$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: f1vzvUWBxY1T+scjI7oGG3WK0Tc4v+g8TjemdVThRPw= Subject key identifier: 70:F5:19:65:EC:D9:1A:7E:9F:B8:C8:EF:BC:76:15:8B:45:48:63:E5 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 5C5A2AF6A3CDD55562F08EC6807BB5A4E70A068D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: FE Signing time: Wed 29 Jul 2026 14:14:32 +0000 Manifest this update: Wed 29 Jul 2026 14:09:32 +0000 Manifest next update: Thu 30 Jul 2026 14:34:32 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: 7hjjP+OwUseG6te6eTl38bnmWq/oppGqCCn7bUu159M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5a:2a:f6:a3:cd:d5:55:62:f0:8e:c6:80:7b:b5:a4:e7:0a:06:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jul 29 14:09:32 2026 GMT Not After : Jul 30 14:34:32 2026 GMT Subject: CN=70F51965ECD91A7E9FB8C8EFBC76158B454863E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:42:74:06:1e:d5:25:91:4b:97:ec:99:97: 0b:6b:89:da:54:0e:00:97:4e:38:d4:44:f1:25:cc: dd:fe:51:be:b7:99:3d:cc:fb:00:74:25:27:99:49: 58:f3:d2:cc:bd:fe:76:ed:5f:12:81:09:d9:40:e5: 9c:e2:d2:65:db:fa:7a:bf:9f:32:c6:47:c5:bf:66: ab:cf:84:8c:1f:88:99:b1:e9:78:ad:95:1c:6a:b4: 56:77:55:dc:db:85:c9:eb:ea:90:82:40:7c:fe:f1: 44:9e:52:47:9d:52:de:b0:3c:5d:20:25:88:cb:e0: 4e:59:b5:fc:d6:14:ac:09:c1:a7:aa:c2:85:51:53: 1a:77:ac:21:0e:87:7a:2f:f1:8e:60:d4:94:da:61: 6b:a4:b4:d2:73:3e:98:af:c4:d6:63:a6:1f:b2:e6: ab:bc:72:7a:43:7a:df:54:60:10:7b:67:b5:e3:17: aa:75:7f:a4:8e:45:69:65:08:99:b1:16:56:22:a8: 7e:96:56:96:61:16:92:b2:73:8d:13:93:01:53:34: 2d:4b:2c:39:dd:6b:f0:f1:47:55:03:56:77:10:32: cf:3b:a1:31:02:4b:c7:77:8e:6e:20:35:c7:19:71: ac:88:e1:9d:6e:e5:e3:f0:a1:b9:d5:b5:77:3c:bd: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:19:65:EC:D9:1A:7E:9F:B8:C8:EF:BC:76:15:8B:45:48:63:E5 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6f:54:7c:0b:12:14:b1:cb:a6:f2:03:59:c2:69:c5:47:e5: 6c:12:c1:c1:79:9b:be:74:57:6f:06:b8:3a:09:14:d3:36:98: 13:4c:5b:b0:5c:b3:b9:9c:b5:e5:f5:0a:f4:5a:1c:24:9b:e4: 39:cd:8c:19:b0:4e:ce:bb:51:01:bc:2e:6c:64:08:86:cf:cd: 11:42:94:39:12:80:ad:c7:4e:c0:55:ac:83:a7:f9:9d:d1:46: 22:e0:5e:56:36:96:0f:9a:11:1b:c5:c3:f7:59:4f:75:e7:2a: da:b9:14:b2:ec:b5:d1:0a:0f:99:19:7a:78:6b:a3:b9:08:82: 06:22:3e:9d:65:b1:ad:7c:ae:69:3a:3e:9d:bd:fb:2b:9d:13: 58:21:3f:c3:94:db:37:ae:5a:c3:e8:c5:b9:3e:04:51:4c:c9: c7:f2:39:98:be:da:c2:66:0c:dc:54:f9:d2:63:39:48:c0:c2: fb:68:54:e2:8c:86:25:51:76:44:35:bc:d6:54:ff:a6:21:2d: 03:e5:c2:c0:f0:ad:e5:c1:cc:0c:37:a0:95:dc:11:32:e5:17: b2:c2:61:e1:5c:bd:bd:0c:53:42:48:82:6e:df:2f:7c:59:e7: 34:43:3d:74:b9:d4:34:74:d2:4d:20:68:1c:a7:0b:1e:07:8b: e2:11:df:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXFoq9qPN1VVi8I7GgHu1pOcKBo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA3MjkxNDA5MzJaFw0yNjA3MzAxNDM0MzJaMDMxMTAvBgNV BAMTKDcwRjUxOTY1RUNEOTFBN0U5RkI4QzhFRkJDNzYxNThCNDU0ODYzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8UJ0Bh7VJZFLl+yZlwtridpU DgCXTjjURPElzN3+Ub63mT3M+wB0JSeZSVjz0sy9/nbtXxKBCdlA5Zzi0mXb+nq/ nzLGR8W/ZqvPhIwfiJmx6XitlRxqtFZ3Vdzbhcnr6pCCQHz+8USeUkedUt6wPF0g JYjL4E5ZtfzWFKwJwaeqwoVRUxp3rCEOh3ov8Y5g1JTaYWuktNJzPpivxNZjph+y 5qu8cnpDet9UYBB7Z7XjF6p1f6SORWllCJmxFlYiqH6WVpZhFpKyc40TkwFTNC1L LDnda/DxR1UDVncQMs87oTECS8d3jm4gNccZcayI4Z1u5ePwobnVtXc8vXY5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcPUZZezZGn6fuMjvvHYVi0VIY+UwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASG9UfAsSFLHL pvIDWcJpxUflbBLBwXmbvnRXbwa4OgkU0zaYE0xbsFyzuZy15fUK9FocJJvkOc2M GbBOzrtRAbwubGQIhs/NEUKUORKArcdOwFWsg6f5ndFGIuBeVjaWD5oRG8XD91lP decq2rkUsuy10QoPmRl6eGujuQiCBiI+nWWxrXyuaTo+nb37K50TWCE/w5TbN65a w+jFuT4EUUzJx/I5mL7awmYM3FT50mM5SMDC+2hU4oyGJVF2RDW81lT/piEtA+XC wPCt5cHMDDegldwRMuUXssJh4Vy9vQxTQkiCbt8vfFnnNEM9dLnUNHTSTSBoHKcL HgeL4hHfcQ== -----END CERTIFICATE-----Generated at Thu Jul 30 03:10:39 2026 by rpki-client