$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft File: 721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json) Hash identifier: lp5EW2aNU9vJlfjBYrb+2AG+vZ0NfeO21P27+HFV+DA= Subject key identifier: F1:4A:B9:95:6E:6A:AB:47:87:12:8D:5E:D0:24:A3:B0:59:E5:FB:BF Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Certificate serial: 3D81307AEC78E4E460A6A6527381056FDB37047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft Manifest number: 73 Signing time: Sun 20 Sep 2026 14:39:16 +0000 Manifest this update: Sun 20 Sep 2026 14:34:16 +0000 Manifest next update: Wed 23 Sep 2026 20:59:16 +0000 Files and hashes: 1: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=) 2: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=) 3: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=) 4: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=) 5: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: t1wDI8ZDakq/oT0PbYY5sCXziE0t0us9rRAjW2sNiqQ=) 6: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=) 7: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=) 8: 3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa (hash: CfBgRS04K7VQSDmdLDK1/T0zyTXNs4vFBivuhUcxpf0=) 9: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=) 10: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 20:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:81:30:7a:ec:78:e4:e4:60:a6:a6:52:73:81:05:6f:db:37:04:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899 Validity Not Before: Sep 20 14:34:16 2026 GMT Not After : Sep 23 20:59:16 2026 GMT Subject: CN=F14AB9956E6AAB4787128D5ED024A3B059E5FBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:bf:b1:ee:7c:67:bc:c3:64:cc:62:b5:2a: 7b:78:ef:86:0a:49:82:a1:76:99:fe:58:15:12:78: 2c:4d:8e:a6:74:d9:bf:99:20:0e:83:0e:6d:3a:dc: 93:ca:96:45:11:2a:98:c3:14:8b:4f:5f:f5:b7:00: 40:d0:bb:7c:f6:db:cf:61:fe:87:83:54:b0:97:2a: 3a:31:e7:fe:6a:7a:5b:35:45:1f:3f:83:aa:23:56: 2e:77:10:ba:1a:99:71:43:17:45:7f:1b:12:21:8f: 0f:c7:d2:74:75:7e:a1:18:42:6d:1b:bb:4c:54:99: 3f:85:8d:d5:6f:6f:8b:48:83:ef:8b:db:ad:4e:2c: a1:b5:b0:6d:12:59:b7:58:cc:02:db:d1:f2:19:f8: 58:6e:3d:a0:57:54:86:fc:f9:4c:e4:bf:2f:7b:7a: 9d:8c:6c:64:83:00:26:d2:e9:6d:2d:98:30:8a:1f: 61:58:dc:80:53:ed:81:8a:2e:16:98:b0:03:95:20: 8f:0a:fc:95:4b:2d:62:ba:09:4f:de:19:24:8e:5d: e5:af:41:b3:e6:72:01:ed:32:6f:0b:d0:48:04:b9: f8:c2:55:ba:63:b8:d3:ee:7e:09:0a:29:4f:20:1e: da:df:35:a2:e5:70:21:68:43:0a:01:ff:5b:ae:88: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4A:B9:95:6E:6A:AB:47:87:12:8D:5E:D0:24:A3:B0:59:E5:FB:BF X509v3 Authority Key Identifier: keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:79:35:ff:24:dc:cd:9e:78:62:d6:b0:6a:89:61:9c:80:ef: 08:8f:cf:e2:06:3d:fb:cc:1d:4e:89:35:02:81:44:af:2d:52: 60:20:41:0b:ae:59:3e:59:f9:0d:26:64:d5:0e:3d:2d:c9:0e: d5:69:8a:1f:f4:c6:a2:f6:e6:a9:e5:0c:75:00:13:8a:f0:11: 69:2c:8e:f2:51:ec:36:55:a0:6e:2e:83:7e:11:e7:c4:fd:d0: da:2d:3d:1e:f5:f0:1a:72:9a:8a:45:6c:07:79:a5:c0:73:4a: 7b:96:12:29:14:a4:1b:02:10:45:92:80:32:5b:77:a7:d8:29: 42:dc:8e:75:59:15:b0:07:c9:c9:93:ca:92:9e:d1:20:30:28: 7a:bd:50:b8:aa:d9:b4:fd:a6:54:3e:92:fa:0a:f9:0b:f4:8b: 0d:d0:93:68:20:d4:ff:0d:d8:81:a9:1a:fd:d2:e8:59:02:28: bd:61:cc:98:14:2b:3a:67:33:41:53:a6:e2:5c:ee:e2:fe:19: b0:95:76:ad:cf:8c:72:09:f8:87:f3:4e:6a:e3:fe:4f:85:2b: be:91:54:59:29:a0:e3:77:05:ca:13:10:77:ac:62:82:bb:3e: 91:c7:c2:55:c9:7f:f3:b7:7f:20:f4:7e:73:00:fc:98:27:c0: 6d:dc:3e:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPYEweux45ORgpqZSc4EFb9s3BH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDkyMDE0MzQxNloX DTI2MDkyMzIwNTkxNlowMzExMC8GA1UEAxMoRjE0QUI5OTU2RTZBQUI0Nzg3MTI4 RDVFRDAyNEEzQjA1OUU1RkJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+1v7HufGe8w2TMYrUqe3jvhgpJgqF2mf5YFRJ4LE2OpnTZv5kgDoMObTrc k8qWRREqmMMUi09f9bcAQNC7fPbbz2H+h4NUsJcqOjHn/mp6WzVFHz+DqiNWLncQ uhqZcUMXRX8bEiGPD8fSdHV+oRhCbRu7TFSZP4WN1W9vi0iD74vbrU4sobWwbRJZ t1jMAtvR8hn4WG49oFdUhvz5TOS/L3t6nYxsZIMAJtLpbS2YMIofYVjcgFPtgYou FpiwA5Ugjwr8lUstYroJT94ZJI5d5a9Bs+ZyAe0ybwvQSAS5+MJVumO40+5+CQop TyAe2t81ouVwIWhDCgH/W66IRpcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTxSrmV bmqrR4cSjV7QJKOwWeX7vzAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2 Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf dXFiWndleklsUHpCaV9meUprLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8wLzcyMUMzNjY3N0Y1OUZFRUE5QjY3MDdCMzIyNTNGMzA2MkZERkM4 OTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA6eTX/JNzNnnhi1rBqiWGcgO8Ij8/iBj37zB1OiTUCgUSv LVJgIEELrlk+WfkNJmTVDj0tyQ7VaYof9Mai9uap5Qx1ABOK8BFpLI7yUew2VaBu LoN+EefE/dDaLT0e9fAacpqKRWwHeaXAc0p7lhIpFKQbAhBFkoAyW3en2ClC3I51 WRWwB8nJk8qSntEgMCh6vVC4qtm0/aZUPpL6CvkL9IsN0JNoINT/DdiBqRr90uhZ Aii9YcyYFCs6ZzNBU6biXO7i/hmwlXatz4xyCfiH805q4/5PhSu+kVRZKaDjdwXK ExB3rGKCuz6Rx8JVyX/zt38g9H5zAPyYJ8Bt3D6K -----END CERTIFICATE-----Generated at Tue Sep 22 19:21:21 2026 by rpki-client