$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json) Hash identifier: dspjDTU7rfYEHH3XAFD+RoEP0yGQH+k59k2qyX0zTaM= Subject key identifier: 89:C5:76:BC:AC:2D:31:DF:65:C6:30:CD:3B:4D:E7:E8:3A:48:78:06 Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Certificate serial: 54C0FA8D3866CF7EF8452E3487ACEA73CDE08632 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft Manifest number: 23 Signing time: Fri 24 Jul 2026 00:59:59 +0000 Manifest this update: Fri 24 Jul 2026 00:54:59 +0000 Manifest next update: Sat 25 Jul 2026 02:30:59 +0000 Files and hashes: 1: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=) 2: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: sH7jsUMDX1lgsebnlyi4vgUOK3QNsI8VGA+j2qBhzfc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c0:fa:8d:38:66:cf:7e:f8:45:2e:34:87:ac:ea:73:cd:e0:86:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Validity Not Before: Jul 24 00:54:59 2026 GMT Not After : Jul 25 02:30:59 2026 GMT Subject: CN=89C576BCAC2D31DF65C630CD3B4DE7E83A487806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:c5:ac:67:68:39:e7:73:33:af:75:ce:d2: 21:02:ef:1e:8e:0c:cd:49:c6:e9:dd:17:e1:e6:56: 11:8a:4d:a9:15:22:f8:da:0f:75:cc:8c:90:87:3b: 09:63:42:33:36:cb:81:cb:fa:51:64:ed:b7:28:79: 2e:dc:3b:69:7e:b2:cd:ec:e4:bb:b2:54:1c:6a:b1: 18:72:96:e7:d6:60:d1:fc:36:f7:96:08:36:6b:8c: 0f:c9:2e:76:ee:09:e1:53:91:aa:67:6c:af:75:27: 78:c7:35:a0:47:6e:7b:a3:2e:82:66:e4:83:60:d7: 72:e9:4e:45:6b:17:f6:72:62:aa:d5:17:95:2f:fe: 69:f7:74:17:9c:65:a6:7e:16:52:23:2c:30:d4:4f: 03:e2:83:b7:78:8a:13:21:3c:29:63:ae:61:f6:cc: ac:b3:c5:69:46:fb:ea:7e:98:54:9b:6a:91:6d:7b: 4b:31:64:e7:3d:4e:6d:ca:53:1f:af:9d:6a:a1:00: f5:d8:45:a1:7d:09:b6:7c:03:80:3a:2f:c4:b5:08: c6:89:1d:09:b0:ae:be:e6:7a:e3:15:da:d8:56:9e: 9c:34:d9:9c:98:bf:b7:b9:33:49:c3:db:fe:cc:d9: d6:19:30:58:09:ea:2c:8f:fc:dc:dd:6c:d7:cd:eb: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C5:76:BC:AC:2D:31:DF:65:C6:30:CD:3B:4D:E7:E8:3A:48:78:06 X509v3 Authority Key Identifier: keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2f:cf:a0:f8:2d:0f:0d:b1:56:b8:e4:47:5b:ff:79:c3:77: 75:a7:73:47:c0:3b:5a:50:b1:b7:f2:ef:d5:1d:d0:9d:ac:1b: 62:3b:95:69:99:f4:b6:c7:ec:08:0e:33:eb:11:04:b6:4b:7d: 6c:87:ec:7a:39:f9:2e:74:c8:c6:42:64:d8:bd:a3:7f:37:ce: cc:2f:53:dc:7b:94:f3:0c:2f:9a:dd:fd:c6:71:b9:ff:47:b6: 29:a7:4f:32:1c:6f:36:a6:94:af:3b:bc:ea:10:96:2e:bf:2e: f9:82:b7:88:9a:9d:b8:f4:8d:9a:37:1e:72:78:46:a3:11:86: 59:03:22:02:6b:54:a9:99:cb:4d:4f:3b:29:43:1e:4a:03:1a: c7:42:c8:a1:de:66:37:d1:7d:35:dc:7e:5e:03:0c:1f:e9:19: 48:fc:67:79:f5:e7:82:99:68:65:2d:66:39:57:e3:e3:57:4c: ee:01:44:ea:06:ae:f5:ab:04:9d:d6:f2:dc:4b:c6:09:fc:a8: 54:57:92:84:54:46:2a:79:1f:06:1e:90:b4:31:e4:e9:7e:b6: a8:13:ac:b1:ce:f8:79:d5:d9:21:c1:60:b5:7c:fc:fd:6b:85: 4a:37:d6:9d:ba:ae:32:1a:88:dd:69:dd:c3:8c:b0:13:db:2e: 93:05:c8:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVMD6jThmz374RS40h6zqc83ghjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENF NDY2QTYyMDAeFw0yNjA3MjQwMDU0NTlaFw0yNjA3MjUwMjMwNTlaMDMxMTAvBgNV BAMTKDg5QzU3NkJDQUMyRDMxREY2NUM2MzBDRDNCNERFN0U4M0E0ODc4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWL8WsZ2g553Mzr3XO0iEC7x6O DM1JxundF+HmVhGKTakVIvjaD3XMjJCHOwljQjM2y4HL+lFk7bcoeS7cO2l+ss3s 5LuyVBxqsRhylufWYNH8NveWCDZrjA/JLnbuCeFTkapnbK91J3jHNaBHbnujLoJm 5INg13LpTkVrF/ZyYqrVF5Uv/mn3dBecZaZ+FlIjLDDUTwPig7d4ihMhPCljrmH2 zKyzxWlG++p+mFSbapFte0sxZOc9Tm3KUx+vnWqhAPXYRaF9CbZ8A4A6L8S1CMaJ HQmwrr7meuMV2thWnpw02ZyYv7e5M0nD2/7M2dYZMFgJ6iyP/NzdbNfN6yrFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUicV2vKwtMd9lxjDNO03n6DpIeAYwHwYDVR0j BBgwFoAUEr2A+2Zun/O3jFJXy4BgTORmpiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkxMTM2NTk4ODI1MzczMy8wLzEyQkQ4MEZCNjY2RTlGRjNCNzhDNTI1N0NCODA2 MDRDRTQ2NkE2MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENFNDY2QTYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MTEzNjU5ODgyNTM3MzMvMC8xMkJEODBGQjY2NkU5 RkYzQjc4QzUyNTdDQjgwNjA0Q0U0NjZBNjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy/PoPgtDw2x VrjkR1v/ecN3dadzR8A7WlCxt/Lv1R3QnawbYjuVaZn0tsfsCA4z6xEEtkt9bIfs ejn5LnTIxkJk2L2jfzfOzC9T3HuU8wwvmt39xnG5/0e2KadPMhxvNqaUrzu86hCW Lr8u+YK3iJqduPSNmjcecnhGoxGGWQMiAmtUqZnLTU87KUMeSgMax0LIod5mN9F9 Ndx+XgMMH+kZSPxnefXngploZS1mOVfj41dM7gFE6gau9asEndby3EvGCfyoVFeS hFRGKnkfBh6QtDHk6X62qBOssc74edXZIcFgtXz8/WuFSjfWnbquMhqI3Wndw4yw E9sukwXI5g== -----END CERTIFICATE-----Generated at Fri Jul 24 18:36:05 2026 by rpki-client