$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: wRpny+0WXWowCa5L02/2ygGmvXITuwLsrt8k+o82ZTI= Subject key identifier: 70:83:58:94:D5:A2:4E:DA:EF:81:72:20:8E:F2:78:93:4E:49:4E:8A Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 4878446E02A7073FBB195AC0D409875DD55940B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 21:50:20 +0000 Manifest this update: Wed 29 Jul 2026 21:45:20 +0000 Manifest next update: Fri 31 Jul 2026 00:26:20 +0000 Files and hashes: 1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 2: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 3: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: mIqf7WcSe9sMxgXx08Nx6WwoR6CAoz0M1TAc2jwF8pg=) 4: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:78:44:6e:02:a7:07:3f:bb:19:5a:c0:d4:09:87:5d:d5:59:40:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Jul 29 21:45:20 2026 GMT Not After : Jul 31 00:26:20 2026 GMT Subject: CN=70835894D5A24EDAEF8172208EF278934E494E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:10:1a:cd:8a:6f:db:b5:f8:17:d7:74:d8: 68:b2:80:38:49:5b:7c:cd:5d:d2:ca:55:56:a1:40: d0:ee:3b:3d:3e:79:d1:6a:f9:96:04:0b:d5:04:21: ed:1b:05:86:45:7a:80:da:cb:a9:99:c8:50:d8:41: eb:8d:3e:f9:f0:81:49:b2:d1:7b:22:f1:95:74:cd: 0a:37:65:0b:68:4f:ec:3a:f6:ec:ae:ae:e7:13:13: 35:bc:be:0d:6c:32:89:35:72:b8:3b:b7:a4:89:6e: a1:11:b6:26:33:0d:c0:bb:a0:19:f0:04:b8:01:b8: 47:7b:58:54:4e:23:dc:c5:87:8a:dd:2f:67:39:aa: bb:3f:14:03:01:ce:6f:44:f4:9e:e9:c1:6a:e3:a6: 5b:4e:23:20:4c:67:c0:33:28:dc:34:0f:c6:4f:ed: f4:80:94:af:89:11:e9:b7:13:ed:71:be:d5:66:63: b9:72:2d:54:a2:88:0b:d6:4b:1f:b7:bf:05:af:72: 7a:ed:0a:e7:4b:3f:88:a6:57:f9:a3:93:a6:10:73: ad:ca:48:43:e8:0d:6f:71:5c:ab:40:17:61:b6:ed: 4d:52:a6:ce:be:75:ce:ab:46:43:2d:b8:94:27:39: 68:23:5c:49:9c:e8:ea:c1:01:b8:fb:51:fb:88:3d: e9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:58:94:D5:A2:4E:DA:EF:81:72:20:8E:F2:78:93:4E:49:4E:8A X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:cb:b3:c6:e4:22:d5:28:07:7f:cd:32:63:61:43:13:93: 4e:18:be:76:ee:50:4e:b8:7a:65:af:66:09:ea:d6:64:fa:31: 8e:72:14:80:45:00:31:a7:78:ba:bc:f1:7b:42:88:ca:a6:88: 8f:b3:f5:44:5a:c3:0c:5f:9b:5c:56:e7:e2:1e:c8:62:04:20: c5:ad:7f:cf:59:47:75:aa:1a:8a:c5:33:d6:cb:ae:d3:8b:83: f0:2b:db:d7:04:c7:a7:98:24:98:c3:84:63:25:c9:10:5c:c5: 16:2f:e1:b2:ee:5d:3f:e1:3a:8c:fe:57:1f:78:6f:84:a2:52: fc:e2:20:9a:34:35:14:0b:35:51:ef:c2:a3:4b:95:fc:31:04: c5:ce:99:f5:fc:75:22:d6:d8:fe:1a:62:41:63:94:1b:71:a9: 44:66:7e:c8:04:91:eb:b0:da:e0:a6:7c:fb:f0:ee:cb:05:69: 21:be:15:f1:96:51:66:98:b3:9f:6d:64:d0:88:1f:69:2f:9b: d8:85:98:da:3a:c2:88:8f:9f:be:b5:a6:c5:fa:0f:24:e8:82: 36:00:8e:dd:07:f9:79:a6:3a:56:98:34:09:0d:6c:4b:27:30: 00:4b:4f:29:ab:0f:47:c7:0a:fb:fd:60:f1:b3:56:3a:43:0f: 8e:97:66:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSHhEbgKnBz+7GVrA1AmHXdVZQLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA3MjkyMTQ1MjBaFw0yNjA3MzEwMDI2MjBaMDMxMTAvBgNV BAMTKDcwODM1ODk0RDVBMjRFREFFRjgxNzIyMDhFRjI3ODkzNEU0OTRFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPRAazYpv27X4F9d02GiygDhJ W3zNXdLKVVahQNDuOz0+edFq+ZYEC9UEIe0bBYZFeoDay6mZyFDYQeuNPvnwgUmy 0Xsi8ZV0zQo3ZQtoT+w69uyurucTEzW8vg1sMok1crg7t6SJbqERtiYzDcC7oBnw BLgBuEd7WFROI9zFh4rdL2c5qrs/FAMBzm9E9J7pwWrjpltOIyBMZ8AzKNw0D8ZP 7fSAlK+JEem3E+1xvtVmY7lyLVSiiAvWSx+3vwWvcnrtCudLP4imV/mjk6YQc63K SEPoDW9xXKtAF2G27U1Sps6+dc6rRkMtuJQnOWgjXEmc6OrBAbj7UfuIPenLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcINYlNWiTtrvgXIgjvJ4k05JToowHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWHLs8bkItUo B3/NMmNhQxOTThi+du5QTrh6Za9mCerWZPoxjnIUgEUAMad4urzxe0KIyqaIj7P1 RFrDDF+bXFbn4h7IYgQgxa1/z1lHdaoaisUz1suu04uD8Cvb1wTHp5gkmMOEYyXJ EFzFFi/hsu5dP+E6jP5XH3hvhKJS/OIgmjQ1FAs1Ue/Co0uV/DEExc6Z9fx1ItbY /hpiQWOUG3GpRGZ+yASR67Da4KZ8+/DuywVpIb4V8ZZRZpizn21k0IgfaS+b2IWY 2jrCiI+fvrWmxfoPJOiCNgCO3Qf5eaY6Vpg0CQ1sSycwAEtPKasPR8cK+/1g8bNW OkMPjpdm9Q== -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:48 2026 by rpki-client