$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: vkU+3jlZrEDZVLmJGvz2tBMOfE6XpgPjfjnDqTfyP9I= Subject key identifier: 53:D5:B7:16:E3:B6:D9:39:88:22:4F:4A:8B:F3:6E:CC:F9:61:B7:F2 Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: 4C343EA7B56D59ADBA6CEA21CDCF39D8F825A7AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 4F Signing time: Wed 29 Jul 2026 21:40:18 +0000 Manifest this update: Wed 29 Jul 2026 21:35:18 +0000 Manifest next update: Fri 31 Jul 2026 00:49:18 +0000 Files and hashes: 1: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=) 2: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=) 3: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) 4: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: ZOXnUSCmAAQt4pIFMdWGtdBw0zVI5sdur8AD1JsexUU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:34:3e:a7:b5:6d:59:ad:ba:6c:ea:21:cd:cf:39:d8:f8:25:a7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Jul 29 21:35:18 2026 GMT Not After : Jul 31 00:49:18 2026 GMT Subject: CN=53D5B716E3B6D93988224F4A8BF36ECCF961B7F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:2e:54:e8:7a:02:b8:e4:0d:a3:73:26:a8: 6a:ef:da:20:dd:d8:d5:74:6c:53:a6:e3:c5:32:fc: 01:fd:60:64:30:f1:3a:a5:2e:b8:0a:f7:4f:7d:cb: 2a:fe:25:76:a8:0e:c7:65:78:1a:43:e5:87:b3:d0: 49:b1:b2:f7:a3:78:3b:3e:14:7d:10:e9:04:05:04: 44:80:6a:cf:a1:df:90:93:e8:2a:2d:5c:7f:3f:84: 4d:34:80:51:e2:35:e1:b1:21:02:d8:5e:3f:60:a7: 1e:37:40:b9:d8:25:00:8f:30:5a:73:50:a6:7d:17: 7b:b6:67:25:e8:ed:af:42:2b:d5:c4:02:a3:83:e9: 18:a7:c5:18:dd:03:07:e0:99:9e:84:f2:28:d1:34: f7:f2:b9:a5:ee:ba:dd:02:b1:f5:94:dd:98:2e:80: 15:0f:1b:bc:6d:dc:8c:0c:38:d0:72:24:87:85:27: 5e:87:96:a4:45:e1:61:da:b7:44:0a:b3:b8:34:a6: 45:3d:f3:4f:50:d1:ae:95:68:f4:1c:66:94:90:30: 78:78:df:2d:8d:fa:c7:26:5b:6c:ea:95:d5:ec:f3: 60:4b:fc:6f:70:8d:bf:05:fc:86:6e:a2:81:b3:cf: 7a:00:08:4e:f3:98:74:9d:a0:4f:8a:fc:20:c2:44: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:B7:16:E3:B6:D9:39:88:22:4F:4A:8B:F3:6E:CC:F9:61:B7:F2 X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a7:49:15:7d:6c:ff:d9:87:dc:f6:9d:3b:e4:b7:2d:84:be: a0:09:8f:aa:9b:60:5d:84:20:fa:91:fb:61:a8:75:16:f3:96: 99:ed:2c:07:32:5f:34:6e:f8:e9:b3:21:88:6c:a8:50:d3:f5: 07:ce:43:2b:8d:bd:11:19:a7:07:05:49:2e:9e:85:eb:cb:d1: 0c:55:ac:dd:93:52:50:9e:06:0c:89:27:88:89:77:e0:3b:8a: b8:8d:07:02:f0:4a:61:5c:4f:97:96:32:29:a0:57:e3:bd:9a: 44:cc:c1:f1:4f:20:fd:28:28:7d:98:02:53:7c:1c:26:16:87: a3:3d:9b:aa:e1:dd:e8:dc:06:45:9e:c2:42:dc:23:86:03:15: 87:e7:23:78:50:d4:9b:15:68:fe:86:ce:d7:41:9e:7b:30:ea: 92:09:73:20:d9:6f:b2:34:0d:d9:f5:9c:dd:df:e8:36:cb:a4: 0a:2a:3e:49:40:63:6f:09:1d:92:86:a9:bf:84:3d:8a:ec:74: 05:6c:97:fe:49:bb:56:93:85:41:1b:b8:c3:03:c3:07:b9:54: 10:75:10:cf:5c:6d:49:7d:1b:70:82:0f:18:b0:47:a1:11:a6: d7:22:24:5d:f0:78:68:c2:6c:1d:46:d9:65:05:8b:99:6b:f8: 2f:c4:11:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTDQ+p7VtWa26bOohzc852Pglp64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjA3MjkyMTM1MThaFw0yNjA3MzEwMDQ5MThaMDMxMTAvBgNV BAMTKDUzRDVCNzE2RTNCNkQ5Mzk4ODIyNEY0QThCRjM2RUNDRjk2MUI3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ri5U6HoCuOQNo3MmqGrv2iDd 2NV0bFOm48Uy/AH9YGQw8TqlLrgK9099yyr+JXaoDsdleBpD5Yez0EmxsvejeDs+ FH0Q6QQFBESAas+h35CT6CotXH8/hE00gFHiNeGxIQLYXj9gpx43QLnYJQCPMFpz UKZ9F3u2ZyXo7a9CK9XEAqOD6RinxRjdAwfgmZ6E8ijRNPfyuaXuut0CsfWU3Zgu gBUPG7xt3IwMONByJIeFJ16HlqRF4WHat0QKs7g0pkU9809Q0a6VaPQcZpSQMHh4 3y2N+scmW2zqldXs82BL/G9wjb8F/IZuooGzz3oACE7zmHSdoE+K/CDCRFjFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU9W3FuO22TmIIk9Ki/NuzPlht/IwHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKdJFX1s/9mH 3PadO+S3LYS+oAmPqptgXYQg+pH7Yah1FvOWme0sBzJfNG746bMhiGyoUNP1B85D K429ERmnBwVJLp6F68vRDFWs3ZNSUJ4GDIkniIl34DuKuI0HAvBKYVxPl5YyKaBX 472aRMzB8U8g/SgofZgCU3wcJhaHoz2bquHd6NwGRZ7CQtwjhgMVh+cjeFDUmxVo /obO10GeezDqkglzINlvsjQN2fWc3d/oNsukCio+SUBjbwkdkoapv4Q9iux0BWyX /km7VpOFQRu4wwPDB7lUEHUQz1xtSX0bcIIPGLBHoRGm1yIkXfB4aMJsHUbZZQWL mWv4L8QReQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:34 2026 by rpki-client