$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: meyEupJqqsYwHMjI/lq1iiO3UcJO9DlQec6ev0iqhR8= Subject key identifier: A2:A5:C9:D1:17:07:E2:56:6E:5C:0B:48:98:85:18:2E:58:6D:34:48 Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 094B12AD0525043F3F011D0F37BD98A029F0187E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 6A Signing time: Fri 24 Jul 2026 09:55:57 +0000 Manifest this update: Fri 24 Jul 2026 09:50:57 +0000 Manifest next update: Sat 25 Jul 2026 10:13:57 +0000 Files and hashes: 1: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 2: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: /WoZwg9/vKUpNwqv7vBRw2IPl6kv7qrKk/wt+lWOhKI=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4b:12:ad:05:25:04:3f:3f:01:1d:0f:37:bd:98:a0:29:f0:18:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Jul 24 09:50:57 2026 GMT Not After : Jul 25 10:13:57 2026 GMT Subject: CN=A2A5C9D11707E2566E5C0B489885182E586D3448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:12:75:e2:15:86:3b:0a:73:8d:35:13:fd: 28:74:11:dd:05:82:3a:06:81:3e:73:3f:9d:3d:73: ed:39:79:f7:e6:23:f3:0f:a1:ee:21:3f:04:fd:33: 69:c1:40:5d:c0:25:27:ce:4b:3b:3d:0e:d1:0b:69: 30:ce:81:3d:d2:e4:c2:e3:a9:2b:84:15:90:30:17: ca:31:15:e7:a6:4f:f0:37:e0:ba:9f:87:ca:42:52: 70:99:b0:e5:54:80:e8:8b:53:36:50:1b:b8:a2:16: e7:f4:8b:88:c6:3c:95:d6:30:f6:bd:74:f9:8f:79: 22:0d:d2:dc:52:1e:c1:20:87:e4:a1:89:a5:3b:dd: 3c:25:54:8d:61:49:6f:0b:00:b3:5f:ec:f0:df:43: 56:3e:ab:27:67:1d:ad:1d:bd:66:26:51:eb:81:c7: 1e:49:43:69:fb:a1:54:8c:af:f6:61:7e:2f:a2:69: 9b:0c:33:8d:9a:b4:ab:fb:28:f2:ee:86:07:80:89: 84:c5:e5:f7:6a:98:a5:6c:72:f8:d6:dd:11:8f:b4: c5:ad:87:8b:3c:47:34:8f:89:01:93:e9:76:d8:3f: ad:b7:ee:2e:dc:70:74:aa:d0:eb:81:01:05:15:d1: fa:79:86:12:67:e8:a1:03:16:44:ef:e5:e3:3e:56: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:C9:D1:17:07:E2:56:6E:5C:0B:48:98:85:18:2E:58:6D:34:48 X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ba:26:a1:fc:26:e9:03:8b:76:b7:03:d0:6a:4e:1b:1c:60: 13:0d:24:da:dd:cd:02:d9:4d:90:ba:0c:4e:0d:c1:1b:dd:39: cf:56:63:7a:64:04:38:17:65:92:98:a4:5e:40:0e:3a:46:d7: b2:48:20:3c:57:11:92:e6:8c:be:ba:bc:a4:7a:50:0d:ce:4d: a1:7c:f9:bc:7c:9b:47:cd:16:0a:86:f4:2f:7f:cd:4d:10:22: bb:3f:e1:c3:9a:0e:88:86:fa:d5:27:60:86:6c:fd:94:ac:00: 53:3b:71:51:1c:0b:90:19:47:cf:ca:c7:f6:99:ab:b4:81:26: 4c:2f:86:d5:72:b2:f4:bd:b9:21:4f:f4:6c:05:de:c7:ac:4d: 7f:68:94:f4:c4:3c:c0:6b:ec:23:f6:4f:ef:e8:18:e7:d5:2c: 98:6d:69:91:ec:11:b5:16:33:15:dc:c7:b4:99:c3:f6:67:0e: 90:fe:8e:36:4e:18:da:d7:0f:60:1e:13:e9:8d:b3:f6:0e:8a: 02:54:f7:4a:c7:4e:2f:05:3c:e0:7b:ee:4c:6f:d8:e9:cf:03: 19:b3:dd:31:2b:6f:51:35:71:3d:35:cc:5e:65:b2:f6:0e:12: 16:9c:f4:f5:70:83:76:45:a9:cc:9a:0b:4e:f5:da:d9:94:06: a9:51:33:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCUsSrQUlBD8/AR0PN72YoCnwGH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA3MjQwOTUwNTdaFw0yNjA3MjUxMDEzNTdaMDMxMTAvBgNV BAMTKEEyQTVDOUQxMTcwN0UyNTY2RTVDMEI0ODk4ODUxODJFNTg2RDM0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkhJ14hWGOwpzjTUT/Sh0Ed0F gjoGgT5zP509c+05effmI/MPoe4hPwT9M2nBQF3AJSfOSzs9DtELaTDOgT3S5MLj qSuEFZAwF8oxFeemT/A34Lqfh8pCUnCZsOVUgOiLUzZQG7iiFuf0i4jGPJXWMPa9 dPmPeSIN0txSHsEgh+ShiaU73TwlVI1hSW8LALNf7PDfQ1Y+qydnHa0dvWYmUeuB xx5JQ2n7oVSMr/Zhfi+iaZsMM42atKv7KPLuhgeAiYTF5fdqmKVscvjW3RGPtMWt h4s8RzSPiQGT6XbYP6237i7ccHSq0OuBAQUV0fp5hhJn6KEDFkTv5eM+VpkJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoqXJ0RcH4lZuXAtImIUYLlhtNEgwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbomofwm6QOL drcD0GpOGxxgEw0k2t3NAtlNkLoMTg3BG905z1ZjemQEOBdlkpikXkAOOkbXskgg PFcRkuaMvrq8pHpQDc5NoXz5vHybR80WCob0L3/NTRAiuz/hw5oOiIb61Sdghmz9 lKwAUztxURwLkBlHz8rH9pmrtIEmTC+G1XKy9L25IU/0bAXex6xNf2iU9MQ8wGvs I/ZP7+gY59UsmG1pkewRtRYzFdzHtJnD9mcOkP6ONk4Y2tcPYB4T6Y2z9g6KAlT3 SsdOLwU84HvuTG/Y6c8DGbPdMStvUTVxPTXMXmWy9g4SFpz09XCDdkWpzJoLTvXa 2ZQGqVEzTA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:31:21 2026 by rpki-client