$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: Sded8tYXKogn//aD/2Brq99Px3k9KqkiXeWe9iKHCCA= Subject key identifier: 4D:EC:40:75:FD:4E:2C:E4:49:F3:C9:35:BD:5A:32:2F:A9:84:5A:65 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 7F382A4CE4C81CC3612080BBF593BDC437495466 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 97 Signing time: Wed 29 Jul 2026 08:28:52 +0000 Manifest this update: Wed 29 Jul 2026 08:23:52 +0000 Manifest next update: Thu 30 Jul 2026 09:32:52 +0000 Files and hashes: 1: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) 2: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: 0VdpVmvVj9JOqdGTyDrgPUzAOvFBj09dTBeVHTXnYeU=) 3: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:38:2a:4c:e4:c8:1c:c3:61:20:80:bb:f5:93:bd:c4:37:49:54:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Jul 29 08:23:52 2026 GMT Not After : Jul 30 09:32:52 2026 GMT Subject: CN=4DEC4075FD4E2CE449F3C935BD5A322FA9845A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c4:78:b5:5c:ea:ab:bb:bc:08:48:d0:c3:48: 97:22:ce:d7:96:84:fa:fd:6e:1e:33:c5:45:de:55: 8a:8e:80:fa:1b:a7:48:48:3f:42:10:14:d1:86:d0: 42:60:15:a9:d3:86:34:cf:6c:0e:d9:3d:6f:7f:f5: 9b:39:6b:d3:f7:84:1e:ce:37:30:da:97:37:51:c1: 4d:b8:9e:62:29:ca:98:eb:00:f7:62:10:f6:2d:9f: 20:73:68:c8:a9:8c:99:6b:27:9e:ca:70:77:9b:31: f5:66:d0:e7:8d:e1:65:50:50:25:d2:27:4d:28:68: 04:87:44:2a:2c:56:9d:f9:0f:16:99:f2:30:5b:34: b0:1f:d7:b5:00:46:f0:37:97:ae:3a:db:6d:ea:ac: 76:2d:7b:a2:72:d2:c0:7e:9d:b8:98:7c:05:61:31: cb:e2:11:81:09:d8:c4:f8:54:95:98:d4:f5:e6:6a: 95:af:e5:65:aa:d8:be:7d:bf:7f:75:8d:95:61:95: 7e:86:4a:cf:9e:cc:8d:d6:ec:ad:e2:c4:19:0c:18: 23:e1:55:a9:1e:40:8a:7a:d4:c2:58:3f:47:63:4f: df:83:19:23:2b:ea:d9:8b:a9:af:54:e9:b5:4c:d4: 7a:85:db:3f:45:3c:62:57:6a:00:6e:18:43:a8:dd: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EC:40:75:FD:4E:2C:E4:49:F3:C9:35:BD:5A:32:2F:A9:84:5A:65 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b0:61:b5:6b:be:66:b2:84:d1:1b:91:3a:cd:93:53:67:4f: f1:74:1a:76:5a:a3:bd:56:1e:fe:14:d8:65:7e:88:c6:f8:33: 50:f4:05:fe:ff:54:b9:9c:7e:ea:f7:08:e5:29:3b:87:fe:ab: f8:03:78:dd:7e:4a:17:6f:d8:27:70:c5:3d:9d:60:31:f5:57: 3a:ea:66:81:34:88:e2:91:11:74:e1:e2:ce:64:03:91:e3:c5: 8c:ed:0f:7e:6e:81:1a:c7:02:c1:af:19:8f:db:b5:39:dd:ad: a5:19:1f:f9:4a:7e:80:22:e2:fc:a2:1e:35:ff:93:33:7f:8f: 18:9e:f6:4c:b2:c6:b7:5e:f6:b3:2c:f0:04:00:33:e7:8a:0a: b2:fc:69:cb:87:b2:5f:79:6e:ce:b0:97:52:7a:b3:9f:1e:7a: fd:1d:71:eb:c6:42:8f:13:84:a6:81:10:fc:5a:f8:f6:20:1c: 46:ff:81:52:7c:93:58:56:fb:16:3f:65:c4:27:34:08:89:bb: 6f:98:d7:25:77:99:c4:42:ea:43:d7:59:a4:ab:c8:1f:a9:5f: 00:f0:53:3b:ab:24:14:21:92:91:31:5b:b2:2e:6a:1e:6e:04: fe:c0:d0:b6:34:96:6f:57:9c:16:ba:44:b9:dd:1e:e7:af:65: 86:cc:10:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfzgqTOTIHMNhIIC79ZO9xDdJVGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA3MjkwODIzNTJaFw0yNjA3MzAwOTMyNTJaMDMxMTAvBgNV BAMTKDRERUM0MDc1RkQ0RTJDRTQ0OUYzQzkzNUJENUEzMjJGQTk4NDVBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxHi1XOqru7wISNDDSJcizteW hPr9bh4zxUXeVYqOgPobp0hIP0IQFNGG0EJgFanThjTPbA7ZPW9/9Zs5a9P3hB7O NzDalzdRwU24nmIpypjrAPdiEPYtnyBzaMipjJlrJ57KcHebMfVm0OeN4WVQUCXS J00oaASHRCosVp35DxaZ8jBbNLAf17UARvA3l646223qrHYte6Jy0sB+nbiYfAVh McviEYEJ2MT4VJWY1PXmapWv5WWq2L59v391jZVhlX6GSs+ezI3W7K3ixBkMGCPh VakeQIp61MJYP0djT9+DGSMr6tmLqa9U6bVM1HqF2z9FPGJXagBuGEOo3UA1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTexAdf1OLORJ88k1vVoyL6mEWmUwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbBhtWu+ZrKE 0RuROs2TU2dP8XQadlqjvVYe/hTYZX6IxvgzUPQF/v9UuZx+6vcI5Sk7h/6r+AN4 3X5KF2/YJ3DFPZ1gMfVXOupmgTSI4pERdOHizmQDkePFjO0Pfm6BGscCwa8Zj9u1 Od2tpRkf+Up+gCLi/KIeNf+TM3+PGJ72TLLGt172syzwBAAz54oKsvxpy4eyX3lu zrCXUnqznx56/R1x68ZCjxOEpoEQ/Fr49iAcRv+BUnyTWFb7Fj9lxCc0CIm7b5jX JXeZxELqQ9dZpKvIH6lfAPBTO6skFCGSkTFbsi5qHm4E/sDQtjSWb1ecFrpEud0e 569lhswQqw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:12:45 2026 by rpki-client