$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft File: 363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft (raw, json) Hash identifier: U8FTgJ1Y9DO/SyhpXDHJLBddEvtnc64NlM6TdZtjhnU= Subject key identifier: DF:E7:DC:78:66:1A:67:33:1B:5F:9C:5A:D1:8D:1D:02:3D:45:99:9D Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF Certificate issuer: /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Certificate serial: 40623DA05BDD0B18182971B7F10C155BBC7684A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft Manifest number: 7E Signing time: Tue 28 Jul 2026 12:21:46 +0000 Manifest this update: Tue 28 Jul 2026 12:16:46 +0000 Manifest next update: Wed 29 Jul 2026 15:22:46 +0000 Files and hashes: 1: 3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa (hash: +HQdAY6OPuC4EvMXwkZga2V4knchRNrYgwJjJOmU2Z4=) 2: 3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa (hash: 2vIOpbdjwZVbQgeMB3qUO7ipjQkYLYX4C4QQ4DEiP8A=) 3: 3230322e3137332e3234302e302f32302d3230203d3e20313334373732.roa (hash: DMmR7bdvU2LLLAknBZn743hZv4KxbT+7HtppFu4ghlk=) 4: 3131302e3137332e39362e302f32302d3230203d3e2030.roa (hash: xzDDHrgjaG7Ys7YXm71LAcWvzhsQ0SkIlQIxPiL7Uhc=) 5: 3231312e3134382e3134342e302f32302d3230203d3e20313334373732.roa (hash: wJ9YvBEFbPSFxP3O0XPSBwdUfNVdjv29h7ARhP7jmBE=) 6: 3131302e3137332e3131322e302f32302d3230203d3e2030.roa (hash: VSAubi4/9XTq3krwNM7HxqX4xJGHbOSHysUhyMD+jN4=) 7: 363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl (hash: +da6t9p0WW87bOu0v0wniW6hadaTL5cy8Pm5W154PPY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:62:3d:a0:5b:dd:0b:18:18:29:71:b7:f1:0c:15:5b:bc:76:84:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Validity Not Before: Jul 28 12:16:46 2026 GMT Not After : Jul 29 15:22:46 2026 GMT Subject: CN=DFE7DC78661A67331B5F9C5AD18D1D023D45999D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:71:ff:df:af:23:87:a1:8e:70:02:e3:71: 67:99:eb:b8:46:db:a0:37:03:06:cf:f4:c6:05:44: 45:82:8c:1f:75:40:15:9d:1a:e4:63:d0:42:86:30: c7:66:0f:5c:dc:54:63:1c:b7:b6:6e:47:26:16:fc: 9d:0a:4c:eb:8a:94:a0:56:cd:31:91:fe:d0:c1:f9: 0a:98:42:3b:63:75:e4:36:b0:74:10:fc:51:a1:e6: 76:8f:07:c4:82:c5:b4:74:79:7a:d9:db:a1:fd:4d: 1a:77:f1:99:ad:2d:20:75:d2:95:36:c1:f7:fe:5d: 9b:ea:24:0a:eb:c8:82:55:4c:0a:92:67:df:d1:c5: 8b:f1:a2:e2:f9:47:b4:3f:83:41:cb:00:ef:50:c4: 81:af:7f:df:05:cc:0e:48:c4:e7:a3:8a:d1:7a:2e: 70:76:30:e4:46:1d:a6:b4:8b:95:0e:73:4e:7d:15: 33:36:2a:de:fb:4a:a1:7d:19:76:89:3c:d5:28:4c: d5:57:37:b4:38:ec:51:a0:10:4f:17:91:aa:3b:ec: 95:96:b3:fa:e0:1d:a1:50:67:22:4a:70:de:48:13: 7b:dd:94:0b:7f:88:0b:21:59:81:05:04:8b:20:50: 