$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft File: 9730554E11D9B2CA574FD62DD6800C761361DAF2.mft (raw, json) Hash identifier: qFUpbA9mGbXIxhkHgDm0O/opy1pfRCpmFL03O2hOM9g= Subject key identifier: EE:11:26:62:FC:A0:F6:31:5A:A5:16:19:0D:03:C5:B8:B6:F7:24:76 Authority key identifier: 97:30:55:4E:11:D9:B2:CA:57:4F:D6:2D:D6:80:0C:76:13:61:DA:F2 Certificate issuer: /CN=9730554E11D9B2CA574FD62DD6800C761361DAF2 Certificate serial: 757E547CB9A6B47357A431D01141E53F1C8E1308 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft Manifest number: 5D Signing time: Tue 21 Jul 2026 02:57:40 +0000 Manifest this update: Tue 21 Jul 2026 02:52:40 +0000 Manifest next update: Wed 22 Jul 2026 06:03:40 +0000 Files and hashes: 1: 9730554E11D9B2CA574FD62DD6800C761361DAF2.crl (hash: QyApoK022ZWpnNEIUuTYtk8Gamxt4q4bb3y84FN14EE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.crl rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 06:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7e:54:7c:b9:a6:b4:73:57:a4:31:d0:11:41:e5:3f:1c:8e:13:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9730554E11D9B2CA574FD62DD6800C761361DAF2 Validity Not Before: Jul 21 02:52:40 2026 GMT Not After : Jul 22 06:03:40 2026 GMT Subject: CN=EE112662FCA0F6315AA516190D03C5B8B6F72476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9b:75:22:9e:0c:c7:01:ea:14:0a:ed:57:21: 52:2d:4b:c3:36:0d:29:5f:66:bd:b1:b6:7c:d5:a2: 7a:0c:75:41:4c:97:56:34:90:86:1c:11:6d:5a:a7: eb:f6:34:c5:a7:1b:1c:c3:e8:59:39:86:01:0a:7c: 82:2e:fb:4d:05:61:20:6c:c9:59:70:ec:ea:f4:aa: 1b:d0:8f:40:c2:e6:48:36:44:e7:e9:fd:b9:b1:41: c9:34:e4:23:58:81:16:cc:42:4a:db:06:b2:52:e3: c0:4b:32:fc:25:77:24:89:b4:0c:b5:a4:ee:ec:32: fc:80:dc:b0:66:5f:f6:fd:0c:1c:5c:c5:a0:30:d1: 19:83:dd:c7:52:1b:87:e8:c4:65:76:7a:6d:9c:02: 80:af:c0:7f:98:21:15:7a:59:c2:3d:fe:ed:23:8a: be:8e:12:79:fd:00:4b:02:c6:28:bb:39:bd:61:5c: 1d:70:db:12:24:d6:8a:8a:08:bc:00:52:2f:51:a0: e8:56:1f:f7:67:41:21:41:03:07:53:15:9a:5e:c0: a4:49:65:29:85:69:ba:f2:03:86:dc:e6:58:0e:56: 4d:31:e2:90:bf:fc:58:4f:9d:4d:25:15:d7:42:13: 78:51:1e:52:21:4d:a6:8b:66:b6:89:34:a6:0c:ec: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:11:26:62:FC:A0:F6:31:5A:A5:16:19:0D:03:C5:B8:B6:F7:24:76 X509v3 Authority Key Identifier: keyid:97:30:55:4E:11:D9:B2:CA:57:4F:D6:2D:D6:80:0C:76:13:61:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:23:56:ea:46:e9:1c:a1:24:96:72:78:18:88:4f:e1:cc:6e: