$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft File: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json) Hash identifier: yn8b2tuKoV/VmLrmi9DOOGtOVzCodXCv+v038sKtOqg= Subject key identifier: B8:C7:71:32:55:1E:C1:E7:D3:BE:D1:4A:36:80:B1:27:59:4E:7E:A9 Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 Certificate issuer: /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Certificate serial: 67988C0F6A541E30D1F7709542D27CC02584593E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft Manifest number: 7E Signing time: Thu 23 Jul 2026 16:54:09 +0000 Manifest this update: Thu 23 Jul 2026 16:49:09 +0000 Manifest next update: Fri 24 Jul 2026 19:32:09 +0000 Files and hashes: 1: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=) 2: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: Kq+gb0ro27Zxyn0QW5U8FAGe1hA3SxEAj1UxPPO6T38=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:98:8c:0f:6a:54:1e:30:d1:f7:70:95:42:d2:7c:c0:25:84:59:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Validity Not Before: Jul 23 16:49:09 2026 GMT Not After : Jul 24 19:32:09 2026 GMT Subject: CN=B8C77132551EC1E7D3BED14A3680B127594E7EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:b6:09:02:09:27:24:fc:f9:52:17:4c:4c: b0:2d:92:eb:07:6a:d1:d9:b0:8a:07:5f:94:0a:f6: ce:7f:f0:86:44:f2:42:d5:4c:6e:94:80:43:d4:61: 10:81:24:2d:b5:1e:6f:be:3e:b2:c7:c5:b5:22:51: 37:33:2f:c8:33:c2:48:1d:39:09:b8:ca:8b:35:fc: 58:40:1c:aa:72:74:3c:82:12:85:5b:34:a6:86:d1: 58:d2:c1:a1:b4:be:67:23:ec:d5:cb:b3:72:a9:83: 4f:c8:ad:73:1f:ab:e0:a8:1d:1b:92:12:ae:56:93: 61:71:5d:55:43:6b:68:6a:06:7a:5c:74:67:e0:e5: 2f:97:54:1f:6c:4f:fe:d6:b1:d7:29:24:b0:dd:58: af:fd:81:c1:25:8c:e6:53:e2:bd:ff:a7:87:10:be: 83:f1:3b:90:a7:e6:e5:16:a7:6c:e0:09:53:20:f7: 10:04:fd:e9:58:15:5d:6c:43:f6:20:93:84:6d:d8: 85:19:08:94:c7:13:c0:04:5d:0e:ec:33:4b:2c:35: 10:82:68:66:ed:e8:fa:44:23:ef:3b:14:3e:50:15: 13:28:04:ed:eb:c9:27:2f:f5:83:e9:37:a4:27:05: 6c:ba:fd:34:f1:ac:15:70:2f:d7:a7:62:3b:a2:08: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:71:32:55:1E:C1:E7:D3:BE:D1:4A:36:80:B1:27:59:4E:7E:A9 X509v3 Authority Key Identifier: keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d0:73:78:75:cf:e6:33:8a:f0:22:2f:5d:aa:0e:c4:6b:e9: 6b:e1:87:0b:f1:ce:9d:b2:a5:b6:43:7e:82:be:f8:8b:69:b4: 45:f5:53:ab:24:80:cb:de:b3:bb:f3:12:95:23:ea:cc:c0:02: 92:4f:7e:9f:5c:41:a5:63:8f:03:7f:1b:8b:4b:55:fe:bc:7a: 23:0e:4a:48:97:d9:69:e8:5e:79:07:00:e5:e2:1a:9e:4a:15: 28:3d:6b:b8:02:07:de:50:e8:31:fb:25:50:0b:9c:9b:81:e9: 82:39:a3:86:ee:fd:7e:25:11:29:7d:72:07:bd:f8:8c:45:02: a3:14:21:37:79:7e:4e:24:aa:79:68:7d:1c:91:73:a4:6d:b0: 2a:ba:e3:b1:10:e2:ac:9c:c7:d7:1c:f5:f8:28:7b:8f:5c:82: 7e:a5:52:55:fd:68:6c:9b:f0:fd:72:45:bf:b9:f9:4d:99:a0: d3:4b:15:72:6c:9b:07:af:cc:d2:b0:5b:2b:26:75:6b:54:a4: 8a:0d:6c:d3:4a:8e:99:37:dd:71:2d:ae:ec:24:6f:0b:c9:ad: b5:33:73:80:d8:5a:60:aa:a3:c8:fe:70:44:dc:40:fc:90:22: 2f:e3:73:e6:39:5c:d0:7e:bf:9a:8c:46:fb:79:ba:63:13:03: cd:42:2f:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ5iMD2pUHjDR93CVQtJ8wCWEWT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZD NkQ3QTE2NDAeFw0yNjA3MjMxNjQ5MDlaFw0yNjA3MjQxOTMyMDlaMDMxMTAvBgNV BAMTKEI4Qzc3MTMyNTUxRUMxRTdEM0JFRDE0QTM2ODBCMTI3NTk0RTdFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXrYJAgknJPz5UhdMTLAtkusH atHZsIoHX5QK9s5/8IZE8kLVTG6UgEPUYRCBJC21Hm++PrLHxbUiUTczL8gzwkgd OQm4yos1/FhAHKpydDyCEoVbNKaG0VjSwaG0vmcj7NXLs3Kpg0/IrXMfq+CoHRuS Eq5Wk2FxXVVDa2hqBnpcdGfg5S+XVB9sT/7WsdcpJLDdWK/9gcEljOZT4r3/p4cQ voPxO5Cn5uUWp2zgCVMg9xAE/elYFV1sQ/Ygk4Rt2IUZCJTHE8AEXQ7sM0ssNRCC aGbt6PpEI+87FD5QFRMoBO3ryScv9YPpN6QnBWy6/TTxrBVwL9enYjuiCKnBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuMdxMlUewefTvtFKNoCxJ1lOfqkwHwYDVR0j BBgwFoAUC063iHcon9culrrs8bvf9sbXoWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTI1Njk0MTkwNzAxNzczMC8wLzBCNEVCNzg4NzcyODlGRDcyRTk2QkFFQ0YxQkJE RkY2QzZEN0ExNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZDNkQ3QTE2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkyNTY5NDE5MDcwMTc3MzAvMC8wQjRFQjc4ODc3Mjg5 RkQ3MkU5NkJBRUNGMUJCREZGNkM2RDdBMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNBzeHXP5jOK 8CIvXaoOxGvpa+GHC/HOnbKltkN+gr74i2m0RfVTqySAy96zu/MSlSPqzMACkk9+ n1xBpWOPA38bi0tV/rx6Iw5KSJfZaeheeQcA5eIankoVKD1ruAIH3lDoMfslUAuc m4Hpgjmjhu79fiURKX1yB734jEUCoxQhN3l+TiSqeWh9HJFzpG2wKrrjsRDirJzH 1xz1+Ch7j1yCfqVSVf1obJvw/XJFv7n5TZmg00sVcmybB6/M0rBbKyZ1a1Skig1s 00qOmTfdcS2u7CRvC8mttTNzgNhaYKqjyP5wRNxA/JAiL+Nz5jlc0H6/moxG+3m6 YxMDzUIvHg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:38 2026 by rpki-client