$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft File: 721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json) Hash identifier: 3LTfmFwFaTIXQHIKKRxA3k3oMF38NXONVCuT7R6lnZI= Subject key identifier: CF:07:3D:06:EC:72:33:45:89:05:C9:55:54:CF:6E:37:D3:89:76:B2 Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Certificate serial: 5090B1DAC58CD92D656CD6EABD4F8A4390CF4AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft Manifest number: 75 Signing time: Fri 25 Sep 2026 07:23:07 +0000 Manifest this update: Fri 25 Sep 2026 07:18:07 +0000 Manifest next update: Mon 28 Sep 2026 17:09:07 +0000 Files and hashes: 1: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: kd2OxgcqSGekFst3Ny085v0TvTrRGFifnG8G6jHWEWo=) 2: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=) 3: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=) 4: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=) 5: 3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa (hash: CfBgRS04K7VQSDmdLDK1/T0zyTXNs4vFBivuhUcxpf0=) 6: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=) 7: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=) 8: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=) 9: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=) 10: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 17:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:90:b1:da:c5:8c:d9:2d:65:6c:d6:ea:bd:4f:8a:43:90:cf:4a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Validity Not Before: Sep 25 07:18:07 2026 GMT Not After : Sep 28 17:09:07 2026 GMT Subject: CN=CF073D06EC7233458905C95554CF6E37D38976B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:26:7d:06:9d:38:fd:4d:9d:3a:3f:3e:50: 08:51:e5:be:7d:1c:40:e3:eb:22:56:83:5e:be:ac: 99:cb:6b:76:51:31:2b:1e:b5:8c:ea:0b:67:cd:83: 4b:8f:58:20:ba:77:3e:da:3f:e0:b0:5f:28:aa:47: 6c:98:52:38:a9:a9:72:e7:4f:dd:ad:d6:43:e2:a6: 11:77:ef:30:da:02:6f:f0:8d:14:13:7d:2b:16:96: 65:46:6e:55:67:28:1e:b3:24:8e:10:92:e5:a0:7b: b1:9f:44:24:41:04:ba:49:f8:0f:53:2d:e8:b9:d0: 4d:83:b6:c8:20:d5:eb:9b:16:5c:09:cd:f3:78:40: 4b:47:68:bc:0b:11:3d:98:0d:1b:eb:81:ff:f9:72: 14:56:fd:9c:30:79:00:44:e6:59:77:03:a0:63:04: 4c:58:fa:d1:42:57:58:31:71:0c:b4:64:6a:af:42: 5c:fd:e8:60:cd:2b:8d:40:2d:9d:87:45:e4:59:3e: ca:d9:ad:90:e7:01:65:57:81:b7:4a:49:99:27:88: 4c:b7:d2:d3:d4:34:ca:a2:29:b0:1d:a2:6e:31:c4: 2a:5a:15:94:c2:2f:d5:d4:29:9b:a6:a1:c0:fb:02: c6:31:76:05:c7:5e:f6:6c:4f:59:ca:30:30:e5:46: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:07:3D:06:EC:72:33:45:89:05:C9:55:54:CF:6E:37:D3:89:76:B2 X509v3 Authority Key Identifier: keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7f:31:17:1b:be:bf:6c:ba:fd:a4:ee:4c:52:1d:97:4e:75: e8:1e:d1:d7:95:b1:19:c5:29:7b:04:49:89:fe:fb:5f:55:5d: 71:c9:77:ac:65:c9:df:25:94:17:05:c8:3f:14:58:69:1a:08: a5:cb:ff:19:58:7c:21:40:05:2d:74:00:8d:8c:d5:85:2f:a0: 60:d2:31:38:15:7a:5e:2b:50:cd:d1:09:95:6c:e8:6e:83:e7: f0:13:08:ba:ed:db:69:a4:42:42:e1:f6:51:3f:b2:d2:74:cc: 9c:3e:20:b1:ca:72:64:f2:89:ac:37:b3:96:78:7e:3c:2b:ec: 2f:34:13:11:20:1f:5d:eb:eb:10:33:c9:82:52:fc:77:6a:fe: ea:af:b4:84:54:77:5f:69:a8:1e:49:c9:09:52:ec:a0:97:1a: 53:46:13:93:b6:aa:ae:ac:05:70:a2:16:ba:71:f7:5a:a8:03: 35:a5:16:d0:f2:82:60:76:19:79:fc:65:0f:f8:73:5d:23:c9: 8d:30:96:78:c7:a5:c6:53:d1:f2:3d:8f:fe:9a:b2:21:68:f0: 9a:f2:a0:45:dd:28:de:2e:50:34:5c:a6:a1:9c:f6:84:c8:ea: 14:3e:93:2b:68:93:10:47:e2:5a:cf:d8:11:3f:44:33:77:c9: 9c:56:74:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUJCx2sWM2S1lbNbqvU+KQ5DPSsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDkyNTA3MTgwN1oX DTI2MDkyODE3MDkwN1owMzExMC8GA1UEAxMoQ0YwNzNEMDZFQzcyMzM0NTg5MDVD OTU1NTRDRjZFMzdEMzg5NzZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/UJn0GnTj9TZ06Pz5QCFHlvn0cQOPrIlaDXr6smctrdlExKx61jOoLZ82D S49YILp3Pto/4LBfKKpHbJhSOKmpcudP3a3WQ+KmEXfvMNoCb/CNFBN9KxaWZUZu VWcoHrMkjhCS5aB7sZ9EJEEEukn4D1Mt6LnQTYO2yCDV65sWXAnN83hAS0dovAsR PZgNG+uB//lyFFb9nDB5AETmWXcDoGMETFj60UJXWDFxDLRkaq9CXP3oYM0rjUAt nYdF5Fk+ytmtkOcBZVeBt0pJmSeITLfS09Q0yqIpsB2ibjHEKloVlMIv1dQpm6ah wPsCxjF2Bcde9mxPWcowMOVGN08CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTPBz0G 7HIzRYkFyVVUz24304l2sjAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2 Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf dXFiWndleklsUHpCaV9meUprLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8wLzcyMUMzNjY3N0Y1OUZFRUE5QjY3MDdCMzIyNTNGMzA2MkZERkM4 OTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCFfzEXG76/bLr9pO5MUh2XTnXoHtHXlbEZxSl7BEmJ/vtf VV1xyXesZcnfJZQXBcg/FFhpGgily/8ZWHwhQAUtdACNjNWFL6Bg0jE4FXpeK1DN 0QmVbOhug+fwEwi67dtppEJC4fZRP7LSdMycPiCxynJk8omsN7OWeH48K+wvNBMR IB9d6+sQM8mCUvx3av7qr7SEVHdfaageSckJUuyglxpTRhOTtqqurAVwoha6cfda qAM1pRbQ8oJgdhl5/GUP+HNdI8mNMJZ4x6XGU9HyPY/+mrIhaPCa8qBF3SjeLlA0 XKahnPaEyOoUPpMraJMQR+Jaz9gRP0Qzd8mcVnTW -----END CERTIFICATE-----Generated at Sun Sep 27 05:47:12 2026 by rpki-client