$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: H9QmOmpgmm63Ywhet6ibH6tJrzTVLCAqVo0CcdzFDoA= Subject key identifier: 97:25:EE:24:5A:8A:71:2C:06:E8:4B:14:2E:0C:C1:00:4C:E1:73:21 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 2B0533962D3F5AAF2688010BE6D21931C498F6C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 15:04:39 +0000 Manifest this update: Wed 29 Jul 2026 14:59:39 +0000 Manifest next update: Thu 30 Jul 2026 17:14:39 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: QeFrDs7cJOMTfVy+FbTBnM68tsQgds179rbuMv6MvXI=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:05:33:96:2d:3f:5a:af:26:88:01:0b:e6:d2:19:31:c4:98:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Jul 29 14:59:39 2026 GMT Not After : Jul 30 17:14:39 2026 GMT Subject: CN=9725EE245A8A712C06E84B142E0CC1004CE17321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:b3:9e:0c:6f:a6:cb:9e:d2:98:f5:24:d3: 9f:de:aa:f3:56:77:42:7e:d8:34:82:83:e1:f8:f2: 84:5b:36:75:22:1c:67:b4:f2:7e:0c:d4:f5:19:57: 51:d4:ca:ea:97:6e:28:50:d3:14:ac:fe:05:67:43: 60:d5:92:fa:f0:24:bb:a6:06:8e:26:55:e6:d5:8c: f2:1d:bd:4e:be:d6:08:e8:3c:72:c7:bc:7c:fb:3a: c3:27:62:c2:28:23:83:b3:cd:8e:6b:1f:54:de:4c: ef:a0:c9:6e:5b:1a:30:eb:f1:1e:25:d2:cd:35:f4: 9a:b4:16:73:16:57:45:16:3f:ae:e0:9c:f7:67:86: 89:ff:01:2a:9b:5e:b1:f9:69:76:a0:d2:e0:80:b8: 6c:05:c4:be:fe:8f:98:95:38:dc:ce:66:8d:ac:02: 8b:07:d4:8e:df:ad:0d:d7:77:81:2e:73:1f:9a:98: c3:cc:42:4e:7e:d8:d4:80:bc:b0:4a:6c:b3:f3:61: 28:46:e8:91:c1:1e:9b:2c:68:f1:c9:f9:58:73:56: 4b:c2:a2:83:64:48:27:91:bd:73:a8:04:b5:a4:90: 18:35:08:95:a1:68:d0:f3:97:be:de:db:0b:c7:25: 28:a1:9f:18:e2:ec:4a:a2:66:51:37:0c:0c:c0:1a: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:EE:24:5A:8A:71:2C:06:E8:4B:14:2E:0C:C1:00:4C:E1:73:21 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:9a:62:0b:bb:f4:9b:24:b0:2e:64:f2:55:02:e0:1b:2d: 35:45:c1:e6:b4:17:5e:f1:74:12:3b:45:56:c5:5c:3b:90:1b: f3:2c:0e:c2:86:e9:1a:63:5d:af:ab:63:6b:7d:47:2c:34:5c: 45:92:12:91:26:0d:10:71:fc:51:55:89:1f:9c:d1:25:ed:64: ec:60:2b:f6:1c:7e:51:14:43:f2:a1:ca:60:86:6b:94:00:ca: 76:92:12:76:1e:ba:1e:03:d7:fb:08:78:be:fa:4a:6b:7b:de: 6d:1c:62:ec:26:87:fb:a7:e2:4c:06:94:c6:1b:fb:6b:a6:7c: f6:67:02:c1:9c:71:f6:3d:69:fb:0f:51:c0:97:77:23:6c:e3: 01:0d:21:b3:6c:dd:4b:eb:62:2b:88:e3:28:94:a4:04:d3:f3: 14:34:62:2a:c7:ff:66:92:7b:df:71:76:d8:07:ea:04:49:8a: 60:63:43:44:58:2d:de:7b:6d:d6:75:06:8c:48:30:f1:38:ee: e4:26:9e:df:b9:56:fa:a3:7e:dd:b5:33:2d:77:4b:b1:f2:3f: e2:78:a2:56:44:8a:f6:95:6a:06:14:23:e3:8b:77:2d:91:01: 71:f4:3f:91:0c:e8:31:4f:aa:1b:22:4b:ea:8f:e2:99:fa:10: 9b:f6:cd:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKwUzli0/Wq8miAEL5tIZMcSY9sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA3MjkxNDU5MzlaFw0yNjA3MzAxNzE0MzlaMDMxMTAvBgNV BAMTKDk3MjVFRTI0NUE4QTcxMkMwNkU4NEIxNDJFMENDMTAwNENFMTczMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYrOeDG+my57SmPUk05/eqvNW d0J+2DSCg+H48oRbNnUiHGe08n4M1PUZV1HUyuqXbihQ0xSs/gVnQ2DVkvrwJLum Bo4mVebVjPIdvU6+1gjoPHLHvHz7OsMnYsIoI4OzzY5rH1TeTO+gyW5bGjDr8R4l 0s019Jq0FnMWV0UWP67gnPdnhon/ASqbXrH5aXag0uCAuGwFxL7+j5iVONzOZo2s AosH1I7frQ3Xd4Eucx+amMPMQk5+2NSAvLBKbLPzYShG6JHBHpssaPHJ+VhzVkvC ooNkSCeRvXOoBLWkkBg1CJWhaNDzl77e2wvHJSihnxji7EqiZlE3DAzAGoYFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlyXuJFqKcSwG6EsULgzBAEzhcyEwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjiaYgu79Jsk sC5k8lUC4BstNUXB5rQXXvF0EjtFVsVcO5Ab8ywOwobpGmNdr6tja31HLDRcRZIS kSYNEHH8UVWJH5zRJe1k7GAr9hx+URRD8qHKYIZrlADKdpISdh66HgPX+wh4vvpK a3vebRxi7CaH+6fiTAaUxhv7a6Z89mcCwZxx9j1p+w9RwJd3I2zjAQ0hs2zdS+ti K4jjKJSkBNPzFDRiKsf/ZpJ733F22AfqBEmKYGNDRFgt3ntt1nUGjEgw8Tju5Cae 37lW+qN+3bUzLXdLsfI/4niiVkSK9pVqBhQj44t3LZEBcfQ/kQzoMU+qGyJL6o/i mfoQm/bNXw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:54 2026 by rpki-client