$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: OIAPvbJa9PVq6fdzHWYfw+SirGwbiRuD2zp9XWetzN0= Subject key identifier: AE:78:FB:82:C3:70:A1:79:1F:A9:E7:B9:01:F6:5F:DB:D4:C5:11:ED Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 3BB704D90250285CC179F64388EF6E3231087720 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: ED Signing time: Tue 14 Jul 2026 16:36:40 +0000 Manifest this update: Tue 14 Jul 2026 16:31:40 +0000 Manifest next update: Wed 15 Jul 2026 17:13:40 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: tISdmxz26IbwSLyRf5ZjFA8VkycseljnT/XaSNvLzKA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:04:d9:02:50:28:5c:c1:79:f6:43:88:ef:6e:32:31:08:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Jul 14 16:31:40 2026 GMT Not After : Jul 15 17:13:40 2026 GMT Subject: CN=AE78FB82C370A1791FA9E7B901F65FDBD4C511ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:28:35:be:2c:b8:f1:f3:4d:6f:a8:58:78: 7a:90:d7:a1:5e:52:40:2c:a8:0a:af:6f:80:ea:38: c1:5c:c3:bb:70:47:7a:2d:20:bf:66:f3:1a:84:81: cd:19:92:3f:db:f3:30:28:28:f7:f6:45:d2:e1:0c: 5f:77:82:c1:ea:26:ca:83:23:de:01:76:30:8f:4b: 12:f6:1f:76:dd:cc:64:6d:71:0c:01:7b:84:89:cb: d4:79:2e:d6:40:19:cd:22:c4:32:30:65:dd:01:02: 8b:01:10:31:3a:ca:aa:35:88:f0:00:db:d0:90:78: c8:a7:3a:4d:43:b8:24:22:be:87:56:3c:97:8a:24: 28:09:da:da:2f:64:89:68:53:ad:f5:6e:25:a9:90: f2:cc:be:b9:18:4b:4c:6c:0d:8c:e0:92:2e:1d:be: 55:e2:05:fe:31:10:35:b2:3b:06:b0:c1:e6:03:f8: 28:d7:20:2d:56:ba:3c:77:07:62:13:0c:e3:0e:73: d8:7c:df:1f:18:6c:9f:17:14:7b:2e:db:ae:bb:e6: 91:2e:36:f6:ec:d0:fb:d9:11:6e:dc:98:83:a6:cc: 9f:7f:9e:d0:6b:cb:e8:f8:66:eb:b0:3e:6f:cd:e7: 3d:88:6c:ec:c3:90:11:ca:37:34:ac:3a:40:ba:2d: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:FB:82:C3:70:A1:79:1F:A9:E7:B9:01:F6:5F:DB:D4:C5:11:ED X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3b:51:c9:65:ef:a1:6a:ac:4c:eb:97:6e:e9:93:11:8f:39: 18:de:24:d6:0e:af:f5:e4:74:42:f5:f6:80:01:e5:0e:82:5e: 4b:75:f8:cc:58:ef:0f:a7:e3:4d:27:84:b7:e7:6a:8c:76:d8: 3b:c3:a7:28:65:91:61:b9:a8:23:04:d3:c0:e4:9f:35:17:24: d1:2d:f2:38:b4:0e:31:87:f4:bf:df:94:c0:bc:62:48:8f:9f: 97:c4:05:ee:4f:95:41:7b:f8:0f:72:2f:84:6a:1e:1d:90:2c: 6e:52:b5:de:85:68:61:fd:97:f7:10:83:a5:a8:e3:15:3e:dd: 9d:27:9f:9f:22:4e:f7:e6:fd:7d:91:9a:13:41:66:5a:1d:c0: f7:d1:2c:72:79:96:b5:18:b2:e6:0b:74:74:45:6d:fa:93:0f: 45:e9:86:5f:61:00:7d:ab:95:3c:0c:f8:c5:2e:c9:64:56:df: 6f:3a:4f:df:45:d1:66:3b:34:92:62:23:69:d8:ff:c9:1d:25: a8:e4:fb:1f:59:8c:86:2f:13:74:56:fe:0c:1f:ea:7e:f7:5a: 5d:3e:ff:04:25:3f:33:de:7b:88:13:dc:1c:7d:f6:0e:52:5a: 41:c6:5a:ee:fc:4d:e9:c5:de:80:6f:88:bd:d5:62:1a:09:0d: e5:0f:72:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO7cE2QJQKFzBefZDiO9uMjEIdyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA3MTQxNjMxNDBaFw0yNjA3MTUxNzEzNDBaMDMxMTAvBgNV BAMTKEFFNzhGQjgyQzM3MEExNzkxRkE5RTdCOTAxRjY1RkRCRDRDNTExRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxig1viy48fNNb6hYeHqQ16Fe UkAsqAqvb4DqOMFcw7twR3otIL9m8xqEgc0Zkj/b8zAoKPf2RdLhDF93gsHqJsqD I94BdjCPSxL2H3bdzGRtcQwBe4SJy9R5LtZAGc0ixDIwZd0BAosBEDE6yqo1iPAA 29CQeMinOk1DuCQivodWPJeKJCgJ2tovZIloU631biWpkPLMvrkYS0xsDYzgki4d vlXiBf4xEDWyOwawweYD+CjXIC1Wujx3B2ITDOMOc9h83x8YbJ8XFHsu26675pEu Nvbs0PvZEW7cmIOmzJ9/ntBry+j4ZuuwPm/N5z2IbOzDkBHKNzSsOkC6LUsxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrnj7gsNwoXkfqee5AfZf29TFEe0wHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjtRyWXvoWqs TOuXbumTEY85GN4k1g6v9eR0QvX2gAHlDoJeS3X4zFjvD6fjTSeEt+dqjHbYO8On KGWRYbmoIwTTwOSfNRck0S3yOLQOMYf0v9+UwLxiSI+fl8QF7k+VQXv4D3IvhGoe HZAsblK13oVoYf2X9xCDpajjFT7dnSefnyJO9+b9fZGaE0FmWh3A99EscnmWtRiy 5gt0dEVt+pMPRemGX2EAfauVPAz4xS7JZFbfbzpP30XRZjs0kmIjadj/yR0lqOT7 H1mMhi8TdFb+DB/qfvdaXT7/BCU/M957iBPcHH32DlJaQcZa7vxN6cXegG+IvdVi GgkN5Q9yaw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:33 2026 by rpki-client