$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft (raw, json) Hash identifier: oK0gehPTr7FAzvUCR3ioxOjqo2vxa1p3ZWoIdOAIRgI= Subject key identifier: 41:C0:A3:41:19:FB:D3:4A:7E:2B:49:BF:AB:B3:86:7E:6E:04:43:BD Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 1616F4D56EAC1B9DEC1D63A6DAEFC5AAB791114A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft Manifest number: 7C Signing time: Fri 24 Jul 2026 08:40:48 +0000 Manifest this update: Fri 24 Jul 2026 08:35:48 +0000 Manifest next update: Sat 25 Jul 2026 12:07:48 +0000 Files and hashes: 1: 3131392e38302e31322e302f32322d3232203d3e2030.roa (hash: hX440M+Wr7Ig6ORoOb9B089xro/8qY67jnC7q5UxTpk=) 2: 3131392e38302e3136322e302f32342d3234203d3e2034383038.roa (hash: YEkfNK8LOZ1JFLzbHDckq08/tISjndMpA7MJC4C3dAk=) 3: 3131392e38302e302e302f32312d3231203d3e2034383038.roa (hash: kz6VvEWmHlmuYkpHk1spnIMXYN9OBLP2wWo126znQG8=) 4: 3131392e38302e3230382e302f32302d3230203d3e2030.roa (hash: 9siWurZqFFFUnpiYmaZ3s2REcqpUg0SQ7bo8u2LJyY0=) 5: C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl (hash: /Mf4SDei7uCpYvbAc4O0Qw0353Bvb/dF/vmzaXTYbMo=) 6: 3131392e38302e3234382e302f32312d3231203d3e2034383437.roa (hash: pIPjQtBk7ySpPKDYwLrcO6FivWIQX1TOftKSwNXxiHI=) 7: 3131392e38302e3230342e302f32322d3232203d3e2030.roa (hash: v0iOjcbPBQGFDUB3R+arP845clM+A9rO5+kFa/KpAEk=) 8: 3131392e38302e3234342e302f32322d3232203d3e2030.roa (hash: sFGUE7NTrHONeVZj/rYlxwtvbN7ZJ7FhgLs1FLPx0Vo=) 9: 3131392e38302e382e302f32322d3232203d3e2034383038.roa (hash: uyAV2B0UgAaqhJ8Tx6GUKDrM2HT/GW8HLdhSG7e1nbM=) 10: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (hash: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=) 11: 3131392e38302e3137362e302f32302d3230203d3e2030.roa (hash: WkeMQ5ShuDCNuxaVGUtgg2qrqKsnJFK/iRO/iA40KzY=) 12: 3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (hash: qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=) 13: 3131392e38302e36342e302f31382d3138203d3e2030.roa (hash: fSBLf7FDlepVCE3k6F2XDY92g0WMbrgw0ZXZlfHqZ5I=) 14: 3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (hash: 5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=) 15: 3131392e38302e35362e302f32312d3231203d3e2030.roa (hash: MyiN97QPbms8mDkoWGdQpLxRbrTTHpXtHioUGlVYaBw=) 16: 3131392e38302e34382e302f32312d3231203d3e2030.roa (hash: OGiAs6ybQW5wp7sSm+Um1t8e/jZwZaNAF3aCVlrneVo=) 17: 3131392e38302e3232342e302f32302d3230203d3e2030.roa (hash: PV1qgqVhthMEfnfNIpt+/J7bpkFg342ViVnJ9rGKeiA=) 18: 323430303a353538303a3a2f33322d3332203d3e2030.roa (hash: WDe3fPz0Ru7oQ8lptrq7BUV2TKBOPhsKhVJ9oIcxGTU=) 19: 3131392e38302e31362e302f32302d3230203d3e2030.roa (hash: wXdUkHyko20WaVlYUiHP8tBEIEQIv2A+egzvJ1QeSK4=) 20: 3131392e38302e3136332e302f32342d3234203d3e2030.roa (hash: 5CdaaTQdvXXChpnSQuj4LrMOT2wdb5Jvb4r+gllu8XE=) 21: 3131392e38302e3136342e302f32322d3232203d3e2030.roa (hash: xReNAiKc02O6ON9duGFhPCnC21q/s+X/7DTsmPr1mTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:16:f4:d5:6e:ac:1b:9d:ec:1d:63:a6:da:ef:c5:aa:b7:91:11:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: Jul 24 08:35:48 2026 GMT Not After : Jul 25 12:07:48 2026 GMT Subject: