$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: yE2y/rqmXtuLGOT9EdI2d1y8LD18faK5ZA59NnuwRSY= Subject key identifier: 6C:54:E6:3E:42:67:9A:4E:15:37:5A:73:C2:04:7A:79:16:4C:A7:41 Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 494143C77DD2DB2A95A1885EF5786A943D2B07E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: CC Signing time: Wed 29 Jul 2026 05:38:35 +0000 Manifest this update: Wed 29 Jul 2026 05:33:35 +0000 Manifest next update: Thu 30 Jul 2026 08:56:35 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: vIYXt/bTrep0ONeZdvn7xg/xNJg4DAN3bCBX2L9fV0o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:41:43:c7:7d:d2:db:2a:95:a1:88:5e:f5:78:6a:94:3d:2b:07:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Jul 29 05:33:35 2026 GMT Not After : Jul 30 08:56:35 2026 GMT Subject: CN=6C54E63E42679A4E15375A73C2047A79164CA741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:b5:d8:58:83:4e:28:7f:78:2b:f2:d0:56: ab:de:61:e0:b4:04:ac:fe:84:fe:73:3d:cb:e7:a6: d1:5f:6b:75:b0:6d:d7:0a:71:e2:73:5b:18:6f:e0: 1a:e8:25:0e:0a:5c:b9:ce:5c:e9:ba:7e:c6:2b:0d: 43:71:4b:da:ee:2c:2d:fa:54:b9:46:93:67:6d:4b: ee:ef:b2:d6:4a:70:76:b8:fb:44:18:6d:26:f9:64: 51:5b:79:22:87:2b:d0:78:5a:78:1a:9d:6b:c8:ab: 1b:19:d9:33:e2:4f:77:87:e7:5f:8e:ea:5d:ec:9d: a3:fe:af:db:90:6d:ff:8d:7d:77:fa:02:01:41:ce: 9d:12:74:16:82:61:ec:90:ad:94:17:48:3d:c8:75: 6c:a9:a0:da:51:7f:b9:1b:b6:da:7f:61:8e:8c:50: 59:35:4d:52:ed:c4:b5:bd:fe:29:b3:91:29:26:b0: a7:64:94:81:6c:85:92:c3:86:3c:cc:38:1f:4e:5f: 61:1b:e5:7e:89:da:8b:c5:34:63:ed:1d:ad:62:75: 20:18:da:8b:c1:25:cb:b2:d3:5d:fb:b3:f9:a4:c6: be:25:29:e8:99:21:9e:7d:91:67:09:ea:95:f0:be: 0d:69:d1:e7:d2:89:8b:bd:41:92:a6:0f:ed:7c:e1: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:E6:3E:42:67:9A:4E:15:37:5A:73:C2:04:7A:79:16:4C:A7:41 X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9e:a7:42:fe:46:d8:43:e5:2d:f6:69:9f:96:35:9c:12:60: 42:52:f5:c7:6e:b7:e3:17:77:28:08:50:10:36:18:a0:39:05: b4:15:a7:43:01:87:6b:7d:1d:e3:9f:c4:fe:e9:f2:07:ff:be: b7:a1:de:62:f2:58:8d:42:7e:9e:55:92:65:22:3e:1c:8d:76: 75:dd:05:ad:2d:7c:49:68:c3:9c:9e:a4:26:3d:44:1a:94:b8: 09:f6:9e:5e:31:b2:0d:04:32:47:f3:25:c3:d3:02:9b:56:db: d3:a5:e8:1f:e4:50:2c:63:c1:24:46:db:39:13:0c:bd:52:3e: 35:b4:12:06:37:12:87:67:1e:23:ec:8e:17:d6:18:2d:d8:34: a8:ca:44:93:59:28:f1:2b:68:50:71:d7:0c:70:4b:2e:5b:42: fc:ea:7d:a5:8a:46:9c:63:33:4b:0a:e3:22:7e:8a:9f:a8:8a: f0:67:43:40:2d:df:93:91:84:78:8f:e4:29:7b:6b:a5:a3:4c: 0c:65:bc:8e:40:2f:c3:04:e8:c5:46:0f:85:b2:05:e5:03:3f: e2:b8:c7:c0:34:5b:75:ff:83:bd:cb:4c:90:28:97:b3:22:92: 6c:45:6d:0e:b7:0c:ca:8a:5c:91:18:3a:b4:b4:d9:e4:ed:0a: 9c:ac:01:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSUFDx33S2yqVoYhe9XhqlD0rB+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA3MjkwNTMzMzVaFw0yNjA3MzAwODU2MzVaMDMxMTAvBgNV BAMTKDZDNTRFNjNFNDI2NzlBNEUxNTM3NUE3M0MyMDQ3QTc5MTY0Q0E3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBrXYWINOKH94K/LQVqveYeC0 BKz+hP5zPcvnptFfa3WwbdcKceJzWxhv4BroJQ4KXLnOXOm6fsYrDUNxS9ruLC36 VLlGk2dtS+7vstZKcHa4+0QYbSb5ZFFbeSKHK9B4WnganWvIqxsZ2TPiT3eH51+O 6l3snaP+r9uQbf+NfXf6AgFBzp0SdBaCYeyQrZQXSD3IdWypoNpRf7kbttp/YY6M UFk1TVLtxLW9/imzkSkmsKdklIFshZLDhjzMOB9OX2Eb5X6J2ovFNGPtHa1idSAY 2ovBJcuy0137s/mkxr4lKeiZIZ59kWcJ6pXwvg1p0efSiYu9QZKmD+184TsDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbFTmPkJnmk4VN1pzwgR6eRZMp0EwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo56nQv5G2EPl LfZpn5Y1nBJgQlL1x2634xd3KAhQEDYYoDkFtBWnQwGHa30d45/E/unyB/++t6He YvJYjUJ+nlWSZSI+HI12dd0FrS18SWjDnJ6kJj1EGpS4CfaeXjGyDQQyR/Mlw9MC m1bb06XoH+RQLGPBJEbbORMMvVI+NbQSBjcSh2ceI+yOF9YYLdg0qMpEk1ko8Sto UHHXDHBLLltC/Op9pYpGnGMzSwrjIn6Kn6iK8GdDQC3fk5GEeI/kKXtrpaNMDGW8 jkAvwwToxUYPhbIF5QM/4rjHwDRbdf+DvctMkCiXsyKSbEVtDrcMyopckRg6tLTZ 5O0KnKwBQA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:07 2026 by rpki-client