$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: UwhAhZojZ+puj9IBRKAap1egLLCABWiWJL/X9Ji7V7c= Subject key identifier: 53:95:FF:EA:3C:8B:F7:27:DA:F8:ED:C5:94:61:27:20:9F:6B:32:E5 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 69C8EEE946C6141205EFC2AB79CC8C2E9ABEE637 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 43 Signing time: Thu 23 Jul 2026 16:59:09 +0000 Manifest this update: Thu 23 Jul 2026 16:54:09 +0000 Manifest next update: Fri 24 Jul 2026 20:35:09 +0000 Files and hashes: 1: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) 2: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: 43QOHnwVKnHq6k1zkNN2ETzdmXnDgCp5+3bSdY/52x4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:ee:e9:46:c6:14:12:05:ef:c2:ab:79:cc:8c:2e:9a:be:e6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Jul 23 16:54:09 2026 GMT Not After : Jul 24 20:35:09 2026 GMT Subject: CN=5395FFEA3C8BF727DAF8EDC5946127209F6B32E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:39:ce:c0:47:03:30:63:9d:5c:a1:1e:30: 9d:45:e5:91:26:90:dd:ed:89:a6:63:11:41:c0:c2: b6:3f:b9:d7:8e:5e:11:43:13:8a:0a:b3:8e:bf:fb: 26:a1:f7:60:96:25:26:05:57:a6:0b:fb:85:8b:6d: 9b:8a:22:b1:97:ee:97:e0:34:91:3f:c3:80:45:00: 4e:d0:13:bf:7e:ee:26:7d:8d:6a:c3:5d:56:8f:2c: de:67:1e:8e:7e:18:c5:c1:14:d8:a6:a6:38:01:8a: 48:e0:5e:88:7a:74:24:af:50:79:ee:c3:c4:f4:2a: da:f0:0e:d6:53:8a:6f:a3:d1:49:50:f7:1f:f2:60: 4d:54:b4:3c:15:78:46:8a:62:31:64:bd:ce:df:52: 32:8a:a0:61:ad:9b:a2:b1:9e:df:3d:b5:cc:a8:ec: a5:35:83:01:8c:22:c0:0d:94:fb:7e:13:4b:df:fd: 74:51:0a:e5:52:f8:cf:f1:e6:c0:40:cc:cd:e9:bb: 4e:39:88:9f:48:31:62:64:0e:68:85:39:16:91:9a: cb:21:fb:53:33:ac:3a:1c:69:b0:79:1c:4d:33:0b: 54:ee:14:18:2b:df:69:49:95:fe:b8:f0:89:e9:7c: 35:0e:a7:8e:25:51:6d:92:00:64:12:38:4f:5a:44: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:95:FF:EA:3C:8B:F7:27:DA:F8:ED:C5:94:61:27:20:9F:6B:32:E5 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ff:49:9c:ef:ec:55:43:85:41:c1:e8:d4:37:37:5f:09:3d: aa:4b:58:59:f5:04:3b:50:f2:3d:f8:09:39:65:55:d5:d1:9c: 18:1b:24:9f:9b:eb:ff:03:d8:cb:ba:a7:13:18:26:61:93:6e: 01:1c:f4:6e:e2:71:8e:64:ff:f8:1c:40:9b:3e:88:e2:15:a1: df:95:df:7d:06:11:9c:73:5c:92:46:aa:a2:71:42:36:1f:d8: 21:18:79:c7:c4:f4:d6:6a:e3:b6:dc:41:80:94:ad:96:0f:76: 07:04:be:05:4c:d7:69:8c:5f:e3:f4:08:c1:6a:09:ad:36:0b: 73:46:c7:5f:15:ff:98:e3:57:ec:2a:d8:57:1d:82:ff:c1:4b: 16:8b:b0:95:65:bd:6d:38:dc:10:d5:be:ca:34:7d:e9:a1:90: b8:d1:b3:b6:72:81:dd:6f:b0:ad:56:31:be:76:67:b8:ba:23: b1:0b:83:be:72:49:08:8b:91:f8:19:11:6c:35:62:e8:24:61: 76:a8:5e:80:a9:33:8f:7d:3e:90:90:85:ae:89:6e:af:35:dd: ab:48:9f:65:14:8d:d6:3b:37:7c:1c:e0:36:ab:9a:e0:02:11: 00:a4:06:e5:3a:35:22:f7:8e:13:64:c9:52:d0:df:0f:e8:63: 49:f1:8b:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUacju6UbGFBIF78KrecyMLpq+5jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjA3MjMxNjU0MDlaFw0yNjA3MjQyMDM1MDlaMDMxMTAvBgNV BAMTKDUzOTVGRkVBM0M4QkY3MjdEQUY4RURDNTk0NjEyNzIwOUY2QjMyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YznOwEcDMGOdXKEeMJ1F5ZEm kN3tiaZjEUHAwrY/udeOXhFDE4oKs46/+yah92CWJSYFV6YL+4WLbZuKIrGX7pfg NJE/w4BFAE7QE79+7iZ9jWrDXVaPLN5nHo5+GMXBFNimpjgBikjgXoh6dCSvUHnu w8T0KtrwDtZTim+j0UlQ9x/yYE1UtDwVeEaKYjFkvc7fUjKKoGGtm6Kxnt89tcyo 7KU1gwGMIsANlPt+E0vf/XRRCuVS+M/x5sBAzM3pu045iJ9IMWJkDmiFORaRmssh +1MzrDocabB5HE0zC1TuFBgr32lJlf648InpfDUOp44lUW2SAGQSOE9aRJ6JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU5X/6jyL9yfa+O3FlGEnIJ9rMuUwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP9JnO/sVUOF QcHo1Dc3Xwk9qktYWfUEO1DyPfgJOWVV1dGcGBskn5vr/wPYy7qnExgmYZNuARz0 buJxjmT/+BxAmz6I4hWh35XffQYRnHNckkaqonFCNh/YIRh5x8T01mrjttxBgJSt lg92BwS+BUzXaYxf4/QIwWoJrTYLc0bHXxX/mONX7CrYVx2C/8FLFouwlWW9bTjc ENW+yjR96aGQuNGztnKB3W+wrVYxvnZnuLojsQuDvnJJCIuR+BkRbDVi6CRhdqhe gKkzj30+kJCFrolurzXdq0ifZRSN1js3fBzgNqua4AIRAKQG5To1IveOE2TJUtDf D+hjSfGLKA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:13:05 2026 by rpki-client