$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json) Hash identifier: o+554AGcR0KR/QjQTBlCYT0dszRAI+B2aq1vtS7i7H0= Subject key identifier: FA:BF:D1:76:C9:80:80:DF:ED:0A:03:5B:E9:4C:5D:81:3C:D5:E9:BE Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Certificate serial: 4C69267A5949639180E3346B47C761FF2BFA5BBE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft Manifest number: 0117 Signing time: Tue 21 Jul 2026 11:08:38 +0000 Manifest this update: Tue 21 Jul 2026 11:03:38 +0000 Manifest next update: Wed 22 Jul 2026 14:22:38 +0000 Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: mpr2u24CsRYRsrcygls7DYdPW+HqsBebpjO4Hg/RoN8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:69:26:7a:59:49:63:91:80:e3:34:6b:47:c7:61:ff:2b:fa:5b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Validity Not Before: Jul 21 11:03:38 2026 GMT Not After : Jul 22 14:22:38 2026 GMT Subject: CN=FABFD176C98080DFED0A035BE94C5D813CD5E9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:24:cd:ae:bf:8a:49:7a:79:3d:a2:27:e7: 85:16:06:a9:42:62:b3:8b:2c:db:8f:87:94:e4:87: f3:fd:ad:ff:7c:0c:d9:fe:9f:64:96:e3:87:e8:85: f5:ff:46:0c:33:8b:5a:c8:7a:55:6d:4d:4f:4a:8d: a0:c5:43:3a:b5:5a:1a:08:06:77:0d:a0:6f:1b:89: 7f:71:1a:ee:fa:26:8e:f6:3b:be:1c:f1:97:6e:41: ca:fe:d4:4e:c9:6d:93:ac:6f:8a:ca:77:db:ba:a4: be:f6:07:39:d3:31:6e:b2:d4:d5:a4:bd:99:a9:d9: db:85:a8:5d:6b:8e:f8:9d:40:6e:7e:ef:b4:7e:23: 9b:ca:f9:c4:7f:48:36:0f:3c:6e:6e:13:fc:73:73: 08:ca:b6:18:a6:74:4e:5c:89:68:4e:6f:bb:18:56: 86:c9:e4:7d:49:41:dd:32:8b:22:ce:60:63:92:6e: 5c:e6:d9:96:72:14:47:88:90:9f:c8:bb:1a:f5:82: e1:9d:16:3d:7e:c1:01:d5:2f:99:b1:91:37:b2:7b: e6:b2:5e:80:0f:1e:e9:99:02:ad:dc:f3:b8:21:36: 76:6b:ad:53:71:40:6e:90:c8:76:e7:f0:d0:9a:8f: 1e:52:8c:8b:86:6f:b8:09:f4:2c:12:50:fa:30:c9: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:D1:76:C9:80:80:DF:ED:0A:03:5B:E9:4C:5D:81:3C:D5:E9:BE X509v3 Authority Key Identifier: keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a0:63:3c:86:8c:20:f2:15:d1:62:c1:f2:33:4d:26:61:4a: eb:32:c4:29:c0:03:40:be:f2:63:37:b5:59:95:62:e5:17:5c: e5:2b:c4:33:a6:87:6e:3e:b9:3c:f0:f7:31:91:43:db:f4:a2: 93:6a:73:ec:52:d4:c7:4d:51:21:39:76:aa:f9:a6:ec:00:a5: 85:ec:16:ea:62:b5:db:05:5a:d2:fc:12:6e:cf:46:7e:0b:7f: b3:4c:90:75:fd:da:b9:81:60:9c:53:f8:aa:dd:14:45:53:a7: 4d:c7:77:9e:86:5f:0f:fa:7b:74:ea:60:ea:f9:d0:c0:08:0a: 99:37:0f:83:47:27:c0:8a:cf:02:16:94:2f:0e:fe:1c:29:ff: 40:1b:b4:62:68:3d:fc:61:6e:56:c2:15:a7:04:12:da:ad:f6: de:f7:ae:16:11:a5:68:93:68:71:05:ce:51:80:9e:9a:ff:06: 66:38:1c:9a:49:a7:3f:85:31:b0:a2:27:28:a8:f4:81:32:15: 3c:dc:3a:b4:56:a5:c6:1c:ff:97:2f:7d:59:46:5f:15:89:f8: 42:e6:9c:4d:0d:5e:f4:fd:02:ad:18:b5:b2:30:6c:2a:30:52: 8d:81:57:f6:32:64:28:d8:19:52:53:69:88:f1:56:aa:32:c3: e6:f2:04:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTGkmellJY5GA4zRrR8dh/yv6W74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0 QjI0MjcwNDAeFw0yNjA3MjExMTAzMzhaFw0yNjA3MjIxNDIyMzhaMDMxMTAvBgNV BAMTKEZBQkZEMTc2Qzk4MDgwREZFRDBBMDM1QkU5NEM1RDgxM0NENUU5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGSTNrr+KSXp5PaIn54UWBqlC YrOLLNuPh5Tkh/P9rf98DNn+n2SW44fohfX/Rgwzi1rIelVtTU9KjaDFQzq1WhoI BncNoG8biX9xGu76Jo72O74c8ZduQcr+1E7JbZOsb4rKd9u6pL72BznTMW6y1NWk vZmp2duFqF1rjvidQG5+77R+I5vK+cR/SDYPPG5uE/xzcwjKthimdE5ciWhOb7sY VobJ5H1JQd0yiyLOYGOSblzm2ZZyFEeIkJ/Iuxr1guGdFj1+wQHVL5mxkTeye+ay XoAPHumZAq3c87ghNnZrrVNxQG6QyHbn8NCajx5SjIuGb7gJ9CwSUPowyZZRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+r/RdsmAgN/tCgNb6UxdgTzV6b4wHwYDVR0j BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1 MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6BjPIaMIPIV 0WLB8jNNJmFK6zLEKcADQL7yYze1WZVi5Rdc5SvEM6aHbj65PPD3MZFD2/Sik2pz 7FLUx01RITl2qvmm7AClhewW6mK12wVa0vwSbs9Gfgt/s0yQdf3auYFgnFP4qt0U RVOnTcd3noZfD/p7dOpg6vnQwAgKmTcPg0cnwIrPAhaULw7+HCn/QBu0Ymg9/GFu VsIVpwQS2q323veuFhGlaJNocQXOUYCemv8GZjgcmkmnP4UxsKInKKj0gTIVPNw6 tFalxhz/ly99WUZfFYn4QuacTQ1e9P0CrRi1sjBsKjBSjYFX9jJkKNgZUlNpiPFW qjLD5vIE9A== -----END CERTIFICATE-----Generated at Tue Jul 21 22:47:03 2026 by rpki-client