$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json) Hash identifier: ZNtHP0CFR8WRtICPrrT8Ta6BEzVak7zXcJZGzPnbNRQ= Subject key identifier: 51:70:AD:0B:F7:CE:00:B2:30:F2:18:0E:AA:F6:D4:F1:BE:7A:6B:1F Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 50B3379EF94B6FEBD75F5D5AE89539A4817BD62B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft Manifest number: 34 Signing time: Fri 24 Jul 2026 00:29:56 +0000 Manifest this update: Fri 24 Jul 2026 00:24:56 +0000 Manifest next update: Sat 25 Jul 2026 01:42:56 +0000 Files and hashes: 1: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=) 2: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=) 3: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: TQZ8qE1/5dDJjfHm/q0nXGMeqWgJkjSUBDOFUu+EKhA=) 4: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b3:37:9e:f9:4b:6f:eb:d7:5f:5d:5a:e8:95:39:a4:81:7b:d6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Jul 24 00:24:56 2026 GMT Not After : Jul 25 01:42:56 2026 GMT Subject: CN=5170AD0BF7CE00B230F2180EAAF6D4F1BE7A6B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:66:91:e4:8b:46:e6:08:93:c6:36:51:13: 83:0b:e5:5b:a6:4c:7b:f2:36:cd:c9:0c:a4:d5:c6: 20:90:61:c4:26:b5:0a:4d:42:da:14:6d:62:33:ec: 17:26:46:c0:73:71:78:b0:b3:15:c4:ee:ea:73:c7: dd:9b:4a:a6:84:be:9f:d4:a6:1a:89:78:95:07:78: 02:d6:19:2e:ec:cb:7c:d9:1e:57:3e:07:d0:16:a4: 0e:fd:b7:81:a8:9d:87:3c:18:4c:6a:d6:e8:76:33: 44:6c:e5:a2:05:9e:d6:fd:87:bb:d8:b1:48:58:31: df:f7:dc:c2:d2:b5:d2:e0:fa:18:6d:33:17:00:84: 39:49:0c:8f:3d:3b:2b:c4:5c:52:22:2d:16:a9:09: 15:59:21:50:e5:8a:55:c4:43:f7:e4:6e:aa:04:ca: f6:f8:ed:a2:0c:55:33:19:03:57:36:e7:3c:09:b5: 46:2c:4e:3a:f6:03:06:5c:03:da:60:ed:6f:1e:d0: 43:af:40:44:ab:55:69:23:da:f9:fd:11:fb:f8:b6: cf:87:5f:77:8a:00:e8:f1:b5:55:38:d4:fc:28:52: 22:93:29:8c:ad:63:d5:78:8d:c3:2d:fd:9c:16:6a: 4b:b7:28:2e:52:ea:61:43:c5:d4:f5:6a:d3:d2:6d: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:AD:0B:F7:CE:00:B2:30:F2:18:0E:AA:F6:D4:F1:BE:7A:6B:1F X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9f:86:3b:e7:0a:44:b3:31:91:20:2a:b2:3d:7d:a0:e2:21: 1e:1f:7d:2a:60:8f:51:25:2b:a2:d7:e2:bd:cc:c3:d2:1c:e4: 3c:fe:32:6b:bf:c4:6b:12:fa:8e:6f:eb:3b:83:dd:d0:33:49: b5:0e:ea:95:56:79:19:dc:2d:43:7f:9b:60:db:fa:7a:b4:c2: 57:85:5f:c3:74:9b:e4:ce:45:d4:ba:ff:85:26:4e:01:e1:5b: ee:3f:f7:c5:c8:79:3f:2f:a4:e9:2f:c0:d2:c4:61:89:d6:fe: 71:e3:c1:e1:6b:52:d8:e5:94:41:eb:8d:72:35:1e:9a:f4:27: ca:43:b2:5c:2e:53:d2:c5:74:9a:23:15:b7:bc:85:7b:87:a5: c1:b8:d8:9d:29:6f:71:9b:ab:29:f3:58:83:ae:f1:0d:bc:be: 83:95:bb:5b:39:20:34:5c:9e:88:85:d2:13:c0:8f:5e:56:54: 72:bf:00:66:79:8d:30:f2:21:7f:1b:75:cd:65:ea:ba:aa:68: e4:bb:ba:86:bf:79:dd:0d:2f:1c:73:b4:53:5e:af:0a:2b:9c: 66:35:de:40:c7:17:50:0c:aa:e1:f7:bc:0f:0b:47:94:fe:bf: b3:f7:e5:2e:4d:26:47:94:67:83:42:6a:f4:65:de:e2:1b:ff: 7d:0d:f4:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUULM3nvlLb+vXX11a6JU5pIF71iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQx RDU0RTdEODAeFw0yNjA3MjQwMDI0NTZaFw0yNjA3MjUwMTQyNTZaMDMxMTAvBgNV BAMTKDUxNzBBRDBCRjdDRTAwQjIzMEYyMTgwRUFBRjZENEYxQkU3QTZCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qWaR5ItG5giTxjZRE4ML5Vum THvyNs3JDKTVxiCQYcQmtQpNQtoUbWIz7BcmRsBzcXiwsxXE7upzx92bSqaEvp/U phqJeJUHeALWGS7sy3zZHlc+B9AWpA79t4GonYc8GExq1uh2M0Rs5aIFntb9h7vY sUhYMd/33MLStdLg+hhtMxcAhDlJDI89OyvEXFIiLRapCRVZIVDlilXEQ/fkbqoE yvb47aIMVTMZA1c25zwJtUYsTjr2AwZcA9pg7W8e0EOvQESrVWkj2vn9Efv4ts+H X3eKAOjxtVU41PwoUiKTKYytY9V4jcMt/ZwWaku3KC5S6mFDxdT1atPSbUS9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUXCtC/fOALIw8hgOqvbU8b56ax8wHwYDVR0j BBgwFoAUGGaTOzQn2b7+V+PyCnBJvR1U59gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx OTE1MjY4NDU5MTQ4MDg2My8wLzE4NjY5MzNCMzQyN0Q5QkVGRTU3RTNGMjBBNzA0 OUJEMUQ1NEU3RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8xODY2OTMzQjM0MjdE OUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp+GO+cKRLMx kSAqsj19oOIhHh99KmCPUSUrotfivczD0hzkPP4ya7/EaxL6jm/rO4Pd0DNJtQ7q lVZ5GdwtQ3+bYNv6erTCV4Vfw3Sb5M5F1Lr/hSZOAeFb7j/3xch5Py+k6S/A0sRh idb+cePB4WtS2OWUQeuNcjUemvQnykOyXC5T0sV0miMVt7yFe4elwbjYnSlvcZur KfNYg67xDby+g5W7WzkgNFyeiIXSE8CPXlZUcr8AZnmNMPIhfxt1zWXquqpo5Lu6 hr953Q0vHHO0U16vCiucZjXeQMcXUAyq4fe8DwtHlP6/s/flLk0mR5Rng0Jq9GXe 4hv/fQ30vA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:30:47 2026 by rpki-client