$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: LtFnHp8q7/D2RPuLYVZLGGDsw8clw2Efa14s4Qpe26g= Subject key identifier: 69:7B:54:70:59:BE:8C:EF:73:20:E0:0E:E2:9A:51:08:BA:2B:12:DE Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 701ACDECDB1442CABAC2045B1D7243CB427174BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 05:38:35 +0000 Manifest this update: Wed 29 Jul 2026 05:33:35 +0000 Manifest next update: Thu 30 Jul 2026 08:08:35 +0000 Files and hashes: 1: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: qjT5UZz3z2CK4ECvPk0LpIxgg68lctRoxAdOlIwRqoA=) 2: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) 3: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:cd:ec:db:14:42:ca:ba:c2:04:5b:1d:72:43:cb:42:71:74:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Jul 29 05:33:35 2026 GMT Not After : Jul 30 08:08:35 2026 GMT Subject: CN=697B547059BE8CEF7320E00EE29A5108BA2B12DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:76:b5:ae:36:1d:c4:38:db:61:22:6f:f8: f2:f9:73:2f:65:99:c1:ca:bf:d9:c1:ec:e6:f8:3b: 42:a0:7a:2a:4c:cb:08:a3:07:7f:30:29:9c:3e:63: f4:d4:1a:b6:24:19:1e:97:61:81:83:68:81:df:56: 2f:66:9f:33:0c:6a:dd:e2:5b:8c:f9:48:ad:40:48: 89:4c:ae:ac:fa:b1:59:de:b7:ef:62:79:86:23:fd: 9c:8a:10:a6:d9:ca:fd:2f:1f:fb:cf:9c:de:6a:16: f6:34:9f:6c:48:11:43:25:48:51:3d:d6:bf:03:0d: 0c:4a:1d:5a:d0:e4:01:09:71:16:ca:b3:9b:dc:84: 43:60:cd:5b:66:8d:f7:f1:e8:38:34:7d:11:2a:00: a9:29:26:78:84:24:b7:12:77:3d:28:ff:35:8e:41: 69:46:02:53:27:1b:de:34:45:c9:47:8b:0a:9b:50: 5d:a6:c6:e2:23:a0:1b:98:b4:21:97:cb:28:f2:29: 3b:9f:d7:d8:c8:7d:1a:1e:2b:a2:97:4e:1f:9c:5f: d2:4a:dd:c5:1d:1c:5b:21:42:2e:2e:30:24:ad:28: 21:b0:c3:9e:18:6a:56:8f:06:39:89:48:14:85:f6: 17:64:f4:6c:66:1b:11:11:8e:eb:ac:99:93:79:4c: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7B:54:70:59:BE:8C:EF:73:20:E0:0E:E2:9A:51:08:BA:2B:12:DE X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ad:f4:cf:09:4d:06:54:dc:1a:d5:cc:ef:78:59:b1:99:d9: 72:0d:5d:2c:5b:6f:03:69:22:aa:b8:98:53:66:80:40:9d:43: 98:31:47:89:66:db:78:2e:80:b4:ca:47:fb:31:78:5a:94:31: 8c:66:ec:8d:3c:e6:41:a9:46:01:c5:fb:a7:75:f6:19:cd:78: fc:7d:64:f6:6a:97:87:a9:64:fc:6a:99:fe:2b:b2:31:5a:33: 8b:f5:28:30:93:95:12:27:a9:57:fd:6e:d0:c8:90:66:17:be: a6:1d:8b:60:80:41:6c:d6:a0:e3:9d:31:74:be:16:81:07:75: 60:9d:b3:e4:30:59:e3:a0:05:24:cb:8c:7d:8c:51:df:57:a9: a1:a7:09:ec:4c:89:c2:1c:20:dd:9f:f9:e6:40:67:cf:5b:35: 64:c9:73:71:33:1a:ef:5c:a9:e9:b0:c1:bc:4f:3b:c5:c3:74: 4c:6e:89:85:98:26:78:9c:e1:e5:de:90:ce:32:b1:a3:9e:be: f0:f7:ca:6a:02:10:1c:be:40:4e:8a:e3:c5:ee:a3:82:10:98: 30:e8:ac:c3:a1:3a:1a:33:49:35:db:ae:a4:21:16:7e:3f:53: 88:03:d4:e4:1f:46:26:c0:33:19:cb:fb:8b:d7:75:46:f0:40: be:d6:18:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcBrN7NsUQsq6wgRbHXJDy0JxdLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA3MjkwNTMzMzVaFw0yNjA3MzAwODA4MzVaMDMxMTAvBgNV BAMTKDY5N0I1NDcwNTlCRThDRUY3MzIwRTAwRUUyOUE1MTA4QkEyQjEyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzXa1rjYdxDjbYSJv+PL5cy9l mcHKv9nB7Ob4O0KgeipMywijB38wKZw+Y/TUGrYkGR6XYYGDaIHfVi9mnzMMat3i W4z5SK1ASIlMrqz6sVnet+9ieYYj/ZyKEKbZyv0vH/vPnN5qFvY0n2xIEUMlSFE9 1r8DDQxKHVrQ5AEJcRbKs5vchENgzVtmjffx6Dg0fREqAKkpJniEJLcSdz0o/zWO QWlGAlMnG940RclHiwqbUF2mxuIjoBuYtCGXyyjyKTuf19jIfRoeK6KXTh+cX9JK 3cUdHFshQi4uMCStKCGww54YalaPBjmJSBSF9hdk9GxmGxERjuusmZN5TLqvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaXtUcFm+jO9zIOAO4ppRCLorEt4wHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq30zwlNBlTc GtXM73hZsZnZcg1dLFtvA2kiqriYU2aAQJ1DmDFHiWbbeC6AtMpH+zF4WpQxjGbs jTzmQalGAcX7p3X2Gc14/H1k9mqXh6lk/GqZ/iuyMVozi/UoMJOVEiepV/1u0MiQ Zhe+ph2LYIBBbNag450xdL4WgQd1YJ2z5DBZ46AFJMuMfYxR31epoacJ7EyJwhwg 3Z/55kBnz1s1ZMlzcTMa71yp6bDBvE87xcN0TG6JhZgmeJzh5d6QzjKxo56+8PfK agIQHL5ATorjxe6jghCYMOisw6E6GjNJNduupCEWfj9TiAPU5B9GJsAzGcv7i9d1 RvBAvtYY6Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:06 2026 by rpki-client