$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: 0Y0515ZQtdMUkI/20Rcs3PAkUwy/rPdycg59cOrsNaI= Subject key identifier: CA:62:AE:24:CA:9C:8F:B5:06:63:D1:EE:D0:C2:59:F8:97:6D:AA:82 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 605C6B9D875D93C6F0D9C2CBBCA19D62644E2D06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 20:50:14 +0000 Manifest this update: Wed 29 Jul 2026 20:45:14 +0000 Manifest next update: Thu 30 Jul 2026 22:04:14 +0000 Files and hashes: 1: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: 4/raAT9elv9KqAJiw/HiuLG9L9W7qpizJN0gwHuWxw4=) 2: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5c:6b:9d:87:5d:93:c6:f0:d9:c2:cb:bc:a1:9d:62:64:4e:2d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Jul 29 20:45:14 2026 GMT Not After : Jul 30 22:04:14 2026 GMT Subject: CN=CA62AE24CA9C8FB50663D1EED0C259F8976DAA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:8b:84:1d:2b:db:d2:c8:5e:f2:24:5f:82: f3:06:c7:11:0b:ce:8a:ea:f3:8a:00:dc:cc:e1:66: 5b:af:64:15:45:7e:e9:83:b3:f4:f9:0d:63:2f:6d: 8e:31:90:cb:a6:af:94:47:2f:d7:d7:23:f0:b0:b6: f5:3c:36:a9:57:ce:eb:c0:2f:b5:22:fe:0c:32:f6: 65:a1:2f:43:19:76:55:17:f1:74:c1:5a:96:d6:52: 3c:6a:86:49:09:91:d5:f5:a8:04:8c:f3:79:81:50: 48:bc:9b:c0:f4:ca:44:a0:f4:f5:ab:fc:cd:7d:52: f5:29:b1:ad:fc:1f:f0:94:b1:91:78:fe:da:19:29: d3:5b:8c:75:03:a3:35:7e:93:21:e8:25:35:68:6e: 32:ce:c3:aa:df:53:3e:f3:51:df:3d:0a:6e:57:db: 5d:d5:57:18:9e:cc:e4:df:b7:a9:2c:36:01:a1:d0: 14:83:3e:54:9e:ba:ee:75:6e:7c:1e:a8:2e:8f:df: fc:37:2e:02:96:58:69:82:6d:65:84:c7:a6:6d:0b: ba:d5:83:dd:25:59:a0:31:d3:97:aa:a4:1b:4e:f5: e0:72:89:6f:52:fc:93:95:6a:4c:6c:0b:fc:ef:79: 9b:3b:4e:60:ff:81:f6:ef:ff:b6:6f:45:44:a0:50: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:62:AE:24:CA:9C:8F:B5:06:63:D1:EE:D0:C2:59:F8:97:6D:AA:82 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:8d:c4:e6:91:b5:19:72:b3:70:94:3d:42:3d:21:ef:41: b0:94:2a:ae:d3:26:95:d4:bb:f6:43:47:52:c3:93:65:62:76: 1a:73:6f:b0:f8:23:89:c5:6b:4a:39:b9:4f:78:dd:c3:b0:59: 1a:99:d7:69:c3:06:11:85:fe:d6:c9:e7:2b:53:93:4d:99:35: 2a:c7:5d:f4:15:df:8c:b7:28:68:cc:44:46:d6:8d:b4:13:b0: 31:d9:e5:bd:41:b9:df:5f:22:1d:93:5e:30:b9:e7:35:30:f5: 23:95:1d:93:4b:ca:c2:32:8d:2e:77:a5:a7:3c:ac:17:60:26: 86:11:50:f5:80:d1:ae:8e:2d:01:eb:50:29:35:de:20:08:c9: e5:ff:6a:38:4b:29:f1:74:54:e7:f7:e7:85:e7:26:be:24:38: 3c:99:1f:64:1a:3c:d8:dc:1d:b5:26:05:8c:53:f3:4b:cc:db: 9e:c7:5e:c3:fa:31:81:69:8b:9c:32:42:4d:6c:d6:21:d3:e5: c4:e0:30:c0:ed:2e:f3:cc:38:07:bb:2b:ca:44:d1:3f:11:a0: 00:2c:36:d7:2a:71:cd:80:0b:84:b1:92:f1:cf:1a:a1:a1:f3: 8f:75:67:b7:a2:4f:7c:41:fe:4f:57:ea:51:72:f9:18:6a:89: 8e:3e:f5:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYFxrnYddk8bw2cLLvKGdYmROLQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA3MjkyMDQ1MTRaFw0yNjA3MzAyMjA0MTRaMDMxMTAvBgNV BAMTKENBNjJBRTI0Q0E5QzhGQjUwNjYzRDFFRUQwQzI1OUY4OTc2REFBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HouEHSvb0she8iRfgvMGxxEL zorq84oA3MzhZluvZBVFfumDs/T5DWMvbY4xkMumr5RHL9fXI/CwtvU8NqlXzuvA L7Ui/gwy9mWhL0MZdlUX8XTBWpbWUjxqhkkJkdX1qASM83mBUEi8m8D0ykSg9PWr /M19UvUpsa38H/CUsZF4/toZKdNbjHUDozV+kyHoJTVobjLOw6rfUz7zUd89Cm5X 213VVxiezOTft6ksNgGh0BSDPlSeuu51bnweqC6P3/w3LgKWWGmCbWWEx6ZtC7rV g90lWaAx05eqpBtO9eByiW9S/JOVakxsC/zveZs7TmD/gfbv/7ZvRUSgUB3LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUymKuJMqcj7UGY9Hu0MJZ+JdtqoIwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjiNxOaRtRly s3CUPUI9Ie9BsJQqrtMmldS79kNHUsOTZWJ2GnNvsPgjicVrSjm5T3jdw7BZGpnX acMGEYX+1snnK1OTTZk1Ksdd9BXfjLcoaMxERtaNtBOwMdnlvUG5318iHZNeMLnn NTD1I5Udk0vKwjKNLnelpzysF2AmhhFQ9YDRro4tAetQKTXeIAjJ5f9qOEsp8XRU 5/fnhecmviQ4PJkfZBo82NwdtSYFjFPzS8zbnsdew/oxgWmLnDJCTWzWIdPlxOAw wO0u88w4B7srykTRPxGgACw21ypxzYALhLGS8c8aoaHzj3Vnt6JPfEH+T1fqUXL5 GGqJjj71cg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:46 2026 by rpki-client