$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: sdu4Kzm2AmdXWl/ahLz5FrS2aV2PYw8zqEexK6t90ko= Subject key identifier: 12:51:05:72:85:1B:12:6A:6C:C6:EF:F7:3A:CA:10:1E:6D:01:89:56 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 3A1D83FE12A8A2A16AC0D3D90AA5DD96AD3DAC13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 59 Signing time: Fri 24 Jul 2026 05:35:28 +0000 Manifest this update: Fri 24 Jul 2026 05:30:28 +0000 Manifest next update: Sat 25 Jul 2026 05:43:28 +0000 Files and hashes: 1: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) 2: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: kCgZmuJSfxNxR6pcgK18B9KgNiEjAGzZwURe2hSD+sY=) 3: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1d:83:fe:12:a8:a2:a1:6a:c0:d3:d9:0a:a5:dd:96:ad:3d:ac:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Jul 24 05:30:28 2026 GMT Not After : Jul 25 05:43:28 2026 GMT Subject: CN=12510572851B126A6CC6EFF73ACA101E6D018956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:5c:86:06:30:68:73:72:d2:c0:fb:b4:00: bb:64:15:2d:89:65:9d:b7:2d:dd:7c:86:9a:03:de: 6d:53:42:9a:54:63:f1:76:61:e9:e1:8a:5a:3d:60: 4e:bd:4e:67:f4:e0:17:7d:cc:5b:3d:c5:cc:ae:a8: 1a:ed:64:b0:3b:23:cd:d6:6f:06:0e:b6:e7:3c:06: c4:87:22:13:c8:31:12:9c:fc:52:1a:18:2b:11:11: 1b:c2:b4:3b:98:f9:e3:7a:73:82:32:4b:f0:e8:a4: c7:f2:b8:1a:ba:0b:cf:62:56:3e:0d:6c:42:ad:ac: c1:f7:9b:d2:bd:c2:31:3b:0f:7d:bb:d9:80:4d:2c: 61:49:54:5f:85:6f:ea:a3:43:e8:bd:2f:0a:7a:b0: a7:70:3e:ef:64:66:3a:3e:98:c6:34:2d:76:22:b1: 63:c0:1a:d8:69:4c:d9:4c:43:2d:55:48:ff:e2:49: 56:59:99:f0:d4:2b:43:9f:28:ca:2c:4d:92:54:52: b2:0a:53:01:98:4f:54:7b:89:f0:0f:34:f3:05:35: 3b:39:71:d4:91:cd:62:4f:e6:56:b2:a8:c3:ac:c2: ec:ae:79:38:8d:6e:87:5b:40:bd:5a:53:d8:95:7d: a2:8f:5d:7f:7b:7f:0c:47:30:63:27:cc:fc:9f:ae: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:05:72:85:1B:12:6A:6C:C6:EF:F7:3A:CA:10:1E:6D:01:89:56 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:33:9d:dd:50:1b:9e:c8:af:d7:38:09:17:5e:c9:73:f8:a1: 48:85:b2:77:13:48:74:a2:3a:09:a1:7d:57:5c:f0:51:28:1e: b6:33:e5:ea:ac:39:75:6c:46:b0:d8:aa:1d:c6:8c:8c:1c:ee: 4e:1b:89:3e:62:16:a9:5d:40:9f:37:5d:97:92:57:fa:62:5c: 9d:1e:88:34:ad:c9:b0:3d:98:97:52:ad:c2:64:26:69:cd:6b: 03:4c:ab:81:a3:42:76:ef:7e:17:23:6c:7e:fb:d2:d9:16:b2: 12:bc:b7:ca:da:4d:c5:28:57:14:64:7f:03:a6:fe:f7:bb:ad: 78:93:16:60:f9:e4:74:ab:96:1d:8c:a3:68:36:0d:ca:29:f5: b2:c4:ef:2e:a2:ab:57:11:6d:32:9d:67:5d:50:ef:77:64:06: ac:cb:9f:46:6c:26:d0:cc:4c:36:f5:42:dd:b6:0f:eb:b2:8b: fc:d7:78:81:b5:fc:44:e2:cc:74:0e:1e:d1:73:49:e6:b3:dd: 44:37:39:2c:ab:f3:eb:28:d1:b2:65:68:72:23:6a:65:0b:c8: 87:0f:52:e3:b4:72:a1:a1:06:32:88:88:7e:6c:31:c5:a1:f3: 89:8b:d4:37:9a:38:e1:7a:e0:72:c8:9f:0f:f7:1a:0b:fe:b0: 23:08:bd:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOh2D/hKooqFqwNPZCqXdlq09rBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjA3MjQwNTMwMjhaFw0yNjA3MjUwNTQzMjhaMDMxMTAvBgNV BAMTKDEyNTEwNTcyODUxQjEyNkE2Q0M2RUZGNzNBQ0ExMDFFNkQwMTg5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZ1yGBjBoc3LSwPu0ALtkFS2J ZZ23Ld18hpoD3m1TQppUY/F2Yenhilo9YE69Tmf04Bd9zFs9xcyuqBrtZLA7I83W bwYOtuc8BsSHIhPIMRKc/FIaGCsRERvCtDuY+eN6c4IyS/DopMfyuBq6C89iVj4N bEKtrMH3m9K9wjE7D3272YBNLGFJVF+Fb+qjQ+i9Lwp6sKdwPu9kZjo+mMY0LXYi sWPAGthpTNlMQy1VSP/iSVZZmfDUK0OfKMosTZJUUrIKUwGYT1R7ifAPNPMFNTs5 cdSRzWJP5layqMOswuyueTiNbodbQL1aU9iVfaKPXX97fwxHMGMnzPyfrv/hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUElEFcoUbEmpsxu/3OsoQHm0BiVYwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjOd3VAbnsiv 1zgJF17Jc/ihSIWydxNIdKI6CaF9V1zwUSgetjPl6qw5dWxGsNiqHcaMjBzuThuJ PmIWqV1Anzddl5JX+mJcnR6INK3JsD2Yl1KtwmQmac1rA0yrgaNCdu9+FyNsfvvS 2RayEry3ytpNxShXFGR/A6b+97uteJMWYPnkdKuWHYyjaDYNyin1ssTvLqKrVxFt Mp1nXVDvd2QGrMufRmwm0MxMNvVC3bYP67KL/Nd4gbX8ROLMdA4e0XNJ5rPdRDc5 LKvz6yjRsmVociNqZQvIhw9S47RyoaEGMoiIfmwxxaHziYvUN5o44XrgcsifD/ca C/6wIwi9bA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:50:50 2026 by rpki-client