$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json) Hash identifier: yooL3h2t3H3H6P79kVRVqqDUaF/tZY/u5edUGFo/CEQ= Subject key identifier: 3A:48:DF:78:71:F6:14:A4:87:7F:65:66:72:94:AA:4C:57:B4:BD:83 Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Certificate serial: 579853E34B2DA936A74F1142424FB90F668DFA83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft Manifest number: 3B Signing time: Fri 24 Jul 2026 10:20:58 +0000 Manifest this update: Fri 24 Jul 2026 10:15:58 +0000 Manifest next update: Sat 25 Jul 2026 13:11:58 +0000 Files and hashes: 1: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: HcelxaRNMG3aSQZ0aKoRX1yuzV6loe6LXqaAg+VB4n4=) 2: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:98:53:e3:4b:2d:a9:36:a7:4f:11:42:42:4f:b9:0f:66:8d:fa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Validity Not Before: Jul 24 10:15:58 2026 GMT Not After : Jul 25 13:11:58 2026 GMT Subject: CN=3A48DF7871F614A4877F65667294AA4C57B4BD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:e5:24:e2:8d:4b:36:66:20:30:fd:72:dc: 66:ed:98:6c:13:10:3b:41:fe:c7:f0:76:ad:59:ce: e6:cc:17:11:1f:27:0b:47:0f:6f:76:61:f0:62:c6: 7d:3c:be:f8:18:8a:05:f2:06:81:0f:49:26:d3:d0: b8:0e:a9:d6:6c:d8:19:82:1e:63:66:f2:48:de:63: 5f:e6:4b:ff:8a:13:2d:03:fd:53:b0:3b:af:dc:87: 5b:08:c4:de:6e:26:7a:f0:db:1a:f6:cf:73:20:84: 9f:3e:e9:55:2a:43:7e:ac:3b:47:66:ca:2a:e3:11: b4:f1:47:d6:87:c6:b1:be:f6:80:d1:06:da:2e:a5: 50:9c:6f:50:17:5e:2a:ce:38:d6:c4:76:b4:33:30: 20:da:b6:ee:13:12:ea:b3:1a:19:79:83:6f:d3:a6: 02:ba:58:85:42:b2:c4:b8:8e:b3:78:7e:57:07:71: 51:94:6d:3f:79:de:d8:71:90:c8:a9:15:e9:38:58: c8:de:a9:87:c4:3c:af:4b:5d:0b:a6:34:f0:ee:fb: f1:f1:3c:ad:a0:b8:4e:11:e0:47:4b:a4:a4:bd:4e: a8:cb:c1:a1:7e:ee:b7:d1:c8:57:3c:26:f8:7f:b4: 64:fb:fa:af:f0:11:30:1c:e5:12:f0:e0:a7:80:36: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:DF:78:71:F6:14:A4:87:7F:65:66:72:94:AA:4C:57:B4:BD:83 X509v3 Authority Key Identifier: keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9e:f9:44:1b:60:61:86:5b:a1:42:42:73:48:e5:c1:0a:95: 6f:4b:43:f6:5e:a4:c5:55:3c:62:69:b3:db:a0:10:ce:77:16: 2f:3a:af:04:82:af:00:43:8b:2f:54:3b:33:73:55:e0:36:7c: a7:fe:21:59:cb:00:42:e0:bc:c0:c5:89:78:f8:4c:08:88:bb: d8:4a:cf:09:b2:ac:45:ac:96:3f:13:b4:ba:e8:e3:c3:3f:10: ac:04:28:34:b9:7b:54:2b:20:fe:57:66:85:b3:68:d1:c9:9d: 0e:82:6e:ee:36:0c:b9:ba:72:d7:04:49:59:9c:66:1d:29:40: e8:da:75:ae:d6:ca:00:5e:24:4a:2a:71:56:fc:b8:9f:5b:c2: 29:82:64:12:65:0e:29:9f:e6:64:6d:27:50:32:bb:09:99:e5: ae:75:0c:c3:f4:64:ff:8f:72:4a:d9:38:5f:e1:bc:c2:f5:42: 33:cf:a6:09:26:ee:1e:99:99:ee:95:8a:03:b9:13:c7:3c:62: d5:49:59:7f:4a:82:69:b6:51:43:a9:44:fe:9e:ad:de:1c:df: 73:c2:35:0f:b9:1e:ec:07:a1:20:1a:62:5f:31:a5:98:57:ff: a8:a4:54:51:31:e9:74:80:b3:ad:c0:d7:e0:3d:5d:f8:32:93: b1:21:cd:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV5hT40stqTanTxFCQk+5D2aN+oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4 MjJCOEI3MTAeFw0yNjA3MjQxMDE1NThaFw0yNjA3MjUxMzExNThaMDMxMTAvBgNV BAMTKDNBNDhERjc4NzFGNjE0QTQ4NzdGNjU2NjcyOTRBQTRDNTdCNEJEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2uUk4o1LNmYgMP1y3GbtmGwT EDtB/sfwdq1ZzubMFxEfJwtHD292YfBixn08vvgYigXyBoEPSSbT0LgOqdZs2BmC HmNm8kjeY1/mS/+KEy0D/VOwO6/ch1sIxN5uJnrw2xr2z3MghJ8+6VUqQ36sO0dm yirjEbTxR9aHxrG+9oDRBtoupVCcb1AXXirOONbEdrQzMCDatu4TEuqzGhl5g2/T pgK6WIVCssS4jrN4flcHcVGUbT953thxkMipFek4WMjeqYfEPK9LXQumNPDu+/Hx PK2guE4R4EdLpKS9TqjLwaF+7rfRyFc8Jvh/tGT7+q/wETAc5RLw4KeANir/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOkjfeHH2FKSHf2VmcpSqTFe0vYMwHwYDVR0j BBgwFoAUHAp8lE25nEQZw+KJ/6mA/4Iri3EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMyMjg5MjU5MDE4NjUyMS8wLzFDMEE3Qzk0NERCOTlDNDQxOUMzRTI4OUZGQTk4 MEZGODIyQjhCNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4MjJCOEI3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMjI4OTI1OTAxODY1MjEvMC8xQzBBN0M5NDREQjk5 QzQ0MTlDM0UyODlGRkE5ODBGRjgyMkI4QjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ75RBtgYYZb oUJCc0jlwQqVb0tD9l6kxVU8Ymmz26AQzncWLzqvBIKvAEOLL1Q7M3NV4DZ8p/4h WcsAQuC8wMWJePhMCIi72ErPCbKsRayWPxO0uujjwz8QrAQoNLl7VCsg/ldmhbNo 0cmdDoJu7jYMubpy1wRJWZxmHSlA6Np1rtbKAF4kSipxVvy4n1vCKYJkEmUOKZ/m ZG0nUDK7CZnlrnUMw/Rk/49yStk4X+G8wvVCM8+mCSbuHpmZ7pWKA7kTxzxi1UlZ f0qCabZRQ6lE/p6t3hzfc8I1D7ke7AehIBpiXzGlmFf/qKRUUTHpdICzrcDX4D1d +DKTsSHNHA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:06:03 2026 by rpki-client