$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft File: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft (raw, json) Hash identifier: nGoBR5ULvvA+uLv94wm5qQ8WYnYbK5JxSXeseP2Gp+k= Subject key identifier: 77:F0:B1:86:EA:AD:26:36:31:82:82:74:FC:82:04:EB:1E:67:58:B7 Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 Certificate issuer: /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Certificate serial: 3B61265DFF589E50311FFAA15C5B28FED561D0A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft Manifest number: 29 Signing time: Fri 24 Jul 2026 16:26:37 +0000 Manifest this update: Fri 24 Jul 2026 16:21:37 +0000 Manifest next update: Sat 25 Jul 2026 19:28:37 +0000 Files and hashes: 1: 3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (hash: QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=) 2: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl (hash: LBm42d8OPjeRAPpAEoxtoXZ2hw6SSbHPWg6t0Dju18w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:61:26:5d:ff:58:9e:50:31:1f:fa:a1:5c:5b:28:fe:d5:61:d0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Validity Not Before: Jul 24 16:21:37 2026 GMT Not After : Jul 25 19:28:37 2026 GMT Subject: CN=77F0B186EAAD263631828274FC8204EB1E6758B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:7e:47:a2:fd:bc:b4:ea:3d:91:fa:4a:58: 2d:7c:84:b9:0e:d1:d9:c3:ae:ae:08:a6:36:12:07: ef:25:82:d1:1d:f8:53:5c:52:b7:c3:84:20:d4:02: 47:a8:bc:d2:30:fa:d3:71:c6:74:9f:e5:87:f2:7d: b0:81:ea:79:78:be:7b:7e:1f:ff:db:76:46:d3:5a: f1:8c:6d:31:f2:9d:53:45:e5:f7:ab:67:09:72:b3: 65:5c:37:9d:00:51:72:de:7a:53:69:ee:a6:f1:32: 00:b2:a7:90:64:00:e8:d9:64:22:74:b3:f9:f9:2d: 6b:2f:52:95:29:e6:f9:45:da:8d:67:21:8c:a9:cf: bd:9f:4f:28:3d:30:49:69:bf:3f:90:8c:e8:0b:9d: f0:39:13:0b:ca:c6:36:3a:c2:b9:d2:ca:70:78:cf: 21:e6:dc:b0:31:c9:15:fe:c2:1f:5b:47:c0:41:31: 21:d2:9e:32:09:65:74:63:c6:cf:dd:6a:58:0d:ec: 33:fd:38:3e:71:e4:36:51:4e:8e:63:64:45:a9:11: bc:83:7d:06:1a:5b:20:64:26:ed:df:e7:e9:f4:67: d2:4a:a4:bd:46:df:47:45:64:1a:12:38:4d:45:56: 9f:13:e0:ff:3c:5b:70:25:d8:ab:61:60:13:f6:1b: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:B1:86:EA:AD:26:36:31:82:82:74:FC:82:04:EB:1E:67:58:B7 X509v3 Authority Key Identifier: keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:54:d7:1b:03:94:74:12:85:3f:9b:28:a4:3b:16:53:66:34: e6:1c:4d:5f:3a:62:77:96:84:4d:c1:2e:cb:ba:ca:84:80:58: 1f:4c:f4:09:99:e6:5f:98:5a:10:f9:53:e7:db:4b:94:fc:47: c6:13:c4:e1:f5:05:be:8f:cb:f4:3e:1b:11:d0:76:ec:21:2c: 90:98:59:e1:d5:5b:d0:51:40:be:0e:97:fe:6c:3e:83:68:1e: 76:3e:3d:9e:a2:44:e1:22:59:13:46:d5:34:8f:50:a6:2a:fb: d7:e0:df:7e:0d:5a:ac:d3:b3:82:c7:df:ba:2d:c0:a9:71:6b: 57:84:d8:b3:ab:65:e9:16:92:9b:b9:1c:cb:9b:cd:c8:25:fd: 36:46:08:ce:fb:77:27:03:b0:42:93:e0:2b:81:3d:61:ee:65: 89:ab:de:eb:5a:57:0e:65:7b:fc:42:3b:97:d6:fc:75:32:69: f5:de:27:43:e6:e7:01:9a:f1:61:27:af:22:3b:c8:22:d2:e9: c0:6a:a4:8b:e6:34:75:ac:aa:85:02:05:22:b4:3c:dc:cc:21: d8:ca:cd:ed:c3:77:9f:d0:06:e2:57:5d:f7:9d:31:ad:e9:5d: e6:96:32:ea:49:01:8f:c8:ca:5b:8b:f2:1c:63:e6:5a:ba:b0: 8b:5e:63:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO2EmXf9YnlAxH/qhXFso/tVh0KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0 RTNDQUJDNjAeFw0yNjA3MjQxNjIxMzdaFw0yNjA3MjUxOTI4MzdaMDMxMTAvBgNV BAMTKDc3RjBCMTg2RUFBRDI2MzYzMTgyODI3NEZDODIwNEVCMUU2NzU4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTU35Hov28tOo9kfpKWC18hLkO 0dnDrq4IpjYSB+8lgtEd+FNcUrfDhCDUAkeovNIw+tNxxnSf5YfyfbCB6nl4vnt+ H//bdkbTWvGMbTHynVNF5ferZwlys2VcN50AUXLeelNp7qbxMgCyp5BkAOjZZCJ0 s/n5LWsvUpUp5vlF2o1nIYypz72fTyg9MElpvz+QjOgLnfA5EwvKxjY6wrnSynB4 zyHm3LAxyRX+wh9bR8BBMSHSnjIJZXRjxs/dalgN7DP9OD5x5DZRTo5jZEWpEbyD fQYaWyBkJu3f5+n0Z9JKpL1G30dFZBoSOE1FVp8T4P88W3Al2KthYBP2G285AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd/CxhuqtJjYxgoJ0/IIE6x5nWLcwHwYDVR0j BBgwFoAU1HL6zheNjV6xzZ7JaxY1SU48q8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjUwMjMwOTAyMDk1ODc1Ny8wL0Q0NzJGQUNFMTc4RDhENUVCMUNEOUVDOTZCMTYz NTQ5NEUzQ0FCQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0RTNDQUJDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI1MDIzMDkwMjA5NTg3NTcvMC9ENDcyRkFDRTE3OEQ4 RDVFQjFDRDlFQzk2QjE2MzU0OTRFM0NBQkM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblTXGwOUdBKF P5sopDsWU2Y05hxNXzpid5aETcEuy7rKhIBYH0z0CZnmX5haEPlT59tLlPxHxhPE 4fUFvo/L9D4bEdB27CEskJhZ4dVb0FFAvg6X/mw+g2gedj49nqJE4SJZE0bVNI9Q pir71+Dffg1arNOzgsffui3AqXFrV4TYs6tl6RaSm7kcy5vNyCX9NkYIzvt3JwOw QpPgK4E9Ye5liave61pXDmV7/EI7l9b8dTJp9d4nQ+bnAZrxYSevIjvIItLpwGqk i+Y0dayqhQIFIrQ83Mwh2MrN7cN3n9AG4ldd950xreld5pYy6kkBj8jKW4vyHGPm Wrqwi15jjQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:25:09 2026 by rpki-client