$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: U4s+LXRL8WB8PPOwwhLFw0SL/DwlELrNfOBa+ymxrAg= Subject key identifier: D6:4B:78:27:9D:96:61:5E:FA:D5:3F:DB:68:22:65:06:49:77:6C:5B Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 2D2072168EF029E28102F85F88C33909F698CFBC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0107 Signing time: Wed 29 Jul 2026 13:04:24 +0000 Manifest this update: Wed 29 Jul 2026 12:59:24 +0000 Manifest next update: Thu 30 Jul 2026 15:05:24 +0000 Files and hashes: 1: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 2: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: vzeSuXrkY5AvHnCqv2gNaixJoYQLtRzLJNCe18etBus=) 4: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 5: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 6: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:20:72:16:8e:f0:29:e2:81:02:f8:5f:88:c3:39:09:f6:98:cf:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Jul 29 12:59:24 2026 GMT Not After : Jul 30 15:05:24 2026 GMT Subject: CN=D64B78279D96615EFAD53FDB6822650649776C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:bd:a4:f3:26:f6:08:28:1e:6b:5b:f0:05: de:02:07:5b:29:bd:36:ef:f5:74:da:c7:10:11:bd: 99:e9:38:b0:49:5f:6f:cf:8b:ad:5e:87:14:65:85: 87:00:98:42:5a:e6:84:20:49:85:01:5d:a7:98:11: 57:ad:18:48:25:5a:ac:63:9a:8d:7d:68:a7:47:a1: fd:42:7e:57:60:a9:5c:e7:b9:00:5d:11:99:b9:b5: c7:1c:e2:ff:75:a5:68:9a:c5:5c:e2:e7:d1:88:a4: 78:60:2d:c1:2b:94:7a:c8:43:a8:a2:d9:b0:43:07: bd:42:78:b1:3e:49:36:76:49:93:5a:af:c2:4e:c6: 20:e7:6c:80:ec:23:05:b5:4f:2f:2f:49:db:99:07: 7f:b3:66:9f:cd:28:a6:61:23:2a:6b:6c:a1:4a:a4: 81:68:be:30:b6:da:db:79:c9:b3:02:c9:6c:f6:59: 0d:98:59:bf:58:35:af:de:19:b5:33:f6:62:a3:58: 03:b4:f4:ea:91:67:b2:c1:d3:8b:70:64:f3:93:23: fa:da:bd:9c:49:71:20:bd:f3:80:7c:a2:bd:60:4a: e8:fe:ed:5f:a2:8c:13:d2:39:47:3b:7f:19:fa:30: fe:43:7f:be:b4:65:51:aa:e9:e2:7a:8d:27:18:43: 48:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:78:27:9D:96:61:5E:FA:D5:3F:DB:68:22:65:06:49:77:6C:5B X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4d:b3:13:72:46:1d:f1:75:14:61:93:47:7d:e0:8f:45:5c: c6:42:60:e1:8b:88:1f:8f:15:9c:dc:88:7d:89:03:de:38:30: d9:25:d9:74:b4:7e:35:23:fb:de:7d:cd:83:27:d4:5b:da:3c: d1:f4:6d:9a:4c:31:89:d7:3f:b0:6f:89:11:f6:9e:97:d2:e9: f1:f4:c8:de:8c:a0:0f:5f:15:92:85:78:79:52:e8:83:c3:9c: 7f:48:92:e4:6c:a7:4e:d7:d9:88:17:bb:0a:95:b8:f6:0b:7b: d0:ed:86:3e:b2:95:ac:d5:58:c2:bb:ea:eb:71:62:89:ec:01: b0:2f:9f:3c:aa:ad:2e:7c:ca:e1:0f:3b:74:df:e4:64:0e:e7: 1f:05:a9:20:a4:8c:ce:63:0e:5d:b4:5a:78:31:e9:f5:4d:f0: de:19:97:3e:5b:5c:c6:05:91:b3:d1:cb:2f:03:aa:6f:14:23: ee:db:8f:5b:2d:1e:0e:67:bd:98:48:ce:97:57:fd:97:f9:f1: cc:cd:ce:c5:0c:d2:2f:48:ac:91:4a:12:81:8f:64:fb:9f:91: ed:ef:47:4a:00:7f:b9:58:61:c8:2f:c4:2b:a7:46:f5:70:bc: 89:c3:45:d5:e9:60:d5:5d:2b:98:5d:ed:72:35:2b:2f:8c:65: 9c:2a:d2:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULSByFo7wKeKBAvhfiMM5CfaYz7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA3MjkxMjU5MjRaFw0yNjA3MzAxNTA1MjRaMDMxMTAvBgNV BAMTKEQ2NEI3ODI3OUQ5NjYxNUVGQUQ1M0ZEQjY4MjI2NTA2NDk3NzZDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzL2k8yb2CCgea1vwBd4CB1sp vTbv9XTaxxARvZnpOLBJX2/Pi61ehxRlhYcAmEJa5oQgSYUBXaeYEVetGEglWqxj mo19aKdHof1CfldgqVznuQBdEZm5tccc4v91pWiaxVzi59GIpHhgLcErlHrIQ6ii 2bBDB71CeLE+STZ2SZNar8JOxiDnbIDsIwW1Ty8vSduZB3+zZp/NKKZhIyprbKFK pIFovjC22tt5ybMCyWz2WQ2YWb9YNa/eGbUz9mKjWAO09OqRZ7LB04twZPOTI/ra vZxJcSC984B8or1gSuj+7V+ijBPSOUc7fxn6MP5Df760ZVGq6eJ6jScYQ0hJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1kt4J52WYV761T/baCJlBkl3bFswHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb02zE3JGHfF1 FGGTR33gj0VcxkJg4YuIH48VnNyIfYkD3jgw2SXZdLR+NSP73n3NgyfUW9o80fRt mkwxidc/sG+JEfael9Lp8fTI3oygD18VkoV4eVLog8Ocf0iS5GynTtfZiBe7CpW4 9gt70O2GPrKVrNVYwrvq63FiiewBsC+fPKqtLnzK4Q87dN/kZA7nHwWpIKSMzmMO XbRaeDHp9U3w3hmXPltcxgWRs9HLLwOqbxQj7tuPWy0eDme9mEjOl1f9l/nxzM3O xQzSL0iskUoSgY9k+5+R7e9HSgB/uVhhyC/EK6dG9XC8icNF1elg1V0rmF3tcjUr L4xlnCrSKw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:08 2026 by rpki-client