$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft File: 209BC812EEDDC6074713463D5583CB221EADC76F.mft (raw, json) Hash identifier: KYMRCfW460azGjE+PLzmvLrDJ92d1FZXHNSPnhpcmzM= Subject key identifier: 4E:41:5C:CE:91:73:60:39:76:A1:92:CE:3C:D8:CE:7A:19:3B:94:F9 Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F Certificate serial: 148D865CCADB66552D9314FF4995D9776631C905 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft Manifest number: 25 Signing time: Thu 23 Jul 2026 18:54:21 +0000 Manifest this update: Thu 23 Jul 2026 18:49:21 +0000 Manifest next update: Fri 24 Jul 2026 22:42:21 +0000 Files and hashes: 1: 209BC812EEDDC6074713463D5583CB221EADC76F.crl (hash: IYsRlYGDVem4vxMSKeQ8sMWa1P9GAEAFFe4GT8CzbFM=) 2: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (hash: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8d:86:5c:ca:db:66:55:2d:93:14:ff:49:95:d9:77:66:31:c9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F Validity Not Before: Jul 23 18:49:21 2026 GMT Not After : Jul 24 22:42:21 2026 GMT Subject: CN=4E415CCE9173603976A192CE3CD8CE7A193B94F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c4:72:2d:b0:00:91:32:ae:e9:23:d7:59:3f: a0:6b:13:c1:a0:f4:39:13:ab:fa:83:d4:8a:54:03: ac:ae:c8:b4:68:de:ec:46:c0:25:33:a9:78:1d:aa: c1:04:2a:7d:24:62:fb:7e:51:30:af:53:56:55:21: e7:af:c0:f5:10:5f:f3:50:13:23:e1:bf:0b:f3:1a: e8:77:0f:9b:0c:f6:df:ca:9c:26:ff:9c:6d:16:8c: cf:03:6b:14:f8:73:03:56:2e:b1:e4:ff:c5:c2:3b: c4:fe:ed:69:fa:38:b8:f3:eb:1c:5a:82:7c:6a:0e: 39:2b:62:2e:46:94:61:b2:e6:9c:74:da:bf:cd:18: 55:b7:31:5a:7b:fd:c8:40:65:c0:d5:59:d5:26:1b: b9:05:08:af:d3:07:4a:47:0a:b3:a2:68:dd:78:7a: 4e:fd:58:01:98:74:32:33:7a:82:7d:e3:86:f8:44: 45:6b:b6:1b:3c:16:c5:dc:71:00:55:ef:f6:91:86: b0:9d:37:11:fc:c5:2a:b1:5e:bb:de:2b:cb:06:01: 20:30:f8:4f:8c:7c:d4:93:1a:31:1e:f6:cb:13:e8: 74:3d:8f:6a:ac:fb:68:98:56:26:5b:02:a9:fc:0b: 45:68:7f:10:9d:ae:8f:5b:c1:e4:3d:89:f8:13:e9: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:41:5C:CE:91:73:60:39:76:A1:92:CE:3C:D8:CE:7A:19:3B:94:F9 X509v3 Authority Key Identifier: keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:af:02:43:d9:0f:fc:c7:7d:ed:c4:64:56:d4:44:da:44: 40:3b:f2:65:77:88:63:cf:08:f8:07:70:26:bb:87:06:f2:d8: 58:2f:3f:68:cc:1c:9f:cc:ad:82:f0:08:93:79:94:6a:c8:78: 34:56:c8:7f:ee:ec:46:5e:9d:23:ea:2d:62:3b:99:fc:c2:07: 18:d7:fe:65:b0:6d:80:66:b0:22:21:37:38:e2:6e:c3:74:c7: ee:7e:bc:4e:45:8c:14:64:e1:b5:29:0f:37:06:cc:3e:09:28: 64:ea:9c:89:71:ed:70:d1:a7:c4:25:d3:78:c5:b7:78:dd:0c: 21:a7:5c:39:3d:98:25:42:75:ff:3f:81:3e:54:1a:56:56:e2: 95:7b:0f:b8:77:88:34:73:c9:ad:d7:d1:61:24:54:d7:2a:d6: 46:b2:7b:3e:f0:b8:e7:05:c8:d6:ed:e5:e5:a6:48:8a:dd:d5: 80:53:9a:1c:32:37:1a:2e:19:10:c9:13:67:ec:f5:b7:c7:5a: f1:93:06:0f:98:0c:5f:08:dc:c6:b6:27:c1:16:33:3b:f9:e4: d9:18:0f:9e:9d:5e:fc:b1:bd:58:f8:26:bc:7c:dc:5c:e7:56: 07:84:30:13:c9:50:b9:c3:89:08:13:da:fd:2c:ab:0e:7d:54: 97:7f:84:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFI2GXMrbZlUtkxT/SZXZd2YxyQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIx RUFEQzc2RjAeFw0yNjA3MjMxODQ5MjFaFw0yNjA3MjQyMjQyMjFaMDMxMTAvBgNV BAMTKDRFNDE1Q0NFOTE3MzYwMzk3NkExOTJDRTNDRDhDRTdBMTkzQjk0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmxHItsACRMq7pI9dZP6BrE8Gg 9DkTq/qD1IpUA6yuyLRo3uxGwCUzqXgdqsEEKn0kYvt+UTCvU1ZVIeevwPUQX/NQ EyPhvwvzGuh3D5sM9t/KnCb/nG0WjM8DaxT4cwNWLrHk/8XCO8T+7Wn6OLjz6xxa gnxqDjkrYi5GlGGy5px02r/NGFW3MVp7/chAZcDVWdUmG7kFCK/TB0pHCrOiaN14 ek79WAGYdDIzeoJ944b4REVrths8FsXccQBV7/aRhrCdNxH8xSqxXrveK8sGASAw +E+MfNSTGjEe9ssT6HQ9j2qs+2iYViZbAqn8C0VofxCdro9bweQ9ifgT6WknAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTkFczpFzYDl2oZLOPNjOehk7lPkwHwYDVR0j BBgwFoAUIJvIEu7dxgdHE0Y9VYPLIh6tx28wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzI4MTMyNTg0MzgwODI5NS8wLzIwOUJDODEyRUVEREM2MDc0NzEzNDYzRDU1ODND QjIyMUVBREM3NkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjMyODEzMjU4NDM4MDgyOTUvMC8yMDlCQzgxMkVFRERD NjA3NDcxMzQ2M0Q1NTgzQ0IyMjFFQURDNzZGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLOvAkPZD/zH fe3EZFbURNpEQDvyZXeIY88I+AdwJruHBvLYWC8/aMwcn8ytgvAIk3mUash4NFbI f+7sRl6dI+otYjuZ/MIHGNf+ZbBtgGawIiE3OOJuw3TH7n68TkWMFGThtSkPNwbM PgkoZOqciXHtcNGnxCXTeMW3eN0MIadcOT2YJUJ1/z+BPlQaVlbilXsPuHeINHPJ rdfRYSRU1yrWRrJ7PvC45wXI1u3l5aZIit3VgFOaHDI3Gi4ZEMkTZ+z1t8da8ZMG D5gMXwjcxrYnwRYzO/nk2RgPnp1e/LG9WPgmvHzcXOdWB4QwE8lQucOJCBPa/Syr Dn1Ul3+EYw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:43:07 2026 by rpki-client