$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: shtC4SBHVuxFWRkAuR4uZMGHqoBEWPr/yqbIN6zyy18= Subject key identifier: C6:57:2E:A2:64:A0:30:5B:72:DE:5C:02:6E:DC:2D:9D:9F:09:F1:FD Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 4DAAB79706E352230D109A255C59419B30006C98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 02:23:10 +0000 Manifest this update: Wed 29 Jul 2026 02:18:10 +0000 Manifest next update: Thu 30 Jul 2026 04:39:10 +0000 Files and hashes: 1: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: xWqbvQ/aD9cWjhLaNVHQF+CdVtxxp9cREJ7HfUIGx+I=) 2: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 3: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:aa:b7:97:06:e3:52:23:0d:10:9a:25:5c:59:41:9b:30:00:6c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Jul 29 02:18:10 2026 GMT Not After : Jul 30 04:39:10 2026 GMT Subject: CN=C6572EA264A0305B72DE5C026EDC2D9D9F09F1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:15:11:42:30:04:f7:a9:1b:5f:0f:f2:13: 88:98:c9:f0:4b:c9:cb:92:0f:e9:96:be:3c:bd:de: e3:b7:d2:7f:fd:63:a0:4e:cc:48:ee:ef:c8:9d:60: 3b:a3:df:16:18:55:20:92:4e:00:74:1d:c8:c4:86: 7c:33:c4:33:79:5d:28:c1:96:97:bc:f5:3e:3e:8f: 01:9e:a5:ce:38:c5:90:b4:9d:d2:c9:0b:81:6a:62: dc:b7:62:8a:e1:f4:ba:d0:8f:4d:87:0e:6c:6d:1a: 0a:86:2a:2b:0c:d7:65:77:41:a5:9b:d7:00:89:7a: 6c:dd:9e:6d:7b:a6:c7:97:14:78:e1:80:fd:87:99: 1c:bc:b5:1d:0f:96:6e:d3:21:55:32:ed:87:5d:d8: dc:96:df:ea:24:b3:a5:e0:55:0c:39:b6:fa:b3:32: 60:31:92:85:8f:a2:fb:37:e1:29:71:44:f1:7d:1b: a0:4c:d7:b9:48:ec:16:49:e2:fe:32:3f:31:5e:f6: d6:6a:59:dd:f1:66:1a:68:f7:76:0b:25:95:36:89: bd:1d:6e:90:b0:3c:46:c0:4f:fc:fa:18:a7:11:a0: d9:ce:72:52:ea:b0:4f:b3:c5:28:f8:17:cb:b3:20: f3:10:ba:79:1b:0e:94:2b:68:e5:bf:a6:ee:c9:d7: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:2E:A2:64:A0:30:5B:72:DE:5C:02:6E:DC:2D:9D:9F:09:F1:FD X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:37:0c:30:d8:89:36:4e:c3:be:e0:8b:fb:c2:d6:01:f7:dc: 7d:5d:10:3c:87:2f:2b:8b:ae:47:03:4e:26:98:93:90:36:07: 69:3f:0c:9c:6f:c8:55:1d:34:fe:81:17:ff:7c:9d:79:6c:66: bf:40:50:43:2e:10:09:20:21:0e:6b:b3:af:ca:c8:4c:ca:d9: 37:be:53:bb:69:04:ce:ae:f2:36:66:5d:8a:8c:92:03:6e:70: 93:0a:a8:dd:c3:6b:43:cf:4d:1b:a4:de:5f:f5:7d:79:15:7a: df:83:b4:fb:d0:e2:c2:30:9e:40:7f:1c:4f:e0:3d:f8:e7:f9: fd:24:5e:53:58:b9:8f:c2:79:f3:17:48:0a:6c:7f:09:5e:62: 89:b6:77:6a:a9:79:f0:d7:0e:f1:95:8a:5d:de:72:37:a2:84: b1:c8:28:72:89:4c:d7:d4:83:c4:50:12:f0:a4:d6:b5:6b:68: d3:d9:4a:55:a8:58:1d:e8:6e:0d:4c:bd:38:22:4a:f4:50:ad: 8f:0f:78:d8:9f:78:ba:ed:0b:71:77:d9:2e:58:d6:ea:2a:30: 9e:fd:b3:5f:32:48:d3:92:9e:56:58:f8:54:b9:09:29:a1:6e: de:e3:da:f0:8f:1d:9e:e4:09:50:d2:0a:60:53:f5:3d:17:56: 64:ef:64:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTaq3lwbjUiMNEJolXFlBmzAAbJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjA3MjkwMjE4MTBaFw0yNjA3MzAwNDM5MTBaMDMxMTAvBgNV BAMTKEM2NTcyRUEyNjRBMDMwNUI3MkRFNUMwMjZFREMyRDlEOUYwOUYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcRURQjAE96kbXw/yE4iYyfBL ycuSD+mWvjy93uO30n/9Y6BOzEju78idYDuj3xYYVSCSTgB0HcjEhnwzxDN5XSjB lpe89T4+jwGepc44xZC0ndLJC4FqYty3Yorh9LrQj02HDmxtGgqGKisM12V3QaWb 1wCJemzdnm17pseXFHjhgP2HmRy8tR0Plm7TIVUy7Ydd2NyW3+oks6XgVQw5tvqz MmAxkoWPovs34SlxRPF9G6BM17lI7BZJ4v4yPzFe9tZqWd3xZhpo93YLJZU2ib0d bpCwPEbAT/z6GKcRoNnOclLqsE+zxSj4F8uzIPMQunkbDpQraOW/pu7J13wBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxlcuomSgMFty3lwCbtwtnZ8J8f0wHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDcMMNiJNk7D vuCL+8LWAffcfV0QPIcvK4uuRwNOJpiTkDYHaT8MnG/IVR00/oEX/3ydeWxmv0BQ Qy4QCSAhDmuzr8rITMrZN75Tu2kEzq7yNmZdioySA25wkwqo3cNrQ89NG6TeX/V9 eRV634O0+9DiwjCeQH8cT+A9+Of5/SReU1i5j8J58xdICmx/CV5iibZ3aql58NcO 8ZWKXd5yN6KEscgocolM19SDxFAS8KTWtWto09lKVahYHehuDUy9OCJK9FCtjw94 2J94uu0LcXfZLljW6iownv2zXzJI05KeVlj4VLkJKaFu3uPa8I8dnuQJUNIKYFP1 PRdWZO9kKg== -----END CERTIFICATE-----Generated at Wed Jul 29 12:30:06 2026 by rpki-client