$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: fZLirUN7uNAK0Up4zxt676i1aF3dL38tEU9uvTrd85o= Subject key identifier: 0C:9A:75:0F:8E:FE:85:FC:87:30:C9:14:81:64:1B:76:E4:EB:BD:10 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 0837D89A8D21D43142F99488134FEE2722BE3814 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: F1 Signing time: Tue 14 Jul 2026 18:01:49 +0000 Manifest this update: Tue 14 Jul 2026 17:56:49 +0000 Manifest next update: Wed 15 Jul 2026 21:46:49 +0000 Files and hashes: 1: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 2: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: jQUgSZnwkLqgN1Rcq99P2Qy+anGZ78Z99pOwa5rG0sQ=) 3: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 4: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:37:d8:9a:8d:21:d4:31:42:f9:94:88:13:4f:ee:27:22:be:38:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Jul 14 17:56:49 2026 GMT Not After : Jul 15 21:46:49 2026 GMT Subject: CN=0C9A750F8EFE85FC8730C91481641B76E4EBBD10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:2d:a7:ca:c3:c4:f2:5a:cb:e0:12:55:e8: 83:3d:bf:f9:9f:dc:da:50:14:35:2b:a5:0f:8c:4d: 84:69:dc:5e:a7:13:73:70:dd:17:a9:b5:29:09:68: 14:18:f4:40:ae:76:30:ed:9b:1e:e8:74:1a:e5:41: 84:12:02:a0:62:2f:e0:3f:50:6f:c8:be:06:aa:9e: 4f:5b:4e:0e:94:3b:32:77:bd:73:1a:4e:44:45:78: a6:55:ce:5a:ac:2e:fb:5d:24:f0:cc:f6:9d:7f:c5: f1:f7:1a:e5:0b:22:8e:7d:cb:72:ba:21:19:16:bd: ea:31:8d:dd:f3:44:54:e1:75:e0:4e:cf:6a:27:c6: da:f8:fb:f4:cb:dc:92:a3:79:e9:03:06:d4:a4:12: 64:44:52:a3:f0:0c:a9:fb:0a:3b:3c:e3:8e:84:be: ab:12:39:ad:e3:cb:60:2d:6e:9e:c2:5b:19:95:1a: 3b:3c:7f:96:fb:c9:53:02:b7:82:fb:a3:76:76:3d: f5:57:1c:4d:cd:77:8f:e9:3f:30:cf:34:32:f5:ee: 82:0b:c0:cf:34:81:b4:05:0b:4d:2e:41:58:a7:57: 67:30:11:d2:83:f6:91:17:f8:6a:bf:bd:f6:14:04: 91:05:d3:bf:2e:4e:4f:fa:77:71:45:aa:03:6e:e5: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9A:75:0F:8E:FE:85:FC:87:30:C9:14:81:64:1B:76:E4:EB:BD:10 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:62:2f:20:8d:36:e8:12:b5:65:c2:0a:a7:c8:ca:5f:fe:22: dc:bf:55:09:19:d4:4b:ee:3f:77:6b:1f:7d:0c:23:3c:cb:01: 1e:1c:15:75:44:d2:c4:fa:65:a8:ff:8d:63:3f:53:f3:38:56: a2:da:93:59:b7:0e:74:72:65:48:2f:d8:58:ae:32:4c:da:a7: de:42:34:67:31:78:37:25:3e:23:21:7c:26:d7:6c:17:0a:04: 99:9a:ad:27:2b:d5:89:4c:1c:22:56:9b:eb:1c:da:b2:48:38: 7d:17:c1:de:f4:71:64:97:e7:71:d7:fd:48:a9:35:df:29:94: de:26:f5:96:c4:8e:56:28:78:1b:6f:2f:7e:2e:94:91:2f:d4: a8:27:e1:f2:67:e3:e0:6a:98:83:8e:a4:ac:78:4a:00:9f:fd: a0:7e:95:c2:93:91:2e:a0:b8:44:05:e0:cd:7f:12:59:49:13: 0c:33:20:f8:30:ca:cc:c8:21:3c:c0:f0:e9:55:55:31:bc:ed: 8b:24:f2:39:f7:74:c6:9c:72:85:b6:be:c0:b2:8b:0a:f1:6a: 4a:be:42:6b:9f:a1:16:6e:ad:45:eb:84:41:72:fa:8b:bc:56: ab:46:89:08:cc:d2:69:33:80:98:d7:0c:6d:b5:99:c6:01:f6: 66:b0:81:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCDfYmo0h1DFC+ZSIE0/uJyK+OBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA3MTQxNzU2NDlaFw0yNjA3MTUyMTQ2NDlaMDMxMTAvBgNV BAMTKDBDOUE3NTBGOEVGRTg1RkM4NzMwQzkxNDgxNjQxQjc2RTRFQkJEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooy2nysPE8lrL4BJV6IM9v/mf 3NpQFDUrpQ+MTYRp3F6nE3Nw3ReptSkJaBQY9ECudjDtmx7odBrlQYQSAqBiL+A/ UG/Ivgaqnk9bTg6UOzJ3vXMaTkRFeKZVzlqsLvtdJPDM9p1/xfH3GuULIo59y3K6 IRkWveoxjd3zRFThdeBOz2onxtr4+/TL3JKjeekDBtSkEmREUqPwDKn7Cjs8446E vqsSOa3jy2Atbp7CWxmVGjs8f5b7yVMCt4L7o3Z2PfVXHE3Nd4/pPzDPNDL17oIL wM80gbQFC00uQVinV2cwEdKD9pEX+Gq/vfYUBJEF078uTk/6d3FFqgNu5ff/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDJp1D47+hfyHMMkUgWQbduTrvRAwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmIvII026BK1 ZcIKp8jKX/4i3L9VCRnUS+4/d2sffQwjPMsBHhwVdUTSxPplqP+NYz9T8zhWotqT WbcOdHJlSC/YWK4yTNqn3kI0ZzF4NyU+IyF8JtdsFwoEmZqtJyvViUwcIlab6xza skg4fRfB3vRxZJfncdf9SKk13ymU3ib1lsSOVih4G28vfi6UkS/UqCfh8mfj4GqY g46krHhKAJ/9oH6VwpORLqC4RAXgzX8SWUkTDDMg+DDKzMghPMDw6VVVMbztiyTy Ofd0xpxyhba+wLKLCvFqSr5Ca5+hFm6tReuEQXL6i7xWq0aJCMzSaTOAmNcMbbWZ xgH2ZrCBfQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:13:59 2026 by rpki-client