$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft File: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft (raw, json) Hash identifier: pygO5WE3plcrUgif0eEmonazoO/azqjgdZrElW3YeDo= Subject key identifier: 1D:4C:AA:67:3A:76:5F:D0:87:8F:F0:E4:8F:80:44:57:89:8C:61:39 Authority key identifier: 7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D Certificate issuer: /CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D Certificate serial: 4D82AD741D6E8343888F3971BCF5C68D33457E73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft Manifest number: 41 Signing time: Wed 29 Jul 2026 07:58:51 +0000 Manifest this update: Wed 29 Jul 2026 07:53:51 +0000 Manifest next update: Thu 30 Jul 2026 11:34:51 +0000 Files and hashes: 1: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl (hash: MRQ5+gGC3wohDevdqBaJcD+bOq7uODd+lI3e1j4oosk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:82:ad:74:1d:6e:83:43:88:8f:39:71:bc:f5:c6:8d:33:45:7e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D Validity Not Before: Jul 29 07:53:51 2026 GMT Not After : Jul 30 11:34:51 2026 GMT Subject: CN=1D4CAA673A765FD0878FF0E48F804457898C6139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:0e:9e:71:d0:29:0f:da:f3:ed:c1:aa:ed: a5:60:0c:e8:1e:0d:03:d0:c1:78:ca:04:1c:43:24: e5:98:89:80:d6:b7:2b:7c:00:95:fa:2f:06:97:e8: 2a:24:34:99:22:90:97:5c:a5:a4:af:b6:2d:60:c7: 9a:9a:0b:0a:88:56:8f:dc:c3:09:b9:d8:73:9c:d3: c8:8f:2d:c4:85:78:03:85:b8:03:f2:77:65:5f:e4: 57:6c:ce:a0:66:a5:9f:40:8a:cd:39:f8:7d:26:9c: 20:e9:96:8b:86:f2:3d:d5:0b:ef:4e:2f:b0:ef:ac: 2f:e4:34:1b:61:e4:90:c6:49:52:2b:d3:e2:1d:52: e5:1f:98:2b:40:6c:1d:21:5d:96:1d:54:00:31:1f: bd:65:4b:af:dd:ae:02:07:71:f4:78:72:27:bc:a8: c6:24:00:9e:b6:39:a5:d9:72:7c:49:5c:f4:04:fb: 31:93:e4:c0:b4:ae:b7:85:c4:69:f6:e0:83:94:40: 7f:de:3c:2b:1e:40:47:90:ea:7b:9c:26:5c:3c:52: 84:72:ef:ab:dc:a9:9e:12:72:e5:59:b1:96:59:9b: 4f:b4:e5:07:9a:e7:b6:03:b1:2f:0d:ad:5b:b5:47: 4f:95:86:eb:22:f0:dc:44:7d:5a:9b:ff:24:49:8a: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4C:AA:67:3A:76:5F:D0:87:8F:F0:E4:8F:80:44:57:89:8C:61:39 X509v3 Authority Key Identifier: keyid:7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f8:d0:9a:8c:cf:6d:d8:44:2a:12:fb:a0:87:9c:0f:78:ee: c9:3a:4b:99:a6:3c:51:b5:d3:c7:aa:99:18:85:32:fb:cd:5e: fd:82:d2:53:50:13:64:47:16:90:d9:90:9c:5c:0f:16:cd:d1: 65:26:92:28:ec:19:07:64:32:33:f4:37:d8:bd:c8:00:4d:3d: 9d:b6:7a:a6:50:0f:08:d5:b5:37:fb:30:f7:33:a6:27:82:5b: 38:f4:c3:20:62:fe:57:6e:02:cc:60:d8:39:b3:cf:dc:94:be: db:c1:34:a8:01:7e:9a:dc:dd:65:7f:a6:a7:dc:60:a1:57:59: 02:a8:a9:02:c1:51:d8:b8:e7:eb:25:b6:ff:23:5d:70:60:57: 40:50:3f:b6:29:e8:92:e0:87:2b:7c:34:fb:03:01:09:ce:61: de:fe:2a:09:a1:6e:95:3f:f0:39:12:3e:64:09:88:f1:23:57: 58:27:2d:b6:cb:cc:b4:bc:af:fe:18:1a:bc:7e:d5:a9:59:4b: f2:8c:3c:db:03:20:64:16:82:59:c4:34:57:8a:c3:01:65:83: 14:ed:7d:28:8e:1d:f2:22:be:6f:27:9b:1c:08:dd:79:cf:41: 96:45:0f:97:64:0a:36:ce:a3:7c:95:87:64:fe:15:6f:23:2f: 0c:e0:1f:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTYKtdB1ug0OIjzlxvPXGjTNFfnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YxNTE5M0NERTg3RkJDNTI1QTdFN0ExNUNENTJEREIy MjY1MUU0RDAeFw0yNjA3MjkwNzUzNTFaFw0yNjA3MzAxMTM0NTFaMDMxMTAvBgNV BAMTKDFENENBQTY3M0E3NjVGRDA4NzhGRjBFNDhGODA0NDU3ODk4QzYxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSQ6ecdApD9rz7cGq7aVgDOge DQPQwXjKBBxDJOWYiYDWtyt8AJX6LwaX6CokNJkikJdcpaSvti1gx5qaCwqIVo/c wwm52HOc08iPLcSFeAOFuAPyd2Vf5FdszqBmpZ9Ais05+H0mnCDplouG8j3VC+9O L7DvrC/kNBth5JDGSVIr0+IdUuUfmCtAbB0hXZYdVAAxH71lS6/drgIHcfR4cie8 qMYkAJ62OaXZcnxJXPQE+zGT5MC0rreFxGn24IOUQH/ePCseQEeQ6nucJlw8UoRy 76vcqZ4ScuVZsZZZm0+05Qea57YDsS8NrVu1R0+Vhusi8NxEfVqb/yRJiljxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHUyqZzp2X9CHj/Dkj4BEV4mMYTkwHwYDVR0j BBgwFoAUfxUZPN6H+8Ulp+ehXNUt2yJlHk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI4NzAzMDQ2MDUxNDMzMS8xLzdGMTUxOTNDREU4N0ZCQzUyNUE3RTdBMTVDRDUy RERCMjI2NTFFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YxNTE5M0NERTg3RkJDNTI1QTdFN0ExNUNENTJEREIyMjY1MUU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyODcwMzA0NjA1MTQzMzEvMS83RjE1MTkzQ0RFODdG QkM1MjVBN0U3QTE1Q0Q1MkREQjIyNjUxRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfjQmozPbdhE KhL7oIecD3juyTpLmaY8UbXTx6qZGIUy+81e/YLSU1ATZEcWkNmQnFwPFs3RZSaS KOwZB2QyM/Q32L3IAE09nbZ6plAPCNW1N/sw9zOmJ4JbOPTDIGL+V24CzGDYObPP 3JS+28E0qAF+mtzdZX+mp9xgoVdZAqipAsFR2Ljn6yW2/yNdcGBXQFA/tinokuCH K3w0+wMBCc5h3v4qCaFulT/wORI+ZAmI8SNXWCcttsvMtLyv/hgavH7VqVlL8ow8 2wMgZBaCWcQ0V4rDAWWDFO19KI4d8iK+byebHAjdec9BlkUPl2QKNs6jfJWHZP4V byMvDOAfkg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:48 2026 by rpki-client