$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json) Hash identifier: wosGgTDA0xggs+Ai7+8obGuBi4N8AVw3g4BhoHBuNeI= Subject key identifier: 1E:CB:04:B2:F0:50:CC:D7:78:1A:07:90:B5:D9:B1:13:BA:3B:2B:97 Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Certificate serial: 537F67E06A64737F3C5F09B645CFABC45D74C863 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft Manifest number: 2A Signing time: Wed 29 Jul 2026 08:48:54 +0000 Manifest this update: Wed 29 Jul 2026 08:43:54 +0000 Manifest next update: Thu 30 Jul 2026 12:36:54 +0000 Files and hashes: 1: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: JQylC66j1mqR4vDEefyG3gs/NKhCH2hBP+pgblWyJr4=) 2: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7f:67:e0:6a:64:73:7f:3c:5f:09:b6:45:cf:ab:c4:5d:74:c8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Validity Not Before: Jul 29 08:43:54 2026 GMT Not After : Jul 30 12:36:54 2026 GMT Subject: CN=1ECB04B2F050CCD7781A0790B5D9B113BA3B2B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:91:b8:95:3b:a2:6a:8f:df:54:32:1a:d9: d1:0b:7c:18:b1:ae:82:d9:cb:6c:6a:e2:43:5e:f7: ec:6f:70:05:45:7d:1c:ee:f4:d4:ac:17:de:fa:40: 81:27:42:54:c3:8a:f5:96:00:00:b1:98:0e:02:5b: 67:c3:59:7b:6d:2e:29:ee:86:91:70:93:5c:ea:e2: 7a:83:d9:04:90:9c:fa:1a:e6:17:fa:23:c6:4e:5d: 48:f3:55:1e:41:df:43:db:72:a5:f5:2f:0a:75:71: 20:78:99:9b:2b:1a:f5:aa:c9:00:e1:ca:fc:84:03: 66:0d:be:76:cd:12:fe:ca:16:15:de:43:42:0c:ff: 8a:b9:3f:18:e1:1b:fa:e3:02:8b:89:68:ba:e3:b7: a4:7a:be:b1:8c:49:42:65:56:ec:15:36:ef:3c:ef: 6e:a2:36:26:1b:ff:b6:9c:37:3d:76:83:57:50:70: be:61:6d:6b:c3:5e:59:cc:3f:04:fa:80:00:13:93: 95:dd:8d:1e:3b:8f:47:07:6c:54:2b:e0:3a:f4:0b: af:2c:49:5d:b9:54:5a:51:83:76:6e:25:a8:bc:47: 52:ae:8c:15:0c:47:71:06:39:3f:de:37:6a:76:b9: 0d:f7:c2:b7:a8:9c:0b:c9:66:9c:0f:cc:5b:a5:49: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CB:04:B2:F0:50:CC:D7:78:1A:07:90:B5:D9:B1:13:BA:3B:2B:97 X509v3 Authority Key Identifier: keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:d8:3d:c3:b4:e8:36:02:69:22:bd:5e:3a:03:65:89:f7:88: 8b:32:f8:c3:68:b9:71:7e:c3:1f:06:d1:d4:80:80:b8:8b:a6: b2:20:54:aa:16:a4:01:50:17:83:7b:92:50:3d:81:44:b0:7a: c6:14:a2:a8:7e:5e:39:be:1f:60:77:d7:bc:02:94:96:37:56: 43:ba:76:f8:e5:f6:21:a5:9f:76:fa:df:bf:64:e7:61:bb:ca: b9:f8:7a:8a:9f:f4:65:31:aa:e4:55:67:e9:fe:5b:b6:d8:eb: 00:c9:98:7c:c9:fd:e4:c1:8e:92:fa:90:ea:f3:c6:41:a2:8b: f7:5f:b0:02:d8:4a:26:99:26:1f:9d:6d:b2:3e:fa:39:c1:91: 48:00:6b:24:48:3e:af:ec:50:62:49:2c:12:5d:da:4c:80:da: d7:86:69:35:68:52:2d:ba:83:ff:b8:e8:f6:b8:12:e8:31:4c: 7e:e2:0f:04:36:78:d9:4c:85:32:f8:30:9d:fe:e3:4f:87:88: 87:01:ef:39:61:1a:2f:f7:e7:af:f8:5f:a6:cb:32:af:c5:1e: 8e:96:fa:e8:fd:a1:d7:bc:73:01:59:1c:a0:56:50:ab:10:31: 1c:d8:73:5f:d6:97:04:5e:fe:b0:98:09:72:f0:55:35:bf:52: 5f:57:dd:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU39n4Gpkc388Xwm2Rc+rxF10yGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENF NDY2QTYyMDAeFw0yNjA3MjkwODQzNTRaFw0yNjA3MzAxMjM2NTRaMDMxMTAvBgNV BAMTKDFFQ0IwNEIyRjA1MENDRDc3ODFBMDc5MEI1RDlCMTEzQkEzQjJCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCio5G4lTuiao/fVDIa2dELfBix roLZy2xq4kNe9+xvcAVFfRzu9NSsF976QIEnQlTDivWWAACxmA4CW2fDWXttLinu hpFwk1zq4nqD2QSQnPoa5hf6I8ZOXUjzVR5B30PbcqX1Lwp1cSB4mZsrGvWqyQDh yvyEA2YNvnbNEv7KFhXeQ0IM/4q5PxjhG/rjAouJaLrjt6R6vrGMSUJlVuwVNu88 726iNiYb/7acNz12g1dQcL5hbWvDXlnMPwT6gAATk5XdjR47j0cHbFQr4Dr0C68s SV25VFpRg3ZuJai8R1KujBUMR3EGOT/eN2p2uQ33wreonAvJZpwPzFulSdTJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHssEsvBQzNd4GgeQtdmxE7o7K5cwHwYDVR0j BBgwFoAUEr2A+2Zun/O3jFJXy4BgTORmpiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkxMTM2NTk4ODI1MzczMy8wLzEyQkQ4MEZCNjY2RTlGRjNCNzhDNTI1N0NCODA2 MDRDRTQ2NkE2MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENFNDY2QTYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MTEzNjU5ODgyNTM3MzMvMC8xMkJEODBGQjY2NkU5 RkYzQjc4QzUyNTdDQjgwNjA0Q0U0NjZBNjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztg9w7ToNgJp Ir1eOgNlifeIizL4w2i5cX7DHwbR1ICAuIumsiBUqhakAVAXg3uSUD2BRLB6xhSi qH5eOb4fYHfXvAKUljdWQ7p2+OX2IaWfdvrfv2TnYbvKufh6ip/0ZTGq5FVn6f5b ttjrAMmYfMn95MGOkvqQ6vPGQaKL91+wAthKJpkmH51tsj76OcGRSABrJEg+r+xQ YkksEl3aTIDa14ZpNWhSLbqD/7jo9rgS6DFMfuIPBDZ42UyFMvgwnf7jT4eIhwHv OWEaL/fnr/hfpssyr8Uejpb66P2h17xzAVkcoFZQqxAxHNhzX9aXBF7+sJgJcvBV Nb9SX1fdlw== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:39 2026 by rpki-client