$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: 1PY/cw13dM8xOz4ItO1KNrldsSRoPen39RWEbD4RrsM= Subject key identifier: E2:67:33:36:D4:BB:C0:E4:38:3D:BD:CE:C6:46:F2:A6:38:D5:FF:F4 Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 3BE642F35B8E3CC8FF5351EF16E3BAB5A19F8FCB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 25 Signing time: Thu 23 Jul 2026 19:24:23 +0000 Manifest this update: Thu 23 Jul 2026 19:19:23 +0000 Manifest next update: Fri 24 Jul 2026 19:39:23 +0000 Files and hashes: 1: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: 0ByVkdqbJWN7Cm56engFqJJaOp1vmYudS8VN75VayME=) 2: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e6:42:f3:5b:8e:3c:c8:ff:53:51:ef:16:e3:ba:b5:a1:9f:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Jul 23 19:19:23 2026 GMT Not After : Jul 24 19:39:23 2026 GMT Subject: CN=E2673336D4BBC0E4383DBDCEC646F2A638D5FFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:46:b9:80:cd:aa:86:e4:9c:45:e2:e5:39: c6:bd:1a:37:0e:53:ec:b5:e3:ca:5e:3f:56:a2:bf: 99:fe:70:83:0a:2a:9f:d4:bb:34:74:28:0b:aa:49: 08:6c:c8:b6:e3:06:2a:15:d6:95:56:79:b8:f6:46: 68:af:33:62:a2:80:39:b5:7a:7e:77:d2:21:af:69: 4d:fd:53:c3:5a:c0:5c:f4:2d:f6:1e:36:62:10:53: af:a1:5e:c4:bd:95:da:e9:a7:7c:11:bb:84:03:26: b6:ad:bc:f4:ee:d6:3d:e8:a6:43:19:3c:69:eb:aa: 59:57:2f:ed:3d:36:f8:ad:e1:6a:30:4e:85:74:be: 38:26:b6:81:c2:a4:6f:9b:91:2f:aa:6d:ed:9d:f0: ed:ea:5b:64:cc:9e:dc:19:16:47:dc:ac:65:ed:a4: 8a:a0:e9:d8:f0:e8:05:71:c8:94:2d:5f:4b:1e:2a: 54:ed:3d:0b:ed:93:db:c0:61:5b:f5:6c:c8:76:e3: 52:20:82:d8:bd:85:94:84:b8:e4:57:d4:8c:41:21: fc:eb:d7:f2:17:a1:13:c9:fe:ee:08:60:24:50:0f: c6:9d:fc:80:fc:97:4a:51:bc:69:e8:96:f7:75:df: be:92:57:1c:08:6e:52:20:77:56:ea:dc:8d:6a:d9: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:33:36:D4:BB:C0:E4:38:3D:BD:CE:C6:46:F2:A6:38:D5:FF:F4 X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9c:55:b8:a7:5d:37:16:42:27:a4:21:66:8a:4e:e0:e4:6e: 1f:81:28:ca:b9:dd:5a:d7:fa:0d:bf:2d:44:6f:3b:51:b0:20: aa:5b:88:5b:25:e3:84:47:8e:3b:a7:5f:77:b4:46:ac:5c:49: ad:c1:ad:89:a0:d7:6c:f3:06:cf:26:a5:ee:95:3b:b8:06:b2: 9f:61:13:01:72:67:a6:40:e0:98:91:e3:14:f9:a3:4d:d1:61: 7a:06:80:0f:95:1b:e1:94:49:e6:29:c7:f0:ec:47:03:70:6d: ed:55:a4:54:35:1d:14:ba:0a:c1:40:f8:5e:2b:9a:dd:63:cc: cd:30:bc:49:4a:3b:af:47:80:16:bc:e9:db:3e:88:a4:03:93: 86:26:a3:82:1b:83:0f:4f:77:0b:37:30:ef:37:51:2f:b2:b0: cc:6f:e6:0c:f8:a1:b5:8f:05:f5:ef:a4:3c:f7:0f:72:4c:06: a9:5a:26:1f:b5:a5:61:00:f2:e2:45:b6:6c:a8:e6:ab:47:1d: 2c:62:91:cd:fb:64:a0:b8:25:e7:c4:f1:9c:29:56:4e:63:fe: 2f:f2:10:87:1e:87:69:4f:39:49:08:d9:ed:b6:26:19:ef:60: 8d:9c:b7:a1:b6:88:f5:6f:7f:a8:d5:af:d0:66:67:c4:41:2a: d4:6c:29:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO+ZC81uOPMj/U1HvFuO6taGfj8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjA3MjMxOTE5MjNaFw0yNjA3MjQxOTM5MjNaMDMxMTAvBgNV BAMTKEUyNjczMzM2RDRCQkMwRTQzODNEQkRDRUM2NDZGMkE2MzhENUZGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe0a5gM2qhuScReLlOca9GjcO U+y148peP1aiv5n+cIMKKp/UuzR0KAuqSQhsyLbjBioV1pVWebj2RmivM2KigDm1 en530iGvaU39U8NawFz0LfYeNmIQU6+hXsS9ldrpp3wRu4QDJratvPTu1j3opkMZ PGnrqllXL+09Nvit4WowToV0vjgmtoHCpG+bkS+qbe2d8O3qW2TMntwZFkfcrGXt pIqg6djw6AVxyJQtX0seKlTtPQvtk9vAYVv1bMh241Iggti9hZSEuORX1IxBIfzr 1/IXoRPJ/u4IYCRQD8ad/ID8l0pRvGnolvd1376SVxwIblIgd1bq3I1q2RlNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4mczNtS7wOQ4Pb3OxkbypjjV//QwHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpxVuKddNxZC J6QhZopO4ORuH4EoyrndWtf6Db8tRG87UbAgqluIWyXjhEeOO6dfd7RGrFxJrcGt iaDXbPMGzyal7pU7uAayn2ETAXJnpkDgmJHjFPmjTdFhegaAD5Ub4ZRJ5inH8OxH A3Bt7VWkVDUdFLoKwUD4Xiua3WPMzTC8SUo7r0eAFrzp2z6IpAOThiajghuDD093 Czcw7zdRL7KwzG/mDPihtY8F9e+kPPcPckwGqVomH7WlYQDy4kW2bKjmq0cdLGKR zftkoLgl58TxnClWTmP+L/IQhx6HaU85SQjZ7bYmGe9gjZy3obaI9W9/qNWv0GZn xEEq1Gwppg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:44 2026 by rpki-client