$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json) Hash identifier: PXtYrC0rcetTiIIgRnG3E0kq//ps6fSJOlqoxEZdks8= Subject key identifier: E2:1B:1C:2A:73:DD:4F:E5:28:DE:DC:F1:64:3A:93:60:9E:D6:BF:FD Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Certificate serial: 5F5FF36A74DC4A2D652D2853AA57B4C728B4393E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 12:21:09 +0000 Manifest this update: Fri 24 Jul 2026 12:16:09 +0000 Manifest next update: Sat 25 Jul 2026 16:10:09 +0000 Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: phd/awcOm0DZyyOqhdYokr0udF6y2SykIXbNPtwkcvM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:f3:6a:74:dc:4a:2d:65:2d:28:53:aa:57:b4:c7:28:b4:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Validity Not Before: Jul 24 12:16:09 2026 GMT Not After : Jul 25 16:10:09 2026 GMT Subject: CN=E21B1C2A73DD4FE528DEDCF1643A93609ED6BFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:9a:0d:0b:1c:a7:af:29:84:af:b8:47:f9: ce:92:ac:ab:fa:bb:a5:73:9e:7c:d3:cf:25:ea:05: a5:6d:e5:8a:4a:f6:06:87:d7:bf:72:d7:3c:82:39: 3f:14:a8:d3:39:11:5c:78:e9:4e:a7:ba:ae:c0:89: 61:09:f7:b9:a0:9d:33:43:a2:07:b4:b6:9b:a3:5f: 80:2a:30:fd:7c:e1:5b:83:1f:d4:84:7c:de:ad:da: b6:22:87:a3:67:d3:4e:2f:c9:4b:94:c0:d2:cb:38: 0a:fc:80:70:32:f4:38:ef:de:d3:f6:33:b7:0d:86: e2:80:03:99:e0:ed:b3:5b:44:10:2c:a9:20:01:f8: cd:5f:a8:02:be:17:dc:5f:ae:79:c6:a9:a2:b3:56: b6:e6:48:b3:66:0e:fa:3d:f1:e5:51:32:5e:bb:65: a1:d1:b9:37:dd:cf:40:a1:03:36:b3:9b:c5:35:fb: 62:ed:fb:36:2e:e5:19:4e:48:af:61:12:ef:cb:46: 9d:f9:a9:6d:a5:a2:2b:d8:5e:44:de:ce:e6:87:68: 9c:9f:92:5d:e3:9f:b6:d6:98:06:dd:e6:4d:ac:12: 3c:18:32:bb:42:8c:99:c7:af:59:95:3b:32:e0:a0: 86:4f:52:fd:1a:f6:58:2f:4f:da:7c:4b:c0:19:a4: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1B:1C:2A:73:DD:4F:E5:28:DE:DC:F1:64:3A:93:60:9E:D6:BF:FD X509v3 Authority Key Identifier: keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:bf:19:cd:0d:12:b4:f2:38:f8:25:29:4e:f1:91:b7:be: 73:08:e3:d3:ce:05:6b:4c:83:cb:7f:3f:ea:ee:5d:39:46:47: 06:da:1b:72:51:df:f5:85:46:ba:bd:9f:cb:cd:27:36:5b:bd: a1:a6:ab:5e:69:0e:e8:7a:4d:29:ac:94:3b:82:8d:01:7d:31: f4:0f:78:ff:6f:b5:27:ba:5a:c9:1b:d9:f1:7f:e8:3c:f0:9f: 71:73:ae:f9:39:70:ba:13:e3:8d:8e:f8:b0:4f:54:01:25:56: 1d:b3:68:bf:4e:7e:1b:85:dc:cb:fd:0d:81:52:0a:46:c2:64: a6:38:20:b3:64:55:cf:08:e3:e7:aa:65:2c:0a:1e:11:2a:05: a4:ed:54:c6:79:69:19:83:d3:25:f3:a1:77:72:df:01:1f:9b: d8:c9:52:ba:98:e9:48:f6:66:61:84:4b:5c:26:a0:9e:9e:c1: 05:55:eb:1f:9e:2f:0f:fb:9f:6f:a6:ad:93:48:24:23:bd:a4: a1:73:d5:5e:a1:1b:31:a0:1c:58:b0:5a:64:9e:00:b9:3a:2e: 52:7d:d6:1c:06:61:d2:06:a5:31:f3:34:ed:f4:17:cf:38:c2: 53:d5:1f:af:fa:8d:8c:1d:ed:a3:35:5e:94:9b:ad:4f:14:73: 43:ca:2b:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX1/zanTcSi1lLShTqle0xyi0OT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkw MTQ0NEZFNzAeFw0yNjA3MjQxMjE2MDlaFw0yNjA3MjUxNjEwMDlaMDMxMTAvBgNV BAMTKEUyMUIxQzJBNzNERDRGRTUyOERFRENGMTY0M0E5MzYwOUVENkJGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcpoNCxynrymEr7hH+c6SrKv6 u6VznnzTzyXqBaVt5YpK9gaH179y1zyCOT8UqNM5EVx46U6nuq7AiWEJ97mgnTND oge0tpujX4AqMP184VuDH9SEfN6t2rYih6Nn004vyUuUwNLLOAr8gHAy9Djv3tP2 M7cNhuKAA5ng7bNbRBAsqSAB+M1fqAK+F9xfrnnGqaKzVrbmSLNmDvo98eVRMl67 ZaHRuTfdz0ChAzazm8U1+2Lt+zYu5RlOSK9hEu/LRp35qW2loivYXkTezuaHaJyf kl3jn7bWmAbd5k2sEjwYMrtCjJnHr1mVOzLgoIZPUv0a9lgvT9p8S8AZpHzpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4hscKnPdT+Uo3tzxZDqTYJ7Wv/0wHwYDVR0j BBgwFoAUPwrtApdoKXDOoSV7GYXbWQFET+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQyMDM1NjUxODE1MDE1OS8wLzNGMEFFRDAyOTc2ODI5NzBDRUExMjU3QjE5ODVE QjU5MDE0NDRGRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0MjAzNTY1MTgxNTAxNTkvMC8zRjBBRUQwMjk3Njgy OTcwQ0VBMTI1N0IxOTg1REI1OTAxNDQ0RkU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYi/Gc0NErTy OPglKU7xkbe+cwjj084Fa0yDy38/6u5dOUZHBtobclHf9YVGur2fy80nNlu9oaar XmkO6HpNKayUO4KNAX0x9A94/2+1J7payRvZ8X/oPPCfcXOu+TlwuhPjjY74sE9U ASVWHbNov05+G4Xcy/0NgVIKRsJkpjggs2RVzwjj56plLAoeESoFpO1UxnlpGYPT JfOhd3LfAR+b2MlSupjpSPZmYYRLXCagnp7BBVXrH54vD/ufb6atk0gkI72koXPV XqEbMaAcWLBaZJ4AuTouUn3WHAZh0galMfM07fQXzzjCU9Ufr/qNjB3tozVelJut TxRzQ8orYg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:27 2026 by rpki-client