$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: BggMrGn6k/9w9ISIaJO6AYjbp+PIOZNblx/mfUsdsGE= Subject key identifier: C2:78:1F:3F:BE:D2:0D:9D:02:B8:51:EF:41:3B:7E:FF:8C:08:9A:49 Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 707F13DE92C13D51D31427D92569899D57314AB2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: EC Signing time: Tue 14 Jul 2026 12:21:14 +0000 Manifest this update: Tue 14 Jul 2026 12:16:14 +0000 Manifest next update: Wed 15 Jul 2026 12:28:14 +0000 Files and hashes: 1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 2: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) 3: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) 4: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: 9WS4o7fvLh/iqWQTCmm1OGF/YYWApnVPlaUnuphdNBY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7f:13:de:92:c1:3d:51:d3:14:27:d9:25:69:89:9d:57:31:4a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Jul 14 12:16:14 2026 GMT Not After : Jul 15 12:28:14 2026 GMT Subject: CN=C2781F3FBED20D9D02B851EF413B7EFF8C089A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:98:bd:00:e4:05:e1:e3:51:15:9e:ed:5b: 2a:43:58:97:46:0f:d2:8a:cc:f1:e9:26:f2:68:64: 98:7a:51:c0:8f:49:7c:f8:7d:44:58:83:93:db:cb: f5:6e:db:52:19:4c:7c:6d:3e:9c:8a:1e:d7:c6:04: 39:85:34:10:31:6b:09:2b:21:0b:86:63:2c:ac:c3: d0:7c:2b:06:0f:b6:49:e3:b8:97:0a:08:a7:23:83: 02:88:1c:9f:6b:9c:d4:4b:ff:7f:9c:ea:ac:de:5d: 51:58:61:a9:0b:c6:20:ad:c8:f9:ae:cd:54:ca:31: a8:74:7c:1d:d2:36:40:63:75:a0:e2:f9:f5:63:e3: f2:af:4e:50:89:b6:ff:1f:41:97:48:7c:35:fe:9c: 9f:af:c3:6a:82:08:a7:2c:79:7c:3c:e0:3a:e3:90: dd:36:83:2d:03:35:e6:65:f4:bb:c7:a3:73:e9:48: 5e:37:bf:ce:87:75:56:0e:b6:ff:6b:80:70:2f:be: c8:7a:35:14:aa:24:39:2f:14:a3:15:bb:46:09:30: b9:f9:27:7f:81:2f:1c:d9:7f:a4:98:9d:7b:f1:e5: 5e:7c:a4:13:ef:99:5b:5e:e1:9b:87:a6:1c:90:8c: 34:20:7f:19:be:3b:7c:f5:3d:f2:d8:73:fa:20:b0: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:1F:3F:BE:D2:0D:9D:02:B8:51:EF:41:3B:7E:FF:8C:08:9A:49 X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:78:23:9e:d1:fb:49:88:ba:18:5c:3e:da:af:f0:0e:05: e9:0a:e5:ea:b5:bc:4a:ca:72:c4:6f:30:32:88:fa:bf:09:66: e2:8b:1c:fc:fb:ac:4e:aa:ef:3e:3d:7b:74:d5:47:df:fc:29: 13:68:22:de:76:15:8a:2f:63:92:ed:17:f5:42:95:ac:a1:c6: 4a:2a:82:ce:ff:5e:54:14:e7:72:8a:17:55:f0:18:a4:23:41: d6:09:db:cd:a5:fc:e9:b8:c3:31:56:e7:c9:d3:be:74:e0:23: 97:35:27:c7:37:15:6c:73:c0:fd:51:39:a5:34:93:ad:9b:ed: a3:4e:d7:f4:7b:35:c1:f7:cb:c6:33:1f:f6:f2:e0:29:41:60: 30:67:cb:4c:7a:f7:f9:44:c5:02:ca:95:87:d7:a8:70:e0:42: 36:a3:3d:6a:32:35:19:9e:70:91:df:d0:da:cb:f6:50:2c:f3: 89:02:c0:14:3b:8d:fa:50:87:f1:64:39:78:c0:f0:09:6a:9d: 99:68:ac:4b:bf:2a:fe:f2:3e:b8:6d:5b:bb:62:b2:8e:20:cc: e2:70:27:62:d2:54:20:42:8b:65:21:f9:66:51:01:e9:ca:42: 65:0b:9e:c8:f6:98:93:9b:cc:7a:73:c3:f8:fe:fd:6e:79:fb: 97:76:30:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcH8T3pLBPVHTFCfZJWmJnVcxSrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjA3MTQxMjE2MTRaFw0yNjA3MTUxMjI4MTRaMDMxMTAvBgNV BAMTKEMyNzgxRjNGQkVEMjBEOUQwMkI4NTFFRjQxM0I3RUZGOEMwODlBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLpi9AOQF4eNRFZ7tWypDWJdG D9KKzPHpJvJoZJh6UcCPSXz4fURYg5Pby/Vu21IZTHxtPpyKHtfGBDmFNBAxawkr IQuGYyysw9B8KwYPtknjuJcKCKcjgwKIHJ9rnNRL/3+c6qzeXVFYYakLxiCtyPmu zVTKMah0fB3SNkBjdaDi+fVj4/KvTlCJtv8fQZdIfDX+nJ+vw2qCCKcseXw84Drj kN02gy0DNeZl9LvHo3PpSF43v86HdVYOtv9rgHAvvsh6NRSqJDkvFKMVu0YJMLn5 J3+BLxzZf6SYnXvx5V58pBPvmVte4ZuHphyQjDQgfxm+O3z1PfLYc/ogsBR1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwngfP77SDZ0CuFHvQTt+/4wImkkwHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWh4I57R+0mI uhhcPtqv8A4F6Qrl6rW8SspyxG8wMoj6vwlm4osc/PusTqrvPj17dNVH3/wpE2gi 3nYVii9jku0X9UKVrKHGSiqCzv9eVBTncooXVfAYpCNB1gnbzaX86bjDMVbnydO+ dOAjlzUnxzcVbHPA/VE5pTSTrZvto07X9Hs1wffLxjMf9vLgKUFgMGfLTHr3+UTF AsqVh9eocOBCNqM9ajI1GZ5wkd/Q2sv2UCzziQLAFDuN+lCH8WQ5eMDwCWqdmWis S78q/vI+uG1bu2KyjiDM4nAnYtJUIEKLZSH5ZlEB6cpCZQueyPaYk5vMenPD+P79 bnn7l3YwgQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:33 2026 by rpki-client