$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: /hh9nLYxfGAePSrxDcoZGaBn31yz5CrMkGx0V9Hn2nY= Subject key identifier: A8:BA:16:D0:9F:31:A0:F6:19:84:FF:61:14:E8:CD:22:7F:8B:CA:A8 Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 33872CFBDA5A58E672A9508403C3B9FA7A7C0065 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: 7F Signing time: Fri 24 Jul 2026 09:50:57 +0000 Manifest this update: Fri 24 Jul 2026 09:45:57 +0000 Manifest next update: Sat 25 Jul 2026 10:53:57 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: ISaiUjkOFeJOq9TpUlzGTUNwa9qJbcqdGBiTKkpsSrQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:87:2c:fb:da:5a:58:e6:72:a9:50:84:03:c3:b9:fa:7a:7c:00:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: Jul 24 09:45:57 2026 GMT Not After : Jul 25 10:53:57 2026 GMT Subject: CN=A8BA16D09F31A0F61984FF6114E8CD227F8BCAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:05:e4:d4:bf:0d:7a:4f:51:c3:c6:d8:b6: 06:c9:1c:33:be:2f:e2:ff:48:96:4d:4f:27:75:53: 88:a4:10:ed:72:a1:a0:90:68:fc:35:90:db:02:31: 47:4b:15:24:9c:7a:29:a4:8c:aa:9a:98:47:ed:f7: 47:15:5a:93:e4:ef:4b:a9:15:5d:59:87:59:d5:0e: ee:50:22:a8:55:21:d5:8f:0a:24:b0:0d:38:d5:20: 62:3b:c3:15:c2:67:1b:36:cc:c1:52:c2:18:19:30: c9:cc:d8:5e:41:a9:32:b8:14:68:86:c6:b6:f8:8b: c2:14:69:56:51:c5:60:de:f3:9a:bf:c0:60:46:21: 90:0f:46:ee:c8:68:f6:cc:e0:8c:31:6a:8a:5e:e3: fa:ec:a3:d1:bf:5b:e6:42:ce:ad:d6:53:38:9b:b8: cc:ea:92:e5:5f:24:e5:8c:4b:62:9b:25:a9:c5:21: 4e:f6:7b:a7:c9:7d:d8:96:52:92:84:1f:b2:a1:fd: c1:38:2f:6e:7f:b7:a8:a5:c7:b4:ad:3f:e8:62:2e: d6:f8:a4:c4:08:bc:34:96:72:7d:c5:01:05:99:eb: b2:c2:9e:9f:f2:10:e3:8f:41:1c:bf:9b:ff:28:33: 71:3a:b1:8f:08:57:3d:a3:ba:e6:7b:70:18:c3:6f: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:16:D0:9F:31:A0:F6:19:84:FF:61:14:E8:CD:22:7F:8B:CA:A8 X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:9f:a0:aa:5e:e3:e0:09:9d:d2:23:4e:1b:33:aa:18:f1:34: a5:af:dc:0e:cd:aa:31:bc:d5:39:43:47:ec:5c:9b:50:c6:31: 1e:72:61:02:f8:29:d0:53:e3:e3:66:64:01:c5:af:d2:b2:2e: 6d:00:2c:7f:56:89:a0:7e:a1:07:aa:52:09:66:39:d2:47:86: 4f:0f:2f:c5:14:9f:41:0e:6d:22:7d:73:12:56:00:d9:03:7c: 48:b8:39:e7:41:b8:4e:f8:5a:f2:0c:9b:e0:f4:ae:bf:76:07: 94:b7:da:34:05:78:9a:f3:86:ff:df:97:cd:23:75:41:85:1e: 41:d4:4b:a4:07:df:40:27:d1:16:18:b3:d5:fc:65:f9:6a:3c: 5a:58:ca:70:44:71:c9:b7:90:94:25:0a:89:bc:cc:d3:1d:d3: 7e:b9:7b:27:7a:ff:c8:59:bf:bb:3b:7d:61:f9:d5:62:b7:ce: 32:e3:aa:15:74:17:45:80:9b:f3:d2:c9:cb:52:a2:39:bc:39: e6:ac:96:74:10:5b:0c:cc:4c:db:37:9a:62:25:5a:38:dd:f5: bc:9c:44:d8:11:1d:82:0f:e7:6d:68:6b:92:30:6f:9f:3d:9d: 70:86:3f:b3:a5:7a:8d:93:32:69:04:6f:76:21:1b:e7:ea:e0: 14:28:3e:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM4cs+9paWOZyqVCEA8O5+np8AGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjA3MjQwOTQ1NTdaFw0yNjA3MjUxMDUzNTdaMDMxMTAvBgNV BAMTKEE4QkExNkQwOUYzMUEwRjYxOTg0RkY2MTE0RThDRDIyN0Y4QkNBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYOAXk1L8Nek9Rw8bYtgbJHDO+ L+L/SJZNTyd1U4ikEO1yoaCQaPw1kNsCMUdLFSSceimkjKqamEft90cVWpPk70up FV1Zh1nVDu5QIqhVIdWPCiSwDTjVIGI7wxXCZxs2zMFSwhgZMMnM2F5BqTK4FGiG xrb4i8IUaVZRxWDe85q/wGBGIZAPRu7IaPbM4Iwxaope4/rso9G/W+ZCzq3WUzib uMzqkuVfJOWMS2KbJanFIU72e6fJfdiWUpKEH7Kh/cE4L25/t6ilx7StP+hiLtb4 pMQIvDSWcn3FAQWZ67LCnp/yEOOPQRy/m/8oM3E6sY8IVz2juuZ7cBjDb0U9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqLoW0J8xoPYZhP9hFOjNIn+LyqgwHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA15+gql7j4Amd 0iNOGzOqGPE0pa/cDs2qMbzVOUNH7FybUMYxHnJhAvgp0FPj42ZkAcWv0rIubQAs f1aJoH6hB6pSCWY50keGTw8vxRSfQQ5tIn1zElYA2QN8SLg550G4Tvha8gyb4PSu v3YHlLfaNAV4mvOG/9+XzSN1QYUeQdRLpAffQCfRFhiz1fxl+Wo8WljKcERxybeQ lCUKibzM0x3Tfrl7J3r/yFm/uzt9YfnVYrfOMuOqFXQXRYCb89LJy1KiObw55qyW dBBbDMxM2zeaYiVaON31vJxE2BEdgg/nbWhrkjBvnz2dcIY/s6V6jZMyaQRvdiEb 5+rgFCg+FQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:41:53 2026 by rpki-client