$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: 8CskfVrAVqSwRg/7f16DbGMboyy+BWcpppWlMfkSBOs= Subject key identifier: D3:6D:77:C1:76:04:83:1A:CC:6A:B0:B9:8A:71:71:78:61:C2:6C:F1 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 41E28AA38A86B3896964FAEAFBA89F07DAB04864 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 04:48:27 +0000 Manifest this update: Wed 29 Jul 2026 04:43:27 +0000 Manifest next update: Thu 30 Jul 2026 08:02:27 +0000 Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 2: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: SZXHPc+4gegGbWviKppXUJpwzAOjKXSGuZ/D2OmlaKA=) 3: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e2:8a:a3:8a:86:b3:89:69:64:fa:ea:fb:a8:9f:07:da:b0:48:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jul 29 04:43:27 2026 GMT Not After : Jul 30 08:02:27 2026 GMT Subject: CN=D36D77C17604831ACC6AB0B98A71717861C26CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:3b:d6:43:bb:ee:59:88:1b:45:6b:07:73: e7:ab:99:f7:48:15:27:9a:95:db:6a:75:26:91:29: bf:61:dd:52:76:58:93:df:d0:06:6d:3a:df:92:d4: f0:f1:1c:8e:9a:37:c0:41:3e:0f:65:61:8c:87:e6: b8:66:9e:73:99:07:6c:c5:24:6b:cd:6f:9c:78:3f: bb:c3:69:89:8d:95:99:44:f9:e1:75:c0:fd:02:82: 27:e5:7f:3a:04:a4:2c:6e:d5:24:0e:c5:45:78:48: 05:0a:37:2f:77:37:21:d8:53:c5:29:02:e8:e3:04: 38:84:4d:0a:37:56:59:84:e6:93:c3:80:df:69:99: 2d:a0:6a:dc:99:50:f3:65:27:92:e2:6b:94:43:67: bf:9d:8c:85:c1:fd:17:08:9e:df:f2:9a:04:11:a1: 60:50:c9:4b:06:6d:55:da:1e:ad:2d:73:2d:65:c8: 5e:ba:a0:50:bf:08:d3:42:ed:fd:fb:85:a4:54:4e: ed:99:82:90:e0:eb:a2:7d:c7:d0:70:7c:1a:6d:7e: 45:ae:2d:05:88:58:43:9e:3d:7d:f0:26:48:8e:11: 5d:50:c6:4a:c1:bf:34:5d:f2:0f:4c:3a:8f:70:e5: f9:cd:ec:89:25:5f:b1:b7:ca:ab:5b:da:80:3b:c2: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:77:C1:76:04:83:1A:CC:6A:B0:B9:8A:71:71:78:61:C2:6C:F1 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b0:03:5f:20:78:08:c9:bb:a7:4d:62:61:64:86:05:a0:41: dd:ec:e3:c1:78:8a:6d:05:9d:82:12:f0:af:96:41:44:2c:9e: 61:01:fe:20:5e:77:4b:29:c4:1d:19:0c:26:e8:17:ca:38:ee: 1d:a5:47:64:1e:c4:c6:e0:1f:b4:30:3c:81:5e:94:a7:2e:fb: 01:28:9a:6c:a6:f9:60:0c:10:97:c7:af:50:39:5f:ac:01:9b: e9:36:d8:ce:60:37:46:c3:08:eb:78:dc:57:af:6c:92:c8:d2: d0:92:6e:4e:8d:07:25:53:8d:74:f0:46:97:25:83:ea:16:4c: d5:88:ce:80:2b:2b:72:cb:49:23:ac:03:40:86:b3:71:45:75: ba:78:22:91:1b:05:87:77:dd:26:92:3d:d4:79:39:99:7c:74: 48:cd:00:2d:0d:80:95:88:b0:44:d5:5d:15:75:bb:99:1f:a0: 9a:52:7b:1e:70:0b:e7:bb:ac:86:2c:e8:b9:d4:89:16:5f:23: 13:fa:ac:f4:02:86:2b:4a:fd:f3:cc:41:82:53:5c:60:a6:4e: 19:bc:30:25:9c:cb:14:40:1d:bc:ab:3f:34:af:1a:d2:07:21: 41:f0:fa:b3:f4:25:8d:f6:8e:18:f6:8c:4e:6a:d2:04:07:0e: e0:c8:3c:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQeKKo4qGs4lpZPrq+6ifB9qwSGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA3MjkwNDQzMjdaFw0yNjA3MzAwODAyMjdaMDMxMTAvBgNV BAMTKEQzNkQ3N0MxNzYwNDgzMUFDQzZBQjBCOThBNzE3MTc4NjFDMjZDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFDvWQ7vuWYgbRWsHc+ermfdI FSealdtqdSaRKb9h3VJ2WJPf0AZtOt+S1PDxHI6aN8BBPg9lYYyH5rhmnnOZB2zF JGvNb5x4P7vDaYmNlZlE+eF1wP0CgiflfzoEpCxu1SQOxUV4SAUKNy93NyHYU8Up AujjBDiETQo3VlmE5pPDgN9pmS2gatyZUPNlJ5Lia5RDZ7+djIXB/RcInt/ymgQR oWBQyUsGbVXaHq0tcy1lyF66oFC/CNNC7f37haRUTu2ZgpDg66J9x9BwfBptfkWu LQWIWEOePX3wJkiOEV1QxkrBvzRd8g9MOo9w5fnN7IklX7G3yqtb2oA7wlhTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0213wXYEgxrMarC5inFxeGHCbPEwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbADXyB4CMm7 p01iYWSGBaBB3ezjwXiKbQWdghLwr5ZBRCyeYQH+IF53SynEHRkMJugXyjjuHaVH ZB7ExuAftDA8gV6Upy77ASiabKb5YAwQl8evUDlfrAGb6TbYzmA3RsMI63jcV69s ksjS0JJuTo0HJVONdPBGlyWD6hZM1YjOgCsrcstJI6wDQIazcUV1ungikRsFh3fd JpI91Hk5mXx0SM0ALQ2AlYiwRNVdFXW7mR+gmlJ7HnAL57ushizoudSJFl8jE/qs 9AKGK0r988xBglNcYKZOGbwwJZzLFEAdvKs/NK8a0gchQfD6s/QljfaOGPaMTmrS BAcO4Mg8SQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:09 2026 by rpki-client