$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: DHBr/nRkDXc90yY10fq7zxqH8y2GBrySbJmRZ4jWy5k= Subject key identifier: A6:38:0E:65:1C:84:E9:8D:1C:AF:90:41:AA:EB:55:ED:CE:74:3C:59 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 54963471B2930E2E4DC47A84FFEE9B4182FEB63D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 010A Signing time: Tue 14 Jul 2026 09:46:01 +0000 Manifest this update: Tue 14 Jul 2026 09:41:01 +0000 Manifest next update: Wed 15 Jul 2026 12:33:01 +0000 Files and hashes: 1: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) 2: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: QuOwf5ttcUjG9pzdbM7ji5A58Qsx5FHqoumyyR8HwSE=) 3: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:34:71:b2:93:0e:2e:4d:c4:7a:84:ff:ee:9b:41:82:fe:b6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jul 14 09:41:01 2026 GMT Not After : Jul 15 12:33:01 2026 GMT Subject: CN=A6380E651C84E98D1CAF9041AAEB55EDCE743C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:05:80:55:c7:95:b3:5f:7e:f2:b7:d1:de: 14:36:8e:19:06:9b:c2:c2:b7:48:49:7a:b1:bb:54: 4e:d4:18:cc:a9:9e:e3:ad:5d:41:81:d1:e2:50:ea: 3d:7f:5b:84:9a:c7:7b:1f:18:24:9a:b3:15:1d:51: a3:cb:78:ec:6c:d3:0e:58:c5:57:06:96:59:c9:62: f7:ec:f6:31:43:95:91:0e:a8:f1:e0:61:57:47:d8: ee:ba:e7:09:82:f3:24:0c:b8:09:49:33:1f:33:00: 4f:70:ca:9d:d7:1b:7d:ef:44:de:6e:27:70:40:be: 30:34:53:68:da:63:19:cc:01:10:c1:aa:3f:d2:53: cd:fd:bc:cb:0e:0e:c1:8a:b9:af:9a:55:62:54:93: b5:d1:5c:d9:1c:19:18:73:71:91:48:e1:5f:19:75: c1:ba:2b:80:f6:df:b5:05:56:45:8b:f8:8a:b0:3c: f7:b7:55:d4:07:77:d2:a4:a2:c6:4e:79:09:48:87: df:b4:06:09:11:d0:a2:5b:8f:0e:54:a6:15:43:81: 0a:8a:db:d8:39:a4:b8:30:bb:63:92:86:e7:ab:59: b5:8d:74:8f:fb:10:72:5a:88:4b:a3:2f:aa:02:ee: 37:91:84:94:f6:83:59:a3:55:65:1d:db:7b:18:76: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:38:0E:65:1C:84:E9:8D:1C:AF:90:41:AA:EB:55:ED:CE:74:3C:59 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9d:36:cc:9e:a3:70:92:03:4e:7d:79:c6:ee:4c:91:ff:ae: 2f:39:4a:ce:b3:14:a1:bd:7a:0b:15:44:eb:88:90:c1:51:8a: 52:6c:99:16:b4:f3:8f:a8:ea:22:0a:9b:75:86:f8:a0:19:3c: 18:18:67:7e:5c:54:bd:fc:50:db:b3:1a:8e:f2:d3:e0:b0:d0: e9:6e:d3:45:2e:1d:48:ed:9d:c4:59:4b:e0:54:e5:85:17:6b: ed:49:2e:50:f5:94:39:ad:e4:8a:bf:43:3d:1e:b9:9d:13:49: a5:a4:58:8c:04:0e:b7:bd:1b:5b:c5:90:e9:36:d6:34:0f:ca: 9b:8f:61:9a:ea:f7:f5:59:16:aa:3f:4c:70:ee:2e:af:5b:99: 2c:3c:e5:27:4a:42:c9:ab:4d:a8:4a:0a:04:63:dc:8d:37:c8: 4b:e5:9b:0c:9c:f4:b8:b5:85:24:52:6a:29:c0:3e:45:33:e8: bb:43:d6:f7:92:02:df:87:68:3c:42:3f:45:06:11:47:46:3b: 71:ee:97:c7:93:ce:3e:a7:89:66:e5:5b:f0:91:11:6a:4c:10: 47:4b:35:6c:31:15:54:23:f1:06:13:31:fe:94:01:a3:60:12: 5a:bf:4e:85:c7:d0:8f:6d:b2:d0:61:1e:f9:01:bd:90:2a:7f: c5:e6:75:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVJY0cbKTDi5NxHqE/+6bQYL+tj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA3MTQwOTQxMDFaFw0yNjA3MTUxMjMzMDFaMDMxMTAvBgNV BAMTKEE2MzgwRTY1MUM4NEU5OEQxQ0FGOTA0MUFBRUI1NUVEQ0U3NDNDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOawWAVceVs19+8rfR3hQ2jhkG m8LCt0hJerG7VE7UGMypnuOtXUGB0eJQ6j1/W4Sax3sfGCSasxUdUaPLeOxs0w5Y xVcGllnJYvfs9jFDlZEOqPHgYVdH2O665wmC8yQMuAlJMx8zAE9wyp3XG33vRN5u J3BAvjA0U2jaYxnMARDBqj/SU839vMsODsGKua+aVWJUk7XRXNkcGRhzcZFI4V8Z dcG6K4D237UFVkWL+IqwPPe3VdQHd9KkosZOeQlIh9+0BgkR0KJbjw5UphVDgQqK 29g5pLgwu2OShuerWbWNdI/7EHJaiEujL6oC7jeRhJT2g1mjVWUd23sYdmn1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpjgOZRyE6Y0cr5BBqutV7c50PFkwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj502zJ6jcJID Tn15xu5Mkf+uLzlKzrMUob16CxVE64iQwVGKUmyZFrTzj6jqIgqbdYb4oBk8GBhn flxUvfxQ27MajvLT4LDQ6W7TRS4dSO2dxFlL4FTlhRdr7UkuUPWUOa3kir9DPR65 nRNJpaRYjAQOt70bW8WQ6TbWNA/Km49hmur39VkWqj9McO4ur1uZLDzlJ0pCyatN qEoKBGPcjTfIS+WbDJz0uLWFJFJqKcA+RTPou0PW95IC34doPEI/RQYRR0Y7ce6X x5POPqeJZuVb8JERakwQR0s1bDEVVCPxBhMx/pQBo2ASWr9OhcfQj22y0GEe+QG9 kCp/xeZ1Yg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:58 2026 by rpki-client