$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft File: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft (raw, json) Hash identifier: H77m13ALlQhuYPgvQEESw1dcBBP0H9FxeZ9Pm5xFXRM= Subject key identifier: 17:D6:46:DE:D8:FD:7A:30:76:0B:F8:C8:1D:20:DF:5A:26:40:3D:0F Authority key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B Certificate issuer: /CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Certificate serial: 05CADDC7DAB442C62D4E1F0CDC037F8AE79CBB06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft Manifest number: 3C Signing time: Fri 24 Jul 2026 07:25:36 +0000 Manifest this update: Fri 24 Jul 2026 07:20:36 +0000 Manifest next update: Sat 25 Jul 2026 09:33:36 +0000 Files and hashes: 1: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl (hash: 8BANVfpZVXUKQr91esMebzNAsS6kh+eVXdlegY7RS2Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ca:dd:c7:da:b4:42:c6:2d:4e:1f:0c:dc:03:7f:8a:e7:9c:bb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Validity Not Before: Jul 24 07:20:36 2026 GMT Not After : Jul 25 09:33:36 2026 GMT Subject: CN=17D646DED8FD7A30760BF8C81D20DF5A26403D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:26:d8:43:fd:78:bd:4c:60:2e:aa:ab:1b: 0f:44:a2:04:2f:bc:30:33:f1:e3:4a:a7:dd:e0:c4: 34:18:b1:58:9b:7f:f7:68:5e:f1:85:20:14:f5:40: 6d:27:e3:9a:9a:21:bf:64:53:d1:ba:dc:4e:58:5e: 11:c9:7c:82:d8:4f:91:91:10:11:b0:e1:57:6d:1d: d6:f5:c7:a6:89:48:d9:59:12:20:01:df:49:98:09: bd:07:26:64:bd:75:b1:43:30:3b:0c:4b:ce:31:fa: 13:4a:54:6b:62:2a:ed:2c:e9:69:9e:a8:0b:36:22: 1a:ce:ab:f7:b1:e8:1e:a9:35:5e:f8:fa:26:6e:1c: a2:4d:2f:d2:4a:d9:48:99:0b:a0:11:12:b5:f2:d6: 7c:5e:06:d6:df:73:49:6d:2d:ab:49:b1:0e:5c:f9: 92:2f:44:a3:eb:19:43:50:3c:9b:a7:6e:c2:31:8a: bb:98:db:fc:6b:24:6a:85:b2:04:45:ed:91:3b:e0: e3:d8:bf:f3:e8:c3:78:75:2c:b1:d4:8b:a6:b4:cd: 24:ce:37:2e:44:49:ce:9b:ec:90:28:62:44:50:ac: 5f:77:9d:11:1f:39:c5:80:af:b6:14:b6:0d:b3:f3: 8e:7e:0c:cd:43:26:01:af:e3:27:79:77:fb:5c:22: 5d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:46:DE:D8:FD:7A:30:76:0B:F8:C8:1D:20:DF:5A:26:40:3D:0F X509v3 Authority Key Identifier: keyid:C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3b:0e:8b:af:dc:bd:f7:f5:1a:08:35:11:22:dc:c0:98:49: cc:0e:87:a3:aa:92:24:4b:92:72:a6:23:e8:c5:eb:e3:77:47: 0f:55:7f:f9:b1:40:cb:6e:30:c0:68:b7:df:f2:9c:26:ca:99: db:c0:4b:e0:0d:34:91:f7:52:81:02:0d:49:60:a2:e5:2b:41: b6:ba:a5:ab:a6:11:52:a0:93:68:28:79:17:0a:63:e1:b1:8e: fa:48:c7:90:fd:ad:34:06:6c:31:f0:31:e3:b2:76:dc:e2:01: 4e:bc:0e:5e:c6:8d:7d:6a:64:b5:a8:c9:10:93:ba:0e:b8:b3: 24:a9:9e:7c:b0:54:02:5d:c7:41:3c:87:b1:27:12:e6:35:66: 8b:17:ba:f5:bf:cc:c9:4e:9b:07:3b:11:cf:b5:57:df:93:0f: 7c:38:27:e6:bb:94:7b:41:fc:51:27:55:be:87:00:49:53:b8: 94:d9:a9:e6:7c:a2:e9:f1:83:77:f6:7b:31:e3:ca:a2:ea:d4: b1:aa:01:42:ce:8c:90:98:fe:ba:1e:64:f0:ed:8e:80:73:5f: a0:65:25:33:02:2f:02:11:13:45:44:f4:78:fc:39:f1:62:db: f7:24:92:07:49:ac:85:85:19:d0:01:2a:9d:f9:d1:1f:39:4e: 8e:20:b5:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBcrdx9q0QsYtTh8M3AN/iuecuwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFD QUVERDQ3QjAeFw0yNjA3MjQwNzIwMzZaFw0yNjA3MjUwOTMzMzZaMDMxMTAvBgNV BAMTKDE3RDY0NkRFRDhGRDdBMzA3NjBCRjhDODFEMjBERjVBMjY0MDNEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQSbYQ/14vUxgLqqrGw9EogQv vDAz8eNKp93gxDQYsVibf/doXvGFIBT1QG0n45qaIb9kU9G63E5YXhHJfILYT5GR EBGw4VdtHdb1x6aJSNlZEiAB30mYCb0HJmS9dbFDMDsMS84x+hNKVGtiKu0s6Wme qAs2IhrOq/ex6B6pNV74+iZuHKJNL9JK2UiZC6ARErXy1nxeBtbfc0ltLatJsQ5c +ZIvRKPrGUNQPJunbsIxiruY2/xrJGqFsgRF7ZE74OPYv/Pow3h1LLHUi6a0zSTO Ny5ESc6b7JAoYkRQrF93nREfOcWAr7YUtg2z845+DM1DJgGv4yd5d/tcIl1XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF9ZG3tj9ejB2C/jIHSDfWiZAPQ8wHwYDVR0j BBgwFoAUw6tHgxPTETtoy8ya20SBwcrt1HswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx Njk5MjE1MTY5NjE3OTIyMy8wL0MzQUI0NzgzMTNEMzExM0I2OENCQ0M5QURCNDQ4 MUMxQ0FFREQ0N0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFDQUVERDQ3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5OTIxNTE2OTYxNzkyMjMvMC9DM0FCNDc4MzEzRDMx MTNCNjhDQkNDOUFEQjQ0ODFDMUNBRURENDdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjsOi6/cvff1 Ggg1ESLcwJhJzA6Ho6qSJEuScqYj6MXr43dHD1V/+bFAy24wwGi33/KcJsqZ28BL 4A00kfdSgQINSWCi5StBtrqlq6YRUqCTaCh5Fwpj4bGO+kjHkP2tNAZsMfAx47J2 3OIBTrwOXsaNfWpktajJEJO6DrizJKmefLBUAl3HQTyHsScS5jVmixe69b/MyU6b BzsRz7VX35MPfDgn5ruUe0H8USdVvocASVO4lNmp5nyi6fGDd/Z7MePKourUsaoB Qs6MkJj+uh5k8O2OgHNfoGUlMwIvAhETRUT0ePw58WLb9ySSB0mshYUZ0AEqnfnR HzlOjiC1Cg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:42:59 2026 by rpki-client