$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: 0fNjwM7y/ppiilXjcA8Tw9caSNLWyG4W7nsGtTuR9c0= Subject key identifier: 84:14:8B:00:FB:C8:B3:48:B7:F1:5F:26:22:C0:95:D9:B0:E8:4C:6E Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 4E798D890D13CF0AEA2425733763FF1FC020012F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: F5 Signing time: Tue 21 Jul 2026 18:04:15 +0000 Manifest this update: Tue 21 Jul 2026 17:59:15 +0000 Manifest next update: Wed 22 Jul 2026 18:32:15 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: JcvbCRT0nBxCA75Qjh+z4bJ6gwT+MoE8YJfooSavuWw=) 2: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 3: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 18:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:79:8d:89:0d:13:cf:0a:ea:24:25:73:37:63:ff:1f:c0:20:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Jul 21 17:59:15 2026 GMT Not After : Jul 22 18:32:15 2026 GMT Subject: CN=84148B00FBC8B348B7F15F2622C095D9B0E84C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:15:04:e6:9a:67:0f:84:64:4c:1e:b1:36: 07:a5:12:70:67:0b:1f:94:21:00:56:20:ba:cd:45: 4c:ef:ce:6d:41:ca:9a:55:b7:5b:bc:fa:41:25:ef: 03:ad:0a:bc:39:96:dd:db:13:c2:64:27:a5:49:92: 70:6e:a4:51:0d:87:e8:ae:00:6c:ed:96:f6:9a:4a: 14:f3:57:f0:1f:57:b7:31:08:35:c2:1b:8d:f2:02: 86:3a:18:50:ac:2f:80:dd:fc:3f:ac:73:05:06:92: fc:80:3f:97:9e:35:19:7a:3a:c4:ef:8c:10:bd:af: 00:45:a9:d2:25:d5:ab:5d:85:a1:85:16:82:f1:c7: d4:c5:48:d5:a0:5b:03:5f:7e:dd:6a:41:98:58:7b: ff:be:24:c6:31:b9:98:2b:a4:22:8c:36:f2:3a:21: ee:38:9c:11:6a:0e:8e:f6:0d:aa:68:e0:5c:99:7e: 42:f9:99:f2:fb:fa:c8:98:42:55:d7:bf:e5:12:c0: a2:29:f2:82:d5:53:ab:70:17:fd:53:98:4d:85:bf: 05:61:74:01:8f:3a:97:6d:d7:c2:8f:2f:9e:c5:e1: 1a:a0:a7:5f:d0:7b:02:27:c7:17:37:d9:aa:3a:93: 9e:a0:1a:0a:cb:51:3c:41:b4:1f:9f:c2:03:ea:7f: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:8B:00:FB:C8:B3:48:B7:F1:5F:26:22:C0:95:D9:B0:E8:4C:6E X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9e:60:de:d9:e7:f5:c6:e4:dc:94:99:bf:71:7c:ce:c7:24: de:20:e0:f4:82:5e:2f:25:cc:70:4e:47:54:03:c8:1d:c2:db: eb:43:3a:07:53:62:bb:eb:c9:71:06:3c:ae:6a:73:80:7c:ca: 1a:66:5f:be:3d:40:f9:99:93:3c:c1:b7:46:64:f7:a3:46:69: 29:89:c2:35:fa:3a:c2:3c:63:50:84:2e:b5:54:9b:3a:5b:33: 44:18:c1:15:0a:9a:6c:da:a2:cb:e0:e2:14:eb:fe:ff:f4:c5: 95:17:ac:bb:66:b6:62:5e:f4:b4:19:9e:55:1c:eb:d1:bd:fc: c1:a9:76:3c:7c:4b:3f:6f:8f:0d:5a:5f:e2:5f:66:d5:71:61: ac:4a:2a:c5:3d:8e:61:b5:f3:de:29:ff:19:33:c2:9e:b7:52: a5:90:da:1b:28:55:29:8c:f7:83:25:30:c9:4e:8d:97:f5:41: 40:e6:43:cd:fc:9a:bd:25:81:02:90:01:63:44:f3:b3:2f:77: 69:38:6d:75:c9:35:9a:3a:e4:c7:8b:53:c8:b7:12:25:bc:eb: b7:ac:41:27:70:ac:70:f0:fc:f9:4e:e2:33:ce:5b:b2:37:0d: d9:04:bb:12:ab:c4:cb:81:5b:18:1b:b0:6f:4a:67:f8:13:cb: 25:c2:c2:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTnmNiQ0TzwrqJCVzN2P/H8AgAS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA3MjExNzU5MTVaFw0yNjA3MjIxODMyMTVaMDMxMTAvBgNV BAMTKDg0MTQ4QjAwRkJDOEIzNDhCN0YxNUYyNjIyQzA5NUQ5QjBFODRDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvRUE5ppnD4RkTB6xNgelEnBn Cx+UIQBWILrNRUzvzm1ByppVt1u8+kEl7wOtCrw5lt3bE8JkJ6VJknBupFENh+iu AGztlvaaShTzV/AfV7cxCDXCG43yAoY6GFCsL4Dd/D+scwUGkvyAP5eeNRl6OsTv jBC9rwBFqdIl1atdhaGFFoLxx9TFSNWgWwNfft1qQZhYe/++JMYxuZgrpCKMNvI6 Ie44nBFqDo72Dapo4FyZfkL5mfL7+siYQlXXv+USwKIp8oLVU6twF/1TmE2FvwVh dAGPOpdt18KPL57F4Rqgp1/QewInxxc32ao6k56gGgrLUTxBtB+fwgPqf7y3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhBSLAPvIs0i38V8mIsCV2bDoTG4wHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ5g3tnn9cbk 3JSZv3F8zsck3iDg9IJeLyXMcE5HVAPIHcLb60M6B1Niu+vJcQY8rmpzgHzKGmZf vj1A+ZmTPMG3RmT3o0ZpKYnCNfo6wjxjUIQutVSbOlszRBjBFQqabNqiy+DiFOv+ //TFlResu2a2Yl70tBmeVRzr0b38wal2PHxLP2+PDVpf4l9m1XFhrEoqxT2OYbXz 3in/GTPCnrdSpZDaGyhVKYz3gyUwyU6Nl/VBQOZDzfyavSWBApABY0Tzsy93aTht dck1mjrkx4tTyLcSJbzrt6xBJ3CscPD8+U7iM85bsjcN2QS7EqvEy4FbGBuwb0pn +BPLJcLCbQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:49 2026 by rpki-client