$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: FCB7UbeRaV8ayoktHeXrcG8804UDsExx1JBOv9hmEOI= Subject key identifier: CC:86:62:1F:AD:1F:9C:67:8E:BC:16:8E:64:2A:8B:C3:1F:0C:EC:AD Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 7BC3E50B606C245BAE98AB760F73CD17B84FCE9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 11:39:16 +0000 Manifest this update: Wed 29 Jul 2026 11:34:16 +0000 Manifest next update: Thu 30 Jul 2026 15:19:16 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: ThgBNMbbMaHkHeHbGQW4GIG9yLly9r8SwVmk77oNj4U=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:e5:0b:60:6c:24:5b:ae:98:ab:76:0f:73:cd:17:b8:4f:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Jul 29 11:34:16 2026 GMT Not After : Jul 30 15:19:16 2026 GMT Subject: CN=CC86621FAD1F9C678EBC168E642A8BC31F0CECAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:31:2a:18:24:6b:e4:8f:dc:ec:0d:e1:3c: c8:66:fc:b3:b4:23:9f:84:90:45:75:92:87:ae:ad: 44:00:25:c6:0b:d5:b0:14:df:e7:e7:e7:7e:72:4f: 81:8c:e0:9b:7b:c9:11:23:89:b4:09:81:3c:c0:c5: 13:0f:0e:8c:38:a1:1b:75:22:35:57:29:3a:8f:4c: c1:f0:ed:7f:24:6a:0b:e3:76:62:82:0c:94:98:b5: d3:19:05:43:76:e0:e5:91:9b:95:41:3c:35:5e:ad: 2c:be:cd:51:88:61:b1:81:a2:78:96:c3:17:26:b6: 93:31:2b:1f:b0:00:f7:cb:9f:3b:7b:b4:04:1b:45: c7:0f:7e:3c:44:c4:13:0a:4c:09:17:44:92:db:fe: 3a:bf:db:29:00:00:c2:75:2e:3f:56:84:d2:08:1d: 5f:a9:e5:10:11:3a:eb:56:d3:9a:e9:b2:0c:e7:17: 6d:d6:c1:51:39:b1:bb:59:07:0a:40:85:10:3e:02: 68:6f:a3:22:bd:ef:af:7c:24:2c:13:35:fe:16:45: f6:32:c0:be:a4:d1:27:5f:62:0b:37:de:03:ac:73: 0a:20:45:a3:e3:86:13:58:7f:98:b8:0b:9e:48:73: 4e:58:a9:2e:91:e1:91:93:1f:ea:95:c5:7a:fa:b5: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:62:1F:AD:1F:9C:67:8E:BC:16:8E:64:2A:8B:C3:1F:0C:EC:AD X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:91:51:e0:63:cf:78:80:9f:79:51:21:2d:29:9d:e0:37: 90:d5:9d:cb:ce:26:e3:c9:3b:45:54:b1:95:a7:f5:3a:ea:ea: 0a:f9:2d:35:be:ee:76:50:7a:1a:02:ac:fb:ac:38:b0:f4:72: c5:c1:a6:0d:24:e7:25:11:a6:a1:3b:8c:aa:74:db:b6:db:b8: ee:12:92:55:4e:f6:9b:9a:1e:63:b1:3d:0a:a5:1e:2b:83:36: 6d:cb:8b:48:b2:b2:8c:51:63:8c:c5:47:1d:28:e0:6b:a5:57: 9a:b9:03:ce:b5:7d:ef:59:f6:83:37:6f:35:90:21:6c:41:e6: 67:3d:45:19:f2:ec:4c:95:64:b7:4d:77:be:29:ee:14:ca:e0: 7b:5f:19:a9:c7:d9:0c:30:be:d3:88:ba:88:c7:4b:ff:4d:26: 86:98:a3:fc:2e:ea:94:4a:6a:d8:3a:03:c7:65:82:d4:3f:62: 23:59:06:b9:48:d5:fd:a1:ca:9d:24:4d:90:5a:c3:ee:2c:6e: b9:71:f2:dd:c1:51:07:75:26:1b:1e:bd:e0:54:c4:d3:e1:c7: 31:ef:a5:2f:04:5b:b3:a7:c4:d1:66:7f:01:a2:b7:86:3c:95: c5:55:9f:a5:e0:47:9d:e1:43:c8:a7:e9:6e:b2:cc:40:53:33: 6d:85:61:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe8PlC2BsJFuumKt2D3PNF7hPzp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA3MjkxMTM0MTZaFw0yNjA3MzAxNTE5MTZaMDMxMTAvBgNV BAMTKENDODY2MjFGQUQxRjlDNjc4RUJDMTY4RTY0MkE4QkMzMUYwQ0VDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqDEqGCRr5I/c7A3hPMhm/LO0 I5+EkEV1koeurUQAJcYL1bAU3+fn535yT4GM4Jt7yREjibQJgTzAxRMPDow4oRt1 IjVXKTqPTMHw7X8kagvjdmKCDJSYtdMZBUN24OWRm5VBPDVerSy+zVGIYbGBoniW wxcmtpMxKx+wAPfLnzt7tAQbRccPfjxExBMKTAkXRJLb/jq/2ykAAMJ1Lj9WhNII HV+p5RAROutW05rpsgznF23WwVE5sbtZBwpAhRA+AmhvoyK97698JCwTNf4WRfYy wL6k0SdfYgs33gOscwogRaPjhhNYf5i4C55Ic05YqS6R4ZGTH+qVxXr6tR+DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzIZiH60fnGeOvBaOZCqLwx8M7K0wHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeCRUeBjz3iA n3lRIS0pneA3kNWdy84m48k7RVSxlaf1OurqCvktNb7udlB6GgKs+6w4sPRyxcGm DSTnJRGmoTuMqnTbttu47hKSVU72m5oeY7E9CqUeK4M2bcuLSLKyjFFjjMVHHSjg a6VXmrkDzrV971n2gzdvNZAhbEHmZz1FGfLsTJVkt013vinuFMrge18ZqcfZDDC+ 04i6iMdL/00mhpij/C7qlEpq2DoDx2WC1D9iI1kGuUjV/aHKnSRNkFrD7ixuuXHy 3cFRB3UmGx694FTE0+HHMe+lLwRbs6fE0WZ/AaK3hjyVxVWfpeBHneFDyKfpbrLM QFMzbYVh1w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:08 2026 by rpki-client