$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft File: C6350AA90D1F58C58F9578EF82E722659D8B593D.mft (raw, json) Hash identifier: Ax9OC5LmVhds7NEGocsu4QMwROLzBjjXoTl5E9L5gdU= Subject key identifier: 57:CC:B6:53:D4:B0:4B:2F:FC:37:88:F8:2F:BC:12:46:82:02:59:2E Authority key identifier: C6:35:0A:A9:0D:1F:58:C5:8F:95:78:EF:82:E7:22:65:9D:8B:59:3D Certificate issuer: /CN=C6350AA90D1F58C58F9578EF82E722659D8B593D Certificate serial: 724D2A6CB657EC47EF8A69E0B198BE3FBA2CBBB8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft Manifest number: 3C Signing time: Fri 24 Jul 2026 21:12:09 +0000 Manifest this update: Fri 24 Jul 2026 21:07:09 +0000 Manifest next update: Sun 26 Jul 2026 00:53:09 +0000 Files and hashes: 1: C6350AA90D1F58C58F9578EF82E722659D8B593D.crl (hash: OF+9eFxBzc3/SPuvdR15DVQ+LQ436kMKdg6WktuFjcg=) 2: 3130332e3135342e3136322e302f32332d3233203d3e20313337373139.roa (hash: kYjmRhbwbPJDmFT3EDvlIX8375Cp3nfEK5OQkUkt4kE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.crl rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4d:2a:6c:b6:57:ec:47:ef:8a:69:e0:b1:98:be:3f:ba:2c:bb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6350AA90D1F58C58F9578EF82E722659D8B593D Validity Not Before: Jul 24 21:07:09 2026 GMT Not After : Jul 26 00:53:09 2026 GMT Subject: CN=57CCB653D4B04B2FFC3788F82FBC12468202592E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:7a:1a:15:53:39:c1:66:6a:b2:9d:8c:d0: 04:0a:f5:59:f7:bb:44:79:56:cf:02:39:f5:1e:25: e7:84:1d:2c:48:33:a7:a1:15:96:b4:2e:01:e7:96: e3:1d:8f:ff:f2:63:a0:da:6d:08:fa:5b:ab:0a:b3: 2a:e8:47:43:b8:ca:be:94:a8:6d:21:6b:4c:fa:83: 1b:52:3f:06:c2:66:e7:67:83:38:6c:95:ee:d1:8c: 0e:c4:61:c1:ba:f6:aa:ee:bc:96:e7:6b:5a:63:c8: 17:13:ac:90:0f:54:56:9b:30:a8:15:bf:56:68:b2: e2:31:90:18:e3:4f:1c:f0:b8:3d:cf:be:7f:d8:e4: 20:46:5c:13:b8:aa:22:03:95:a3:e6:8c:52:5b:e7: 5e:a4:7a:a1:1f:0b:16:35:3d:14:fe:b0:94:5c:1a: c5:1f:a0:24:08:7e:a3:f5:11:74:36:74:a4:4f:3d: 24:3a:6f:5b:a4:02:e3:12:c4:d9:71:0b:f4:6c:22: 84:8c:56:54:31:da:aa:ff:3c:99:86:d7:be:ae:5e: bd:3e:e4:c3:a2:e9:06:cb:2b:db:49:de:f1:e1:7b: f5:00:3c:65:1b:14:dd:89:4d:d0:7b:a8:66:26:dd: 91:07:4b:f6:7c:9f:d1:db:52:ef:14:76:c9:77:be: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:B6:53:D4:B0:4B:2F:FC:37:88:F8:2F:BC:12:46:82:02:59:2E X509v3 Authority Key Identifier: keyid:C6:35:0A:A9:0D:1F:58:C5:8F:95:78:EF:82:E7:22:65:9D:8B:59:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:39:87:70:93:6c:64:49:b3:5e:d6:63:ec:c4:27:29:76:20: 