$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: e1W3nMKF1ydle/oFrGbHDtA5TA3Oj16HXmZtV1gNGJg= Subject key identifier: D4:7E:CF:8C:0E:F7:A4:BC:EA:89:16:47:D5:E6:2D:C3:7D:A0:40:78 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 4ABE174718DBBFE84FAD57B122F5258AB6FD8B88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 11:24:16 +0000 Manifest this update: Wed 29 Jul 2026 11:19:16 +0000 Manifest next update: Thu 30 Jul 2026 12:33:16 +0000 Files and hashes: 1: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: zwhDxuwEZGExxwkZuBTnHr7i05JnV9LIoA4oKQl+6SA=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:be:17:47:18:db:bf:e8:4f:ad:57:b1:22:f5:25:8a:b6:fd:8b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Jul 29 11:19:16 2026 GMT Not After : Jul 30 12:33:16 2026 GMT Subject: CN=D47ECF8C0EF7A4BCEA891647D5E62DC37DA04078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:3f:5a:d9:05:e0:22:9e:25:1b:82:71:f1: 8a:fd:aa:e9:b8:94:11:3b:2e:ab:d7:cf:48:6f:07: 06:da:35:47:da:28:74:35:98:b1:5a:ce:35:16:52: 83:2e:6d:20:73:b9:1f:e4:8a:65:98:1e:76:3d:55: 06:45:f2:0c:b2:fc:6a:8c:47:1f:78:09:c9:44:f1: 11:b6:aa:63:41:53:08:de:2d:62:de:9d:0e:06:ab: 06:5a:0f:d6:ea:59:81:44:c0:6a:0a:c3:c3:68:47: a4:85:3f:97:00:1e:ca:66:52:34:c8:4f:77:63:c7: 34:6f:b4:05:36:d8:26:92:a2:82:5f:6a:2b:30:6b: 6b:9f:b1:fb:80:79:4c:ff:a4:85:f8:a8:6f:48:3b: 85:e7:f6:08:af:6a:ad:f1:5d:08:63:73:59:63:c1: 2b:e0:05:c2:95:13:6e:c8:85:c7:2a:88:58:c7:53: 65:2f:c2:a9:5f:85:d5:49:38:f6:29:9d:8f:34:21: e2:d6:39:14:e3:42:f3:49:65:11:47:9b:f6:dc:ff: 49:67:6b:75:6d:55:ec:7b:38:24:e2:1a:a7:f2:c3: ae:59:9b:8d:cb:b2:9d:03:40:f2:bb:17:46:f3:3a: 41:a7:96:96:00:f7:47:9f:eb:af:10:43:46:12:57: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:CF:8C:0E:F7:A4:BC:EA:89:16:47:D5:E6:2D:C3:7D:A0:40:78 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:eb:3d:0b:a0:34:ee:cf:fd:96:3a:25:f0:e2:eb:b4:21:44: f1:3f:ba:ca:71:e6:18:01:ec:9f:fb:eb:6b:41:9d:9b:45:1e: 47:54:9d:97:5d:68:38:01:7d:62:a2:2c:6f:99:c6:88:90:d5: 0b:5c:1c:57:5d:e9:26:56:0a:aa:e4:48:a6:4e:4e:ca:78:1d: 06:8a:1c:de:64:c6:9e:6c:39:a7:3b:22:32:89:b2:6d:2b:87: 4a:6d:5b:59:ac:bd:fe:e1:46:7b:e7:d1:3c:b2:da:c9:86:24: 58:34:bb:aa:b9:2d:a9:42:65:09:1c:e6:11:f2:62:5d:c2:2b: 5d:d5:35:d6:ec:b4:5f:1e:65:a3:df:e2:01:f9:36:b1:8f:2a: 03:b0:b3:96:c2:ca:b9:87:fa:7b:61:d9:cc:5b:ba:95:fe:e4: 46:a2:b0:ce:b5:97:19:e1:6e:e9:c5:2c:d7:f8:f3:dd:33:28: c9:8a:ce:8b:2d:14:23:e1:ce:e5:5b:04:1b:35:e5:a4:fc:a7: cf:70:3e:c3:1d:85:8a:4f:b1:43:f7:c0:42:e7:bb:65:77:87: 50:da:d7:81:b8:95:44:cf:d3:0b:c8:d3:a4:37:03:25:68:16: 8f:43:9d:18:9a:a9:ea:99:d5:00:37:8c:c4:fb:c2:99:8d:63: dc:26:a8:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSr4XRxjbv+hPrVexIvUlirb9i4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA3MjkxMTE5MTZaFw0yNjA3MzAxMjMzMTZaMDMxMTAvBgNV BAMTKEQ0N0VDRjhDMEVGN0E0QkNFQTg5MTY0N0Q1RTYyREMzN0RBMDQwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Gj9a2QXgIp4lG4Jx8Yr9qum4 lBE7LqvXz0hvBwbaNUfaKHQ1mLFazjUWUoMubSBzuR/kimWYHnY9VQZF8gyy/GqM Rx94CclE8RG2qmNBUwjeLWLenQ4GqwZaD9bqWYFEwGoKw8NoR6SFP5cAHspmUjTI T3djxzRvtAU22CaSooJfaiswa2ufsfuAeUz/pIX4qG9IO4Xn9givaq3xXQhjc1lj wSvgBcKVE27IhccqiFjHU2UvwqlfhdVJOPYpnY80IeLWORTjQvNJZRFHm/bc/0ln a3VtVex7OCTiGqfyw65Zm43Lsp0DQPK7F0bzOkGnlpYA90ef668QQ0YSV22fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1H7PjA73pLzqiRZH1eYtw32gQHgwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOs9C6A07s/9 ljol8OLrtCFE8T+6ynHmGAHsn/vra0Gdm0UeR1Sdl11oOAF9YqIsb5nGiJDVC1wc V13pJlYKquRIpk5OyngdBooc3mTGnmw5pzsiMomybSuHSm1bWay9/uFGe+fRPLLa yYYkWDS7qrktqUJlCRzmEfJiXcIrXdU11uy0Xx5lo9/iAfk2sY8qA7CzlsLKuYf6 e2HZzFu6lf7kRqKwzrWXGeFu6cUs1/jz3TMoyYrOiy0UI+HO5VsEGzXlpPynz3A+ wx2Fik+xQ/fAQue7ZXeHUNrXgbiVRM/TC8jTpDcDJWgWj0OdGJqp6pnVADeMxPvC mY1j3CaoQQ== -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:01 2026 by rpki-client