$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: r6nIcyqTdPFpCFvl+y94npyr3K0rmHdAoyEfsFJfq+E= Subject key identifier: FC:AF:09:DC:D8:51:97:1F:42:68:9E:D2:C7:1F:86:50:09:F5:8B:A5 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 6805A5BC516010FF9FC3F9B394624DC6CD61FC77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: FD Signing time: Mon 27 Jul 2026 09:33:48 +0000 Manifest this update: Mon 27 Jul 2026 09:28:48 +0000 Manifest next update: Tue 28 Jul 2026 10:44:48 +0000 Files and hashes: 1: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 2: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 3: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) 4: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) 5: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: w4pAP5oyBA44E52BGdWR8wDYTg+tKC9xn9TCvr6sHCU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:05:a5:bc:51:60:10:ff:9f:c3:f9:b3:94:62:4d:c6:cd:61:fc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Jul 27 09:28:48 2026 GMT Not After : Jul 28 10:44:48 2026 GMT Subject: CN=FCAF09DCD851971F42689ED2C71F865009F58BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:1f:a4:e6:98:d0:e3:82:e1:07:92:5e:62: 46:fd:ff:49:fc:a6:1e:72:72:a5:f0:b5:df:1e:bf: 31:0c:43:91:50:5a:42:82:2a:be:a5:c7:07:4c:fc: b3:f9:44:84:b9:54:44:8c:c4:9d:32:ad:0c:2b:e0: 41:72:a6:ea:6d:ee:12:88:40:6b:ba:eb:4f:22:a4: 80:65:91:f8:1c:56:0a:0e:e3:de:32:59:f9:ca:c4: 7d:4f:b6:03:a4:52:e1:80:81:70:8d:41:ee:b8:c8: 52:c7:22:f7:cc:dd:48:f1:96:e7:97:eb:99:d5:10: e3:ce:d5:65:4c:71:47:ad:07:fd:e1:98:27:5c:f1: df:d6:ce:65:20:e2:f1:3b:45:68:b8:aa:6a:70:64: 3e:78:a8:20:2f:e9:18:ed:2b:07:1d:09:d5:f2:6a: e4:4d:fa:a5:82:43:aa:f9:66:8b:6a:e7:de:6b:6a: d9:f4:37:03:de:04:a9:8a:f2:ad:8e:4d:6e:2f:62: 7e:10:94:10:24:15:be:9c:c1:a1:29:cb:ec:e2:b1: e4:d8:ed:84:11:18:39:18:09:3c:62:ad:d4:50:42: 89:01:33:67:75:bc:45:76:a2:01:94:d3:41:ad:21: e3:c4:0a:d0:44:87:22:31:6f:87:31:1a:c6:a6:7c: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AF:09:DC:D8:51:97:1F:42:68:9E:D2:C7:1F:86:50:09:F5:8B:A5 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:76:4c:ed:47:2c:5f:c3:1e:7d:c7:86:19:33:4a:24:d6:c5: f8:87:99:59:40:82:c6:d3:01:05:6f:aa:d0:a1:1a:d0:2e:00: dd:a7:24:08:ff:6f:1c:0d:a6:1e:29:e9:ce:61:e9:fa:d0:05: 27:d3:ab:f3:93:30:f7:15:4f:32:db:85:c9:79:4a:e8:a8:b5: 8e:22:20:d1:a2:85:69:03:8d:d3:47:a0:24:42:2e:23:93:1a: 32:2f:8a:c2:a8:39:59:7d:24:55:86:3f:20:5d:9e:cc:c1:82: af:a2:b2:5f:6d:76:e5:4f:ad:35:f6:40:dc:d1:17:21:ee:10: 6c:53:1d:d4:4a:c8:9f:bf:c2:fe:54:26:69:31:ca:75:0e:b4: 72:92:25:53:59:4b:8b:b4:08:0c:f6:3d:f0:98:27:2b:14:ee: 8f:34:87:fe:f2:dd:43:b2:da:b3:45:c1:ca:f5:a5:35:91:7b: 8a:9e:a4:72:a3:61:0e:2c:ba:0a:a6:3b:4f:8d:53:a7:5f:28: b3:57:b5:12:47:a8:d4:0c:21:03:6b:a0:ef:78:91:76:34:ba: a3:65:ed:c2:23:b0:63:b8:ac:5c:f5:f3:51:65:66:9b:9d:2c: 6a:5d:30:3c:24:4c:f2:f7:61:ca:c0:af:8c:29:c9:92:60:8e: fd:24:b6:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaAWlvFFgEP+fw/mzlGJNxs1h/HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjA3MjcwOTI4NDhaFw0yNjA3MjgxMDQ0NDhaMDMxMTAvBgNV BAMTKEZDQUYwOURDRDg1MTk3MUY0MjY4OUVEMkM3MUY4NjUwMDlGNThCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuR+k5pjQ44LhB5JeYkb9/0n8 ph5ycqXwtd8evzEMQ5FQWkKCKr6lxwdM/LP5RIS5VESMxJ0yrQwr4EFypupt7hKI QGu6608ipIBlkfgcVgoO494yWfnKxH1PtgOkUuGAgXCNQe64yFLHIvfM3UjxlueX 65nVEOPO1WVMcUetB/3hmCdc8d/WzmUg4vE7RWi4qmpwZD54qCAv6RjtKwcdCdXy auRN+qWCQ6r5Zotq595ratn0NwPeBKmK8q2OTW4vYn4QlBAkFb6cwaEpy+ziseTY 7YQRGDkYCTxirdRQQokBM2d1vEV2ogGU00GtIePECtBEhyIxb4cxGsamfLzlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/K8J3NhRlx9CaJ7Sxx+GUAn1i6UwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnZM7UcsX8Me fceGGTNKJNbF+IeZWUCCxtMBBW+q0KEa0C4A3ackCP9vHA2mHinpzmHp+tAFJ9Or 85Mw9xVPMtuFyXlK6Ki1jiIg0aKFaQON00egJEIuI5MaMi+Kwqg5WX0kVYY/IF2e zMGCr6KyX2125U+tNfZA3NEXIe4QbFMd1ErIn7/C/lQmaTHKdQ60cpIlU1lLi7QI DPY98JgnKxTujzSH/vLdQ7Las0XByvWlNZF7ip6kcqNhDiy6CqY7T41Tp18os1e1 Ekeo1AwhA2ug73iRdjS6o2XtwiOwY7isXPXzUWVmm50sal0wPCRM8vdhysCvjCnJ kmCO/SS2DA== -----END CERTIFICATE-----Generated at Mon Jul 27 12:48:50 2026 by rpki-client