$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: yRtA8a5IFcXVpiz6llMkO3Aug4hk7vsXsR1ebIMN+pE= Subject key identifier: 87:13:F9:E8:A4:7A:1A:D6:38:06:8C:01:56:A3:1C:22:C8:4B:67:92 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 163E2457917525ACA5692E7C3E37395AD2ED18E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: FD Signing time: Sun 26 Jul 2026 23:07:45 +0000 Manifest this update: Sun 26 Jul 2026 23:02:45 +0000 Manifest next update: Tue 28 Jul 2026 01:32:45 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 2: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) 3: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: 5K+lCOkUj/Q/TnuaxFeCMv6NT1HJ+R1ccx3mvb5wvL0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3e:24:57:91:75:25:ac:a5:69:2e:7c:3e:37:39:5a:d2:ed:18:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Jul 26 23:02:45 2026 GMT Not After : Jul 28 01:32:45 2026 GMT Subject: CN=8713F9E8A47A1AD638068C0156A31C22C84B6792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:89:c3:9c:41:63:68:22:ed:83:69:9a:8b: 13:25:31:4f:3b:d2:1d:9a:5f:30:31:82:12:a3:7e: 63:94:ba:4f:00:f2:66:da:e8:7a:80:05:0d:27:9b: 16:7e:92:1a:4b:9e:33:7c:9f:ce:4e:24:c9:0d:37: 48:2e:20:f6:e7:f4:df:a1:4d:ca:08:a7:ad:22:d9: 7a:72:fb:7a:9d:7a:f5:76:1a:2f:28:1a:59:b1:02: ed:68:1d:b8:0d:16:64:2f:34:27:2b:f1:3a:9f:b3: 6c:e6:2a:79:2e:b2:4e:e5:9c:09:c5:aa:52:f5:2c: 36:eb:d1:e2:3a:7c:97:da:8d:bf:6e:47:a3:f6:d9: cc:54:11:cb:fd:1d:17:0f:08:33:fb:70:be:5c:13: ca:c2:fd:e0:1a:35:9f:0c:25:e7:cc:ec:25:e4:38: 27:c7:ae:45:5f:8f:fa:26:57:00:76:d2:28:0a:fc: 88:9a:d4:37:59:0e:1e:2e:e9:38:a0:87:58:a7:e3: e2:ed:11:88:5e:3a:cd:4c:21:79:ed:5c:97:70:66: 6f:cf:a8:5b:03:dd:f4:c2:f7:6c:fd:6f:fd:4a:bf: 78:cb:5f:c3:83:56:37:2d:07:e4:a6:6b:1f:97:ef: e8:c0:14:41:b9:c6:02:63:0c:42:de:06:eb:03:01: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:F9:E8:A4:7A:1A:D6:38:06:8C:01:56:A3:1C:22:C8:4B:67:92 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:d1:82:a8:3f:5f:cc:78:a2:bb:c9:fc:51:b1:5e:83:7e: e2:ed:d3:e2:4d:49:01:ba:f5:e7:b3:24:a6:f1:7f:22:15:27: 85:87:55:56:e2:f1:d7:a0:99:b0:e9:ae:21:f1:f2:d4:b3:e8: 90:24:ef:bf:be:73:3d:dd:15:11:d7:2d:21:56:29:97:06:25: 33:f7:d4:d2:3a:c5:45:36:8f:5e:d2:a0:5d:d0:d3:94:8f:32: 00:9a:e7:7a:37:f6:d5:51:84:f2:40:9c:60:a1:d5:c3:bb:98: 3e:e0:bc:4e:ba:5e:9d:55:31:89:b6:54:72:67:4e:de:82:8b: 90:70:32:93:08:0c:85:81:8d:11:c2:df:f2:b3:bb:a5:fa:1d: ef:58:11:5a:32:15:e4:b2:45:eb:4c:39:7f:c4:c1:6a:58:52: 01:8d:1a:dd:ff:90:0b:74:67:af:4c:ce:a6:ea:47:10:b4:a2: 70:fa:04:4b:ce:27:21:dc:b4:56:9c:ee:87:11:4c:bc:39:a2: 8e:c5:79:77:51:df:37:3c:dc:91:8e:8c:22:4e:7e:48:23:32: b9:bb:1a:f4:89:86:23:b7:95:b9:e6:98:40:74:74:9b:b3:65: 5c:ee:eb:7b:35:95:63:f4:cb:b2:f1:8c:bb:34:63:fc:68:33: e4:ef:22:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFj4kV5F1JaylaS58Pjc5WtLtGOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjA3MjYyMzAyNDVaFw0yNjA3MjgwMTMyNDVaMDMxMTAvBgNV BAMTKDg3MTNGOUU4QTQ3QTFBRDYzODA2OEMwMTU2QTMxQzIyQzg0QjY3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg94nDnEFjaCLtg2maixMlMU87 0h2aXzAxghKjfmOUuk8A8mba6HqABQ0nmxZ+khpLnjN8n85OJMkNN0guIPbn9N+h TcoIp60i2Xpy+3qdevV2Gi8oGlmxAu1oHbgNFmQvNCcr8Tqfs2zmKnkusk7lnAnF qlL1LDbr0eI6fJfajb9uR6P22cxUEcv9HRcPCDP7cL5cE8rC/eAaNZ8MJefM7CXk OCfHrkVfj/omVwB20igK/Iia1DdZDh4u6Tigh1in4+LtEYheOs1MIXntXJdwZm/P qFsD3fTC92z9b/1Kv3jLX8ODVjctB+Smax+X7+jAFEG5xgJjDELeBusDAckXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhxP56KR6GtY4BowBVqMcIshLZ5IwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLDRgqg/X8x4 orvJ/FGxXoN+4u3T4k1JAbr157MkpvF/IhUnhYdVVuLx16CZsOmuIfHy1LPokCTv v75zPd0VEdctIVYplwYlM/fU0jrFRTaPXtKgXdDTlI8yAJrnejf21VGE8kCcYKHV w7uYPuC8TrpenVUxibZUcmdO3oKLkHAykwgMhYGNEcLf8rO7pfod71gRWjIV5LJF 60w5f8TBalhSAY0a3f+QC3Rnr0zOpupHELSicPoES84nIdy0VpzuhxFMvDmijsV5 d1HfNzzckY6MIk5+SCMyubsa9ImGI7eVueaYQHR0m7NlXO7rezWVY/TLsvGMuzRj /Ggz5O8idw== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:14 2026 by rpki-client