$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft File: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json) Hash identifier: l64lOzy1xBrtTdBTwcOEY5Y19C9E70gHzOUB54yUHWg= Subject key identifier: A2:EE:D2:DB:79:C0:B1:99:80:4E:6C:0C:EC:A4:E9:52:99:A4:5A:FC Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C Certificate issuer: /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C Certificate serial: 010FE8BA118A9D184610A0FEAAD2A6E233268BCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft Manifest number: 42 Signing time: Fri 24 Jul 2026 09:55:57 +0000 Manifest this update: Fri 24 Jul 2026 09:50:57 +0000 Manifest next update: Sat 25 Jul 2026 13:16:57 +0000 Files and hashes: 1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: H8pOsWTO/WH9Ns7Gn12LBVEdWxW+msMkbrUfm/466I8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0f:e8:ba:11:8a:9d:18:46:10:a0:fe:aa:d2:a6:e2:33:26:8b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C Validity Not Before: Jul 24 09:50:57 2026 GMT Not After : Jul 25 13:16:57 2026 GMT Subject: CN=A2EED2DB79C0B199804E6C0CECA4E95299A45AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:ad:52:c6:d2:65:0c:21:31:94:af:95:44: 9c:de:80:e7:83:ba:2c:0e:a8:ac:ee:0d:46:f3:c1: f3:e4:3c:bb:f5:64:c0:17:4d:0f:4f:09:45:40:ae: 70:80:4d:12:cf:db:af:28:13:e1:a2:fe:32:71:0f: ee:6d:b2:ca:6c:42:d7:21:d3:84:59:cc:e3:53:5f: 57:43:75:56:93:59:f0:b5:d2:f2:a8:16:79:2d:48: 71:0a:82:be:77:b9:51:89:fb:69:e8:3b:c1:2c:bc: 52:0e:68:b4:83:35:8a:7b:73:59:53:51:4e:96:ae: 57:2d:6d:89:e8:f7:ea:a3:21:6d:ce:e0:b5:f4:ca: eb:6d:60:cf:01:f0:6a:b7:00:12:36:38:d6:27:43: 8c:f1:bb:2d:38:2b:44:d0:3f:5c:29:80:7d:c2:0e: fa:97:52:dc:51:97:16:04:cf:ff:3a:da:7c:8e:fd: d1:b5:bd:21:37:c2:5b:00:cd:c3:4b:1e:69:37:5d: 3b:8d:82:e8:23:5c:65:63:79:0d:17:85:c8:a7:ca: cb:f0:c1:78:40:2f:7d:db:05:9c:e6:c1:5c:25:f1: 3e:b2:83:a6:b0:f5:e1:e1:9b:d8:af:9f:91:97:f4: 4c:e9:28:f6:4d:a3:8c:e0:f6:c4:ce:c8:fe:bc:92: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:D2:DB:79:C0:B1:99:80:4E:6C:0C:EC:A4:E9:52:99:A4:5A:FC X509v3 Authority Key Identifier: keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c0:b3:77:e1:f7:44:b7:f8:2f:c6:51:a0:fa:b5:0d:9c:93: 64:9b:18:82:de:20:fb:11:43:4d:28:12:88:30:93:6c:01:29: 32:8f:0e:77:62:bb:a7:a5:c7:50:f2:cc:1b:12:d4:fb:25:d9: 09:ee:f1:56:7d:3c:45:4f:3a:84:fa:04:74:ce:ae:95:9a:dc: 40:42:65:93:61:e4:bf:61:8e:83:1e:05:f3:f4:de:1e:6c:c8: 11:16:9a:bd:b6:11:c0:83:54:7a:69:94:f8:ef:31:e0:c4:e7: 07:e4:5f:f0:87:0a:ac:79:2e:2b:3d:14:3a:86:0f:0e:f3:50: 03:68:00:36:15:bd:f6:51:3e:09:cb:3d:a3:4d:4f:1e:f9:50: 20:e2:d5:fe:38:f8:3d:6b:d0:61:7d:6f:3e:98:9f:bd:fb:08: df:f6:c1:6e:12:61:0b:cd:fb:c0:44:d7:fb:6d:c5:d3:c1:e3: fb:cf:5d:0c:9e:17:f5:1e:29:ea:b1:5e:34:3c:58:55:09:60: 62:37:83:b2:ee:52:fa:16:d9:fb:69:09:e0:54:e1:5f:fb:7f: 6f:f3:31:33:b5:b2:c4:33:77:30:38:bb:b6:3f:ef:75:8b:0a: 42:8d:8f:93:1c:75:d2:6f:7e:bf:94:17:57:46:bd:53:6e:bd: a7:51:91:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAQ/ouhGKnRhGEKD+qtKm4jMmi84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwM0QwMjlFRUZGQkQwM0MzMzY0N0E3NUMyQzU0RTlB ODFERDM4QzAeFw0yNjA3MjQwOTUwNTdaFw0yNjA3MjUxMzE2NTdaMDMxMTAvBgNV BAMTKEEyRUVEMkRCNzlDMEIxOTk4MDRFNkMwQ0VDQTRFOTUyOTlBNDVBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSXK1SxtJlDCExlK+VRJzegOeD uiwOqKzuDUbzwfPkPLv1ZMAXTQ9PCUVArnCATRLP268oE+Gi/jJxD+5tsspsQtch 04RZzONTX1dDdVaTWfC10vKoFnktSHEKgr53uVGJ+2noO8EsvFIOaLSDNYp7c1lT UU6WrlctbYno9+qjIW3O4LX0yuttYM8B8Gq3ABI2ONYnQ4zxuy04K0TQP1wpgH3C DvqXUtxRlxYEz/862nyO/dG1vSE3wlsAzcNLHmk3XTuNgugjXGVjeQ0Xhcinysvw wXhAL33bBZzmwVwl8T6yg6aw9eHhm9ivn5GX9EzpKPZNo4zg9sTOyP68kpGRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUou7S23nAsZmATmwM7KTpUpmkWvwwHwYDVR0j BBgwFoAUXwPQKe7/vQPDNkenXCxU6agd04wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8wLzVGMDNEMDI5RUVGRkJEMDNDMzM2NDdBNzVDMkM1 NEU5QTgxREQzOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvNUYwM0QwMjlFRUZGQkQwM0MzMzY0N0E3NUMyQzU0RTlBODFERDM4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMC81RjAzRDAyOUVFRkZC RDAzQzMzNjQ3QTc1QzJDNTRFOUE4MUREMzhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMCzd+H3RLf4 L8ZRoPq1DZyTZJsYgt4g+xFDTSgSiDCTbAEpMo8Od2K7p6XHUPLMGxLU+yXZCe7x Vn08RU86hPoEdM6ulZrcQEJlk2Hkv2GOgx4F8/TeHmzIERaavbYRwINUemmU+O8x 4MTnB+Rf8IcKrHkuKz0UOoYPDvNQA2gANhW99lE+Ccs9o01PHvlQIOLV/jj4PWvQ YX1vPpifvfsI3/bBbhJhC837wETX+23F08Hj+89dDJ4X9R4p6rFeNDxYVQlgYjeD su5S+hbZ+2kJ4FThX/t/b/MxM7WyxDN3MDi7tj/vdYsKQo2Pkxx10m9+v5QXV0a9 U269p1GRdg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:09:06 2026 by rpki-client