$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: qlYFtGtvZzcw9OB5/9uypY6q0EmZu6MkIfmkXhOSNrs= Subject key identifier: 6D:6C:61:D3:64:E3:1A:3D:F8:AA:39:C2:C1:AC:F6:7C:DD:39:44:58 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 1838DD65B841F42D72911E37F62B768192DC1E3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: FE Signing time: Wed 29 Jul 2026 00:17:59 +0000 Manifest this update: Wed 29 Jul 2026 00:12:59 +0000 Manifest next update: Thu 30 Jul 2026 00:55:59 +0000 Files and hashes: 1: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 2: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: Uaq8G1ZlG/oP9xKq/391MwNk5/soXTkf9kV7p5ofVw8=) 3: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 4: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:38:dd:65:b8:41:f4:2d:72:91:1e:37:f6:2b:76:81:92:dc:1e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jul 29 00:12:59 2026 GMT Not After : Jul 30 00:55:59 2026 GMT Subject: CN=6D6C61D364E31A3DF8AA39C2C1ACF67CDD394458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:76:45:8c:f0:56:e1:7a:a4:10:67:fd:f7:80: 4b:d2:16:b5:4c:6a:7d:3e:e1:41:7d:07:2f:92:b1: 32:f0:ab:66:32:e2:c9:70:67:4e:d4:41:51:a6:1a: 3d:b1:12:d3:26:62:1f:0d:24:c2:71:7d:a7:11:92: 99:ff:bc:e4:96:bc:fb:fb:15:c2:f5:e7:46:5b:ab: f3:de:d3:27:dd:d1:b0:d5:12:f4:e0:c7:17:08:4e: 24:06:71:da:d4:45:f8:04:aa:e0:6d:fa:9a:a7:a4: c1:74:c6:33:83:a1:9f:96:e5:80:f5:52:c7:99:8f: 05:55:11:2c:7f:d7:b1:76:fe:2d:83:50:de:0c:50: f3:21:0a:56:3b:09:c7:ae:c4:e6:92:6e:69:53:b1: 19:8f:39:6f:7f:e2:0b:3b:8f:2c:f5:90:83:21:47: 3f:d0:a0:9e:55:a8:08:c2:2a:f7:0f:7f:ec:1b:28: c4:76:df:4a:c3:20:d8:4d:1b:fc:16:1c:1c:75:11: 23:4d:e4:b8:80:c8:ce:ad:cc:b8:fa:49:b7:ef:f7: 9a:d2:30:14:66:a5:cb:b1:16:62:90:a7:0d:bb:aa: 36:31:b2:6d:1c:45:a8:66:ba:93:22:92:d6:02:cc: 17:dd:20:17:b8:e8:4c:4d:b0:e4:5a:9b:c1:25:b9: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6C:61:D3:64:E3:1A:3D:F8:AA:39:C2:C1:AC:F6:7C:DD:39:44:58 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0c:c6:7d:d0:6c:d6:99:b1:01:7d:5e:f1:7b:7c:6a:6b:58: a0:24:65:19:e0:86:9e:2d:76:6f:a8:aa:cd:5a:32:38:1d:74: 54:1a:05:61:f3:0e:53:8f:39:51:2a:c6:ca:6b:25:57:6d:9d: e6:03:50:d9:5e:e5:24:0f:da:92:53:2c:f0:4e:f1:50:37:33: 24:3e:8a:0d:bf:57:61:61:f3:b5:48:ac:7f:a6:6c:8b:fa:f4: 03:af:de:cd:6e:f1:b6:58:6d:28:da:99:4c:c5:e5:f5:62:b9: 07:61:77:37:5b:a4:88:09:02:15:5d:d3:bf:61:f1:00:1a:d7: c4:b9:df:82:3f:5b:9d:d6:84:7c:e2:26:e9:aa:96:d6:93:dc: f3:b1:3b:26:79:fb:a9:75:53:d3:26:9e:f7:d6:7d:74:72:ff: b5:17:4d:3d:25:6f:22:d0:fd:66:9b:12:4a:e8:33:3f:51:e3: 2a:bb:b7:69:7d:a9:1c:6a:e2:69:e3:a9:3a:43:92:87:1d:dd: 00:98:d4:67:62:17:b5:1f:f9:2b:fd:e8:53:5a:c3:d3:e8:e6: f6:07:b2:06:7c:3f:5a:f7:af:7d:78:28:13:a7:00:d5:63:df: 1f:35:0f:5f:cd:36:8a:1c:53:52:6b:8c:0f:93:a6:62:23:fe: 6c:70:dc:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGDjdZbhB9C1ykR439it2gZLcHj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA3MjkwMDEyNTlaFw0yNjA3MzAwMDU1NTlaMDMxMTAvBgNV BAMTKDZENkM2MUQzNjRFMzFBM0RGOEFBMzlDMkMxQUNGNjdDREQzOTQ0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdkWM8FbheqQQZ/33gEvSFrVM an0+4UF9By+SsTLwq2Yy4slwZ07UQVGmGj2xEtMmYh8NJMJxfacRkpn/vOSWvPv7 FcL150Zbq/Pe0yfd0bDVEvTgxxcITiQGcdrURfgEquBt+pqnpMF0xjODoZ+W5YD1 UseZjwVVESx/17F2/i2DUN4MUPMhClY7CceuxOaSbmlTsRmPOW9/4gs7jyz1kIMh Rz/QoJ5VqAjCKvcPf+wbKMR230rDINhNG/wWHBx1ESNN5LiAyM6tzLj6Sbfv95rS MBRmpcuxFmKQpw27qjYxsm0cRahmupMiktYCzBfdIBe46ExNsORam8Eluf91AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbWxh02TjGj34qjnCwaz2fN05RFgwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQzGfdBs1pmx AX1e8Xt8amtYoCRlGeCGni12b6iqzVoyOB10VBoFYfMOU485USrGymslV22d5gNQ 2V7lJA/aklMs8E7xUDczJD6KDb9XYWHztUisf6Zsi/r0A6/ezW7xtlhtKNqZTMXl 9WK5B2F3N1ukiAkCFV3Tv2HxABrXxLnfgj9bndaEfOIm6aqW1pPc87E7Jnn7qXVT 0yae99Z9dHL/tRdNPSVvItD9ZpsSSugzP1HjKru3aX2pHGriaeOpOkOShx3dAJjU Z2IXtR/5K/3oU1rD0+jm9geyBnw/WvevfXgoE6cA1WPfHzUPX802ihxTUmuMD5Om YiP+bHDcVg== -----END CERTIFICATE-----Generated at Wed Jul 29 12:28:18 2026 by rpki-client