$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft File: C6350AA90D1F58C58F9578EF82E722659D8B593D.mft (raw, json) Hash identifier: cFM23XCl5cpX1wWf6TyypO9loxbg/UP4isD6qHDcQqw= Subject key identifier: 5A:74:1C:BF:19:DE:DE:5E:0F:A0:B3:78:4F:B4:D0:28:59:29:BA:25 Authority key identifier: C6:35:0A:A9:0D:1F:58:C5:8F:95:78:EF:82:E7:22:65:9D:8B:59:3D Certificate issuer: /CN=C6350AA90D1F58C58F9578EF82E722659D8B593D Certificate serial: 484E680D00A5068EE60B1AA2E0948186C3D3021B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft Manifest number: 42 Signing time: Wed 29 Jul 2026 13:54:31 +0000 Manifest this update: Wed 29 Jul 2026 13:49:31 +0000 Manifest next update: Thu 30 Jul 2026 16:13:31 +0000 Files and hashes: 1: C6350AA90D1F58C58F9578EF82E722659D8B593D.crl (hash: etEj+rLHhdl5eQyXOPD0tdrHnPkOl3IiPJeQRyC/i8A=) 2: 3130332e3135342e3136322e302f32332d3233203d3e20313337373139.roa (hash: kYjmRhbwbPJDmFT3EDvlIX8375Cp3nfEK5OQkUkt4kE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.crl rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4e:68:0d:00:a5:06:8e:e6:0b:1a:a2:e0:94:81:86:c3:d3:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6350AA90D1F58C58F9578EF82E722659D8B593D Validity Not Before: Jul 29 13:49:31 2026 GMT Not After : Jul 30 16:13:31 2026 GMT Subject: CN=5A741CBF19DEDE5E0FA0B3784FB4D0285929BA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:fd:ee:c9:c6:97:cf:44:9e:31:e5:f3:85: 7b:5b:b8:c9:d1:91:c8:40:87:c9:52:2a:b9:16:a1: d6:b1:43:ca:e2:2e:42:db:4b:be:1b:f5:bd:88:17: ec:e0:53:fc:fa:b1:2c:f2:7c:bc:8e:bf:ea:f1:b3: 12:95:4f:be:48:be:f6:ec:06:05:1c:e5:ae:73:2e: 33:ad:e3:82:6e:24:9a:fc:3f:f6:2c:8a:fa:f9:d8: 22:91:f0:e1:4e:77:da:53:26:9f:48:f7:c7:dc:c3: 4e:11:96:43:5d:fe:54:68:ef:a8:c3:29:10:b4:f8: 0c:be:c0:02:8a:a9:57:b0:9d:5e:29:48:9b:23:90: 42:cd:0f:54:07:89:b9:ca:1c:d2:c8:6f:62:b4:e5: 08:f1:5a:5c:a5:88:50:1c:b9:90:e9:9a:2c:5d:aa: 4e:9d:b6:42:1f:c1:99:a7:55:72:46:83:11:a6:77: 29:7c:f3:1d:fe:d4:c7:a8:5e:97:08:d4:f2:d2:ac: 0c:d5:e6:24:8d:f1:d9:ff:72:fd:0a:17:9d:4c:36: 7c:d3:1b:48:02:96:a7:65:08:96:6a:af:88:29:33: bf:b9:52:38:c0:0f:b1:22:e9:22:99:1f:05:74:10: 8b:20:cd:f4:c2:c7:c9:dd:55:88:c9:c2:04:35:df: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:1C:BF:19:DE:DE:5E:0F:A0:B3:78:4F:B4:D0:28:59:29:BA:25 X509v3 Authority Key Identifier: keyid:C6:35:0A:A9:0D:1F:58:C5:8F:95:78:EF:82:E7:22:65:9D:8B:59:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C6350AA90D1F58C58F9578EF82E722659D8B593D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117002528240697369/0/C6350AA90D1F58C58F9578EF82E722659D8B593D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f4:1c:31:f7:a9:dc:22:f0:55:c6:d2:ad:81:ed:a8:5d:ec: 