$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: caNlZr1GdUHCSYbph0xEbhXnU+pmW2MwYUgqAkLbu2Y= Subject key identifier: 13:5C:BE:01:A2:06:07:22:A2:01:15:B8:EC:2E:03:60:F1:98:D5:4C Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 4D7407E8F0743B8F78FC133F76B636E41E95C303 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 04:33:25 +0000 Manifest this update: Wed 29 Jul 2026 04:28:25 +0000 Manifest next update: Thu 30 Jul 2026 06:53:25 +0000 Files and hashes: 1: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=) 2: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=) 3: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=) 4: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: +PS/JKJqOIolwx2Sr0sdaQ2caIOKdflhpIyQ2W3T/AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:74:07:e8:f0:74:3b:8f:78:fc:13:3f:76:b6:36:e4:1e:95:c3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Jul 29 04:28:25 2026 GMT Not After : Jul 30 06:53:25 2026 GMT Subject: CN=135CBE01A2060722A20115B8EC2E0360F198D54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:c2:6d:e3:b7:7d:58:9e:d8:6a:59:90:6e: 37:bc:5c:c0:8e:98:e2:81:9a:01:15:1d:d3:48:f8: 7d:d1:14:da:7c:43:59:f1:84:75:7c:6e:26:aa:7e: 7a:9b:57:55:cc:23:c0:03:7f:96:be:36:34:13:ed: 2b:a0:42:62:89:91:7e:00:48:a7:5a:93:23:23:36: 8d:84:c0:ce:c6:bd:ac:69:74:41:2f:1e:3c:da:7d: f9:95:a0:22:58:d0:d2:c0:f7:d0:6b:bf:40:49:7d: 78:74:f3:dd:da:00:ad:3f:20:61:69:4b:55:f9:81: 89:41:65:e0:16:9b:cb:06:0d:c0:b3:4a:6f:a3:4e: 4d:8a:74:8b:a8:60:7f:5e:44:ef:b0:07:48:80:6b: ae:71:7e:95:e7:a2:8f:b0:6d:0b:c5:90:90:11:e2: f3:83:bf:4a:4a:95:b6:f5:ce:03:1e:39:9e:61:83: 00:8a:63:3e:c5:98:97:c0:93:0d:5c:a2:95:48:b8: ad:f9:d2:d8:35:13:c9:c4:9d:86:10:6d:6b:bc:15: e8:a7:bc:8c:6a:97:9f:87:4a:17:44:cb:0b:81:25: 18:be:ac:db:ed:ee:ad:61:63:77:bf:96:03:db:3f: a9:c5:91:d0:e6:8e:7b:11:6b:96:2d:6f:0e:3c:88: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:BE:01:A2:06:07:22:A2:01:15:B8:EC:2E:03:60:F1:98:D5:4C X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:70:f5:f9:5d:36:89:f1:0f:04:2b:84:25:1f:a4:e9:aa:ff: 27:88:19:99:72:6f:72:64:7c:ca:08:be:ae:30:b8:9b:67:b1: 24:df:38:69:aa:15:82:80:d1:91:4a:4a:72:be:a8:33:76:48: 52:ae:42:81:32:ce:ad:ea:af:34:62:95:e9:7e:77:0f:85:ef: fd:b4:06:29:6d:ea:ce:68:b4:05:0a:28:93:de:8d:bc:c3:01: d1:83:c6:4b:28:6d:b8:7d:7f:88:e1:23:66:3a:b4:34:7b:e7: 2a:82:56:fe:91:5b:47:6e:95:c1:8d:fd:9e:51:6a:10:8e:b4: 46:28:d2:72:b8:f2:37:33:94:6e:6a:22:b9:5e:57:16:fa:0b: d0:37:ad:1c:fa:34:40:5e:59:7b:1c:c5:b2:02:5e:ec:58:5b: d2:e9:24:70:25:07:4b:55:92:99:71:9b:47:7b:a0:c7:a8:0e: d5:58:6c:d3:b9:46:f2:35:fc:9c:85:3f:95:9b:22:26:d6:39: 62:fa:56:87:39:35:4c:9d:cf:b4:70:ef:8e:61:0c:12:4a:73: c8:67:68:f3:f6:b9:a5:6f:bf:85:82:46:6c:51:6a:16:fb:3d: 47:2c:66:d2:41:09:36:b2:80:69:62:cc:f0:44:43:b2:78:fc: 99:f8:74:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTXQH6PB0O494/BM/drY25B6VwwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA3MjkwNDI4MjVaFw0yNjA3MzAwNjUzMjVaMDMxMTAvBgNV BAMTKDEzNUNCRTAxQTIwNjA3MjJBMjAxMTVCOEVDMkUwMzYwRjE5OEQ1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC168Jt47d9WJ7YalmQbje8XMCO mOKBmgEVHdNI+H3RFNp8Q1nxhHV8biaqfnqbV1XMI8ADf5a+NjQT7SugQmKJkX4A SKdakyMjNo2EwM7GvaxpdEEvHjzaffmVoCJY0NLA99Brv0BJfXh0893aAK0/IGFp S1X5gYlBZeAWm8sGDcCzSm+jTk2KdIuoYH9eRO+wB0iAa65xfpXnoo+wbQvFkJAR 4vODv0pKlbb1zgMeOZ5hgwCKYz7FmJfAkw1copVIuK350tg1E8nEnYYQbWu8Fein vIxql5+HShdEywuBJRi+rNvt7q1hY3e/lgPbP6nFkdDmjnsRa5Ytbw48iBpnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE1y+AaIGByKiARW47C4DYPGY1UwwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHD1+V02ifEP BCuEJR+k6ar/J4gZmXJvcmR8ygi+rjC4m2exJN84aaoVgoDRkUpKcr6oM3ZIUq5C gTLOreqvNGKV6X53D4Xv/bQGKW3qzmi0BQook96NvMMB0YPGSyhtuH1/iOEjZjq0 NHvnKoJW/pFbR26VwY39nlFqEI60RijScrjyNzOUbmoiuV5XFvoL0DetHPo0QF5Z exzFsgJe7Fhb0ukkcCUHS1WSmXGbR3ugx6gO1Vhs07lG8jX8nIU/lZsiJtY5YvpW hzk1TJ3PtHDvjmEMEkpzyGdo8/a5pW+/hYJGbFFqFvs9Ryxm0kEJNrKAaWLM8ERD snj8mfh0gw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:34 2026 by rpki-client