$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: um0FbKbxGxbU6HyAAPwsmb2m4GI+GKe3WVstboWeaKk= Subject key identifier: 3D:ED:A7:22:97:A7:8B:AB:B7:1E:A3:78:18:3E:8A:FA:94:39:D6:8D Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 712E01D56FE606731E17781F820C81E58A0D5055 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 0104 Signing time: Wed 29 Jul 2026 01:53:08 +0000 Manifest this update: Wed 29 Jul 2026 01:48:08 +0000 Manifest next update: Thu 30 Jul 2026 04:23:08 +0000 Files and hashes: 1: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 2: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) 3: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 4: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: ov/FgR9fxMPB95CLK4rDXdGq/xoSl6iSXzQKTztR/MY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2e:01:d5:6f:e6:06:73:1e:17:78:1f:82:0c:81:e5:8a:0d:50:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Jul 29 01:48:08 2026 GMT Not After : Jul 30 04:23:08 2026 GMT Subject: CN=3DEDA72297A78BABB71EA378183E8AFA9439D68D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:e7:69:99:ce:dd:c4:94:9b:2b:0d:41:03: 61:a7:ad:e9:a2:69:31:89:fb:8f:1e:03:72:37:41: e6:45:0f:36:e2:b8:e9:0e:71:2a:3f:30:08:77:3c: dc:65:cb:82:17:37:b3:fb:bf:5b:0a:f5:d3:34:34: d4:4c:df:70:d4:49:5f:14:32:d0:56:3d:45:1b:45: 55:3a:cb:87:8e:b5:00:e6:e5:46:f8:11:f8:6b:c7: 08:4d:99:fa:a6:e6:23:f4:d2:50:a4:66:e5:a3:6a: 48:5d:28:17:a9:83:b6:28:1c:ad:08:8b:8a:16:49: 43:d4:75:68:89:cc:bd:be:a6:64:c5:39:6d:d2:9f: 41:a5:8f:5f:94:a9:e4:24:41:f1:42:f6:da:94:1b: d2:c1:7d:0c:c6:94:a0:6c:45:8a:97:94:d7:65:09: 8f:ba:60:f4:a6:67:a2:21:1c:9a:64:7e:48:f9:d7: ba:bb:29:87:64:e5:ce:3d:25:b2:93:56:7f:d9:d2: ed:30:06:e0:c8:c4:f8:3c:29:2a:3b:f1:ef:92:2d: c8:fc:01:fd:1e:a6:46:16:cd:92:9e:47:27:71:a9: a6:7d:96:26:4c:5a:8e:46:5d:cd:5e:7f:6b:1b:2f: 03:f9:18:04:87:ba:b8:1b:ff:3a:7b:e0:94:93:3f: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:ED:A7:22:97:A7:8B:AB:B7:1E:A3:78:18:3E:8A:FA:94:39:D6:8D X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:1e:c0:03:3a:c9:27:c6:24:28:51:02:1d:e8:1f:0b:55:06: 35:56:c2:8c:09:a2:ef:26:07:83:4c:0f:81:d8:bf:22:2e:b1: 89:2a:79:c8:4c:cf:c5:24:e5:ad:61:49:5e:57:55:00:c5:f3: 58:da:b5:35:11:56:75:4b:5c:92:8b:a1:19:1e:f6:48:e6:66: 67:f3:f2:46:ea:b4:39:30:14:8f:0d:9c:a4:a3:9c:56:5d:fc: 01:9a:56:07:9f:5d:73:0c:2f:df:96:1e:89:19:b9:8f:6e:63: be:5c:56:9f:6f:7b:9f:9a:5b:04:bf:d6:14:1f:3b:b9:3a:3a: 7e:2a:73:b5:64:35:29:fe:7a:35:6f:ab:72:5f:60:2e:18:55: 71:97:3f:ea:ef:78:78:ce:02:e5:83:4b:b6:99:cb:58:28:90: 21:dd:02:d2:42:32:a7:61:c5:f4:4e:28:cd:83:98:34:c9:34: d0:9f:45:f2:86:37:5a:28:ec:ac:ca:9b:26:1d:00:ad:71:c5: f4:96:c8:44:31:7b:c7:59:3b:3d:50:ae:0a:ff:2d:4c:e2:41: bd:6f:ff:d6:e0:f1:38:0f:e9:87:be:69:a8:e4:e7:91:b2:57: 0b:9f:4f:7b:a5:98:aa:a4:ef:6c:6e:2d:4e:39:d1:c2:16:5b: f1:3c:fd:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcS4B1W/mBnMeF3gfggyB5YoNUFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA3MjkwMTQ4MDhaFw0yNjA3MzAwNDIzMDhaMDMxMTAvBgNV BAMTKDNERURBNzIyOTdBNzhCQUJCNzFFQTM3ODE4M0U4QUZBOTQzOUQ2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCD+dpmc7dxJSbKw1BA2Gnremi aTGJ+48eA3I3QeZFDzbiuOkOcSo/MAh3PNxly4IXN7P7v1sK9dM0NNRM33DUSV8U MtBWPUUbRVU6y4eOtQDm5Ub4EfhrxwhNmfqm5iP00lCkZuWjakhdKBepg7YoHK0I i4oWSUPUdWiJzL2+pmTFOW3Sn0Glj1+UqeQkQfFC9tqUG9LBfQzGlKBsRYqXlNdl CY+6YPSmZ6IhHJpkfkj517q7KYdk5c49JbKTVn/Z0u0wBuDIxPg8KSo78e+SLcj8 Af0epkYWzZKeRydxqaZ9liZMWo5GXc1ef2sbLwP5GASHurgb/zp74JSTPwjpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPe2nIpeni6u3HqN4GD6K+pQ51o0wHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5B7AAzrJJ8Yk KFECHegfC1UGNVbCjAmi7yYHg0wPgdi/Ii6xiSp5yEzPxSTlrWFJXldVAMXzWNq1 NRFWdUtckouhGR72SOZmZ/PyRuq0OTAUjw2cpKOcVl38AZpWB59dcwwv35YeiRm5 j25jvlxWn297n5pbBL/WFB87uTo6fipztWQ1Kf56NW+rcl9gLhhVcZc/6u94eM4C 5YNLtpnLWCiQId0C0kIyp2HF9E4ozYOYNMk00J9F8oY3WijsrMqbJh0ArXHF9JbI RDF7x1k7PVCuCv8tTOJBvW//1uDxOA/ph75pqOTnkbJXC59Pe6WYqqTvbG4tTjnR whZb8Tz9VQ== -----END CERTIFICATE-----Generated at Wed Jul 29 12:59:26 2026 by rpki-client