$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: UiGpWHzEgjT3px/4xBEsqgNhLS09DLvk+6nwpeykXec= Subject key identifier: 3E:19:05:53:BB:DC:39:DC:C9:8D:59:4B:98:77:7C:8A:52:71:9A:9D Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 5D2A7D44374094628393D57DCB7F03EB3FB6D50D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: FF Signing time: Wed 29 Jul 2026 07:38:48 +0000 Manifest this update: Wed 29 Jul 2026 07:33:48 +0000 Manifest next update: Thu 30 Jul 2026 10:02:48 +0000 Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) 2: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 3: 323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa (hash: xU6UP1bnP18c+EUx+ZQZ6GxBjOFs2tV0/H/ebp6xq4o=) 4: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 5: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: NGewbFbm/RNtuKR+WOkglgyzLIqDZmUbnSUJE3+M4bo=) 6: 323430363a646438303a3a2f33322d3338203d3e20333938373034.roa (hash: ENP5tby2AQP2mIEBBre2hkAZ950/9PGnJK3kH/gWR+s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2a:7d:44:37:40:94:62:83:93:d5:7d:cb:7f:03:eb:3f:b6:d5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Jul 29 07:33:48 2026 GMT Not After : Jul 30 10:02:48 2026 GMT Subject: CN=3E190553BBDC39DCC98D594B98777C8A52719A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:a4:6d:73:f4:73:3b:30:d7:2c:7e:72:d6: a0:3f:e4:c9:34:4c:7e:0c:cc:1b:68:f6:cc:bf:f2: 71:7c:10:ae:db:b0:ed:a4:3b:f1:e4:24:1a:9a:02: 93:96:75:e9:80:1c:fb:b5:9e:27:23:38:4f:c1:da: 32:50:f1:5f:cf:f3:f8:2d:e3:f3:09:e8:73:1d:a3: bc:56:34:ae:c1:a5:81:f1:6f:b4:a2:0b:35:54:94: 98:6e:fe:5e:40:c9:fc:74:4d:99:7a:a6:c3:64:a0: f1:ed:55:f9:a9:a4:70:fb:d1:60:1c:6a:23:56:ca: 4d:d9:1d:34:14:ac:11:b3:0b:7c:6b:f2:31:6e:00: 33:8f:ef:c6:74:d4:21:7e:e7:dc:6d:b6:de:43:ba: 5a:f5:2e:98:b2:60:c4:d7:d3:76:a7:5e:69:9c:89: c3:09:11:62:85:49:f1:e7:a0:3f:f4:f2:ee:99:c2: 7d:48:9c:43:34:62:18:c2:cd:6a:a1:fb:bd:c2:86: 8d:04:ee:7a:2b:12:61:be:ee:6e:c1:5d:61:96:bb: 3d:73:73:3f:c7:94:08:ad:e0:96:ad:fe:02:9a:aa: af:34:51:3d:cf:34:aa:99:74:f7:24:16:57:5d:fb: 85:5e:fd:3b:8a:b9:0a:a9:e0:a1:bc:4f:fa:5c:64: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:19:05:53:BB:DC:39:DC:C9:8D:59:4B:98:77:7C:8A:52:71:9A:9D X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bd:14:7b:f3:bb:4c:c3:cd:99:3b:26:89:09:5b:d5:78:d1: e6:67:64:16:bd:b7:92:7c:d2:42:1f:e9:15:b8:02:81:53:07: 74:b2:74:67:90:fa:41:b8:2b:1c:8a:e8:7c:82:69:43:47:e6: 5c:2b:49:08:3a:a5:44:28:6a:7a:48:58:44:b5:e5:01:42:87: 07:41:b8:f2:5b:7b:2c:94:01:67:09:6a:36:78:f9:3b:8c:05: 60:d7:ef:7e:16:56:f1:7f:57:1e:f8:2a:22:73:22:be:6d:c0: 19:8d:6e:5d:4d:f4:25:48:40:71:36:65:54:25:39:2f:f7:c9: f8:b3:b4:11:c5:a1:8f:0b:25:7c:bc:e5:94:c7:0a:38:37:cb: 1b:7b:7e:45:5c:ef:7d:72:95:27:94:71:c4:3e:39:0d:2f:18: 6b:f0:44:a7:a0:01:b5:5d:23:5d:83:25:79:be:b7:dc:1c:92: df:67:7b:54:c3:7b:e9:2d:79:9c:ae:b0:94:e8:68:73:bf:ec: dc:02:54:10:99:9c:be:3f:23:ca:ae:cb:e1:ac:d4:09:ed:24: 7c:bc:86:25:42:93:a2:57:c2:b9:a4:c2:de:52:b3:15:b9:54: 2e:dd:16:a6:f4:e2:10:6f:16:c3:f6:2b:56:52:31:a9:8d:55: 78:bc:7c:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXSp9RDdAlGKDk9V9y38D6z+21Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjA3MjkwNzMzNDhaFw0yNjA3MzAxMDAyNDhaMDMxMTAvBgNV BAMTKDNFMTkwNTUzQkJEQzM5RENDOThENTk0Qjk4Nzc3QzhBNTI3MTlBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlKRtc/RzOzDXLH5y1qA/5Mk0 TH4MzBto9sy/8nF8EK7bsO2kO/HkJBqaApOWdemAHPu1nicjOE/B2jJQ8V/P8/gt 4/MJ6HMdo7xWNK7BpYHxb7SiCzVUlJhu/l5Ayfx0TZl6psNkoPHtVfmppHD70WAc aiNWyk3ZHTQUrBGzC3xr8jFuADOP78Z01CF+59xttt5Dulr1LpiyYMTX03anXmmc icMJEWKFSfHnoD/08u6Zwn1InEM0YhjCzWqh+73Cho0E7norEmG+7m7BXWGWuz1z cz/HlAit4Jat/gKaqq80UT3PNKqZdPckFldd+4Ve/TuKuQqp4KG8T/pcZCkJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPhkFU7vcOdzJjVlLmHd8ilJxmp0wHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ70Ue/O7TMPN mTsmiQlb1XjR5mdkFr23knzSQh/pFbgCgVMHdLJ0Z5D6QbgrHIrofIJpQ0fmXCtJ CDqlRChqekhYRLXlAUKHB0G48lt7LJQBZwlqNnj5O4wFYNfvfhZW8X9XHvgqInMi vm3AGY1uXU30JUhAcTZlVCU5L/fJ+LO0EcWhjwslfLzllMcKODfLG3t+RVzvfXKV J5RxxD45DS8Ya/BEp6ABtV0jXYMleb633ByS32d7VMN76S15nK6wlOhoc7/s3AJU EJmcvj8jyq7L4azUCe0kfLyGJUKTolfCuaTC3lKzFblULt0WpvTiEG8Ww/YrVlIx qY1VeLx8+Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:06 2026 by rpki-client