$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft File: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft (raw, json) Hash identifier: skpVl2Yud2rQv1cmsR9HsAw+ol3+IRLhDXVbXodFSrc= Subject key identifier: A4:45:B0:B9:7E:05:D8:90:3B:0B:A6:F6:45:C0:61:F3:4D:44:94:76 Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 Certificate issuer: /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Certificate serial: 51062FA23D6FF7625A5BA94A3239A3E604B810D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft Manifest number: 68 Signing time: Fri 24 Jul 2026 04:55:23 +0000 Manifest this update: Fri 24 Jul 2026 04:50:23 +0000 Manifest next update: Sat 25 Jul 2026 05:48:23 +0000 Files and hashes: 1: 3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (hash: 8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=) 2: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl (hash: M/qEbidMMNbESRYv+VPZLvqSqT8LTE5JNhps4q8rVRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:06:2f:a2:3d:6f:f7:62:5a:5b:a9:4a:32:39:a3:e6:04:b8:10:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Validity Not Before: Jul 24 04:50:23 2026 GMT Not After : Jul 25 05:48:23 2026 GMT Subject: CN=A445B0B97E05D8903B0BA6F645C061F34D449476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:96:45:89:ec:26:ac:03:db:bf:20:cf:f6: cb:87:3a:6d:ff:b5:84:4a:b5:6b:a9:53:c1:3d:55: 2e:f8:88:83:4b:cf:ba:28:bb:ae:66:04:08:06:30: 18:d8:a2:14:a9:43:99:0f:cc:9f:ea:a9:90:84:46: 90:bd:4e:10:ca:04:0d:09:0b:b0:4f:0b:25:06:55: bc:20:b6:9c:8c:f7:54:27:c7:71:1d:b5:52:20:be: c1:e8:d4:2a:e9:aa:42:45:4a:3c:fd:45:5e:52:d8: f1:8f:a9:ae:f3:b5:50:2e:79:17:fa:3b:ac:84:39: 54:00:94:9e:48:b1:df:9b:7c:70:1d:c1:8b:7c:fb: 9d:33:aa:ed:60:21:17:cf:72:b4:03:3e:b5:39:5d: 5a:36:ca:39:d4:21:c2:0b:15:04:d4:40:48:92:6b: 1b:5e:47:67:b4:2a:8b:2d:84:fc:e8:ba:30:07:0d: fc:74:64:24:7c:0f:f0:ea:b2:09:69:41:b3:26:97: 50:42:c1:2b:d5:b7:5d:49:8c:cd:c2:d7:74:df:0e: 24:4c:50:0d:77:f8:ca:ce:2c:69:88:c1:35:f7:fa: a5:e5:15:ce:cc:8e:29:30:6a:4a:d0:5e:2c:10:8e: 25:c2:c7:7d:f3:ec:19:c7:aa:95:cd:ed:b1:0c:d4: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:B0:B9:7E:05:D8:90:3B:0B:A6:F6:45:C0:61:F3:4D:44:94:76 X509v3 Authority Key Identifier: keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c4:53:ec:31:f5:81:67:46:e5:58:80:91:a7:12:71:47:ac: ed:6a:eb:56:0b:1f:e1:d3:c1:d3:bb:0a:0b:48:e4:c8:d5:9a: 46:06:31:be:0b:5e:d2:2a:2e:69:60:ac:33:8e:6a:56:07:bd: 1f:62:19:0a:0b:60:61:c2:83:67:eb:6e:46:20:4e:f2:65:0d: ef:97:01:bd:d0:92:61:fc:c3:8c:f4:10:7e:44:e0:38:7a:44: fe:4a:15:09:6a:9a:50:76:ad:99:04:15:1b:06:09:86:a7:62: 38:15:a1:83:e8:e3:14:b4:74:f4:71:85:73:ba:cb:a7:67:4d: 82:8c:12:5c:47:e6:38:d7:ff:60:a0:27:36:a7:7e:39:fb:c9: 28:d5:2b:1d:0f:54:03:d5:5f:be:26:3c:11:7c:ef:dc:d1:3c: c9:14:d8:ad:d3:1c:e9:9b:2e:f6:43:2b:99:71:04:b6:36:6c: 19:c5:80:08:0a:6a:a8:fd:04:31:56:1a:03:05:6d:4c:7c:50: 41:67:23:05:14:3b:b0:ad:20:a1:60:55:95:3d:a7:af:aa:c7: 18:6b:fd:c1:58:50:e0:ac:a2:59:88:87:fe:7b:5b:6b:b0:f9: cf:3c:e7:d0:03:ea:62:da:a6:fd:dd:a5:46:30:cd:0d:59:4a: 25:88:7b:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUQYvoj1v92JaW6lKMjmj5gS4ENMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFF MDVFN0JCNjAeFw0yNjA3MjQwNDUwMjNaFw0yNjA3MjUwNTQ4MjNaMDMxMTAvBgNV BAMTKEE0NDVCMEI5N0UwNUQ4OTAzQjBCQTZGNjQ1QzA2MUYzNEQ0NDk0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+5ZFiewmrAPbvyDP9suHOm3/ tYRKtWupU8E9VS74iINLz7oou65mBAgGMBjYohSpQ5kPzJ/qqZCERpC9ThDKBA0J C7BPCyUGVbwgtpyM91Qnx3EdtVIgvsHo1CrpqkJFSjz9RV5S2PGPqa7ztVAueRf6 O6yEOVQAlJ5Isd+bfHAdwYt8+50zqu1gIRfPcrQDPrU5XVo2yjnUIcILFQTUQEiS axteR2e0KosthPzoujAHDfx0ZCR8D/DqsglpQbMml1BCwSvVt11JjM3C13TfDiRM UA13+MrOLGmIwTX3+qXlFc7MjikwakrQXiwQjiXCx33z7BnHqpXN7bEM1KetAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpEWwuX4F2JA7C6b2RcBh801ElHYwHwYDVR0j BBgwFoAUgcYRnmpN97deFX5IoTY1seBee7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk1Njc1MzQ5OTM4OTk1Ny8wLzgxQzYxMTlFNkE0REY3Qjc1RTE1N0U0OEExMzYz NUIxRTA1RTdCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFFMDVFN0JCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NTY3NTM0OTkzODk5NTcvMC84MUM2MTE5RTZBNERG N0I3NUUxNTdFNDhBMTM2MzVCMUUwNUU3QkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMRT7DH1gWdG 5ViAkacScUes7WrrVgsf4dPB07sKC0jkyNWaRgYxvgte0iouaWCsM45qVge9H2IZ CgtgYcKDZ+tuRiBO8mUN75cBvdCSYfzDjPQQfkTgOHpE/koVCWqaUHatmQQVGwYJ hqdiOBWhg+jjFLR09HGFc7rLp2dNgowSXEfmONf/YKAnNqd+OfvJKNUrHQ9UA9Vf viY8EXzv3NE8yRTYrdMc6Zsu9kMrmXEEtjZsGcWACApqqP0EMVYaAwVtTHxQQWcj BRQ7sK0goWBVlT2nr6rHGGv9wVhQ4KyiWYiH/ntba7D5zzzn0APqYtqm/d2lRjDN DVlKJYh7lg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:33:12 2026 by rpki-client