$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft File: 721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json) Hash identifier: UqP3JNGQ6qvCDQ4kR2Cz3Tz0kBNi5IqnKkyTbMMW+Kk= Subject key identifier: 26:F4:A4:C9:DB:3C:E1:BC:05:D0:28:1D:CA:FA:72:AB:3F:F9:63:19 Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Certificate serial: 3E5CE1AACD53A38096BCE593F199FF6F5681680C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft Manifest number: 3B Signing time: Tue 28 Jul 2026 06:11:29 +0000 Manifest this update: Tue 28 Jul 2026 06:06:29 +0000 Manifest next update: Wed 29 Jul 2026 07:08:29 +0000 Files and hashes: 1: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: vpdZ1QVAZODxRsp0Xcp90NRe5s/uQZGhZLLKTQXloYU=) 2: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=) 3: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=) 4: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=) 5: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=) 6: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=) 7: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=) 8: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=) 9: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5c:e1:aa:cd:53:a3:80:96:bc:e5:93:f1:99:ff:6f:56:81:68:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Validity Not Before: Jul 28 06:06:29 2026 GMT Not After : Jul 29 07:08:29 2026 GMT Subject: CN=26F4A4C9DB3CE1BC05D0281DCAFA72AB3FF96319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:f6:df:cc:88:30:d6:9b:3a:cf:72:d6:4f: 6a:6b:53:8e:c9:8c:a5:e5:b8:d8:5f:5a:68:c7:73: 73:a9:ab:b9:6a:5e:60:5b:44:1d:1c:fe:13:87:2d: 7d:ef:e7:54:7b:65:eb:57:9e:bf:5e:1f:c6:68:c8: 87:6a:77:58:3f:a2:37:1f:b4:20:57:3f:a7:44:33: 60:cc:6c:8a:1a:17:3c:db:bc:32:62:02:4a:e2:66: ff:d7:85:3f:4c:5f:97:2a:9d:c4:d8:25:65:61:1a: cb:72:a8:c9:d4:b4:ed:a9:63:2a:5e:b0:1c:5f:ce: ba:dc:87:4a:a2:f6:90:8c:21:2a:bc:cd:9f:49:57: fa:b2:8f:df:19:9d:7b:89:02:63:72:6e:3f:d3:63: 39:2a:fa:2f:7a:e3:65:e7:b5:85:5b:0c:18:d0:61: 58:e7:4f:90:60:11:7a:b3:18:05:e9:24:4a:b0:57: f8:b7:e1:fd:9c:9e:14:ff:33:c9:4a:da:29:13:59: c5:93:be:ab:a8:cc:20:22:89:45:de:fc:1c:18:d1: 81:db:c9:12:01:2f:4b:6e:a2:69:5b:25:c3:f1:c2: 71:e6:a1:df:56:4b:9d:af:9d:db:61:69:b6:dd:1f: c5:56:9b:a6:2c:3a:b7:d7:84:18:39:f3:0c:7d:b1: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F4:A4:C9:DB:3C:E1:BC:05:D0:28:1D:CA:FA:72:AB:3F:F9:63:19 X509v3 Authority Key Identifier: keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:00:34:9a:c8:09:aa:10:3d:12:78:5f:3a:33:31:de:8f:b6: bf:b0:6c:25:1a:b3:80:86:18:bd:1c:37:29:84:97:21:b5:65: d0:95:7b:c9:73:8b:fb:d0:b9:cb:d9:03:ef:ad:fa:9d:1e:77: d7:7a:7d:d1:7f:16:ad:d0:d2:e4:2a:08:17:bc:a2:54:38:2c: d9:01:30:00:db:a6:77:9b:f5:05:5f:42:bc:01:ad:60:ef:2a: 39:3b:b9:fc:91:a4:39:a8:9f:f3:d1:19:20:9f:52:ce:2d:d7: d5:c8:c7:22:de:a3:36:70:b8:d7:70:9b:53:ad:32:01:28:05: d6:1f:85:62:c5:7e:ea:53:b8:7b:fc:26:38:59:ff:bc:1a:38: f8:c8:e4:fd:99:eb:8c:97:ef:75:f0:52:88:25:19:3a:06:8d: e6:fc:75:f5:5a:24:b8:68:b1:96:d9:da:70:3b:bf:2d:fa:4f: 09:f6:47:6b:80:37:a3:80:97:13:07:b2:45:c4:b8:65:76:a5: a4:22:d8:a3:36:b1:b3:26:15:e0:6b:21:b6:39:9f:f1:b3:6a: a8:12:f4:17:2a:d7:34:11:f0:a5:59:7d:4b:cb:b1:66:c7:2b: 33:90:2a:59:21:04:9f:0c:f8:3c:08:49:00:14:3c:ca:cc:b8: 36:c1:cd:b6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPlzhqs1To4CWvOWT8Zn/b1aBaAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDcyODA2MDYyOVoX DTI2MDcyOTA3MDgyOVowMzExMC8GA1UEAxMoMjZGNEE0QzlEQjNDRTFCQzA1RDAy ODFEQ0FGQTcyQUIzRkY5NjMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrW9t/MiDDWmzrPctZPamtTjsmMpeW42F9aaMdzc6mruWpeYFtEHRz+E4ct fe/nVHtl61eev14fxmjIh2p3WD+iNx+0IFc/p0QzYMxsihoXPNu8MmICSuJm/9eF P0xflyqdxNglZWEay3KoydS07aljKl6wHF/OutyHSqL2kIwhKrzNn0lX+rKP3xmd e4kCY3JuP9NjOSr6L3rjZee1hVsMGNBhWOdPkGARerMYBekkSrBX+Lfh/ZyeFP8z yUraKRNZxZO+q6jMICKJRd78HBjRgdvJEgEvS26iaVslw/HCceah31ZLna+d22Fp tt0fxVabpiw6t9eEGDnzDH2xae8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQm9KTJ 2zzhvAXQKB3K+nKrP/ljGTAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2 Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf dXFiWndleklsUHpCaV9meUprLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8wLzcyMUMzNjY3N0Y1OUZFRUE5QjY3MDdCMzIyNTNGMzA2MkZERkM4 OTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCUADSayAmqED0SeF86MzHej7a/sGwlGrOAhhi9HDcphJch tWXQlXvJc4v70LnL2QPvrfqdHnfXen3Rfxat0NLkKggXvKJUOCzZATAA26Z3m/UF X0K8Aa1g7yo5O7n8kaQ5qJ/z0Rkgn1LOLdfVyMci3qM2cLjXcJtTrTIBKAXWH4Vi xX7qU7h7/CY4Wf+8Gjj4yOT9meuMl+918FKIJRk6Bo3m/HX1WiS4aLGW2dpwO78t +k8J9kdrgDejgJcTB7JFxLhldqWkItijNrGzJhXgayG2OZ/xs2qoEvQXKtc0EfCl WX1Ly7FmxyszkCpZIQSfDPg8CEkAFDzKzLg2wc22 -----END CERTIFICATE-----Generated at Tue Jul 28 19:01:04 2026 by rpki-client