$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft File: 209BC812EEDDC6074713463D5583CB221EADC76F.mft (raw, json) Hash identifier: bHwvnhAYnjX2A6HcwVvvM1ttRmAGS5Mtm3+8925YVLM= Subject key identifier: E9:70:DD:EB:00:AB:AE:E3:FC:F5:CD:C0:AB:49:AF:04:BE:C2:92:5C Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F Certificate serial: 4E00CF8B3C07DD4B07D86C1694707F040A20434F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft Manifest number: 2C Signing time: Wed 29 Jul 2026 03:03:15 +0000 Manifest this update: Wed 29 Jul 2026 02:58:15 +0000 Manifest next update: Thu 30 Jul 2026 06:22:15 +0000 Files and hashes: 1: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (hash: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=) 2: 209BC812EEDDC6074713463D5583CB221EADC76F.crl (hash: K/AoOtGmeVsOwI+4FSt5NN/HM0FgKBy07a8R3QSwVg0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:00:cf:8b:3c:07:dd:4b:07:d8:6c:16:94:70:7f:04:0a:20:43:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F Validity Not Before: Jul 29 02:58:15 2026 GMT Not After : Jul 30 06:22:15 2026 GMT Subject: CN=E970DDEB00ABAEE3FCF5CDC0AB49AF04BEC2925C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:f1:c1:02:11:c5:5a:63:c0:dc:1d:78:76: a1:af:fd:2a:07:1e:e6:2c:76:d0:a9:6a:cb:e1:bf: 21:71:64:6e:dd:5e:5b:2a:e7:04:71:91:aa:aa:11: 15:5b:aa:06:9c:61:ae:33:4d:4b:cf:b2:54:55:4a: 29:26:19:bd:ab:d0:4c:63:8c:85:50:64:31:ab:0b: aa:13:58:bd:6f:64:1f:e0:6d:09:7f:07:71:a7:d0: ac:4b:8e:98:5c:c4:32:8a:99:0e:a9:fa:a0:4e:36: cd:89:de:83:41:84:8d:fa:6a:69:c2:a2:a6:77:a8: 82:a7:bd:51:93:57:3e:30:c4:90:ca:7b:e8:53:3a: 27:ae:63:67:8b:39:13:6d:f2:25:11:01:bc:16:cb: 9e:6f:80:da:f3:3f:8c:d5:a6:cc:3a:80:ca:88:87: 2c:95:03:ba:ab:0e:aa:9b:7c:11:a1:ec:a9:85:f5: d2:93:6f:75:b3:44:ce:8a:85:78:9c:2c:df:55:f6: 9f:b8:63:35:a6:75:45:c0:6b:10:28:04:51:0f:32: bd:bd:4b:87:81:5b:b7:f6:8d:92:b6:4f:8a:ae:14: 86:cc:01:40:79:e8:44:f8:aa:55:a7:8c:9c:d8:15: e3:5a:7d:4f:92:77:9f:90:07:86:74:5d:1e:63:55: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:70:DD:EB:00:AB:AE:E3:FC:F5:CD:C0:AB:49:AF:04:BE:C2:92:5C X509v3 Authority Key Identifier: keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ac:6c:24:ac:74:74:1c:72:83:dd:ad:fb:2e:74:1f:04:44: ba:84:86:ca:7f:db:4f:55:c6:2f:1e:cf:90:2d:46:de:33:eb: b0:02:d2:c6:6c:ee:53:74:71:7f:ab:18:95:da:6b:d0:91:e9: 17:d2:ae:bc:b2:c0:1f:39:f3:dc:e6:21:61:1b:1e:27:18:e8: b3:62:68:a7:86:7d:8d:f8:d7:ce:91:94:15:23:65:ef:18:b3: 16:79:83:38:3c:db:ae:e4:08:09:f3:95:82:d6:01:39:cd:d8: be:a2:8b:be:ec:d7:19:2b:f8:4e:24:c4:d6:37:65:31:21:4e: 9f:04:a9:7c:6c:8c:e4:e5:8d:31:72:d3:aa:75:6d:d3:32:9f: f6:83:07:f8:23:70:15:a0:ab:c9:3d:cd:bf:01:7a:77:70:17: 1c:be:40:86:0c:da:62:42:de:3c:97:b3:61:a5:36:49:10:2c: 25:9e:28:ca:6a:c0:75:9f:aa:c6:99:e6:0c:d9:1e:1d:2c:9c: eb:89:e1:3c:5c:05:db:25:2a:15:31:8c:a3:92:d9:7c:b5:3b: 32:51:f7:4a:dc:54:75:43:46:76:33:20:94:1a:50:f4:32:57: d8:ee:5a:b1:14:23:c2:62:34:c1:39:23:e0:cb:8d:86:61:2b: 42:17:8c:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTgDPizwH3UsH2GwWlHB/BAogQ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIx RUFEQzc2RjAeFw0yNjA3MjkwMjU4MTVaFw0yNjA3MzAwNjIyMTVaMDMxMTAvBgNV BAMTKEU5NzBEREVCMDBBQkFFRTNGQ0Y1Q0RDMEFCNDlBRjA0QkVDMjkyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/fHBAhHFWmPA3B14dqGv/SoH HuYsdtCpasvhvyFxZG7dXlsq5wRxkaqqERVbqgacYa4zTUvPslRVSikmGb2r0Exj jIVQZDGrC6oTWL1vZB/gbQl/B3Gn0KxLjphcxDKKmQ6p+qBONs2J3oNBhI36amnC oqZ3qIKnvVGTVz4wxJDKe+hTOieuY2eLORNt8iURAbwWy55vgNrzP4zVpsw6gMqI hyyVA7qrDqqbfBGh7KmF9dKTb3WzRM6KhXicLN9V9p+4YzWmdUXAaxAoBFEPMr29 S4eBW7f2jZK2T4quFIbMAUB56ET4qlWnjJzYFeNafU+Sd5+QB4Z0XR5jVUvVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6XDd6wCrruP89c3Aq0mvBL7CklwwHwYDVR0j BBgwFoAUIJvIEu7dxgdHE0Y9VYPLIh6tx28wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzI4MTMyNTg0MzgwODI5NS8wLzIwOUJDODEyRUVEREM2MDc0NzEzNDYzRDU1ODND QjIyMUVBREM3NkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjMyODEzMjU4NDM4MDgyOTUvMC8yMDlCQzgxMkVFRERD NjA3NDcxMzQ2M0Q1NTgzQ0IyMjFFQURDNzZGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKxsJKx0dBxy g92t+y50HwREuoSGyn/bT1XGLx7PkC1G3jPrsALSxmzuU3Rxf6sYldpr0JHpF9Ku vLLAHznz3OYhYRseJxjos2Jop4Z9jfjXzpGUFSNl7xizFnmDODzbruQICfOVgtYB Oc3YvqKLvuzXGSv4TiTE1jdlMSFOnwSpfGyM5OWNMXLTqnVt0zKf9oMH+CNwFaCr yT3NvwF6d3AXHL5AhgzaYkLePJezYaU2SRAsJZ4oymrAdZ+qxpnmDNkeHSyc64nh PFwF2yUqFTGMo5LZfLU7MlH3StxUdUNGdjMglBpQ9DJX2O5asRQjwmI0wTkj4MuN hmErQheMNA== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client