$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: an5jvThdG+Kp2jbzvmF//qBhRKdphkRDa9n9DNt5mHM= Subject key identifier: 22:EC:72:1D:FF:E5:88:31:F1:A8:91:51:64:F6:6B:A2:F3:58:72:C7 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 5E5CD367166B3F1629528F6CC40E834D7CDE8F17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 0102 Signing time: Wed 29 Jul 2026 12:54:24 +0000 Manifest this update: Wed 29 Jul 2026 12:49:24 +0000 Manifest next update: Thu 30 Jul 2026 13:59:24 +0000 Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 2: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: Hg9b4CLMAUmEpxKDwof+uDKp9EegztY0gCZ2rAKjGH8=) 3: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) 4: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5c:d3:67:16:6b:3f:16:29:52:8f:6c:c4:0e:83:4d:7c:de:8f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Jul 29 12:49:24 2026 GMT Not After : Jul 30 13:59:24 2026 GMT Subject: CN=22EC721DFFE58831F1A8915164F66BA2F35872C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8e:4d:f9:92:85:b3:8c:3a:7b:95:6c:a6:8c: 16:69:b3:70:78:9a:36:3f:43:a3:30:06:a4:ea:9e: 4a:84:aa:d8:a9:3d:06:30:9f:ae:d5:b3:9d:0c:b7: 7a:05:89:5b:62:fa:eb:90:48:c9:47:df:ee:80:1d: a6:7c:3a:bb:51:6f:30:f5:89:8b:dc:c3:9f:15:35: 12:dd:e4:db:8d:e6:60:6c:8e:86:c3:fc:4b:25:56: 60:08:b6:43:99:c8:ce:ed:b6:50:b5:0c:d5:27:42: e1:cb:8b:73:e9:53:09:00:d6:b0:8f:a8:3f:18:32: 1b:d0:64:49:53:6f:dc:44:14:b2:87:e4:34:13:77: 55:61:b6:5e:7c:4a:7f:fb:e1:76:f4:bb:48:34:c1: ba:87:a1:33:d8:10:bd:78:b4:1c:d1:39:8a:22:1e: 4e:c5:5d:43:99:24:bd:d1:fb:3a:f1:1d:c0:90:8c: 91:32:6a:9b:69:92:37:78:ae:5a:66:d1:47:11:ba: 9b:f8:b5:06:e6:2c:35:d3:77:a5:21:5f:5f:78:b3: ff:5f:cc:23:02:02:e4:63:b2:b0:d8:51:e5:a2:7e: 2d:22:19:f6:53:b1:25:49:ae:8a:74:a0:43:5e:c6: 6d:8d:2e:1b:c3:8d:0c:24:96:bc:04:e6:79:44:75: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EC:72:1D:FF:E5:88:31:F1:A8:91:51:64:F6:6B:A2:F3:58:72:C7 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8e:6d:6e:c4:ae:0d:6f:05:b5:69:27:e3:e3:79:cd:c3:b7: 46:88:f3:ac:f8:14:06:b8:84:ec:93:af:54:3e:3c:68:94:fc: ea:f1:02:17:79:c7:1d:2e:56:f5:6f:eb:78:c0:ad:c2:68:4b: 13:8c:94:66:53:2a:5f:cc:a7:aa:4f:49:18:57:19:29:d9:3f: 73:fd:03:f5:eb:ac:89:bc:0f:d6:0d:05:69:c3:f9:9a:57:7b: f0:b8:fa:ca:67:02:01:4d:c8:8f:48:0e:b5:fa:3d:30:dc:54: 26:67:b0:6a:3e:07:c0:ab:a1:eb:f4:ac:a7:8a:c2:80:59:2b: c8:b2:7c:ba:09:e8:6b:f1:78:52:88:66:93:61:f0:4d:60:8c: bf:b9:d6:10:9d:85:ad:12:9f:a6:67:af:f6:55:b2:79:52:b7: 25:b3:44:4e:79:86:8b:9f:a1:3b:80:a2:c8:66:1f:30:62:51: 5d:c5:bd:a0:02:99:38:e6:d4:40:3d:c4:cb:31:cf:c0:f1:55: 3a:50:ee:d2:f3:3b:19:4c:4f:46:8a:27:e2:76:41:78:60:53: 61:6a:f8:18:f3:a6:d7:f3:ff:f9:2b:f9:e9:57:64:ce:87:37: 12:7a:7a:8e:20:12:93:54:dc:d7:19:b2:6c:b0:be:5f:3f:81: 45:fe:18:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXlzTZxZrPxYpUo9sxA6DTXzejxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA3MjkxMjQ5MjRaFw0yNjA3MzAxMzU5MjRaMDMxMTAvBgNV BAMTKDIyRUM3MjFERkZFNTg4MzFGMUE4OTE1MTY0RjY2QkEyRjM1ODcyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyjk35koWzjDp7lWymjBZps3B4 mjY/Q6MwBqTqnkqEqtipPQYwn67Vs50Mt3oFiVti+uuQSMlH3+6AHaZ8OrtRbzD1 iYvcw58VNRLd5NuN5mBsjobD/EslVmAItkOZyM7ttlC1DNUnQuHLi3PpUwkA1rCP qD8YMhvQZElTb9xEFLKH5DQTd1Vhtl58Sn/74Xb0u0g0wbqHoTPYEL14tBzROYoi Hk7FXUOZJL3R+zrxHcCQjJEyaptpkjd4rlpm0UcRupv4tQbmLDXTd6UhX194s/9f zCMCAuRjsrDYUeWifi0iGfZTsSVJrop0oENexm2NLhvDjQwklrwE5nlEdfVdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIuxyHf/liDHxqJFRZPZrovNYcscwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY5tbsSuDW8F tWkn4+N5zcO3RojzrPgUBriE7JOvVD48aJT86vECF3nHHS5W9W/reMCtwmhLE4yU ZlMqX8ynqk9JGFcZKdk/c/0D9eusibwP1g0FacP5mld78Lj6ymcCAU3Ij0gOtfo9 MNxUJmewaj4HwKuh6/Ssp4rCgFkryLJ8ugnoa/F4Uohmk2HwTWCMv7nWEJ2FrRKf pmev9lWyeVK3JbNETnmGi5+hO4CiyGYfMGJRXcW9oAKZOObUQD3EyzHPwPFVOlDu 0vM7GUxPRoon4nZBeGBTYWr4GPOm1/P/+Sv56Vdkzoc3Enp6jiASk1Tc1xmybLC+ Xz+BRf4Y4w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:12:09 2026 by rpki-client