2f:e8:cd:f2:08:82:34:0d:42:62:0f:db:30:24:49: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E7:DC:78:66:1A:67:33:1B:5F:9C:5A:D1:8D:1D:02:3D:45:99:9D X509v3 Authority Key Identifier: keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d3:87:2c:28:35:5d:37:10:f0:7c:1c:7d:ff:c0:2d:ee:32: b1:84:34:ba:ac:db:4f:34:0a:0d:1c:70:2d:b0:4a:ed:65:9e: 06:fd:0c:32:20:98:7b:48:23:6e:c9:21:d2:79:95:bd:ab:ff: 90:b3:ab:61:5e:34:12:89:60:c8:05:65:40:64:dc:bb:f5:bf: ea:10:ad:5e:1a:8f:66:4c:bc:8e:00:04:fb:f1:c2:7c:4c:85: ad:2e:b4:9d:f6:8c:05:52:b9:f8:72:cb:63:34:82:0f:10:40: 5b:60:ec:a0:80:c8:20:92:dc:6c:fd:28:91:23:5d:58:9c:13: 76:4a:0c:4f:d3:ad:29:13:df:9c:ef:b9:66:f8:8c:27:5f:9c: 3d:f9:0d:f6:da:b8:7b:f6:5e:a0:60:cd:cf:54:b4:43:a2:e1: 07:f7:8e:e9:85:94:ca:ba:3b:e8:10:85:48:09:50:e1:cc:39: d0:98:c9:59:5f:6d:21:3b:c5:33:46:14:56:6b:35:2a:06:ab: 96:c3:36:37:59:a8:71:41:09:7c:27:78:bd:6f:58:a7:04:a2: 0d:4d:71:63:28:ef:68:b1:79:15:98:bb:ba:f1:25:f0:e7:a6: f7:95:34:67:0c:7a:1b:3c:9a:f3:48:31:07:9a:10:43:45:a6: 57:85:dc:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQGI9oFvdCxgYKXG38QwVW7x2hKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5 MUI0MzRDRjAeFw0yNjA3MjgxMjE2NDZaFw0yNjA3MjkxNTIyNDZaMDMxMTAvBgNV BAMTKERGRTdEQzc4NjYxQTY3MzMxQjVGOUM1QUQxOEQxRDAyM0Q0NTk5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC3H/368jh6GOcALjcWeZ67hG 26A3AwbP9MYFREWCjB91QBWdGuRj0EKGMMdmD1zcVGMct7ZuRyYW/J0KTOuKlKBW zTGR/tDB+QqYQjtjdeQ2sHQQ/FGh5naPB8SCxbR0eXrZ26H9TRp38ZmtLSB10pU2 wff+XZvqJArryIJVTAqSZ9/RxYvxouL5R7Q/g0HLAO9QxIGvf98FzA5IxOejitF6 LnB2MORGHaa0i5UOc059FTM2Kt77SqF9GXaJPNUoTNVXN7Q47FGgEE8Xkao77JWW s/rgHaFQZyJKcN5IE3vdlAt/iAshWYEFBIsgUC/ozfIIgjQNQmIP2zAkSSCHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3+fceGYaZzMbX5xa0Y0dAj1FmZ0wHwYDVR0j BBgwFoAUNj/ePzB2HO+0HUWJFbu8jZG0NM8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0MjUyMTQ4MTAzNTc3OC8wLzM2M0ZERTNGMzA3NjFDRUZCNDFENDU4OTE1QkJC QzhEOTFCNDM0Q0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5MUI0MzRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NDI1MjE0ODEwMzU3NzgvMC8zNjNGREUzRjMwNzYx Q0VGQjQxRDQ1ODkxNUJCQkM4RDkxQjQzNENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtOHLCg1XTcQ 8Hwcff/ALe4ysYQ0uqzbTzQKDRxwLbBK7WWeBv0MMiCYe0gjbskh0nmVvav/kLOr YV40EolgyAVlQGTcu/W/6hCtXhqPZky8jgAE+/HCfEyFrS60nfaMBVK5+HLLYzSC DxBAW2DsoIDIIJLcbP0okSNdWJwTdkoMT9OtKRPfnO+5ZviMJ1+cPfkN9tq4e/Ze oGDNz1S0Q6LhB/eO6YWUyro76BCFSAlQ4cw50JjJWV9tITvFM0YUVms1KgarlsM2 N1mocUEJfCd4vW9YpwSiDU1xYyjvaLF5FZi7uvEl8Oem95U0Zwx6Gzya80gxB5oQ Q0WmV4XcoA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:33:09 2026 by rpki-client