$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json) Hash identifier: Adhcv3lHw3OzUwLDrpV4wtzVThascmn/vrRyNO/Vbn8= Subject key identifier: A7:73:36:E0:D8:4A:11:7C:31:1C:83:14:28:81:92:3C:06:2E:A4:EE Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Certificate serial: 75E3A241B5E0F22467D634DC56022FAB8824C8D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft Manifest number: 0129 Signing time: Thu 24 Sep 2026 10:11:46 +0000 Manifest this update: Thu 24 Sep 2026 10:06:46 +0000 Manifest next update: Sun 27 Sep 2026 16:19:46 +0000 Files and hashes: 1: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=) 2: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=) 3: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=) 4: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: /GfAAD8YXs9e+jB/9AHLw/665mxAVeCfMPkgKOPJb2A=) 5: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=) 6: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=) 7: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=) 8: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:a2:41:b5:e0:f2:24:67:d6:34:dc:56:02:2f:ab:88:24:c8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D Validity Not Before: Sep 24 10:06:46 2026 GMT Not After : Sep 27 16:19:46 2026 GMT Subject: CN=A77336E0D84A117C311C83142881923C062EA4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:2a:07:af:b2:bc:78:41:e9:22:97:06:29: e8:45:58:d3:f4:c6:90:c4:02:d7:09:5c:57:f7:a6: df:d1:77:b7:7c:66:b0:41:4d:e8:2c:62:7a:bf:1e: 59:86:8a:98:97:bc:e6:f8:63:e2:a0:49:13:6a:27: fc:d7:6b:2f:e5:8a:a6:97:89:8f:f2:3c:a1:e0:f4: 7b:79:6d:cc:56:d0:6b:2d:dc:b1:c3:d2:c0:20:68: d1:1b:e7:23:4d:f5:45:19:8e:c3:cb:73:7a:ef:2a: 58:68:9b:20:7a:f8:34:86:0c:40:f3:fb:65:4c:da: 99:70:57:db:67:4a:5f:db:e3:17:d2:8a:79:58:2b: f4:cc:da:36:30:59:38:12:5f:b7:36:27:e1:ba:79: 4d:9f:98:32:1a:c2:ec:7f:e6:19:8e:0e:f8:e0:ae: 5c:54:4c:db:92:59:b3:c3:61:66:d4:d1:69:86:f7: 3b:5a:c6:e4:a7:b1:dc:f8:4a:95:da:3f:25:77:42: 27:9e:d0:ab:ec:3a:02:cc:ae:45:bd:be:6b:ca:48: 3d:ff:af:33:89:ae:99:40:61:90:60:c4:6a:35:9b: 0e:91:fe:19:51:a6:fd:73:c5:c2:ff:f4:10:be:b3: 27:37:59:b0:60:c4:da:0b:9b:8c:56:10:71:4d:65: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:73:36:E0:D8:4A:11:7C:31:1C:83:14:28:81:92:3C:06:2E:A4:EE X509v3 Authority Key Identifier: keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:3e:be:a0:e7:06:ab:60:11:98:82:a4:7c:29:bc:9b:7a: b1:b6:54:68:74:1c:f5:31:d1:74:88:d7:6c:66:52:bd:c9:41: 77:b6:98:0e:41:92:76:07:d6:b3:22:aa:32:31:6a:96:94:ce: 3f:48:8e:09:53:d5:44:a6:7e:21:dd:4e:56:ef:82:f1:ce:7d: 68:88:3d:ba:ab:a2:96:db:12:66:56:9d:01:c3:a9:85:5c:48: 6c:f1:86:2f:a6:f0:3e:aa:88:ac:75:87:36:67:f4:66:c9:30: 69:3c:31:ed:de:32:d1:e8:8d:c2:44:7e:7c:b4:07:7f:11:be: fa:2c:41:19:b6:09:f2:25:81:b3:60:cc:2c:32:4c:04:e4:8c: 06:ed:23:65:6c:3d:58:52:50:11:35:4e:ad:31:e1:78:76:5b: dc:28:c3:76:02:3b:8a:5e:5c:2f:54:8b:ee:2f:bf:37:77:57: 17:8e:69:bf:4b:1c:da:49:df:50:9d:1d:aa:10:a4:cd:13:67: 49:55:8f:a6:ec:bb:5c:d6:87:60:d4:9b:ca:f7:72:1c:ab:ca: 1d:8c:49:0c:36:76:79:cd:cf:6e:c9:8d:d0:96:02:82:5e:00: 88:d6:3e:d3:be:24:1a:f9:25:34:4c:07:de:40:22:e3:a7:dc: 8c:f5:a5:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdeOiQbXg8iRn1jTcVgIvq4gkyNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx Q0U0RTk1RDAeFw0yNjA5MjQxMDA2NDZaFw0yNjA5MjcxNjE5NDZaMDMxMTAvBgNV BAMTKEE3NzMzNkUwRDg0QTExN0MzMTFDODMxNDI4ODE5MjNDMDYyRUE0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+CoHr7K8eEHpIpcGKehFWNP0 xpDEAtcJXFf3pt/Rd7d8ZrBBTegsYnq/HlmGipiXvOb4Y+KgSRNqJ/zXay/liqaX iY/yPKHg9Ht5bcxW0Gst3LHD0sAgaNEb5yNN9UUZjsPLc3rvKlhomyB6+DSGDEDz +2VM2plwV9tnSl/b4xfSinlYK/TM2jYwWTgSX7c2J+G6eU2fmDIawux/5hmODvjg rlxUTNuSWbPDYWbU0WmG9ztaxuSnsdz4SpXaPyV3Qiee0KvsOgLMrkW9vmvKSD3/ rzOJrplAYZBgxGo1mw6R/hlRpv1zxcL/9BC+syc3WbBgxNoLm4xWEHFNZf+NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp3M24NhKEXwxHIMUKIGSPAYupO4wHwYDVR0j BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC83RjMzNUVFNEEzM0Qw N0M0MkMzOEM0NUVDNjQ4QTZGOTFDRTRFOTVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhY+vqDnBqtg EZiCpHwpvJt6sbZUaHQc9THRdIjXbGZSvclBd7aYDkGSdgfWsyKqMjFqlpTOP0iO CVPVRKZ+Id1OVu+C8c59aIg9uquiltsSZladAcOphVxIbPGGL6bwPqqIrHWHNmf0 ZskwaTwx7d4y0eiNwkR+fLQHfxG++ixBGbYJ8iWBs2DMLDJMBOSMBu0jZWw9WFJQ ETVOrTHheHZb3CjDdgI7il5cL1SL7i+/N3dXF45pv0sc2knfUJ0dqhCkzRNnSVWP puy7XNaHYNSbyvdyHKvKHYxJDDZ2ec3PbsmN0JYCgl4AiNY+074kGvklNEwH3kAi 46fcjPWlCQ== -----END CERTIFICATE-----Generated at Thu Sep 24 18:35:56 2026 by rpki-client