$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json) Hash identifier: rZ8LFxCrccDIldJ6Ofpp4STC/lVGVlWG8lYi7evkWlA= Subject key identifier: B7:13:F3:86:86:77:2E:C7:42:68:39:40:D7:7B:9A:D3:19:00:3A:16 Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 2308B7D3B07D4044BD18037695F4CD74A280EB22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft Manifest number: 3C Signing time: Wed 29 Jul 2026 21:30:17 +0000 Manifest this update: Wed 29 Jul 2026 21:25:17 +0000 Manifest next update: Thu 30 Jul 2026 22:04:17 +0000 Files and hashes: 1: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=) 2: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=) 3: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=) 4: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: m6Cz2xNJZMbQQBC8+6n7RzLxwULto/xEn+B+/l29zZY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:08:b7:d3:b0:7d:40:44:bd:18:03:76:95:f4:cd:74:a2:80:eb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Jul 29 21:25:17 2026 GMT Not After : Jul 30 22:04:17 2026 GMT Subject: CN=B713F38686772EC742683940D77B9AD319003A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:61:b7:ad:f8:cc:ea:13:50:a3:ea:b2:87: 84:db:e2:90:f5:ee:6f:e9:f5:c5:b0:d0:d9:14:91: 46:16:6f:3f:d3:48:2d:c8:8b:34:be:1d:f2:b0:25: c4:18:24:07:99:68:fe:20:89:31:86:3d:7c:cb:6a: c8:30:50:5a:9f:17:0f:cb:bc:33:5a:59:9e:b8:5c: 4f:ce:57:b9:df:75:13:a8:d6:21:fe:0a:04:c3:24: cd:21:23:a1:8e:44:33:8a:9e:27:7e:c4:25:2e:da: 4f:4e:a8:f4:e2:c2:f1:5e:4f:45:65:20:b3:e9:17: 05:15:5f:2d:a3:a4:1d:8c:fb:4c:1a:e5:b4:2e:4f: a8:2e:18:1d:95:5c:4c:cb:2f:95:74:5d:f2:de:03: be:17:a6:4b:0e:44:f6:0c:f4:75:60:76:6b:54:b5: db:6a:e2:1a:a9:16:47:8a:06:16:57:36:a4:fa:c4: a5:ed:88:11:32:de:9b:6a:b0:eb:50:83:64:ff:6b: c2:fe:b9:77:53:f0:0b:82:8b:72:bf:71:25:fe:29: fd:70:80:cc:bf:19:29:db:b2:6c:69:9d:c0:0e:bf: 45:5e:23:ea:e0:57:1c:de:e7:1d:58:46:a8:be:ba: 1a:e5:42:a3:79:d7:04:dc:e9:cb:b6:28:b8:62:7f: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:13:F3:86:86:77:2E:C7:42:68:39:40:D7:7B:9A:D3:19:00:3A:16 X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:c1:e0:45:05:e1:8f:0e:ea:6d:95:62:22:2f:1b:fc:e2: 11:a7:62:05:77:cc:fe:45:4c:19:13:ee:3c:73:94:13:4d:c4: 23:ad:71:49:fc:01:b1:21:d3:5e:f1:02:73:5d:51:a4:0e:1d: 9b:a3:f1:8f:01:18:a0:4b:60:03:91:44:ee:15:8b:91:f1:ef: 6f:ea:c4:15:b7:37:09:4d:b8:48:60:86:e0:62:b9:3f:a4:c7: bf:dc:b7:3a:35:ed:ff:1c:69:c8:26:86:d6:ef:a7:4d:40:d7: 55:1a:fe:47:2c:7e:2a:14:92:f5:40:02:b7:66:fa:ba:1a:bf: 94:7e:d8:ac:1e:7d:37:8e:42:ff:77:a4:8e:af:ab:84:23:80: 39:7f:2b:3f:79:3b:cb:54:8c:35:73:2e:ad:b1:03:9d:8c:55: 31:e6:4d:30:35:e2:f8:1e:95:14:a2:cb:77:00:7f:96:f3:4e: ec:d3:6b:69:7e:a2:14:48:80:73:ea:4c:46:c0:20:1a:c3:f0: 06:9e:5c:a0:94:05:af:5e:f7:07:3d:5a:1f:71:32:d8:30:06: 12:92:2e:3d:f0:d7:84:b2:9f:4d:f9:c8:4a:a5:17:fb:78:f0: 75:c9:b8:43:94:05:1f:56:7c:cd:f0:b5:0f:23:9f:2d:8a:9f: 69:77:89:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIwi307B9QES9GAN2lfTNdKKA6yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQx RDU0RTdEODAeFw0yNjA3MjkyMTI1MTdaFw0yNjA3MzAyMjA0MTdaMDMxMTAvBgNV BAMTKEI3MTNGMzg2ODY3NzJFQzc0MjY4Mzk0MEQ3N0I5QUQzMTkwMDNBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLmG3rfjM6hNQo+qyh4Tb4pD1 7m/p9cWw0NkUkUYWbz/TSC3IizS+HfKwJcQYJAeZaP4giTGGPXzLasgwUFqfFw/L vDNaWZ64XE/OV7nfdROo1iH+CgTDJM0hI6GORDOKnid+xCUu2k9OqPTiwvFeT0Vl ILPpFwUVXy2jpB2M+0wa5bQuT6guGB2VXEzLL5V0XfLeA74XpksORPYM9HVgdmtU tdtq4hqpFkeKBhZXNqT6xKXtiBEy3ptqsOtQg2T/a8L+uXdT8AuCi3K/cSX+Kf1w gMy/GSnbsmxpncAOv0VeI+rgVxze5x1YRqi+uhrlQqN51wTc6cu2KLhif2E3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtxPzhoZ3LsdCaDlA13ua0xkAOhYwHwYDVR0j BBgwFoAUGGaTOzQn2b7+V+PyCnBJvR1U59gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx OTE1MjY4NDU5MTQ4MDg2My8wLzE4NjY5MzNCMzQyN0Q5QkVGRTU3RTNGMjBBNzA0 OUJEMUQ1NEU3RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8xODY2OTMzQjM0MjdE OUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJrB4EUF4Y8O 6m2VYiIvG/ziEadiBXfM/kVMGRPuPHOUE03EI61xSfwBsSHTXvECc11RpA4dm6Px jwEYoEtgA5FE7hWLkfHvb+rEFbc3CU24SGCG4GK5P6THv9y3OjXt/xxpyCaG1u+n TUDXVRr+Ryx+KhSS9UACt2b6uhq/lH7YrB59N45C/3ekjq+rhCOAOX8rP3k7y1SM NXMurbEDnYxVMeZNMDXi+B6VFKLLdwB/lvNO7NNraX6iFEiAc+pMRsAgGsPwBp5c oJQFr173Bz1aH3Ey2DAGEpIuPfDXhLKfTfnISqUX+3jwdcm4Q5QFH1Z8zfC1DyOf LYqfaXeJbg== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:48 2026 by rpki-client