$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: hCFDrNvz2WxpnYYzqJBsEBF0OpL0mHuu7CfJzyIbLO8= Subject key identifier: C9:93:D0:6E:FF:19:B3:65:2D:75:99:EF:C6:E9:0C:E4:1D:BB:6C:01 Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 478EA4EF519D7BEB39C283EC777280616A87B009 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: C2 Signing time: Tue 21 Jul 2026 16:39:07 +0000 Manifest this update: Tue 21 Jul 2026 16:34:07 +0000 Manifest next update: Wed 22 Jul 2026 18:28:07 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: 0hN9OYpSoAAq0cysJeeHCNrh2Q2i3mw6naI431CiHMg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 18:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8e:a4:ef:51:9d:7b:eb:39:c2:83:ec:77:72:80:61:6a:87:b0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Jul 21 16:34:07 2026 GMT Not After : Jul 22 18:28:07 2026 GMT Subject: CN=C993D06EFF19B3652D7599EFC6E90CE41DBB6C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:d2:4f:8c:15:02:c4:ec:f9:2b:2f:79:f3: b4:e9:e6:0b:78:c2:f5:e9:c2:78:7f:62:46:f2:a9: 18:58:e1:93:74:f9:34:bc:30:4b:54:cc:89:d7:f9: 29:02:c1:94:66:e1:3a:60:ba:56:54:5b:51:8f:07: 34:b5:d2:b6:ac:f0:c8:e6:2f:95:5a:21:60:51:55: ef:e8:b2:f3:a7:16:ed:24:6a:62:67:21:a5:91:b1: c5:ec:9a:2a:89:dc:e8:4e:c0:f1:8a:c0:62:a9:38: d1:71:67:fa:65:7f:c3:eb:83:44:32:8c:d2:77:e0: 37:3f:8e:de:63:94:45:c9:14:b8:7e:12:44:c2:f5: 01:0d:6c:03:6e:cf:61:c1:59:46:c9:9b:11:d2:da: dc:d7:da:0d:93:dc:6d:84:2b:0d:72:31:76:33:a1: d4:01:69:74:e0:79:f9:f7:a5:18:e9:6a:9e:07:61: c6:4c:b1:9d:fc:67:5a:0d:4d:3d:46:52:42:6e:1d: 21:28:03:63:50:5c:4b:89:31:e4:2b:6d:fa:ae:9a: 8d:ab:d7:08:30:c3:fa:87:a2:a4:79:c7:8c:c9:cb: 9f:cc:f1:8a:f0:be:30:d3:19:83:a5:d0:7a:7e:da: b3:04:e3:5a:e5:44:1c:61:a4:bf:a5:d4:7b:3f:35: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:D0:6E:FF:19:B3:65:2D:75:99:EF:C6:E9:0C:E4:1D:BB:6C:01 X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:46:56:d1:f4:69:7e:28:5e:c4:a9:e1:66:2d:fb:51:61:bf: d0:43:34:9e:09:78:90:57:ed:0a:f6:6a:09:f3:68:df:a9:27: 88:b6:b8:50:31:2b:f1:ec:53:85:2e:73:d8:f6:98:34:31:9b: 8d:8c:95:46:b3:ba:25:5e:97:cc:ff:01:48:cc:b8:3b:36:28: 12:53:84:f5:4f:81:36:57:6a:f5:b8:fd:0c:7e:ce:54:e9:25: 61:ab:51:bf:c1:f9:4e:f7:ba:0d:34:1e:0e:2a:6f:9e:1a:c7: 31:fa:8d:99:24:4c:40:da:9b:e1:dd:f2:06:5b:11:6c:0d:c5: 20:ce:17:c3:97:1d:15:92:3f:dc:13:be:51:49:24:e2:26:15: 65:9e:e1:60:42:f8:9c:c4:e3:bb:d4:16:00:a3:fe:1f:9b:a0: 87:80:60:b8:2a:78:37:13:58:26:7c:1f:27:c7:90:a0:73:36: 7c:e8:4d:92:57:32:31:06:5c:56:33:cb:2d:7b:42:03:c4:31: 77:26:f5:5e:11:b2:39:58:6e:6e:94:cb:e2:1e:8f:84:1b:2a: 9b:ac:f9:4e:b9:3b:2a:76:02:f3:36:8e:23:a8:3c:12:4e:c4: 50:5a:6a:26:d9:29:75:6a:cb:d0:e3:ad:33:aa:a3:fa:49:8d: 79:b9:e2:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR46k71Gde+s5woPsd3KAYWqHsAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA3MjExNjM0MDdaFw0yNjA3MjIxODI4MDdaMDMxMTAvBgNV BAMTKEM5OTNEMDZFRkYxOUIzNjUyRDc1OTlFRkM2RTkwQ0U0MURCQjZDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKdJPjBUCxOz5Ky9587Tp5gt4 wvXpwnh/YkbyqRhY4ZN0+TS8MEtUzInX+SkCwZRm4TpgulZUW1GPBzS10ras8Mjm L5VaIWBRVe/osvOnFu0kamJnIaWRscXsmiqJ3OhOwPGKwGKpONFxZ/plf8Prg0Qy jNJ34Dc/jt5jlEXJFLh+EkTC9QENbANuz2HBWUbJmxHS2tzX2g2T3G2EKw1yMXYz odQBaXTgefn3pRjpap4HYcZMsZ38Z1oNTT1GUkJuHSEoA2NQXEuJMeQrbfqumo2r 1wgww/qHoqR5x4zJy5/M8YrwvjDTGYOl0Hp+2rME41rlRBxhpL+l1Hs/NdVXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyZPQbv8Zs2UtdZnvxukM5B27bAEwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUZW0fRpfihe xKnhZi37UWG/0EM0ngl4kFftCvZqCfNo36kniLa4UDEr8exThS5z2PaYNDGbjYyV RrO6JV6XzP8BSMy4OzYoElOE9U+BNldq9bj9DH7OVOklYatRv8H5Tve6DTQeDipv nhrHMfqNmSRMQNqb4d3yBlsRbA3FIM4Xw5cdFZI/3BO+UUkk4iYVZZ7hYEL4nMTj u9QWAKP+H5ugh4BguCp4NxNYJnwfJ8eQoHM2fOhNklcyMQZcVjPLLXtCA8Qxdyb1 XhGyOVhubpTL4h6PhBsqm6z5Trk7KnYC8zaOI6g8Ek7EUFpqJtkpdWrL0OOtM6qj +kmNebniNA== -----END CERTIFICATE-----Generated at Wed Jul 22 02:43:55 2026 by rpki-client