$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: Vte0jXqXiyyYp2JOW92wGMWkudkkvw6via32xcS7Nfw= Subject key identifier: 62:4E:72:6B:17:0D:8F:B7:5F:4E:4B:19:EE:FB:00:15:E9:5D:21:C3 Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 118D9FA287B5AB4C2999A663740CB0E0D7620EE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: 88 Signing time: Tue 21 Jul 2026 22:04:47 +0000 Manifest this update: Tue 21 Jul 2026 21:59:47 +0000 Manifest next update: Wed 22 Jul 2026 22:42:47 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 2CufQYRMKbx9tqA33fHodQGZkhoVW33WaRgZroqVyeg=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:9f:a2:87:b5:ab:4c:29:99:a6:63:74:0c:b0:e0:d7:62:0e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Jul 21 21:59:47 2026 GMT Not After : Jul 22 22:42:47 2026 GMT Subject: CN=624E726B170D8FB75F4E4B19EEFB0015E95D21C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:32:f4:67:e7:9f:93:88:ff:99:a5:3b:85:45: f9:4b:0c:3c:86:08:66:49:89:d3:03:84:75:0c:14: 31:fe:69:c4:4c:4c:fd:1b:d5:84:cd:60:fb:21:c3: 41:53:25:cc:73:68:14:65:ea:0c:e7:ea:6c:28:c6: 48:31:a9:2f:69:d0:69:17:b5:64:4e:de:04:ca:69: 46:88:d9:a9:ab:e7:8b:50:74:37:ac:ca:c7:d8:67: 68:5f:d5:e8:8e:ea:d8:05:86:ac:7c:b9:bc:e5:42: 72:bf:41:14:fd:fa:80:12:d2:5a:2c:57:da:c4:82: e2:aa:87:16:66:c5:d4:7b:08:56:e2:af:1e:3a:31: 10:78:0d:9e:e1:dc:aa:27:b9:93:6d:da:b7:01:2f: 61:46:f3:5b:fa:b9:18:c4:06:b1:11:d3:b0:f9:39: 42:02:91:26:21:71:37:e8:9a:18:4e:1b:00:bf:c1: 5d:e7:09:d8:76:31:6b:ed:be:d5:6c:ef:56:c8:41: 09:fb:cb:16:10:ce:03:f3:55:c9:03:3f:fa:b3:dd: ee:c7:70:a3:81:65:21:37:69:bf:02:8d:c9:41:ed: 88:e2:81:ea:d1:bd:9a:7b:5c:33:aa:68:91:ee:b0: 37:31:5f:e8:e1:ae:8e:3e:de:e4:b0:8c:72:1b:29: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4E:72:6B:17:0D:8F:B7:5F:4E:4B:19:EE:FB:00:15:E9:5D:21:C3 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:61:b4:1a:63:be:6c:be:26:a7:48:61:8d:77:67:ac:04:bf: 2b:34:6f:a5:02:ac:bf:a0:2b:83:3a:3b:f8:b8:bc:76:49:51: 9b:24:b6:3b:96:fe:22:78:60:25:c1:78:88:87:15:1a:0a:90: a9:34:7d:46:07:ab:e5:12:3e:e9:d2:e1:62:99:bc:28:ec:7f: 00:57:65:5b:a8:af:4a:6a:4a:12:43:bc:25:06:0f:65:1f:69: 41:75:9f:7a:3f:ab:1c:f7:cc:70:18:10:3a:1e:ec:c1:a7:5c: b7:43:35:bb:af:14:19:59:00:dc:2a:ef:5e:af:c8:b9:ee:e7: 2a:28:8c:f8:b0:58:70:84:ae:cd:66:41:e6:6d:d3:69:b5:41: 2b:41:36:66:b7:2c:ea:fc:ef:a5:2d:92:75:76:67:3d:f0:f4: 2b:fc:28:2c:33:09:8a:79:34:1a:51:42:b4:dc:9d:3d:4b:98: 32:c6:d1:88:2c:62:66:61:c5:cd:a3:79:88:99:28:93:0e:cd: e2:e9:36:3c:3a:70:ba:06:ad:6e:71:1a:46:5a:d3:11:46:61: 0d:50:c6:1b:a7:39:c7:56:66:28:32:d2:02:e5:65:a3:5a:c5: f6:25:9f:da:d0:50:fa:20:0d:96:ec:d2:3d:68:4b:e8:e7:71: 59:85:14:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEY2fooe1q0wpmaZjdAyw4NdiDuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA3MjEyMTU5NDdaFw0yNjA3MjIyMjQyNDdaMDMxMTAvBgNV BAMTKDYyNEU3MjZCMTcwRDhGQjc1RjRFNEIxOUVFRkIwMDE1RTk1RDIxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMvRn55+TiP+ZpTuFRflLDDyG CGZJidMDhHUMFDH+acRMTP0b1YTNYPshw0FTJcxzaBRl6gzn6mwoxkgxqS9p0GkX tWRO3gTKaUaI2amr54tQdDesysfYZ2hf1eiO6tgFhqx8ubzlQnK/QRT9+oAS0los V9rEguKqhxZmxdR7CFbirx46MRB4DZ7h3KonuZNt2rcBL2FG81v6uRjEBrER07D5 OUICkSYhcTfomhhOGwC/wV3nCdh2MWvtvtVs71bIQQn7yxYQzgPzVckDP/qz3e7H cKOBZSE3ab8CjclB7YjigerRvZp7XDOqaJHusDcxX+jhro4+3uSwjHIbKf75AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYk5yaxcNj7dfTksZ7vsAFeldIcMwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGG0GmO+bL4m p0hhjXdnrAS/KzRvpQKsv6Argzo7+Li8dklRmyS2O5b+InhgJcF4iIcVGgqQqTR9 Rger5RI+6dLhYpm8KOx/AFdlW6ivSmpKEkO8JQYPZR9pQXWfej+rHPfMcBgQOh7s wadct0M1u68UGVkA3CrvXq/Iue7nKiiM+LBYcISuzWZB5m3TabVBK0E2Zrcs6vzv pS2SdXZnPfD0K/woLDMJink0GlFCtNydPUuYMsbRiCxiZmHFzaN5iJkokw7N4uk2 PDpwugatbnEaRlrTEUZhDVDGG6c5x1ZmKDLSAuVlo1rF9iWf2tBQ+iANluzSPWhL 6OdxWYUUng== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:59 2026 by rpki-client