27:08:fd:a3:a3:d6:98:79:7b:cc:f2:90:7b:d7:22:96:49:72: b6:81:d6:cf:b4:c9:7a:9b:90:c7:7b:c9:1f:ee:8c:4e:48:e6: 7e:62:fe:51:10:03:42:4d:05:59:5c:c3:e7:3a:84:dc:63:3b: 05:79:a1:55:a1:58:3c:d3:6b:cd:54:e8:c4:9c:3a:34:eb:8e: 1a:04:53:dc:53:51:c9:b1:56:2a:02:12:b1:7f:ab:a0:63:84: 4b:d9:96:b4:eb:54:5c:a2:48:f0:65:48:b3:f4:8a:06:a0:83: 56:15:5a:9c:9a:53:5f:44:0c:e8:8c:a7:ec:1a:e8:bb:69:2a: 35:c8:66:ec:6f:c6:dd:47:8e:32:0a:29:b0:b6:65:92:63:8c: 73:32:f9:b9:88:69:ee:a5:bf:f9:2e:36:24:04:af:7f:1a:e5: ce:40:af:3b:48:b8:f2:40:8f:d8:0d:78:74:be:00:c1:e7:52: 77:1a:1f:32:c9:b6:9c:c2:11:d3:dc:97:f8:3e:d0:8a:e9:f7: 44:7f:be:da:76:8a:29:77:61:da:75:a9:77:bc:c1:95:7e:db: b7:fc:65:e0:76:c0:2d:a7:9d:b0:b3:1f:a8:d1:1f:7c:44:f5: a8:0c:d0:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUck0qbLZX7EfvimngsZi+P7osu7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzNTBBQTkwRDFGNThDNThGOTU3OEVGODJFNzIyNjU5 RDhCNTkzRDAeFw0yNjA3MjQyMTA3MDlaFw0yNjA3MjYwMDUzMDlaMDMxMTAvBgNV BAMTKDU3Q0NCNjUzRDRCMDRCMkZGQzM3ODhGODJGQkMxMjQ2ODIwMjU5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfnoaFVM5wWZqsp2M0AQK9Vn3 u0R5Vs8COfUeJeeEHSxIM6ehFZa0LgHnluMdj//yY6DabQj6W6sKsyroR0O4yr6U qG0ha0z6gxtSPwbCZudngzhsle7RjA7EYcG69qruvJbna1pjyBcTrJAPVFabMKgV v1ZosuIxkBjjTxzwuD3Pvn/Y5CBGXBO4qiIDlaPmjFJb516keqEfCxY1PRT+sJRc GsUfoCQIfqP1EXQ2dKRPPSQ6b1ukAuMSxNlxC/RsIoSMVlQx2qr/PJmG176uXr0+ 5MOi6QbLK9tJ3vHhe/UAPGUbFN2JTdB7qGYm3ZEHS/Z8n9HbUu8Udsl3vnZbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV8y2U9SwSy/8N4j4L7wSRoICWS4wHwYDVR0j BBgwFoAUxjUKqQ0fWMWPlXjvguciZZ2LWT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAwMjUyODI0MDY5NzM2OS8wL0M2MzUwQUE5MEQxRjU4QzU4Rjk1NzhFRjgyRTcy MjY1OUQ4QjU5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzYzNTBBQTkwRDFGNThDNThGOTU3OEVGODJFNzIyNjU5RDhCNTkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMDI1MjgyNDA2OTczNjkvMC9DNjM1MEFBOTBEMUY1 OEM1OEY5NTc4RUY4MkU3MjI2NTlEOEI1OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjmHcJNsZEmz XtZj7MQnKXYgJwj9o6PWmHl7zPKQe9cilklytoHWz7TJepuQx3vJH+6MTkjmfmL+ URADQk0FWVzD5zqE3GM7BXmhVaFYPNNrzVToxJw6NOuOGgRT3FNRybFWKgISsX+r oGOES9mWtOtUXKJI8GVIs/SKBqCDVhVanJpTX0QM6Iyn7Brou2kqNchm7G/G3UeO MgopsLZlkmOMczL5uYhp7qW/+S42JASvfxrlzkCvO0i48kCP2A14dL4AwedSdxof Msm2nMIR09yX+D7Qiun3RH++2naKKXdh2nWpd7zBlX7bt/xl4HbALaedsLMfqNEf fET1qAzQyg== -----END CERTIFICATE-----Generated at Fri Jul 24 23:08:24 2026 by rpki-client