e9:c5:ea:90:21:f9:09:a6:6f:9f:74: 86:da:21:44:1a:63:fc:da:92:c2:2b:53:23:e8:f6: 68:3d:18:81:fc:56:2a:98:73:9e:b8:89:0e:4a:1a: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0F:30:F4:94:3D:C0:58:55:F7:D5:9F:CD:2A:47:82:CB:B7:ED:CC X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e6:21:a9:03:2c:bb:8e:b1:2a:b8:3d:4e:d7:42:a3:2e:4e: fc:80:4c:20:89:3d:7e:b3:fa:ae:09:7a:64:f5:a8:0c:4e:47: b1:68:ec:59:97:80:ed:c7:48:78:ac:89:73:62:f3:10:00:cd: 5d:ec:95:39:72:de:80:15:65:30:50:00:05:cf:a3:28:a3:d9: 99:b3:de:87:88:22:ae:e7:3c:18:ab:cc:e5:cf:24:34:25:e0: c1:62:0f:c0:3d:77:0d:47:2c:66:aa:b0:49:42:01:96:ab:c4: 19:09:04:77:8d:17:fd:29:6c:fc:1f:60:dc:55:bb:07:90:9b: 7d:fb:89:f9:3a:2c:90:d6:27:a2:44:0e:97:c0:f0:43:42:b5: 0d:7a:9c:86:59:11:03:94:c2:eb:f2:34:d2:ad:45:c2:c2:55: 42:d7:25:e0:db:ca:0f:55:e8:5d:95:e5:cb:cb:1a:83:9d:2c: fb:ae:64:5c:80:05:55:87:f5:e2:3a:51:34:b0:a8:c2:3e:d4: fa:d1:f9:5a:9d:04:57:f7:41:a0:40:c9:22:99:15:19:26:95: 3c:05:8d:d4:e7:04:5f:46:db:0f:79:0b:4a:1a:5e:3e:4c:be: 9d:4c:27:c3:54:e0:04:b8:93:44:0d:59:fe:e6:70:6b:cb:ac: 56:1d:36:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGfXU1yS5aLsS6VID9h5X87ybdXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA3MjQxMzU2MjJaFw0yNjA3MjUxNjU0MjJaMDMxMTAvBgNV BAMTKENCMEYzMEY0OTQzREMwNTg1NUY3RDU5RkNEMkE0NzgyQ0JCN0VEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFbxZHVfeRjJaod8TqWfD3csh qDUeCfQwmOPqW0NTtnMi6KnhwpqjnhVEoWFoGzFYqVwPSHEsj/WDWSFpGIIHnOau OnQRSdSv9/UR3mUprNuz81u700NdaKwFm38E3SQWWAMKeQy84+bKP27u6hDYuSry 5BSnQLW77TYziUvRR0KKrWhuR9BlTm0DJ/oNX+nZ8Bipy1R7gdwF9FCUEFGnWz/x CVqaigicbBsWqyIHBcB/6zPMj88FoH4FMJUIpeQRQAOCw847W8/gNw2IEr+1/KvE H37pxeqQIfkJpm+fdIbaIUQaY/zaksIrUyPo9mg9GIH8ViqYc564iQ5KGgnRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyw8w9JQ9wFhV99WfzSpHgsu37cwwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuYhqQMsu46x Krg9TtdCoy5O/IBMIIk9frP6rgl6ZPWoDE5HsWjsWZeA7cdIeKyJc2LzEADNXeyV OXLegBVlMFAABc+jKKPZmbPeh4giruc8GKvM5c8kNCXgwWIPwD13DUcsZqqwSUIB lqvEGQkEd40X/Sls/B9g3FW7B5CbffuJ+ToskNYnokQOl8DwQ0K1DXqchlkRA5TC 6/I00q1FwsJVQtcl4NvKD1XoXZXly8sag50s+65kXIAFVYf14jpRNLCowj7U+tH5 Wp0EV/dBoEDJIpkVGSaVPAWN1OcEX0bbD3kLShpePky+nUwnw1TgBLiTRA1Z/uZw a8usVh029w== -----END CERTIFICATE-----Generated at Fri Jul 24 21:34:56 2026 by rpki-client