$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json) Hash identifier: GCYwoO8VgcqLdTaSqB1hMFqKuvTVjiI3krOc4z5SDhk= Subject key identifier: C3:32:B4:A4:6E:2E:CD:A2:0B:A1:79:A1:74:11:35:B4:9C:39:B7:77 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 5AE9C46CDFF5E361C05D9F32DF6A83DC8482B741 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft Manifest number: 60 Signing time: Wed 29 Jul 2026 08:48:54 +0000 Manifest this update: Wed 29 Jul 2026 08:43:54 +0000 Manifest next update: Thu 30 Jul 2026 09:49:54 +0000 Files and hashes: 1: 3130312e39362e3134342e302f32302d3230203d3e20313334373630.roa (hash: oILvC6FGtGG7DsXIr7Vuu55YFM4gQfjUJBqeGZyyNR0=) 2: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: iI2nFJhfYeohWMgiv7A1jVg5gq7yFRT/pJDanLuLA80=) 3: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (hash: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e9:c4:6c:df:f5:e3:61:c0:5d:9f:32:df:6a:83:dc:84:82:b7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Jul 29 08:43:54 2026 GMT Not After : Jul 30 09:49:54 2026 GMT Subject: CN=C332B4A46E2ECDA20BA179A1741135B49C39B777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:97:cc:f7:95:48:47:b3:03:c4:9f:41:c3: b7:f7:76:94:ef:2b:2a:9c:04:e2:22:5b:84:45:04: 62:56:72:4e:1e:d7:8d:00:e8:b3:b2:f6:61:0b:40: 95:45:cf:5b:b1:23:9d:df:cb:83:a0:bb:a0:7b:c0: 71:2e:cf:37:51:f6:13:7c:d8:df:33:21:7c:44:52: 09:68:a9:00:d7:99:0b:11:7b:7c:ae:ef:26:f9:7c: bd:9e:00:ff:e9:a7:cb:01:7a:01:e2:9d:dd:9e:06: e3:45:fc:cf:9c:97:6c:41:4d:1f:00:2e:a8:37:a1: a2:13:ca:b3:ae:60:c6:04:c0:5c:f0:6a:20:40:47: da:8b:8c:e9:99:bb:ac:26:c7:46:a7:38:30:f4:10: cb:9e:53:83:bb:3d:e4:82:29:d0:96:e3:d6:cf:6e: 78:6d:dc:bc:7e:a3:cf:06:76:18:e9:7f:db:e2:df: 49:f0:9c:f3:23:76:7e:86:ff:41:6b:f5:e1:af:8b: 7f:da:f2:22:46:f3:d2:dd:f7:52:d0:ee:e6:22:76: 5c:e4:c3:08:03:14:81:99:11:16:11:33:da:8a:26: e2:79:6e:57:b8:b1:74:08:81:5d:cd:0f:85:49:cc: 26:13:73:ae:0d:f0:e9:33:44:de:77:ae:4c:75:8a: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:32:B4:A4:6E:2E:CD:A2:0B:A1:79:A1:74:11:35:B4:9C:39:B7:77 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a0:e5:88:e2:af:e0:05:75:3c:93:d0:19:3f:52:54:08:a0: bc:1d:09:eb:ac:4f:32:17:60:0b:d1:dc:a9:6f:fc:c5:df:d3: 5c:22:12:23:90:cb:14:e0:6f:7d:19:c3:c3:25:7a:64:65:db: 00:27:37:c2:62:d2:0e:94:5d:97:98:93:91:ed:44:fc:4c:c2: 39:0b:8d:61:bf:47:3f:f1:f6:e1:35:72:a7:91:97:19:e1:e5: c4:ca:e6:01:16:94:11:88:ef:0a:9d:db:54:dc:ee:0c:ec:16: d9:2b:01:85:5f:94:1b:76:ad:10:38:f0:21:a8:9c:33:d1:10: 7a:94:6e:90:1d:bb:03:ec:f3:5b:62:8b:7b:8a:ee:de:c3:c1: 15:d2:23:d5:e1:e6:b6:bd:0f:14:d7:59:3e:b1:e8:7b:07:61: 40:41:b5:8c:b5:71:e5:cc:fa:d1:88:96:1d:5e:a5:fd:48:c2: e6:3e:e1:6a:e7:b3:d1:63:6d:81:f4:e5:28:1d:26:38:ac:65: 39:1f:db:d0:2f:48:d2:bb:d8:a8:09:74:80:b8:b1:eb:98:3f: 46:97:17:c4:a6:f7:cc:6a:1a:64:f4:f0:9d:37:b0:b1:f3:74: 47:80:ac:37:8a:a5:06:32:59:ce:0d:c3:81:1c:06:4e:2f:32: 99:96:b5:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWunEbN/142HAXZ8y32qD3ISCt0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVC OTc0MDU4QTAeFw0yNjA3MjkwODQzNTRaFw0yNjA3MzAwOTQ5NTRaMDMxMTAvBgNV BAMTKEMzMzJCNEE0NkUyRUNEQTIwQkExNzlBMTc0MTEzNUI0OUMzOUI3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Q5fM95VIR7MDxJ9Bw7f3dpTv KyqcBOIiW4RFBGJWck4e140A6LOy9mELQJVFz1uxI53fy4Ogu6B7wHEuzzdR9hN8 2N8zIXxEUgloqQDXmQsRe3yu7yb5fL2eAP/pp8sBegHind2eBuNF/M+cl2xBTR8A Lqg3oaITyrOuYMYEwFzwaiBAR9qLjOmZu6wmx0anODD0EMueU4O7PeSCKdCW49bP bnht3Lx+o88Gdhjpf9vi30nwnPMjdn6G/0Fr9eGvi3/a8iJG89Ld91LQ7uYidlzk wwgDFIGZERYRM9qKJuJ5ble4sXQIgV3ND4VJzCYTc64N8OkzRN53rkx1ij41AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwzK0pG4uzaILoXmhdBE1tJw5t3cwHwYDVR0j BBgwFoAUFAUgnYsbBlbCXMt8vico9bl0BYowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMyNDYwNzA1NzI5NzQyNS8wLzE0MDUyMDlEOEIxQjA2NTZDMjVDQ0I3Q0JFMjcy OEY1Qjk3NDA1OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8xNDA1MjA5RDhCMUIw NjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqDliOKv4AV1 PJPQGT9SVAigvB0J66xPMhdgC9HcqW/8xd/TXCISI5DLFOBvfRnDwyV6ZGXbACc3 wmLSDpRdl5iTke1E/EzCOQuNYb9HP/H24TVyp5GXGeHlxMrmARaUEYjvCp3bVNzu DOwW2SsBhV+UG3atEDjwIaicM9EQepRukB27A+zzW2KLe4ru3sPBFdIj1eHmtr0P FNdZPrHoewdhQEG1jLVx5cz60YiWHV6l/UjC5j7hauez0WNtgfTlKB0mOKxlOR/b 0C9I0rvYqAl0gLix65g/RpcXxKb3zGoaZPTwnTewsfN0R4CsN4qlBjJZzg3DgRwG Ti8ymZa14w== -----END CERTIFICATE-----Generated at Wed Jul 29 10:15:57 2026 by rpki-client