$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: F0+d1+7eX2lVAvEIuAMhUXoY3XZwJY6wTnFsS8u05rs= Subject key identifier: D3:4D:66:AD:C6:89:96:CD:BC:B3:39:A3:98:86:75:D0:8A:22:BF:30 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 4127CB518B0EB73444B960501F83A57B69250EA6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: F5 Signing time: Tue 21 Jul 2026 06:08:08 +0000 Manifest this update: Tue 21 Jul 2026 06:03:08 +0000 Manifest next update: Wed 22 Jul 2026 09:52:08 +0000 Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 2: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) 3: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: B4/nXyh83sG0T59biSXz12TLskUvjHsONXzGxXtWk4M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 09:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:27:cb:51:8b:0e:b7:34:44:b9:60:50:1f:83:a5:7b:69:25:0e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Jul 21 06:03:08 2026 GMT Not After : Jul 22 09:52:08 2026 GMT Subject: CN=D34D66ADC68996CDBCB339A3988675D08A22BF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:c2:0f:8f:34:18:03:7c:2c:b1:de:1f:f3: 10:14:ca:9d:73:32:db:27:d7:1d:f7:98:c4:d2:45: 21:87:a6:7b:87:40:ef:fb:06:c8:45:48:6c:c5:da: d3:55:32:cd:ee:55:38:12:73:0a:9a:58:31:32:94: cd:f7:fe:66:2a:04:dd:7f:e3:15:05:fd:22:47:ac: e8:60:9b:03:22:5d:e2:b5:cc:b8:1e:1f:d8:55:ec: 23:96:a1:15:75:79:09:f4:85:ad:62:45:f0:12:0d: 43:a0:1f:87:7c:43:f1:11:39:01:da:71:a8:02:13: 1d:e5:6d:28:bb:96:7a:7b:3a:d7:d9:81:f5:dc:7b: cb:25:91:32:59:56:68:58:1f:29:40:b7:f2:47:08: 84:4b:e6:02:2e:d9:0c:c7:3b:41:0a:ee:58:ce:1b: 20:c8:90:6c:72:74:30:35:b8:9f:da:22:b4:09:99: ef:45:d0:24:1d:46:5b:36:84:90:f0:d1:13:f2:81: 26:3e:79:79:54:67:e6:3d:bc:87:0c:96:fe:25:d1: 56:25:82:5a:ba:2a:3d:a2:37:be:55:9b:33:c8:67: 1a:d9:c9:fb:c8:aa:cb:b0:16:41:8d:80:8a:43:d9: 13:10:a6:59:84:3d:ba:3e:7b:18:64:1c:54:d9:d0: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:66:AD:C6:89:96:CD:BC:B3:39:A3:98:86:75:D0:8A:22:BF:30 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7c:5d:9e:d5:b4:3d:fa:64:96:ee:d7:ce:7e:b7:c4:34:9d: 9d:34:08:64:fe:75:7d:34:23:51:dd:44:a5:e8:a4:e6:cd:58: 01:58:cc:74:ca:0c:5a:8a:ea:a4:a9:f9:db:70:8e:c2:a1:f9: 5a:b6:1a:dc:71:20:6b:01:f2:9d:6a:96:52:62:5c:84:ec:07: 8c:67:36:01:41:5a:66:49:36:97:b8:0c:b5:da:95:07:bb:60: c5:d5:40:0c:22:69:29:7f:11:2d:8b:06:72:f1:fe:2b:42:df: d9:96:25:04:41:dc:63:b7:f6:3e:4a:98:99:5c:85:08:3d:4a: 52:71:d0:32:92:e5:56:73:1a:69:76:6d:d4:52:36:c3:c8:6c: 4d:e6:9c:8b:4c:19:5a:c9:dd:5b:c1:9c:f6:ef:6a:30:76:91: dd:e9:c4:04:41:86:5d:a6:a2:66:f5:5d:20:62:a4:36:88:c9: 0c:14:86:d9:0b:bf:6a:84:38:42:4c:01:1a:49:8f:e4:1f:8e: ed:b1:c8:84:5c:3c:ac:51:14:8f:67:31:9d:a1:bb:a6:ea:16: 99:25:e6:00:e4:c9:1c:3c:f6:bd:6d:e9:0e:0a:60:a4:b4:c5: 50:af:a7:a3:40:0e:d2:7e:0c:b7:29:7f:ae:54:52:1b:7b:75: 90:d2:41:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQSfLUYsOtzREuWBQH4Ole2klDqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA3MjEwNjAzMDhaFw0yNjA3MjIwOTUyMDhaMDMxMTAvBgNV BAMTKEQzNEQ2NkFEQzY4OTk2Q0RCQ0IzMzlBMzk4ODY3NUQwOEEyMkJGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmsIPjzQYA3wssd4f8xAUyp1z Mtsn1x33mMTSRSGHpnuHQO/7BshFSGzF2tNVMs3uVTgScwqaWDEylM33/mYqBN1/ 4xUF/SJHrOhgmwMiXeK1zLgeH9hV7COWoRV1eQn0ha1iRfASDUOgH4d8Q/EROQHa cagCEx3lbSi7lnp7OtfZgfXce8slkTJZVmhYHylAt/JHCIRL5gIu2QzHO0EK7ljO GyDIkGxydDA1uJ/aIrQJme9F0CQdRls2hJDw0RPygSY+eXlUZ+Y9vIcMlv4l0VYl glq6Kj2iN75VmzPIZxrZyfvIqsuwFkGNgIpD2RMQplmEPbo+exhkHFTZ0P7rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU001mrcaJls28szmjmIZ10IoivzAwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHxdntW0Pfpk lu7Xzn63xDSdnTQIZP51fTQjUd1Epeik5s1YAVjMdMoMWorqpKn523COwqH5WrYa 3HEgawHynWqWUmJchOwHjGc2AUFaZkk2l7gMtdqVB7tgxdVADCJpKX8RLYsGcvH+ K0Lf2ZYlBEHcY7f2PkqYmVyFCD1KUnHQMpLlVnMaaXZt1FI2w8hsTeaci0wZWsnd W8Gc9u9qMHaR3enEBEGGXaaiZvVdIGKkNojJDBSG2Qu/aoQ4QkwBGkmP5B+O7bHI hFw8rFEUj2cxnaG7puoWmSXmAOTJHDz2vW3pDgpgpLTFUK+no0AO0n4Mtyl/rlRS G3t1kNJBFA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:54 2026 by rpki-client