$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: L8ziNLWikQEUp49aR+WURLPUE7rTDe8gf44iCX50T2U= Subject key identifier: 2F:39:86:07:20:A8:66:99:90:27:EA:12:12:1D:4B:81:3B:EC:29:F8 Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 3697A1B15F9D8A87AFEAF95511DCC11CB275903E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 20:15:09 +0000 Manifest this update: Wed 29 Jul 2026 20:10:09 +0000 Manifest next update: Thu 30 Jul 2026 22:43:09 +0000 Files and hashes: 1: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 2: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 3: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) 4: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 5: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 6: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) 7: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: hiiTbTxSAyY11wOH7JfGTA/26+z3+LIV5joiLGr0ZA4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:97:a1:b1:5f:9d:8a:87:af:ea:f9:55:11:dc:c1:1c:b2:75:90:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Jul 29 20:10:09 2026 GMT Not After : Jul 30 22:43:09 2026 GMT Subject: CN=2F39860720A866999027EA12121D4B813BEC29F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:43:38:c2:27:a6:45:75:55:60:bb:92:7f: 53:c3:e1:0e:c2:18:5b:f9:d9:5c:0b:26:5f:79:7a: e3:93:f7:76:5f:8c:68:42:47:f0:b9:d7:a4:59:ec: ee:de:df:2f:db:2f:85:7b:81:10:85:35:76:b1:5a: 58:c1:f3:0d:c4:81:b2:38:64:f6:54:7f:12:4e:dd: 28:61:1d:c1:3b:e1:c4:2d:06:4d:9e:f3:a6:cd:c8: d7:af:62:34:88:30:2b:c3:06:be:ca:41:cc:51:51: a9:04:30:f8:a8:4d:89:75:22:3e:17:0b:84:21:e1: 30:a6:71:57:53:f6:3c:1a:79:ee:9c:0f:9a:7d:14: 20:0b:72:ca:a7:ce:0b:72:a4:3c:8b:40:1b:ea:98: 35:d8:8a:ea:7f:bc:38:b8:27:e4:06:42:f0:c1:ab: 83:0e:ce:86:09:81:e9:12:96:c5:e5:dd:8e:6f:a1: 38:57:48:ce:d0:e3:b2:d3:38:34:5c:8b:d3:b3:8e: 4b:4c:97:9f:02:07:9b:41:64:05:16:4d:a9:ef:64: 61:a0:c1:49:3a:00:5d:c6:9b:5e:98:ab:68:ef:d5: 67:d4:1a:31:b0:ed:f3:e2:30:f4:11:88:e8:9f:e1: 1e:c7:d3:99:b6:f7:e4:b4:83:84:f7:d1:22:69:77: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:39:86:07:20:A8:66:99:90:27:EA:12:12:1D:4B:81:3B:EC:29:F8 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5e:36:c5:66:9e:57:91:23:d9:9a:42:80:7f:52:c3:93:92: ab:2c:22:dc:21:89:05:ad:98:df:5e:e6:ae:0d:a7:67:2f:d9: aa:be:ea:28:a7:13:cc:cc:c8:dd:e9:fa:4b:36:08:61:ed:84: 05:ad:d8:b5:e3:c9:da:ed:52:9b:06:76:6b:5f:c0:f8:92:23: 33:cb:ca:f9:e0:07:8f:08:36:c5:62:6d:64:20:31:64:fd:c3: e2:5c:a3:90:f3:1a:f8:98:e2:26:65:62:46:ca:a0:8e:9d:7e: 8c:3d:a9:88:fe:3f:27:79:43:08:36:04:59:97:4e:e6:92:3c: 28:b6:d7:5e:6e:12:b8:b6:09:6f:3b:5a:73:c2:09:01:cb:fe: bd:00:aa:49:7c:f9:5c:31:3c:83:80:01:ab:eb:ee:95:00:13: a5:28:11:96:90:a3:66:46:4f:21:83:ec:2a:90:ee:5d:e6:c8: 0d:2e:b2:fe:f9:91:70:3f:b3:19:df:91:b6:8d:c4:79:ab:d0: 9a:7d:65:ef:cd:49:e7:2e:6c:66:ef:09:a5:4a:08:46:16:24: 2f:e6:5d:b7:1b:16:d8:c8:86:d0:55:dd:9d:76:95:04:f2:75: b7:0e:56:d4:83:68:04:84:cd:ee:d0:ee:f6:8e:24:d2:40:ee: 5f:3f:36:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNpehsV+dioev6vlVEdzBHLJ1kD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjA3MjkyMDEwMDlaFw0yNjA3MzAyMjQzMDlaMDMxMTAvBgNV BAMTKDJGMzk4NjA3MjBBODY2OTk5MDI3RUExMjEyMUQ0QjgxM0JFQzI5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbUM4wiemRXVVYLuSf1PD4Q7C GFv52VwLJl95euOT93ZfjGhCR/C516RZ7O7e3y/bL4V7gRCFNXaxWljB8w3EgbI4 ZPZUfxJO3ShhHcE74cQtBk2e86bNyNevYjSIMCvDBr7KQcxRUakEMPioTYl1Ij4X C4Qh4TCmcVdT9jwaee6cD5p9FCALcsqnzgtypDyLQBvqmDXYiup/vDi4J+QGQvDB q4MOzoYJgekSlsXl3Y5voThXSM7Q47LTODRci9OzjktMl58CB5tBZAUWTanvZGGg wUk6AF3Gm16Yq2jv1WfUGjGw7fPiMPQRiOif4R7H05m29+S0g4T30SJpdy9hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULzmGByCoZpmQJ+oSEh1LgTvsKfgwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa142xWaeV5Ej 2ZpCgH9Sw5OSqywi3CGJBa2Y317mrg2nZy/Zqr7qKKcTzMzI3en6SzYIYe2EBa3Y tePJ2u1SmwZ2a1/A+JIjM8vK+eAHjwg2xWJtZCAxZP3D4lyjkPMa+JjiJmViRsqg jp1+jD2piP4/J3lDCDYEWZdO5pI8KLbXXm4SuLYJbztac8IJAcv+vQCqSXz5XDE8 g4ABq+vulQATpSgRlpCjZkZPIYPsKpDuXebIDS6y/vmRcD+zGd+Rto3EeavQmn1l 781J5y5sZu8JpUoIRhYkL+ZdtxsW2MiG0FXdnXaVBPJ1tw5W1INoBITN7tDu9o4k 0kDuXz82Mg== -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:34 2026 by rpki-client