11:87:db:7d:f5:c2:07:ae:78:81:cd:e9:96:6d:35:d0:6a:9f: 17:ef:c9:60:61:f8:be:5a:a3:38:5f:9f:28:23:4e:1e:a9:e6: 13:20:03:9b:76:f2:92:91:97:6c:ad:f8:e4:af:54:11:31:c7: 2f:84:19:41:2a:78:8b:61:02:ad:62:56:52:c7:c7:27:42:03: ba:d7:26:e1:ab:2b:22:1e:ea:69:a6:74:d8:93:af:95:00:56: bf:6e:51:3e:72:b8:a2:5b:bf:c2:17:cb:6d:e3:19:00:48:f0: 12:62:4b:fe:5d:46:f6:d6:dc:42:69:fd:76:4a:ce:08:d1:64: d4:a1:d8:70:06:bd:de:18:fa:4d:c4:7e:74:97:d2:38:b2:f0: d4:66:11:c4:06:f7:40:92:81:cd:1b:8d:6e:c3:dd:29:1e:77: 35:73:ef:58:99:72:cd:ce:36:04:27:6f:dd:60:35:2f:c8:db: 01:30:d1:ba:8b:4c:d1:cd:ad:0a:3a:b3:e4:28:0b:58:d9:b1: 0d:09:ca:7a:a3:8e:12:e5:b3:52:49:bf:5f:b8:0a:2b:ff:b0: 4e:91:8b:43:89:55:12:90:e4:cb:0d:92:4e:05:26:d8:ab:90: 49:09:b2:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSE5oDQClBo7mCxqi4JSBhsPTAhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzNTBBQTkwRDFGNThDNThGOTU3OEVGODJFNzIyNjU5 RDhCNTkzRDAeFw0yNjA3MjkxMzQ5MzFaFw0yNjA3MzAxNjEzMzFaMDMxMTAvBgNV BAMTKDVBNzQxQ0JGMTlERURFNUUwRkEwQjM3ODRGQjREMDI4NTkyOUJBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaf/3uycaXz0SeMeXzhXtbuMnR kchAh8lSKrkWodaxQ8riLkLbS74b9b2IF+zgU/z6sSzyfLyOv+rxsxKVT75Ivvbs BgUc5a5zLjOt44JuJJr8P/Ysivr52CKR8OFOd9pTJp9I98fcw04RlkNd/lRo76jD KRC0+Ay+wAKKqVewnV4pSJsjkELND1QHibnKHNLIb2K05QjxWlyliFAcuZDpmixd qk6dtkIfwZmnVXJGgxGmdyl88x3+1MeoXpcI1PLSrAzV5iSN8dn/cv0KF51MNnzT G0gClqdlCJZqr4gpM7+5UjjAD7Ei6SKZHwV0EIsgzfTCx8ndVYjJwgQ137qzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWnQcvxne3l4PoLN4T7TQKFkpuiUwHwYDVR0j BBgwFoAUxjUKqQ0fWMWPlXjvguciZZ2LWT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzAwMjUyODI0MDY5NzM2OS8wL0M2MzUwQUE5MEQxRjU4QzU4Rjk1NzhFRjgyRTcy MjY1OUQ4QjU5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzYzNTBBQTkwRDFGNThDNThGOTU3OEVGODJFNzIyNjU5RDhCNTkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcwMDI1MjgyNDA2OTczNjkvMC9DNjM1MEFBOTBEMUY1 OEM1OEY5NTc4RUY4MkU3MjI2NTlEOEI1OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/QcMfep3CLw VcbSrYHtqF3sEYfbffXCB654gc3plm010GqfF+/JYGH4vlqjOF+fKCNOHqnmEyAD m3bykpGXbK345K9UETHHL4QZQSp4i2ECrWJWUsfHJ0IDutcm4asrIh7qaaZ02JOv lQBWv25RPnK4olu/whfLbeMZAEjwEmJL/l1G9tbcQmn9dkrOCNFk1KHYcAa93hj6 TcR+dJfSOLLw1GYRxAb3QJKBzRuNbsPdKR53NXPvWJlyzc42BCdv3WA1L8jbATDR uotM0c2tCjqz5CgLWNmxDQnKeqOOEuWzUkm/X7gKK/+wTpGLQ4lVEpDkyw2STgUm 2KuQSQmy5A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client