$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: YsjV6KmSMxeH3hA4Fv9c2NbRWPLL8H9+i46nz0firxM= Subject key identifier: 38:D0:EC:EB:85:34:2B:E9:79:F2:5A:61:2D:F3:AA:29:79:19:C6:27 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 60DDECADE944C189370A564E8FA76613A4D585B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 12:54:24 +0000 Manifest this update: Wed 29 Jul 2026 12:49:24 +0000 Manifest next update: Thu 30 Jul 2026 13:09:24 +0000 Files and hashes: 1: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=) 2: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=) 3: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=) 4: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: ZNUn3G/1jj38NCesyhsobzMVhLS1gZQPKVmx7CA+zBs=) 5: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=) 6: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=) 7: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=) 8: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=) 9: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=) 10: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=) 11: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=) 12: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=) 13: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=) 14: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=) 15: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=) 16: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=) 17: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) 18: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=) 19: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=) 20: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=) 21: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dd:ec:ad:e9:44:c1:89:37:0a:56:4e:8f:a7:66:13:a4:d5:85:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Jul 29 12:49:24 2026 GMT Not After : Jul 30 13:09:24 2026 GMT Subject: CN=38D0ECEB85342BE979F25A612DF3AA297919C627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:e7:11:89:44:e8:3d:be:63:f5:e1:f5:8c: 91:d6:18:c2:b6:c4:c7:1e:45:8e:a4:2a:24:f7:14: 72:72:b6:7f:16:92:c0:a1:8e:8c:f8:f4:eb:51:20: 67:84:c3:54:7d:10:8e:ed:7e:09:b9:a6:6c:c4:85: 29:47:06:64:4b:84:1a:fe:88:b7:04:9c:e0:ca:4c: 29:8b:0f:f1:5a:6c:62:af:90:bb:b9:33:dd:c2:f2: 63:20:9e:cb:57:67:9b:7e:6e:fd:1d:6c:25:e1:3c: ce:ff:0a:89:53:35:58:c0:ed:16:4e:79:0d:3b:ad: 6c:a5:e9:83:36:31:56:68:e0:9c:1a:88:5b:ed:86: a2:9a:68:98:ea:bc:17:76:05:89:0c:b6:2f:f6:fa: 8c:a0:12:0f:40:b8:2b:88:8e:e3:a3:16:cc:2b:ea: cd:3b:d0:d6:e6:38:d6:39:33:2e:ef:f4:8a:79:12: f8:fc:6c:a7:0b:c6:87:b3:95:5d:d7:08:ae:42:33: 0f:04:2f:1e:8a:08:78:79:fe:18:3e:cc:ba:c2:af: 3e:21:6d:78:6e:25:1c:f5:0d:c4:c7:04:7e:b5:61: 5c:66:ca:74:17:d9:db:81:83:1b:0d:5a:80:6a:6b: 58:c0:91:6f:4a:75:e6:52:68:53:4b:4a:9b:9e:23: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:EC:EB:85:34:2B:E9:79:F2:5A:61:2D:F3:AA:29:79:19:C6:27 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:bc:40:1a:c1:ee:4d:66:43:20:f4:d1:b0:dd:25:6d:7c:a1: 75:08:8f:61:e2:ba:7b:13:42:f9:f9:f8:e4:ce:c5:ff:0e:2d: 8a:65:c0:53:8a:4b:f2:78:1a:d0:d9:44:fa:3c:81:c9:1f:d2: 33:a1:03:b7:22:f3:48:2f:a0:df:ad:fa:0f:74:e0:15:c8:df: 9c:1c:7e:71:ae:44:2c:57:9a:db:ca:20:b8:c9:ea:99:ac:1a: a2:91:b7:a5:ea:09:b4:61:9c:a5:86:f3:15:cb:c7:6b:16:6c: e3:3e:a9:17:cf:e0:14:b7:26:fe:64:fc:dd:00:46:4b:21:3f: 11:21:64:a0:e1:7a:63:5f:e2:b5:f2:0b:b5:9e:9e:11:fc:cd: bc:05:f1:b6:ff:e0:82:df:fc:44:b7:0e:6b:d9:db:1e:4c:36: ff:c8:ef:b7:a3:22:1c:29:f5:b0:e4:98:15:6e:2a:b6:0c:5f: 5d:c7:e6:1c:e2:f9:a8:51:34:18:44:05:7f:96:cd:4a:55:81: 0b:c2:98:58:df:93:e2:cd:52:5d:ad:2e:c0:1d:92:13:d8:65: d9:3e:82:33:34:53:2b:3c:88:50:2f:b7:90:65:28:23:bd:c2: 94:89:fb:fd:7a:06:47:77:24:70:e1:ff:e0:2e:2e:ca:c5:71: 64:f7:87:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYN3srelEwYk3ClZOj6dmE6TVhbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA3MjkxMjQ5MjRaFw0yNjA3MzAxMzA5MjRaMDMxMTAvBgNV BAMTKDM4RDBFQ0VCODUzNDJCRTk3OUYyNUE2MTJERjNBQTI5NzkxOUM2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKucRiUToPb5j9eH1jJHWGMK2 xMceRY6kKiT3FHJytn8WksChjoz49OtRIGeEw1R9EI7tfgm5pmzEhSlHBmRLhBr+ iLcEnODKTCmLD/FabGKvkLu5M93C8mMgnstXZ5t+bv0dbCXhPM7/ColTNVjA7RZO eQ07rWyl6YM2MVZo4JwaiFvthqKaaJjqvBd2BYkMti/2+oygEg9AuCuIjuOjFswr 6s070NbmONY5My7v9Ip5Evj8bKcLxoezlV3XCK5CMw8ELx6KCHh5/hg+zLrCrz4h bXhuJRz1DcTHBH61YVxmynQX2duBgxsNWoBqa1jAkW9KdeZSaFNLSpueI7EBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUONDs64U0K+l58lphLfOqKXkZxicwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7xAGsHuTWZD IPTRsN0lbXyhdQiPYeK6exNC+fn45M7F/w4timXAU4pL8nga0NlE+jyByR/SM6ED tyLzSC+g3636D3TgFcjfnBx+ca5ELFea28oguMnqmawaopG3peoJtGGcpYbzFcvH axZs4z6pF8/gFLcm/mT83QBGSyE/ESFkoOF6Y1/itfILtZ6eEfzNvAXxtv/ggt/8 RLcOa9nbHkw2/8jvt6MiHCn1sOSYFW4qtgxfXcfmHOL5qFE0GEQFf5bNSlWBC8KY WN+T4s1SXa0uwB2SE9hl2T6CMzRTKzyIUC+3kGUoI73ClIn7/XoGR3ckcOH/4C4u ysVxZPeHnA== -----END CERTIFICATE-----Generated at Wed Jul 29 14:54:17 2026 by rpki-client