$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft File: 6845D331C417296D3A93181DD9010591B1F70D50.mft (raw, json) Hash identifier: 0C7g01AIB96m+r1AWxpwiutlVqoIIm5qwfu9wsscHSc= Subject key identifier: A5:4D:1A:3B:B9:2C:71:4B:94:CB:8C:32:B6:39:B4:B6:6B:3D:A7:8C Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50 Certificate issuer: /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50 Certificate serial: 1D1E30727B06A9573A09342DC5BE8246D70D3725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft Manifest number: 02AA Signing time: Fri 24 Jul 2026 02:01:27 +0000 Manifest this update: Fri 24 Jul 2026 01:56:27 +0000 Manifest next update: Sat 25 Jul 2026 04:27:27 +0000 Files and hashes: 1: AS132203.roa (hash: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0=) 2: AS45090.roa (hash: HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=) 3: 6845D331C417296D3A93181DD9010591B1F70D50.crl (hash: Zcw7ZS4DsBbNX3WxKvOpkQ6i795NDicWpuJytaHXm98=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1e:30:72:7b:06:a9:57:3a:09:34:2d:c5:be:82:46:d7:0d:37:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50 Validity Not Before: Jul 24 01:56:27 2026 GMT Not After : Jul 25 04:27:27 2026 GMT Subject: CN=A54D1A3BB92C714B94CB8C32B639B4B66B3DA78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:05:16:5e:e5:70:8b:6d:f7:86:12:32:10: 12:10:f6:24:ae:c5:78:02:ee:b3:83:59:7a:8c:ee: f4:47:b6:ed:a1:7f:51:1c:6a:4f:84:a2:db:d2:61: be:9b:76:fd:00:b9:3e:55:2d:0d:62:a6:2c:52:dd: df:4d:7f:27:ee:09:b9:e7:58:f0:10:54:53:78:6e: 27:2c:00:a7:63:41:59:a3:6f:1c:8b:04:48:d8:ea: 73:7c:6b:93:6f:51:81:05:8d:e2:77:f4:45:5b:7b: 70:79:c6:9c:e8:f3:e9:44:45:36:fe:54:5b:cb:48: 07:5a:95:93:0d:17:fd:aa:37:ec:b2:f3:cd:9c:e0: 00:33:b2:3a:30:a8:d3:77:23:92:3f:1d:48:26:b2: a7:75:17:56:63:fe:49:ea:a8:e8:de:1e:f3:97:ee: 69:0c:6c:68:b8:e9:b8:61:e8:29:01:6e:d8:80:f1: 7a:c6:96:9a:5a:c9:09:41:64:92:be:1f:3f:46:94: f9:a5:6a:58:b7:2d:f0:33:09:78:9d:30:6a:95:9b: 2b:ed:5c:69:cf:cc:e9:b6:3c:46:89:ea:85:74:f5: 5d:27:90:3d:7a:28:68:a3:89:be:0f:e3:84:7f:4a: 86:dd:fc:69:28:d1:f5:20:44:87:02:d5:15:4c:c3: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:1A:3B:B9:2C:71:4B:94:CB:8C:32:B6:39:B4:B6:6B:3D:A7:8C X509v3 Authority Key Identifier: keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1a:07:75:0d:35:b1:90:e5:53:0e:c7:5d:ad:4f:0b:6f:3b: c4:11:99:42:03:f2:06:18:80:15:d1:08:a1:d3:20:00:ed:0d: 15:21:ca:28:5b:6b:db:81:d2:79:9f:4c:af:ae:0b:90:d4:f1: c2:dc:c0:ed:e4:e4:91:99:80:eb:20:fd:1a:e6:12:ae:28:dc: 28:31:ea:45:f2:6b:59:b1:25:42:ef:93:53:b4:1a:25:bc:02: 4e:e8:35:3c:ca:7c:ea:dd:72:e1:90:da:8e:33:66:3c:11:5b: c5:d6:05:24:65:86:db:89:8b:44:af:5c:2c:a9:b4:f1:34:41: 6f:64:47:78:b7:9a:45:76:6c:a3:89:5a:46:24:52:9d:7c:22: 56:1b:44:13:7d:f2:99:90:d7:95:e0:67:fb:37:9b:f4:89:0d: c7:13:31:eb:e2:e0:07:1b:ad:91:0e:8c:06:37:33:b2:56:03: 13:4f:f3:04:10:3e:55:94:a8:e6:b2:7c:05:73:55:4d:38:6c: 96:f5:3f:5c:f8:03:16:b5:a5:16:20:7d:19:8f:de:7e:e3:f4: 31:fa:a1:b7:89:57:86:4e:f8:e1:cc:32:ad:ac:11:07:8c:0e: b7:99:16:5b:b1:7f:60:3c:9b:38:43:02:dd:9c:99:cd:1e:97: 12:9a:1c:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHR4wcnsGqVc6CTQtxb6CRtcNNyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyg2ODQ1RDMzMUM0 MTcyOTZEM0E5MzE4MUREOTAxMDU5MUIxRjcwRDUwMB4XDTI2MDcyNDAxNTYyN1oX DTI2MDcyNTA0MjcyN1owMzExMC8GA1UEAxMoQTU0RDFBM0JCOTJDNzE0Qjk0Q0I4 QzMyQjYzOUI0QjY2QjNEQTc4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyeBRZe5XCLbfeGEjIQEhD2JK7FeALus4NZeozu9Ee27aF/URxqT4Si29Jh vpt2/QC5PlUtDWKmLFLd301/J+4JuedY8BBUU3huJywAp2NBWaNvHIsESNjqc3xr k29RgQWN4nf0RVt7cHnGnOjz6URFNv5UW8tIB1qVkw0X/ao37LLzzZzgADOyOjCo 03cjkj8dSCayp3UXVmP+Seqo6N4e85fuaQxsaLjpuGHoKQFu2IDxesaWmlrJCUFk kr4fP0aU+aVqWLct8DMJeJ0wapWbK+1cac/M6bY8RonqhXT1XSeQPXooaKOJvg/j hH9Kht38aSjR9SBEhwLVFUzDkk8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSlTRo7 uSxxS5TLjDK2ObS2az2njDAfBgNVHSMEGDAWgBRoRdMxxBcpbTqTGB3ZAQWRsfcN UDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzIvNjg0NUQz MzFDNDE3Mjk2RDNBOTMxODFERDkwMTA1OTFCMUY3MEQ1MC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYUVYVE1jUVhL VzA2a3hnZDJRRUZrYkgzRFZBLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8yLzY4NDVEMzMxQzQxNzI5NkQzQTkzMTgxREQ5MDEwNTkxQjFGNzBE NTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBbGgd1DTWxkOVTDsddrU8LbzvEEZlCA/IGGIAV0Qih0yAA 7Q0VIcooW2vbgdJ5n0yvrguQ1PHC3MDt5OSRmYDrIP0a5hKuKNwoMepF8mtZsSVC 75NTtBolvAJO6DU8ynzq3XLhkNqOM2Y8EVvF1gUkZYbbiYtEr1wsqbTxNEFvZEd4 t5pFdmyjiVpGJFKdfCJWG0QTffKZkNeV4Gf7N5v0iQ3HEzHr4uAHG62RDowGNzOy VgMTT/MEED5VlKjmsnwFc1VNOGyW9T9c+AMWtaUWIH0Zj95+4/Qx+qG3iVeGTvjh zDKtrBEHjA63mRZbsX9gPJs4QwLdnJnNHpcSmhxm -----END CERTIFICATE-----Generated at Fri Jul 24 19:39:47 2026 by rpki-client