$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft File: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft (raw, json) Hash identifier: m16gGnhuIgIUfDi/el4qbNHxcATldwTO1bqMvr5ThPU= Subject key identifier: 6E:9C:E5:FB:8F:42:BC:B8:F7:6B:68:9E:C9:7E:40:43:F3:96:AC:30 Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 Certificate issuer: /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Certificate serial: 4E0DE6D04BC1E1BC6E70F37ABDE2A55A26D3CE9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft Manifest number: 2F Signing time: Wed 29 Jul 2026 03:28:19 +0000 Manifest this update: Wed 29 Jul 2026 03:23:19 +0000 Manifest next update: Thu 30 Jul 2026 07:08:19 +0000 Files and hashes: 1: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl (hash: HeHcE67RcloCf6bh4adtvdv4heYqzTd1PlQVJYXTq+s=) 2: 3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (hash: QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:e6:d0:4b:c1:e1:bc:6e:70:f3:7a:bd:e2:a5:5a:26:d3:ce:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Validity Not Before: Jul 29 03:23:19 2026 GMT Not After : Jul 30 07:08:19 2026 GMT Subject: CN=6E9CE5FB8F42BCB8F76B689EC97E4043F396AC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:59:03:b2:40:06:6c:ca:a1:a6:cf:af:ab: 24:d5:22:91:22:56:49:10:f4:db:db:ef:86:63:34: f5:65:8b:22:28:01:9d:a9:55:36:d2:8a:b2:79:3f: 84:ae:61:c0:b0:88:c7:2f:54:d7:8a:9f:98:69:7b: ed:8e:4b:f9:e0:1f:e8:25:f8:04:0a:2b:a4:cf:af: e3:4c:d0:c0:59:48:bc:96:7c:f0:a3:c4:38:12:a9: 38:b4:86:9c:88:94:db:23:96:ec:bf:c3:1b:2a:87: b2:6f:89:59:bc:e4:1e:03:07:56:84:a9:2b:1e:2a: 1a:45:81:43:4e:59:27:56:76:af:94:c7:70:46:b0: e2:25:8f:42:a8:eb:42:c8:0e:ab:30:55:4b:20:44: f8:7f:56:de:27:08:b0:eb:b4:f0:c3:ba:43:1f:b2: 17:81:84:9c:a4:63:00:aa:58:83:40:fc:52:0f:eb: da:2d:f8:0e:76:6f:a3:62:ea:b6:a2:f7:85:be:f3: 5e:f9:57:52:e6:22:69:f9:9c:4a:f1:d2:98:89:1f: 24:7f:42:c3:ad:48:2a:a4:4f:e8:f0:d2:cc:42:be: f4:73:d1:4f:27:43:48:d2:d0:6c:d5:6f:3a:e1:80: e2:57:97:95:d2:6b:53:c2:3f:b4:45:9b:11:b0:e9: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:E5:FB:8F:42:BC:B8:F7:6B:68:9E:C9:7E:40:43:F3:96:AC:30 X509v3 Authority Key Identifier: keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:02:54:80:80:88:56:2c:59:46:a7:50:b4:14:61:8d:56:e8: 25:99:c0:41:90:e2:52:ea:66:c3:13:22:26:95:0b:f8:3c:0c: 56:07:10:28:dc:c7:8b:b2:a4:41:18:ad:bc:fa:c4:1a:1e:72: 31:7f:51:87:94:5d:45:50:38:b2:1b:fe:2a:82:14:5f:d1:0f: 6e:af:2c:13:f7:6d:2d:d5:43:db:11:b5:2e:69:e1:73:5c:29: d8:92:6f:a4:ac:96:75:39:dc:7a:a6:87:99:db:16:5d:53:b1: cc:a8:af:9d:c1:43:4d:5b:48:29:66:9b:cc:e4:22:86:b8:cf: 4f:09:06:52:c4:44:1b:06:a8:bd:3e:24:7c:c0:06:69:a3:20: 31:81:37:a6:6b:15:1e:b4:bf:f5:1f:e4:f6:35:32:cc:ee:8f: ce:5d:cc:22:cf:c4:4b:35:53:63:36:dd:3e:3a:29:19:7e:ec: eb:83:23:0d:81:2e:bb:ed:ff:91:8e:cd:7b:6b:ea:8d:81:2e: 08:6e:ee:1f:cc:df:2d:a6:50:7e:e2:ac:b1:16:8d:11:6b:a2: 4b:43:b1:74:2b:eb:7a:f3:a4:24:71:fe:91:b2:79:8e:71:39: 0c:a4:74:e3:29:31:95:b1:3d:2c:c5:6a:99:cf:2f:93:cf:88: 46:48:7a:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTg3m0EvB4bxucPN6veKlWibTzpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0 RTNDQUJDNjAeFw0yNjA3MjkwMzIzMTlaFw0yNjA3MzAwNzA4MTlaMDMxMTAvBgNV BAMTKDZFOUNFNUZCOEY0MkJDQjhGNzZCNjg5RUM5N0U0MDQzRjM5NkFDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDniFkDskAGbMqhps+vqyTVIpEi VkkQ9Nvb74ZjNPVliyIoAZ2pVTbSirJ5P4SuYcCwiMcvVNeKn5hpe+2OS/ngH+gl +AQKK6TPr+NM0MBZSLyWfPCjxDgSqTi0hpyIlNsjluy/wxsqh7JviVm85B4DB1aE qSseKhpFgUNOWSdWdq+Ux3BGsOIlj0Ko60LIDqswVUsgRPh/Vt4nCLDrtPDDukMf sheBhJykYwCqWINA/FIP69ot+A52b6Ni6rai94W+8175V1LmImn5nErx0piJHyR/ QsOtSCqkT+jw0sxCvvRz0U8nQ0jS0GzVbzrhgOJXl5XSa1PCP7RFmxGw6QD9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbpzl+49CvLj3a2ieyX5AQ/OWrDAwHwYDVR0j BBgwFoAU1HL6zheNjV6xzZ7JaxY1SU48q8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjUwMjMwOTAyMDk1ODc1Ny8wL0Q0NzJGQUNFMTc4RDhENUVCMUNEOUVDOTZCMTYz NTQ5NEUzQ0FCQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0RTNDQUJDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI1MDIzMDkwMjA5NTg3NTcvMC9ENDcyRkFDRTE3OEQ4 RDVFQjFDRDlFQzk2QjE2MzU0OTRFM0NBQkM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAJUgICIVixZ RqdQtBRhjVboJZnAQZDiUupmwxMiJpUL+DwMVgcQKNzHi7KkQRitvPrEGh5yMX9R h5RdRVA4shv+KoIUX9EPbq8sE/dtLdVD2xG1Lmnhc1wp2JJvpKyWdTnceqaHmdsW XVOxzKivncFDTVtIKWabzOQihrjPTwkGUsREGwaovT4kfMAGaaMgMYE3pmsVHrS/ 9R/k9jUyzO6Pzl3MIs/ESzVTYzbdPjopGX7s64MjDYEuu+3/kY7Ne2vqjYEuCG7u H8zfLaZQfuKssRaNEWuiS0OxdCvrevOkJHH+kbJ5jnE5DKR04ykxlbE9LMVqmc8v k8+IRkh6OQ== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client