$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: FkPVyQnMipg5SpnhExIA+qm8HhHslJJKkKVxuLH7K8Y= Subject key identifier: C9:2E:E5:43:78:3D:D7:90:05:78:D9:5A:D9:E0:2C:4D:D9:55:6D:78 Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: 4202A7FE312200ED8B7B3114206C600C97503CDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 48 Signing time: Fri 24 Jul 2026 13:26:18 +0000 Manifest this update: Fri 24 Jul 2026 13:21:18 +0000 Manifest next update: Sat 25 Jul 2026 16:36:18 +0000 Files and hashes: 1: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: ZwlPADfyVILDFdzKpMd5sGB1YkZnVDAsLi/FUMLtE2c=) 2: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=) 3: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) 4: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:02:a7:fe:31:22:00:ed:8b:7b:31:14:20:6c:60:0c:97:50:3c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Jul 24 13:21:18 2026 GMT Not After : Jul 25 16:36:18 2026 GMT Subject: CN=C92EE543783DD7900578D95AD9E02C4DD9556D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:92:8e:a2:04:fe:c8:77:eb:d1:1f:3b:7c: b4:9a:14:d1:d2:fe:52:01:44:5c:e9:1e:f0:cb:06: 41:4c:67:e2:6a:03:41:46:ee:d3:64:6e:d1:f7:82: 22:60:be:10:8a:82:31:f3:de:a1:a7:fa:58:de:40: 0c:27:df:f7:08:b5:de:a5:61:d1:e4:40:02:e7:0c: e8:9d:a9:82:57:d1:ef:7f:d5:66:2c:71:76:6f:f8: 3c:aa:57:95:d8:e7:91:a0:cd:7b:af:ea:5e:68:03: ea:27:aa:e4:19:db:8d:a9:82:25:d2:c1:7e:f1:41: e7:cc:ea:13:f7:fc:1e:25:8d:05:a4:52:79:93:03: c8:ea:35:91:95:a6:50:22:8d:e3:fe:d1:7a:0a:22: ee:76:9a:fb:1f:08:99:7d:4e:9a:f3:3f:f5:89:7b: ae:c0:64:1a:bb:c6:cc:e9:22:32:7e:53:32:85:2a: 19:4f:f3:c5:61:23:68:18:c9:87:4d:f6:16:d3:b3: 7d:a5:f1:26:82:1d:d0:8d:c9:8f:17:11:7e:63:66: 98:4e:92:11:34:df:e7:54:0f:9a:bd:af:d5:18:72: b8:a9:cb:4c:a0:6d:5b:c0:39:41:68:c7:f8:11:64: 28:38:4e:3a:34:d9:41:0f:44:fc:fa:8e:b8:f3:1a: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:E5:43:78:3D:D7:90:05:78:D9:5A:D9:E0:2C:4D:D9:55:6D:78 X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:e6:0d:01:80:ce:5d:d2:54:7d:e0:71:97:1c:ec:4e:fe: a1:1a:c6:27:e5:2d:22:ab:d6:07:93:07:7e:16:49:d1:72:24: 67:d8:27:8b:26:c4:2b:2b:e0:12:36:e9:01:5e:5f:96:96:ba: 4c:a5:03:2e:35:ea:05:16:48:c0:32:14:5c:a1:ad:3b:67:ab: 0c:46:33:91:6d:1b:d7:c3:0a:ff:a0:60:e1:06:58:33:cf:cf: ec:36:16:61:0b:02:13:61:78:64:a5:c1:10:01:db:50:97:73: 73:e3:47:b7:0b:d9:82:8b:7a:67:ed:94:07:28:f2:70:5d:d5: 6c:b3:34:1a:84:02:6b:a3:99:0e:b6:ed:5e:f9:bc:5e:d4:5d: eb:3c:35:60:a7:40:b4:e9:3e:f3:4d:e2:7b:ef:87:89:ef:7b: ca:40:89:41:20:92:1f:ca:b3:bc:c9:7f:6b:03:0e:fe:f7:23: e1:fe:ba:1c:5c:33:74:32:32:a7:4a:e2:85:94:8f:54:1c:9a: b3:94:48:39:de:9d:8d:80:7a:5c:f8:85:1d:37:48:c8:80:71: 8a:1d:3c:df:b2:26:63:2f:9c:8f:ee:65:c5:95:3f:f8:98:2a: 3d:f4:0f:92:75:07:4b:25:d2:69:ea:fb:9d:bd:34:a8:cf:3d: ec:bb:f7:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQgKn/jEiAO2LezEUIGxgDJdQPNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjA3MjQxMzIxMThaFw0yNjA3MjUxNjM2MThaMDMxMTAvBgNV BAMTKEM5MkVFNTQzNzgzREQ3OTAwNTc4RDk1QUQ5RTAyQzRERDk1NTZENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrZKOogT+yHfr0R87fLSaFNHS /lIBRFzpHvDLBkFMZ+JqA0FG7tNkbtH3giJgvhCKgjHz3qGn+ljeQAwn3/cItd6l YdHkQALnDOidqYJX0e9/1WYscXZv+DyqV5XY55GgzXuv6l5oA+onquQZ242pgiXS wX7xQefM6hP3/B4ljQWkUnmTA8jqNZGVplAijeP+0XoKIu52mvsfCJl9TprzP/WJ e67AZBq7xszpIjJ+UzKFKhlP88VhI2gYyYdN9hbTs32l8SaCHdCNyY8XEX5jZphO khE03+dUD5q9r9UYcripy0ygbVvAOUFox/gRZCg4Tjo02UEPRPz6jrjzGng1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyS7lQ3g915AFeNla2eAsTdlVbXgwHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIfmDQGAzl3S VH3gcZcc7E7+oRrGJ+UtIqvWB5MHfhZJ0XIkZ9gniybEKyvgEjbpAV5flpa6TKUD LjXqBRZIwDIUXKGtO2erDEYzkW0b18MK/6Bg4QZYM8/P7DYWYQsCE2F4ZKXBEAHb UJdzc+NHtwvZgot6Z+2UByjycF3VbLM0GoQCa6OZDrbtXvm8XtRd6zw1YKdAtOk+ 803ie++Hie97ykCJQSCSH8qzvMl/awMO/vcj4f66HFwzdDIyp0rihZSPVByas5RI Od6djYB6XPiFHTdIyIBxih0837ImYy+cj+5lxZU/+JgqPfQPknUHSyXSaer7nb00 qM897Lv3Vw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:43:56 2026 by rpki-client