$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: ZR6hx0+G2jotBVkyYL6oOoVbUJoGINMqyQkIybFAir0= Subject key identifier: AA:A6:E1:44:9D:11:EA:B4:4C:26:61:92:8C:C0:76:5A:E2:E3:76:11 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 4916FB927D44F3A18D4FA41A022D6071BF118E54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 8E Signing time: Wed 29 Jul 2026 19:05:00 +0000 Manifest this update: Wed 29 Jul 2026 19:00:00 +0000 Manifest next update: Thu 30 Jul 2026 19:25:00 +0000 Files and hashes: 1: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) 2: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: qR5PsyvwNBs9g1TFEQXs6cU0W9uw/S0Y1zX6lr/hglM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 19:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:16:fb:92:7d:44:f3:a1:8d:4f:a4:1a:02:2d:60:71:bf:11:8e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Jul 29 19:00:00 2026 GMT Not After : Jul 30 19:25:00 2026 GMT Subject: CN=AAA6E1449D11EAB44C2661928CC0765AE2E37611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:8e:ed:e5:90:c1:d9:ca:49:ff:51:56:e4: 98:11:e7:d2:a9:2f:42:98:53:75:80:0e:3b:1a:6a: 24:17:f4:89:5f:6e:71:81:68:5f:07:2c:18:22:14: 63:40:8c:82:b0:2f:21:77:3f:70:54:99:77:d4:7b: 0f:45:3f:82:bc:9b:ea:c1:9b:5f:32:5f:f9:b1:d7: 51:0f:86:13:26:37:88:12:30:ba:ae:de:eb:5b:b5: 30:52:4f:03:9b:57:1d:62:47:4c:65:12:7a:21:35: 3c:92:33:d1:b5:7c:62:ba:de:72:e6:0f:94:84:18: af:7d:70:81:89:73:c4:f6:08:02:74:d6:9c:9d:c4: 14:ff:1a:94:27:10:18:c9:36:47:e2:46:7d:57:8b: dd:ba:44:ba:ea:ce:ee:05:99:19:bd:79:b6:b9:b8: d8:bc:60:c3:44:47:0f:3a:6f:93:ea:ff:89:cd:81: e2:a6:e5:9c:4c:3d:49:e3:49:27:76:8c:5b:07:5b: cb:a7:de:76:35:8a:37:e1:91:7b:ab:62:2d:d8:7b: a2:96:61:31:24:c4:2e:25:69:68:29:07:82:df:c3: 04:1f:0a:73:39:52:4b:39:7c:bf:a5:ef:65:13:29: 82:ab:cc:2c:f3:a7:f6:00:64:96:59:70:39:8f:6a: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:E1:44:9D:11:EA:B4:4C:26:61:92:8C:C0:76:5A:E2:E3:76:11 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:90:52:26:5e:ff:db:4b:a7:25:d9:f9:f5:86:74:c8:06: b4:e5:f0:a3:98:92:35:d8:b2:63:72:74:cd:2a:78:84:e3:c8: 71:89:ca:6d:d3:83:52:e9:a7:8b:c0:c2:5b:02:1e:f5:79:bb: db:35:92:e2:ca:4b:1b:c4:41:50:32:c7:e8:1e:f9:1a:06:e6: a8:11:0d:d9:8e:fb:65:28:78:69:0f:9c:45:5d:75:92:7a:8a: fe:49:70:b4:3f:10:e0:29:77:38:5a:72:d7:8b:6b:02:0b:b4: cb:dc:df:e6:da:05:3b:d5:e1:01:bb:8f:ef:6e:e2:84:b2:bf: 4c:79:95:78:28:45:80:22:54:e3:59:3b:65:23:45:9e:97:d3: bb:63:9c:16:67:60:5e:bd:da:a8:11:9a:18:e1:c8:96:35:15: e1:22:38:7d:d5:ba:05:ac:79:8c:5e:7a:00:aa:15:92:61:d3: 85:d2:54:b2:03:ee:61:80:97:47:f8:4c:fd:b6:7b:2b:f9:8c: b3:e5:57:bd:cb:58:ff:5c:07:3c:5b:12:b4:e0:85:e1:85:8b: e7:91:0e:19:2b:2b:ac:b9:67:f8:7a:55:48:ed:66:a0:53:52: 49:d4:ed:29:b9:4a:31:e6:ce:39:7f:10:7c:e7:1f:38:75:43: ad:2f:3c:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSRb7kn1E86GNT6QaAi1gcb8RjlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA3MjkxOTAwMDBaFw0yNjA3MzAxOTI1MDBaMDMxMTAvBgNV BAMTKEFBQTZFMTQ0OUQxMUVBQjQ0QzI2NjE5MjhDQzA3NjVBRTJFMzc2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZI7t5ZDB2cpJ/1FW5JgR59Kp L0KYU3WADjsaaiQX9IlfbnGBaF8HLBgiFGNAjIKwLyF3P3BUmXfUew9FP4K8m+rB m18yX/mx11EPhhMmN4gSMLqu3utbtTBSTwObVx1iR0xlEnohNTySM9G1fGK63nLm D5SEGK99cIGJc8T2CAJ01pydxBT/GpQnEBjJNkfiRn1Xi926RLrqzu4FmRm9eba5 uNi8YMNERw86b5Pq/4nNgeKm5ZxMPUnjSSd2jFsHW8un3nY1ijfhkXurYi3Ye6KW YTEkxC4laWgpB4LfwwQfCnM5Uks5fL+l72UTKYKrzCzzp/YAZJZZcDmPam6ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqqbhRJ0R6rRMJmGSjMB2WuLjdhEwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnqQUiZe/9tL pyXZ+fWGdMgGtOXwo5iSNdiyY3J0zSp4hOPIcYnKbdODUumni8DCWwIe9Xm72zWS 4spLG8RBUDLH6B75GgbmqBEN2Y77ZSh4aQ+cRV11knqK/klwtD8Q4Cl3OFpy14tr Agu0y9zf5toFO9XhAbuP727ihLK/THmVeChFgCJU41k7ZSNFnpfTu2OcFmdgXr3a qBGaGOHIljUV4SI4fdW6Bax5jF56AKoVkmHThdJUsgPuYYCXR/hM/bZ7K/mMs+VX vctY/1wHPFsStOCF4YWL55EOGSsrrLln+HpVSO1moFNSSdTtKblKMebOOX8QfOcf OHVDrS88Bw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:05 2026 by rpki-client