$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft File: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json) Hash identifier: Y98p5YFGi2sCy8or2OKa5tizk749SFu7SrQDIrbbHPw= Subject key identifier: 1E:68:C5:AE:DF:3D:3C:F8:86:9E:73:A2:1E:A3:17:82:22:50:C7:DF Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Certificate serial: 7E95DF9E75DC38A69156B313CC1EAADD74E37D80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft Manifest number: 2A Signing time: Thu 23 Jul 2026 09:58:21 +0000 Manifest this update: Thu 23 Jul 2026 09:53:21 +0000 Manifest next update: Fri 24 Jul 2026 11:24:21 +0000 Files and hashes: 1: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=) 2: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=) 3: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=) 4: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: ShMl0OssTsC/dXBcv1wi//n1D39PF9mdlsGl3RBvfAo=) 5: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=) 6: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=) 7: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=) 8: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=) 9: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=) 10: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=) 11: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:95:df:9e:75:dc:38:a6:91:56:b3:13:cc:1e:aa:dd:74:e3:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Validity Not Before: Jul 23 09:53:21 2026 GMT Not After : Jul 24 11:24:21 2026 GMT Subject: CN=1E68C5AEDF3D3CF8869E73A21EA317822250C7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:db:f4:85:f3:0e:5c:b3:86:85:33:09:33: 63:bc:6d:33:16:08:5e:b0:32:dc:b7:99:8c:db:34: 77:12:81:c1:9a:bb:17:0e:9d:a2:b7:b0:ac:1a:49: db:f1:5d:9a:9d:f0:f2:cc:47:b9:26:d3:18:83:3a: 13:e7:0c:49:19:d3:7e:33:53:b6:3b:17:2c:b0:9c: ed:3f:89:4f:a2:fa:a3:da:49:64:6a:d6:51:6e:94: 91:67:db:0f:77:a3:01:63:68:fa:02:94:c3:47:88: 8e:2f:f9:79:6b:16:73:ba:48:9a:f2:ae:14:4d:7f: bb:e6:03:2d:02:56:40:03:be:91:26:f8:e3:af:18: fb:f8:45:dc:4d:cf:a8:a8:2a:12:d0:a2:c9:16:f5: fa:b8:78:38:65:60:7e:e4:a8:53:6a:01:10:2a:3f: ef:e6:f3:d4:23:d9:fc:d4:d9:b1:e9:45:c7:23:31: 0a:d4:7b:2b:cc:04:b8:af:b6:41:82:3a:d7:99:43: c0:7d:8a:ae:e3:13:80:ab:02:80:e8:34:af:87:1e: 31:aa:a2:f6:bd:aa:67:11:14:47:a3:97:3c:c0:94: 4a:8f:8c:14:54:01:18:c8:91:47:16:b3:96:1c:84: 94:42:6b:62:12:cd:75:b9:90:6b:8c:14:bb:ff:0e: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:68:C5:AE:DF:3D:3C:F8:86:9E:73:A2:1E:A3:17:82:22:50:C7:DF X509v3 Authority Key Identifier: keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:67:4d:1b:c9:36:9e:6c:f0:5c:ee:53:4c:10:75:92:e0:c8: db:c3:b9:3d:fc:50:28:3a:45:a5:77:dc:6a:91:2a:f1:dc:ca: 17:64:09:87:32:23:41:fd:7c:b0:43:79:01:d0:7a:e9:0f:90: 7a:6a:d1:b3:67:ba:a5:f3:e7:45:b3:0c:95:ff:e9:bb:3b:91: 66:04:bd:e9:6d:de:9c:1e:a9:36:a5:47:3c:19:ee:77:2f:99: b4:35:a2:a7:83:20:f8:0d:9c:47:a1:d0:57:bf:0b:a0:7b:57: 22:00:0a:e7:96:d9:77:f3:85:17:f1:b1:1f:8b:e5:75:33:fd: ad:d1:5c:b1:fb:47:ce:8c:9f:77:21:d4:33:dd:9a:3b:11:92: 32:8f:b7:04:4b:e6:30:d4:d3:65:0c:f9:bc:7d:08:63:20:9c: 83:e4:72:f5:c9:34:84:90:1b:8b:c4:f6:7d:9a:a2:15:2f:0d: 58:8b:2c:c0:6a:3a:4b:9d:e7:f7:e0:91:73:11:00:0c:6d:5f: 36:2b:0a:43:61:d8:79:6f:a3:e8:33:b1:64:43:88:e0:77:98: 23:d8:de:7b:44:45:26:a4:16:4d:75:8b:b5:06:90:80:91:ba: b8:56:39:56:e0:10:15:39:71:6d:3b:06:7b:ca:7e:39:ab:b7: 74:ae:2a:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfpXfnnXcOKaRVrMTzB6q3XTjfYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1 NTJCNkEwNDAeFw0yNjA3MjMwOTUzMjFaFw0yNjA3MjQxMTI0MjFaMDMxMTAvBgNV BAMTKDFFNjhDNUFFREYzRDNDRjg4NjlFNzNBMjFFQTMxNzgyMjI1MEM3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEdv0hfMOXLOGhTMJM2O8bTMW CF6wMty3mYzbNHcSgcGauxcOnaK3sKwaSdvxXZqd8PLMR7km0xiDOhPnDEkZ034z U7Y7FyywnO0/iU+i+qPaSWRq1lFulJFn2w93owFjaPoClMNHiI4v+XlrFnO6SJry rhRNf7vmAy0CVkADvpEm+OOvGPv4RdxNz6ioKhLQoskW9fq4eDhlYH7kqFNqARAq P+/m89Qj2fzU2bHpRccjMQrUeyvMBLivtkGCOteZQ8B9iq7jE4CrAoDoNK+HHjGq ova9qmcRFEejlzzAlEqPjBRUARjIkUcWs5YchJRCa2ISzXW5kGuMFLv/Dh8ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHmjFrt89PPiGnnOiHqMXgiJQx98wHwYDVR0j BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTMyNTc2MDkyNDg4MDMvMC9GMzU0RjkxNUZENkEw QzIwQzlFNjI1QzI4RDM2QzRCQzU1MkI2QTA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGdNG8k2nmzw XO5TTBB1kuDI28O5PfxQKDpFpXfcapEq8dzKF2QJhzIjQf18sEN5AdB66Q+QemrR s2e6pfPnRbMMlf/puzuRZgS96W3enB6pNqVHPBnudy+ZtDWip4Mg+A2cR6HQV78L oHtXIgAK55bZd/OFF/GxH4vldTP9rdFcsftHzoyfdyHUM92aOxGSMo+3BEvmMNTT ZQz5vH0IYyCcg+Ry9ck0hJAbi8T2fZqiFS8NWIsswGo6S53n9+CRcxEADG1fNisK Q2HYeW+j6DOxZEOI4HeYI9jee0RFJqQWTXWLtQaQgJG6uFY5VuAQFTlxbTsGe8p+ Oau3dK4q5A== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:48 2026 by rpki-client