$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: NAuwHhzNiSjEUI+bCBSsdzn/wIJFfbk2BIJZ2DOPRCE= Subject key identifier: 3E:53:56:CD:C5:A9:AC:D6:59:09:B6:2A:54:B9:46:0D:98:8D:B9:CD Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 0BCD3A1F41643C8933E66A71EF58A83AEFB6D112 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 2C Signing time: Wed 29 Jul 2026 03:18:17 +0000 Manifest this update: Wed 29 Jul 2026 03:13:17 +0000 Manifest next update: Thu 30 Jul 2026 06:35:17 +0000 Files and hashes: 1: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: iAkRRhzKGHzRsGy61zt36xQRHqbGDdKpISMBHhOxTP0=) 2: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cd:3a:1f:41:64:3c:89:33:e6:6a:71:ef:58:a8:3a:ef:b6:d1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Jul 29 03:13:17 2026 GMT Not After : Jul 30 06:35:17 2026 GMT Subject: CN=3E5356CDC5A9ACD65909B62A54B9460D988DB9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:44:69:06:55:1e:ca:9f:21:0b:b7:16:73: 5c:18:a5:57:7e:52:9f:75:eb:a1:62:74:bd:bf:ea: bb:e5:51:71:f0:fe:e5:50:ea:8c:6f:73:e4:10:06: 62:49:d3:44:c4:d7:1b:73:8a:56:26:4d:5e:28:24: 49:90:75:c8:a3:62:7f:20:91:9d:2d:e2:97:a0:a5: 8f:1f:5b:30:bc:4c:5b:91:c5:a5:cc:92:82:a6:dd: 2e:d8:98:dc:77:b5:7a:32:b4:5a:1c:4c:ec:11:36: df:ff:7d:4e:7e:3f:c5:39:bb:81:44:a4:9d:75:e4: a8:f0:64:2f:38:57:68:65:48:6f:3d:38:75:d3:37: 1a:ad:a9:3f:59:e7:ae:94:8c:73:6e:07:bc:73:10: 25:40:d3:22:91:fd:b2:3c:79:14:e7:d5:1b:02:0a: 14:81:7c:71:c6:38:6c:2e:05:e8:e6:10:73:63:d3: 34:19:75:87:1d:e7:e2:85:a2:b2:62:30:2a:ac:c8: b2:b4:38:8d:7c:11:17:d7:3f:b7:be:b7:97:af:10: 71:69:bb:ad:00:21:cf:e9:9f:b5:ce:c2:e9:9e:e3: f4:b7:66:ad:70:07:81:99:d5:98:83:c8:99:9a:6e: 0a:d2:52:03:27:a7:bf:ae:20:0b:95:f6:75:b9:a2: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:56:CD:C5:A9:AC:D6:59:09:B6:2A:54:B9:46:0D:98:8D:B9:CD X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:dc:7e:c5:36:5f:9f:a5:6a:56:5e:d5:7d:76:17:58:0d:7d: a3:5c:db:93:66:3b:a9:ef:a3:73:72:fc:9b:09:8f:0f:f3:43: 7c:00:ac:fb:a3:fe:b4:65:1f:11:0a:16:d3:9e:7c:36:71:2e: 95:2d:d8:11:e2:4b:6d:9a:b4:af:e7:5c:ec:9f:e6:9a:69:05: 6a:30:57:7c:21:ad:33:c7:12:79:6b:34:bc:ad:3c:fb:75:b7: 99:46:3b:5c:9e:9b:df:c5:eb:05:51:93:51:d7:41:8d:12:2b: c2:64:c9:94:68:9c:a9:ea:16:1f:a8:05:92:50:e0:4f:6f:e7: d8:a4:d2:7e:7f:18:8d:d0:27:28:73:d2:22:39:07:c4:39:ca: d3:f3:3c:8a:e1:14:e6:5f:3d:83:39:11:32:3e:8a:cc:75:73: 32:1a:85:36:da:95:36:bc:90:81:39:b3:fa:7b:25:65:f5:96: bf:52:c7:3c:d3:64:65:22:4c:a0:a3:5d:ad:f9:32:f5:ff:16: a9:fd:99:95:ba:c3:35:30:10:48:89:0e:b9:f2:70:ed:50:df: b9:52:f1:14:07:68:2c:c0:d9:7c:4a:d4:26:1e:e9:37:0a:50: 81:61:ac:8c:45:f8:a9:51:6d:f4:ad:8a:45:b4:16:84:02:14: cf:40:91:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC806H0FkPIkz5mpx71ioOu+20RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjA3MjkwMzEzMTdaFw0yNjA3MzAwNjM1MTdaMDMxMTAvBgNV BAMTKDNFNTM1NkNEQzVBOUFDRDY1OTA5QjYyQTU0Qjk0NjBEOTg4REI5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/q0RpBlUeyp8hC7cWc1wYpVd+ Up9166FidL2/6rvlUXHw/uVQ6oxvc+QQBmJJ00TE1xtzilYmTV4oJEmQdcijYn8g kZ0t4pegpY8fWzC8TFuRxaXMkoKm3S7YmNx3tXoytFocTOwRNt//fU5+P8U5u4FE pJ115KjwZC84V2hlSG89OHXTNxqtqT9Z566UjHNuB7xzECVA0yKR/bI8eRTn1RsC ChSBfHHGOGwuBejmEHNj0zQZdYcd5+KForJiMCqsyLK0OI18ERfXP7e+t5evEHFp u60AIc/pn7XOwume4/S3Zq1wB4GZ1ZiDyJmabgrSUgMnp7+uIAuV9nW5okvbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPlNWzcWprNZZCbYqVLlGDZiNuc0wHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtx+xTZfn6Vq Vl7VfXYXWA19o1zbk2Y7qe+jc3L8mwmPD/NDfACs+6P+tGUfEQoW0558NnEulS3Y EeJLbZq0r+dc7J/mmmkFajBXfCGtM8cSeWs0vK08+3W3mUY7XJ6b38XrBVGTUddB jRIrwmTJlGicqeoWH6gFklDgT2/n2KTSfn8YjdAnKHPSIjkHxDnK0/M8iuEU5l89 gzkRMj6KzHVzMhqFNtqVNryQgTmz+nslZfWWv1LHPNNkZSJMoKNdrfky9f8Wqf2Z lbrDNTAQSIkOufJw7VDfuVLxFAdoLMDZfErUJh7pNwpQgWGsjEX4qVFt9K2KRbQW hAIUz0CRNw== -----END CERTIFICATE-----Generated at Wed Jul 29 21:53:17 2026 by rpki-client