$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: HbD7P1fjjK8dqNhoLGS56onMqvsKuJI0xf92eggJb1E= Subject key identifier: 69:95:26:3B:7A:A7:0D:77:E0:BD:A0:E4:44:CA:BE:FB:06:78:D1:E6 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 4AF98BCD637D309D986754D61C5E44C63CD6A39F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: EC Signing time: Tue 14 Jul 2026 03:40:20 +0000 Manifest this update: Tue 14 Jul 2026 03:35:20 +0000 Manifest next update: Wed 15 Jul 2026 06:58:20 +0000 Files and hashes: 1: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 2: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 3: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: iOfe1eOG2RTm6VKe6TEtcIXH3Vo7YoTKJW7+DQjje3s=) 4: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 5: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f9:8b:cd:63:7d:30:9d:98:67:54:d6:1c:5e:44:c6:3c:d6:a3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Jul 14 03:35:20 2026 GMT Not After : Jul 15 06:58:20 2026 GMT Subject: CN=6995263B7AA70D77E0BDA0E444CABEFB0678D1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:3c:e0:f8:0b:77:98:97:a7:ea:05:2f:ef: f0:3a:f7:5e:a4:12:86:f3:b7:30:7f:07:a9:9e:cd: d8:4d:8e:30:b1:c2:b6:89:c5:df:48:75:2b:5f:5b: 72:f2:de:06:0a:e7:03:6c:be:61:12:bd:78:ee:d5: bb:a7:c6:97:3d:11:0f:5a:5e:22:d8:0f:53:15:32: f2:31:b0:c7:ed:6e:0f:9a:dd:6f:a5:aa:c9:77:50: 9e:39:29:dc:00:c9:40:83:fa:67:b7:7b:23:f3:2e: 4d:bb:ca:5e:93:f3:02:d7:35:a7:03:0f:c0:c4:62: 18:b0:be:54:c8:af:61:f0:51:78:9a:73:ec:a7:75: 1f:7d:9d:80:78:1b:fb:b5:71:e2:83:aa:4f:70:21: 00:75:11:51:03:ca:32:3f:2a:2b:1c:cd:4e:23:18: ff:bf:ba:de:df:7f:90:4e:64:c6:d7:a1:37:90:da: 2c:54:81:bb:00:81:af:91:01:ae:2c:e7:ec:b3:e5: 36:42:78:15:45:08:d5:32:41:90:01:79:b5:dc:d3: 1b:90:be:7d:9d:45:07:6e:a8:5f:e6:88:c1:40:e9: 78:2c:7e:72:73:62:8a:3b:18:1b:8e:49:61:fc:fa: b9:39:bc:55:90:09:b3:c4:fe:55:ca:e2:d2:ea:95: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:26:3B:7A:A7:0D:77:E0:BD:A0:E4:44:CA:BE:FB:06:78:D1:E6 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:51:f8:16:69:2e:d2:6c:c6:f0:72:06:f6:36:5d:8f:61: 01:ec:f1:d1:34:f2:4a:8b:35:d8:e9:bf:cb:6f:ae:6f:57:f1: 0f:f7:63:38:4c:c8:8b:e4:93:70:06:86:46:34:28:1c:ae:68: 48:bc:be:86:97:72:de:2e:69:23:7a:23:18:c8:04:55:71:ad: e8:43:f4:f0:f6:b0:f0:4b:08:9f:dc:d0:4c:81:59:74:f8:94: aa:5f:51:94:66:8e:28:ff:ef:43:9a:97:58:74:c5:13:02:b2: a7:4f:98:05:20:08:e4:fc:a9:77:85:53:4c:a0:d6:2f:db:16: 04:9b:26:3e:aa:11:bc:cf:2b:d6:52:7a:f1:a3:5c:e2:48:8f: 0b:63:07:a6:67:26:09:f2:25:b2:7d:7f:85:8a:57:b1:54:ad: 9f:60:6a:f6:f3:0b:f9:ad:9b:00:ab:42:11:ce:e5:75:f4:fc: 56:2f:1e:2a:b4:5e:c5:fa:b0:b2:17:ec:bd:6a:55:2f:f1:55: 78:c6:be:4b:9b:84:dc:94:77:d0:f3:7e:b9:ad:ed:9f:99:67: 6e:98:a2:70:ac:1b:5b:6b:b2:12:01:d6:cf:0c:85:96:e3:a0: 4b:2c:d7:14:69:53:3f:fa:29:36:16:74:dc:b5:2d:7d:ed:77: 91:ab:33:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSvmLzWN9MJ2YZ1TWHF5ExjzWo58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA3MTQwMzM1MjBaFw0yNjA3MTUwNjU4MjBaMDMxMTAvBgNV BAMTKDY5OTUyNjNCN0FBNzBENzdFMEJEQTBFNDQ0Q0FCRUZCMDY3OEQxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvzzg+At3mJen6gUv7/A6916k EobztzB/B6mezdhNjjCxwraJxd9IdStfW3Ly3gYK5wNsvmESvXju1bunxpc9EQ9a XiLYD1MVMvIxsMftbg+a3W+lqsl3UJ45KdwAyUCD+me3eyPzLk27yl6T8wLXNacD D8DEYhiwvlTIr2HwUXiac+yndR99nYB4G/u1ceKDqk9wIQB1EVEDyjI/KisczU4j GP+/ut7ff5BOZMbXoTeQ2ixUgbsAga+RAa4s5+yz5TZCeBVFCNUyQZABebXc0xuQ vn2dRQduqF/miMFA6XgsfnJzYoo7GBuOSWH8+rk5vFWQCbPE/lXK4tLqlXQpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaZUmO3qnDXfgvaDkRMq++wZ40eYwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFRR+BZpLtJs xvByBvY2XY9hAezx0TTySos12Om/y2+ub1fxD/djOEzIi+STcAaGRjQoHK5oSLy+ hpdy3i5pI3ojGMgEVXGt6EP08Paw8EsIn9zQTIFZdPiUql9RlGaOKP/vQ5qXWHTF EwKyp0+YBSAI5Pypd4VTTKDWL9sWBJsmPqoRvM8r1lJ68aNc4kiPC2MHpmcmCfIl sn1/hYpXsVStn2Bq9vML+a2bAKtCEc7ldfT8Vi8eKrRexfqwshfsvWpVL/FVeMa+ S5uE3JR30PN+ua3tn5lnbpiicKwbW2uyEgHWzwyFluOgSyzXFGlTP/opNhZ03LUt fe13kaszBg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:52 2026 by rpki-client