$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: Pn78JxqmBjCo/sdLDzPwkUqpY8jMepX6fqALldtUdV0= Subject key identifier: F0:AD:D0:53:D0:AB:4C:9E:5D:39:C8:7A:E9:66:2C:20:F5:63:14:4E Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 78E3F40233EF238CA8500C159A5CB2AD7B64E7CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: 7A Signing time: Fri 24 Jul 2026 02:30:09 +0000 Manifest this update: Fri 24 Jul 2026 02:25:09 +0000 Manifest next update: Sat 25 Jul 2026 05:48:09 +0000 Files and hashes: 1: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: D0VgyjfweDmrNLpPXriPM8nZEdaos6aXuKBAW68SN14=) 2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 3: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 4: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 5: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 6: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e3:f4:02:33:ef:23:8c:a8:50:0c:15:9a:5c:b2:ad:7b:64:e7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Jul 24 02:25:09 2026 GMT Not After : Jul 25 05:48:09 2026 GMT Subject: CN=F0ADD053D0AB4C9E5D39C87AE9662C20F563144E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:fe:6b:37:61:95:0a:af:9f:97:fc:37:1b: 68:a4:c4:b2:07:42:22:c0:96:8d:da:f2:b4:3f:8a: 4d:bf:30:02:db:f1:e4:c9:c4:40:73:0f:7c:28:aa: 62:90:51:1a:e2:b3:46:43:80:dc:03:5d:b7:1d:0e: a2:ce:b2:00:3e:0c:e3:0d:fd:32:7a:5c:39:53:26: d1:77:11:91:1d:fd:1b:2b:1b:61:1d:ed:ef:c0:ba: 8a:48:e4:79:51:cf:7c:d2:85:ce:70:3d:3b:dc:2a: db:0e:ac:1a:25:ba:de:67:b4:1d:38:53:90:e5:bc: c7:82:ea:e9:2e:7d:6d:f0:f3:a4:4e:6a:46:47:b8: b0:34:63:bd:19:11:3e:b9:48:7e:b5:70:65:a5:33: 4b:3e:df:48:7a:07:6e:9c:95:9e:ca:ef:4f:69:f0: 73:f1:a9:02:9a:bc:aa:c7:94:f0:eb:d1:33:2a:1e: 58:1f:44:9d:2f:66:48:39:b0:a2:c6:3c:6e:01:29: 04:a9:c2:03:c8:02:8c:9c:4f:58:13:cf:2a:76:4f: 95:41:a0:d1:c6:8e:93:24:73:d5:39:c7:0c:05:17: f7:44:f7:c5:3e:68:af:b8:7b:47:ee:ac:8f:5c:1f: 06:bc:97:56:c0:ae:a8:ff:cf:46:ca:68:95:e9:41: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AD:D0:53:D0:AB:4C:9E:5D:39:C8:7A:E9:66:2C:20:F5:63:14:4E X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c6:d0:01:76:42:82:11:6f:00:ac:2e:4e:4c:80:82:eb:6f: 11:af:3e:24:58:e0:aa:b0:5d:3b:17:c5:d7:bb:6b:ef:cc:83: 6a:5a:e0:c8:41:1f:91:2a:74:b1:b1:2c:20:1c:db:0a:97:40: d4:a3:29:1f:8e:74:aa:25:78:f8:5a:70:25:23:08:83:ea:8b: 6f:fc:8f:9b:8f:4a:9a:3a:f5:62:e1:8f:92:bb:b4:78:ee:22: 18:eb:65:e8:15:c8:e1:94:73:28:e6:e6:bc:3e:5c:0f:1a:a3: e3:bf:d8:d8:7d:36:c2:47:9d:5d:a7:cf:71:9a:54:c6:33:43: 47:12:af:25:05:ff:d5:56:e1:ca:55:c5:04:71:33:a3:6d:93: c7:3e:f8:0e:35:29:82:4d:b0:d6:d6:45:21:8b:9b:69:50:0b: 5c:f0:21:ec:7b:f8:76:60:45:38:44:38:de:cd:eb:9c:a9:15: d6:5e:a5:a1:b2:09:aa:db:1a:da:5e:ba:36:15:8b:16:8d:0f: 48:6e:91:14:7b:46:8c:74:a4:7b:77:39:44:78:89:e6:3c:1c: 37:40:ce:06:14:2d:03:a5:06:8b:9d:2c:ac:9c:7f:40:50:1f: c9:d1:54:d8:bb:5c:f6:ad:b5:54:ce:0f:3b:f8:b1:44:67:c1: 53:ca:cc:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeOP0AjPvI4yoUAwVmlyyrXtk584wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA3MjQwMjI1MDlaFw0yNjA3MjUwNTQ4MDlaMDMxMTAvBgNV BAMTKEYwQUREMDUzRDBBQjRDOUU1RDM5Qzg3QUU5NjYyQzIwRjU2MzE0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbf5rN2GVCq+fl/w3G2ikxLIH QiLAlo3a8rQ/ik2/MALb8eTJxEBzD3woqmKQURris0ZDgNwDXbcdDqLOsgA+DOMN /TJ6XDlTJtF3EZEd/RsrG2Ed7e/AuopI5HlRz3zShc5wPTvcKtsOrBolut5ntB04 U5DlvMeC6ukufW3w86ROakZHuLA0Y70ZET65SH61cGWlM0s+30h6B26clZ7K709p 8HPxqQKavKrHlPDr0TMqHlgfRJ0vZkg5sKLGPG4BKQSpwgPIAoycT1gTzyp2T5VB oNHGjpMkc9U5xwwFF/dE98U+aK+4e0furI9cHwa8l1bArqj/z0bKaJXpQeItAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8K3QU9CrTJ5dOch66WYsIPVjFE4wHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMbQAXZCghFv AKwuTkyAgutvEa8+JFjgqrBdOxfF17tr78yDalrgyEEfkSp0sbEsIBzbCpdA1KMp H450qiV4+FpwJSMIg+qLb/yPm49Kmjr1YuGPkru0eO4iGOtl6BXI4ZRzKObmvD5c Dxqj47/Y2H02wkedXafPcZpUxjNDRxKvJQX/1VbhylXFBHEzo22Txz74DjUpgk2w 1tZFIYubaVALXPAh7Hv4dmBFOEQ43s3rnKkV1l6lobIJqtsa2l66NhWLFo0PSG6R FHtGjHSke3c5RHiJ5jwcN0DOBhQtA6UGi50srJx/QFAfydFU2Ltc9q21VM4PO/ix RGfBU8rMQQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:14:32 2026 by rpki-client