d3:cd:fd:c1:3c:5b:1d:b8:da:72:38:7a:89:59:42:bd:7e:61: d4:30:89:c8:1c:f8:31:a7:fd:32:5d:c9:29:95:31:b9:ea:85: 40:c3:48:95:7a:71:b8:25:3b:54:23:13:1a:d4:20:4b:c2:e9: 3f:29:57:86:3d:26:84:53:54:ea:fe:59:17:f3:50:6f:e4:7e: f0:24:5a:ca:ae:be:43:e7:78:3d:34:3c:a2:ce:ab:f4:73:f9: 12:30:c7:c7:d7:28:40:20:ff:8e:35:e7:74:37:85:92:d4:7f: a4:f3:85:97:76:bb:c1:c3:2d:df:db:74:57:d3:7c:f7:23:9e: 8c:53:7d:40:85:30:9a:bd:93:8c:b4:c9:7a:11:28:89:1d:a2: 6c:b2:97:12:45:5e:c5:34:34:ab:d4:fc:5b:af:8e:e5:1c:6e: e3:c5:15:57:27:1e:42:77:03:a1:b1:17:07:24:e4:81:f3:65: 50:f8:b5:af:bb:8d:47:1e:55:54:d0:af:c1:7d:c0:32:59:69: 0e:78:5f:21:23:56:9d:b1:22:f5:1c:9b:06:aa:b5:cb:fe:e8: 68:47:ab:68:9a:23:e1:66:ef:7d:22:c6:2f:0b:3f:2b:55:d2: 9f:44:e1:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdX5UfLmmtHNXpDHQEUHlPxyOEwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczMDU1NEUxMUQ5QjJDQTU3NEZENjJERDY4MDBDNzYx MzYxREFGMjAeFw0yNjA3MjEwMjUyNDBaFw0yNjA3MjIwNjAzNDBaMDMxMTAvBgNV BAMTKEVFMTEyNjYyRkNBMEY2MzE1QUE1MTYxOTBEMDNDNUI4QjZGNzI0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDom3UingzHAeoUCu1XIVItS8M2 DSlfZr2xtnzVonoMdUFMl1Y0kIYcEW1ap+v2NMWnGxzD6Fk5hgEKfIIu+00FYSBs yVlw7Or0qhvQj0DC5kg2ROfp/bmxQck05CNYgRbMQkrbBrJS48BLMvwldySJtAy1 pO7sMvyA3LBmX/b9DBxcxaAw0RmD3cdSG4foxGV2em2cAoCvwH+YIRV6WcI9/u0j ir6OEnn9AEsCxii7Ob1hXB1w2xIk1oqKCLwAUi9RoOhWH/dnQSFBAwdTFZpewKRJ ZSmFabryA4bc5lgOVk0x4pC//FhPnU0lFddCE3hRHlIhTaaLZraJNKYM7KfHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7hEmYvyg9jFapRYZDQPFuLb3JHYwHwYDVR0j BBgwFoAUlzBVThHZsspXT9Yt1oAMdhNh2vIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1NTM4OTg3OTU5OTEyMy8wLzk3MzA1NTRFMTFEOUIyQ0E1NzRGRDYyREQ2ODAw Qzc2MTM2MURBRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTczMDU1NEUxMUQ5QjJDQTU3NEZENjJERDY4MDBDNzYxMzYxREFGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NTUzODk4Nzk1OTkxMjMvMC85NzMwNTU0RTExRDlC MkNBNTc0RkQ2MkRENjgwMEM3NjEzNjFEQUYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzSNW6kbpHKEk lnJ4GIhP4cxu0839wTxbHbjacjh6iVlCvX5h1DCJyBz4Maf9Ml3JKZUxueqFQMNI lXpxuCU7VCMTGtQgS8LpPylXhj0mhFNU6v5ZF/NQb+R+8CRayq6+Q+d4PTQ8os6r 9HP5EjDHx9coQCD/jjXndDeFktR/pPOFl3a7wcMt39t0V9N89yOejFN9QIUwmr2T jLTJehEoiR2ibLKXEkVexTQ0q9T8W6+O5Rxu48UVVyceQncDobEXByTkgfNlUPi1 r7uNRx5VVNCvwX3AMllpDnhfISNWnbEi9RybBqq1y/7oaEeraJoj4WbvfSLGLws/ K1XSn0ThOg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:47:03 2026 by rpki-client