$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: 7S2T+3rYu0EiFo9cQx3sjZheY/jN5nrXjOMMd2Kod54= Subject key identifier: DF:E3:E3:A1:B9:BF:DA:76:A8:7B:0E:E0:1B:A3:60:FA:10:39:58:6D Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 37FF2D7D56C6136D557AE86DCFB038FCA70FA8A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 012A Signing time: Wed 29 Jul 2026 04:28:25 +0000 Manifest this update: Wed 29 Jul 2026 04:23:25 +0000 Manifest next update: Thu 30 Jul 2026 05:33:25 +0000 Files and hashes: 1: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: RUTkOlnTCIueToR07s8YNQg3B3RchqA0LnlZYSUSe+0=) 2: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 3: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=) 4: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=) 5: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 6: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=) 7: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=) 8: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 9: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=) 10: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=) 11: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 12: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=) 13: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 14: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=) 15: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=) 16: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 17: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=) 18: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=) 19: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=) 20: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ff:2d:7d:56:c6:13:6d:55:7a:e8:6d:cf:b0:38:fc:a7:0f:a8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Jul 29 04:23:25 2026 GMT Not After : Jul 30 05:33:25 2026 GMT Subject: CN=DFE3E3A1B9BFDA76A87B0EE01BA360FA1039586D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:dc:f1:52:96:ae:5a:ce:cc:f6:8d:73:8d: b0:44:d9:2c:75:5c:1f:1a:13:55:b8:d4:a9:cc:9e: 62:80:ed:a7:57:ff:5a:2b:9b:42:db:e1:40:86:9a: 82:4f:37:0e:34:df:fa:ab:ef:92:4e:60:b1:46:ce: df:3e:c2:6e:87:03:f8:23:7f:4a:4e:78:4c:ad:ad: 93:fb:47:b0:b0:6f:6d:f5:6c:71:49:87:3d:7b:f5: 70:2d:b0:8c:30:27:52:eb:1a:14:79:70:1c:57:36: 0b:99:1a:59:91:e9:6d:ce:ae:f5:93:0c:6b:32:5c: a4:86:82:88:e6:27:2a:86:a2:9c:3b:50:59:72:ec: 48:e8:eb:4a:57:e5:ea:45:c1:19:d3:84:d6:4e:51: 7e:bd:a4:d5:97:a7:56:67:c6:e2:7b:78:c9:e4:ca: db:72:04:69:93:fd:cb:3c:c4:44:72:e2:91:05:d7: 13:eb:74:e9:fb:a0:3c:42:24:48:6b:bf:d4:80:6f: 50:82:a4:d8:a2:51:e3:3a:99:ff:6d:e5:93:fb:2b: 40:4f:05:7f:bc:6e:ae:d0:d1:52:15:90:d6:34:bb: 62:25:5a:29:88:04:d3:2f:c3:68:5b:db:66:8a:7c: 65:7a:f8:0c:7c:7c:2d:66:bb:92:3e:08:50:25:54: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:E3:A1:B9:BF:DA:76:A8:7B:0E:E0:1B:A3:60:FA:10:39:58:6D X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:93:3c:1a:75:c8:74:26:9a:0f:d6:19:f9:d8:ee:01:52: b6:d9:ed:e4:9b:03:4b:92:03:fc:d7:73:63:34:cf:8a:b4:3f: c2:e4:e4:e3:bb:db:04:02:c2:d6:ef:e3:fb:1a:49:44:1e:a2: 5f:6a:76:a7:31:86:20:1e:af:8d:60:90:93:9f:48:be:a9:08: 21:ee:e0:6c:58:ad:2e:cc:ad:30:e9:3e:51:f0:ec:85:4e:79: 62:06:6b:a1:9f:e7:fd:9d:34:1b:0e:44:5a:fc:af:79:06:88: 83:8d:80:5a:82:10:b3:cf:58:23:53:2e:ef:23:e4:fe:8d:c8: b2:f7:1f:a8:72:51:ea:f0:92:b3:49:3b:fb:da:ce:08:c5:a7: 2b:5b:50:0c:5a:7a:9a:c4:d2:e4:19:72:b8:96:b6:ab:1a:9a: be:0e:48:0a:2f:7a:76:fc:3f:04:78:b5:af:cc:bd:dd:34:3c: 7a:3c:6b:82:ed:bc:cf:b8:47:af:68:de:1f:76:56:3f:87:45: bc:d4:91:c9:17:75:a7:d9:a5:bd:ca:03:04:5f:06:14:5b:32: 2f:c1:33:cd:31:55:8e:62:fd:77:41:21:2c:4c:85:12:14:15: 2f:c1:e7:69:11:37:eb:9d:51:e1:aa:05:f1:8e:d1:c4:04:8b: e6:d4:f4:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN/8tfVbGE21Veuhtz7A4/KcPqKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA3MjkwNDIzMjVaFw0yNjA3MzAwNTMzMjVaMDMxMTAvBgNV BAMTKERGRTNFM0ExQjlCRkRBNzZBODdCMEVFMDFCQTM2MEZBMTAzOTU4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwtzxUpauWs7M9o1zjbBE2Sx1 XB8aE1W41KnMnmKA7adX/1orm0Lb4UCGmoJPNw403/qr75JOYLFGzt8+wm6HA/gj f0pOeEytrZP7R7Cwb231bHFJhz179XAtsIwwJ1LrGhR5cBxXNguZGlmR6W3OrvWT DGsyXKSGgojmJyqGopw7UFly7Ejo60pX5epFwRnThNZOUX69pNWXp1ZnxuJ7eMnk yttyBGmT/cs8xERy4pEF1xPrdOn7oDxCJEhrv9SAb1CCpNiiUeM6mf9t5ZP7K0BP BX+8bq7Q0VIVkNY0u2IlWimIBNMvw2hb22aKfGV6+Ax8fC1mu5I+CFAlVLVNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3+Pjobm/2naoew7gG6Ng+hA5WG0wHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAl6TPBp1yHQm mg/WGfnY7gFSttnt5JsDS5ID/NdzYzTPirQ/wuTk47vbBALC1u/j+xpJRB6iX2p2 pzGGIB6vjWCQk59IvqkIIe7gbFitLsytMOk+UfDshU55YgZroZ/n/Z00Gw5EWvyv eQaIg42AWoIQs89YI1Mu7yPk/o3IsvcfqHJR6vCSs0k7+9rOCMWnK1tQDFp6msTS 5BlyuJa2qxqavg5ICi96dvw/BHi1r8y93TQ8ejxrgu28z7hHr2jeH3ZWP4dFvNSR yRd1p9mlvcoDBF8GFFsyL8EzzTFVjmL9d0EhLEyFEhQVL8HnaRE3651R4aoF8Y7R xASL5tT0wQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:13:55 2026 by rpki-client