$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: guvWhjfTSyIyzaeHHP5kJ3oC7nKMnlSKE+oaScY20Mk= Subject key identifier: 77:BE:32:5C:08:1F:92:F7:C0:37:8A:D3:5F:3D:48:70:BF:FA:0D:7E Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 1772B54428E9CC3BBA21F7D1B9888581FF827D11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0104 Signing time: Mon 27 Jul 2026 06:48:37 +0000 Manifest this update: Mon 27 Jul 2026 06:43:37 +0000 Manifest next update: Tue 28 Jul 2026 10:15:37 +0000 Files and hashes: 1: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 2: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) 3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: mflaf/B/mjE5BWaBjJGdw77NDkK/jW5Wt/WTxko8mDA=) 4: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 5: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 6: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:72:b5:44:28:e9:cc:3b:ba:21:f7:d1:b9:88:85:81:ff:82:7d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Jul 27 06:43:37 2026 GMT Not After : Jul 28 10:15:37 2026 GMT Subject: CN=77BE325C081F92F7C0378AD35F3D4870BFFA0D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:b2:bf:43:19:e3:5d:3c:7f:4a:49:aa:fe: cd:c2:04:c2:c8:48:36:6f:6f:3e:27:50:5b:a6:77: eb:a4:ae:51:de:8b:f5:45:33:9a:1c:25:c7:26:bf: cd:6b:cc:0e:33:a1:fa:1c:4b:da:31:b9:48:11:3e: 0e:b6:be:7d:da:85:45:4d:44:27:00:65:c3:90:c5: 74:6e:60:f0:d6:ec:bd:17:d7:b4:72:9a:58:62:f9: ab:cd:54:ef:65:f0:0e:6c:31:c4:dc:ee:e4:57:e8: 4f:1f:ef:77:0e:fa:9b:e4:71:4b:06:2f:87:dd:d9: cc:4e:72:f0:85:f1:4d:83:b0:c4:57:75:0f:a0:2c: a4:99:8a:9c:c7:fe:9a:a3:c6:7c:e6:2a:05:de:d0: b6:4b:b6:33:56:9f:63:2a:e0:b3:9b:99:91:9c:7d: 32:48:a6:6f:2b:6c:c7:1c:23:85:5a:77:12:45:8e: a0:45:0f:b2:f3:c3:aa:2a:82:d7:2c:0b:1e:34:09: 99:5f:8e:d5:d1:58:d2:42:bb:5b:f6:ea:59:27:3a: 8b:d7:2e:5e:ec:b9:d5:da:25:da:85:16:a6:c9:a5: b0:98:51:24:cf:13:a1:3f:60:a7:99:65:d1:47:cf: da:e2:df:40:6c:0f:bc:bd:c2:8a:38:c6:95:18:a2: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:32:5C:08:1F:92:F7:C0:37:8A:D3:5F:3D:48:70:BF:FA:0D:7E X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:08:05:e3:51:8a:77:b5:52:9c:b8:43:4f:65:63:3d:83: 86:13:12:24:58:be:cb:3a:3b:4a:61:f8:a6:25:8f:09:b8:b2: af:5a:6d:28:62:2c:65:67:f5:98:36:da:d6:06:ea:09:40:47: a7:b8:09:d1:50:23:27:79:1e:96:8f:7c:7b:6d:5f:05:4a:07: a7:07:88:0c:28:79:44:46:3b:0b:5c:87:58:96:2a:1f:ae:77: 62:c2:98:51:20:99:91:d6:d6:30:69:84:7b:1a:74:2c:73:2a: 54:a5:b1:2a:0e:b2:db:b1:06:35:21:fe:6e:18:03:7c:a0:a6: 54:55:cd:3b:de:91:ec:36:9e:18:b1:83:59:3b:fd:77:2e:80: 21:0c:d6:be:c8:6b:c4:5f:68:11:fc:79:c7:31:1e:f1:1f:3e: 43:e9:e1:0c:56:84:74:5e:11:a1:66:0f:11:33:47:37:77:f8: 64:f0:9b:2c:36:1b:b5:31:0b:ea:be:fa:42:6d:cc:97:78:41: 0d:93:5a:b3:62:b9:af:5b:3d:da:c3:6b:ad:6a:ca:1e:ad:da: 48:dc:3b:a1:fc:f3:cd:2f:de:e8:44:71:11:b1:87:4d:b5:fe: 0e:62:96:8b:29:f6:41:37:49:11:de:5a:eb:9a:35:9b:38:8a: ba:53:b8:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF3K1RCjpzDu6IffRuYiFgf+CfREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA3MjcwNjQzMzdaFw0yNjA3MjgxMDE1MzdaMDMxMTAvBgNV BAMTKDc3QkUzMjVDMDgxRjkyRjdDMDM3OEFEMzVGM0Q0ODcwQkZGQTBEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbbK/QxnjXTx/Skmq/s3CBMLI SDZvbz4nUFumd+ukrlHei/VFM5ocJccmv81rzA4zofocS9oxuUgRPg62vn3ahUVN RCcAZcOQxXRuYPDW7L0X17Rymlhi+avNVO9l8A5sMcTc7uRX6E8f73cO+pvkcUsG L4fd2cxOcvCF8U2DsMRXdQ+gLKSZipzH/pqjxnzmKgXe0LZLtjNWn2Mq4LObmZGc fTJIpm8rbMccI4VadxJFjqBFD7Lzw6oqgtcsCx40CZlfjtXRWNJCu1v26lknOovX Ll7sudXaJdqFFqbJpbCYUSTPE6E/YKeZZdFHz9ri30BsD7y9woo4xpUYor5fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd74yXAgfkvfAN4rTXz1IcL/6DX4wHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjgIBeNRine1 Upy4Q09lYz2DhhMSJFi+yzo7SmH4piWPCbiyr1ptKGIsZWf1mDba1gbqCUBHp7gJ 0VAjJ3kelo98e21fBUoHpweIDCh5REY7C1yHWJYqH653YsKYUSCZkdbWMGmEexp0 LHMqVKWxKg6y27EGNSH+bhgDfKCmVFXNO96R7DaeGLGDWTv9dy6AIQzWvshrxF9o Efx5xzEe8R8+Q+nhDFaEdF4RoWYPETNHN3f4ZPCbLDYbtTEL6r76Qm3Ml3hBDZNa s2K5r1s92sNrrWrKHq3aSNw7ofzzzS/e6ERxEbGHTbX+DmKWiyn2QTdJEd5a65o1 mziKulO4oQ== -----END CERTIFICATE-----Generated at Mon Jul 27 19:45:42 2026 by rpki-client