$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: tL8DCPmj7Iy/dBVPqtCMchoywiYWVKHJb+pA10XIU0I= Subject key identifier: 1B:5B:C8:00:91:F0:94:AD:24:62:92:90:51:24:B7:C0:E7:85:E3:9B Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 0B81F92D5D7424030C74B4CFA55C11E6FE47A84B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: 91 Signing time: Tue 28 Jul 2026 12:31:48 +0000 Manifest this update: Tue 28 Jul 2026 12:26:48 +0000 Manifest next update: Wed 29 Jul 2026 14:46:48 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 2ja3nrYkq+lYStM2or0xL+YaackIbRL/t1Gj23lhBv4=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:81:f9:2d:5d:74:24:03:0c:74:b4:cf:a5:5c:11:e6:fe:47:a8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Jul 28 12:26:48 2026 GMT Not After : Jul 29 14:46:48 2026 GMT Subject: CN=1B5BC80091F094AD246292905124B7C0E785E39B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:72:ff:cc:2a:e2:09:d3:30:7b:de:df:b5:94: 90:5b:fe:25:6c:c6:df:bf:16:9a:53:11:19:4a:c7: 9f:57:38:d0:ef:12:2f:19:3e:8b:7d:5f:1b:9c:aa: a2:1d:a7:2d:0d:19:51:28:e5:c0:60:47:5d:a9:c2: f6:3f:5c:c0:87:65:6e:31:07:9f:b0:5c:95:b3:d8: f2:e7:c8:3f:91:f2:a7:e0:a6:7b:8b:f6:f7:6b:5b: 5c:e6:3d:87:e7:33:0b:5f:a6:30:b2:60:85:fb:aa: f4:9c:d6:64:d0:31:a3:c6:37:cc:04:f5:21:1a:94: 5e:e8:50:5f:d7:27:65:93:63:94:83:6c:8f:b0:4f: c7:72:0f:fc:48:96:ea:9c:48:e4:7b:95:b0:8f:ad: e2:48:16:65:e6:a0:f3:11:ef:ab:96:36:ee:d8:a8: d7:7a:ad:20:88:75:8e:c7:6d:4a:98:d8:98:77:dd: 82:d6:eb:f3:be:17:cc:40:f3:26:3a:cf:68:d6:b3: 70:ef:b9:60:2a:ec:e9:4c:e3:10:72:59:20:cb:a4: 53:b5:fe:64:82:9b:7c:21:8e:19:c3:a9:f0:12:e0: 44:6c:d3:bb:da:00:1f:b8:88:3a:40:30:32:42:d6: f5:75:43:c0:58:0e:b5:b6:2d:c5:e8:e6:55:5c:88: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5B:C8:00:91:F0:94:AD:24:62:92:90:51:24:B7:C0:E7:85:E3:9B X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ec:8e:b0:1a:3a:00:39:6f:1a:f1:7e:80:75:ee:3c:3e:e8: 27:99:0b:c8:66:5f:a1:d3:1e:ba:76:fa:20:93:87:46:61:0e: 89:30:b0:d8:96:74:c5:f3:43:67:6a:7f:39:98:8f:e4:42:57: 78:6b:d3:98:7f:4f:74:c2:f3:69:fb:93:81:c9:68:03:3c:d4: 13:46:3a:ae:fa:86:31:e0:95:dd:bf:e4:e5:3d:27:c3:dc:0f: b8:c4:33:31:a1:cb:fc:ab:15:60:bc:69:1c:a6:66:a0:86:f1: 5a:b2:98:1f:5b:09:7b:0a:90:c2:66:63:9c:1c:40:62:4f:41: 4d:c7:d0:b8:95:2b:20:e3:ec:1f:83:95:b0:27:5f:fb:4e:a4: c6:14:85:95:b9:88:5f:3d:0d:0c:10:11:f7:3a:be:82:6d:84: a4:17:04:e8:ee:a6:fb:dd:22:6d:00:c7:0a:11:d9:bf:fe:44: ec:06:c9:d5:e3:56:30:7a:dd:cf:f3:1b:e5:6a:7e:fc:ef:56: 12:89:86:ca:ee:73:92:2a:da:a4:7d:94:c7:f1:c7:5f:b2:11: f0:72:c4:67:3f:af:8b:ad:04:4f:4d:38:2a:ea:57:ed:28:71: 29:ff:45:56:97:6e:d6:ce:b1:66:f2:60:6c:21:b6:cc:05:14: f1:0f:41:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC4H5LV10JAMMdLTPpVwR5v5HqEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA3MjgxMjI2NDhaFw0yNjA3MjkxNDQ2NDhaMDMxMTAvBgNV BAMTKDFCNUJDODAwOTFGMDk0QUQyNDYyOTI5MDUxMjRCN0MwRTc4NUUzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscv/MKuIJ0zB73t+1lJBb/iVs xt+/FppTERlKx59XONDvEi8ZPot9XxucqqIdpy0NGVEo5cBgR12pwvY/XMCHZW4x B5+wXJWz2PLnyD+R8qfgpnuL9vdrW1zmPYfnMwtfpjCyYIX7qvSc1mTQMaPGN8wE 9SEalF7oUF/XJ2WTY5SDbI+wT8dyD/xIluqcSOR7lbCPreJIFmXmoPMR76uWNu7Y qNd6rSCIdY7HbUqY2Jh33YLW6/O+F8xA8yY6z2jWs3DvuWAq7OlM4xByWSDLpFO1 /mSCm3whjhnDqfAS4ERs07vaAB+4iDpAMDJC1vV1Q8BYDrW2LcXo5lVciDCTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG1vIAJHwlK0kYpKQUSS3wOeF45swHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOyOsBo6ADlv GvF+gHXuPD7oJ5kLyGZfodMeunb6IJOHRmEOiTCw2JZ0xfNDZ2p/OZiP5EJXeGvT mH9PdMLzafuTgcloAzzUE0Y6rvqGMeCV3b/k5T0nw9wPuMQzMaHL/KsVYLxpHKZm oIbxWrKYH1sJewqQwmZjnBxAYk9BTcfQuJUrIOPsH4OVsCdf+06kxhSFlbmIXz0N DBAR9zq+gm2EpBcE6O6m+90ibQDHChHZv/5E7AbJ1eNWMHrdz/Mb5Wp+/O9WEomG yu5zkirapH2Ux/HHX7IR8HLEZz+vi60ET004KupX7ShxKf9FVpdu1s6xZvJgbCG2 zAUU8Q9B+g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:58:22 2026 by rpki-client