CN=41C0A34119FBD34A7E2B49BFABB3867E6E0443BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:24:c5:a3:4d:7f:ed:b2:af:5e:23:75:4d: 24:b6:c2:37:e7:86:c0:45:02:34:64:a2:2d:29:91: 2b:57:7d:80:d5:0a:48:42:fe:64:a5:a6:e2:d0:bb: 5c:2a:cb:d3:7e:b5:5c:59:3c:3e:00:b0:86:f8:a6: 2a:32:71:da:e8:c0:18:7b:3f:31:18:83:4c:a2:e4: a1:18:08:0b:36:e5:c9:d6:04:e5:8b:e0:4b:f8:cb: 48:fb:62:65:35:c0:b3:3f:44:de:24:02:85:9d:4b: 47:30:21:27:ce:d1:ee:15:6e:87:e4:5b:1e:76:e2: 94:8f:85:70:67:7a:aa:13:ee:fb:c9:d5:43:1e:70: ca:ae:8c:f9:aa:33:ac:bc:08:cc:aa:82:46:6a:95: 8b:ad:72:78:3d:60:cc:90:6a:2e:3f:33:ef:0e:85: 4b:e0:6f:6b:84:41:9c:03:69:12:c1:bf:1d:ad:3d: a9:af:d9:8d:99:dc:cc:45:54:c5:7a:b6:5b:90:cd: c6:34:22:a1:52:7a:c0:ea:3e:f5:5d:76:75:9d:eb: 6d:42:42:10:ed:85:60:f5:6e:b8:56:6f:08:c6:f5: df:22:3e:eb:5b:86:ac:be:48:ac:57:ad:6b:8a:e7: 4c:f6:f2:8c:a2:ac:3c:43:ee:d6:58:d1:0f:20:78: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:A3:41:19:FB:D3:4A:7E:2B:49:BF:AB:B3:86:7E:6E:04:43:BD X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:45:0c:7c:fd:7a:95:a9:e7:36:88:a1:1b:1c:31:09:b5:1a: c5:bf:c7:43:2a:c3:2c:9e:00:e6:8e:0e:2a:56:9b:0f:d4:79: 63:54:89:eb:04:31:ac:10:6b:22:f0:c0:c1:90:01:a2:29:c0: 7e:3f:b3:cc:0b:5d:17:00:4c:c2:16:5b:ca:14:85:c0:c0:55: 3f:d4:c7:ed:72:7a:13:00:6e:c7:43:35:80:6e:98:59:24:c6: c5:3f:fb:6b:9d:0d:68:c8:88:2f:d9:db:d3:9a:cd:50:01:aa: 9d:23:55:8e:69:a1:62:72:a2:ec:eb:b0:a7:22:16:86:54:04: e5:41:b0:8a:1d:15:60:74:7a:54:92:d1:10:ef:db:19:a6:3f: fa:5d:d3:ed:61:56:cd:c8:b5:5d:a8:d7:25:82:ff:c7:64:83: fc:a0:2c:a7:3c:33:0e:0f:06:ca:26:20:ac:ac:a6:e4:d8:b4: 66:c8:70:9d:5a:99:f0:78:1d:45:52:94:21:0e:48:0c:21:26: b0:b0:7f:97:28:c6:15:27:28:bb:fa:7a:35:77:d0:67:ed:40: ef:39:e7:31:7f:73:33:fd:c0:82:a5:03:a1:f8:e2:0e:9f:fd: e6:cb:9f:56:25:bb:1d:6a:62:0a:9d:86:b3:71:5e:ac:37:c0: 53:2f:5b:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFhb01W6sG53sHWOm2u/FqreREUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA3MjQwODM1NDhaFw0yNjA3MjUxMjA3NDhaMDMxMTAvBgNV BAMTKDQxQzBBMzQxMTlGQkQzNEE3RTJCNDlCRkFCQjM4NjdFNkUwNDQzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaCTFo01/7bKvXiN1TSS2wjfn hsBFAjRkoi0pkStXfYDVCkhC/mSlpuLQu1wqy9N+tVxZPD4AsIb4pioycdrowBh7 PzEYg0yi5KEYCAs25cnWBOWL4Ev4y0j7YmU1wLM/RN4kAoWdS0cwISfO0e4Vbofk Wx524pSPhXBneqoT7vvJ1UMecMqujPmqM6y8CMyqgkZqlYutcng9YMyQai4/M+8O hUvgb2uEQZwDaRLBvx2tPamv2Y2Z3MxFVMV6tluQzcY0IqFSesDqPvVddnWd621C QhDthWD1brhWbwjG9d8iPutbhqy+SKxXrWuK50z28oyirDxD7tZY0Q8geODhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQcCjQRn700p+K0m/q7OGfm4EQ70wHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMTQwNzM5Njg5MDIxNjMvMC9DODk5OTY3Qjk1RTMy RTM3Q0NFQUExMUNGMTQ2RkI1N0I1MUE3QzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUUMfP16lann NoihGxwxCbUaxb/HQyrDLJ4A5o4OKlabD9R5Y1SJ6wQxrBBrIvDAwZABoinAfj+z zAtdFwBMwhZbyhSFwMBVP9TH7XJ6EwBux0M1gG6YWSTGxT/7a50NaMiIL9nb05rN UAGqnSNVjmmhYnKi7OuwpyIWhlQE5UGwih0VYHR6VJLREO/bGaY/+l3T7WFWzci1 XajXJYL/x2SD/KAspzwzDg8GyiYgrKym5Ni0ZshwnVqZ8HgdRVKUIQ5IDCEmsLB/ lyjGFScou/p6NXfQZ+1A7znnMX9zM/3AgqUDofjiDp/95sufViW7HWpiCp2Gs3Fe rDfAUy9blA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:20:38 2026 by rpki-client