$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: +mQxZBsGg0/IQi+ZPtVOIy6JEI2jrbHvuTWR2RlnHWU= Subject key identifier: 5B:B5:F0:46:2E:C8:67:CC:BC:E0:BA:30:49:28:0F:CC:D8:E9:A3:F1 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 77339AF0935482AAEA5102535B35152CE02C3FE3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: EC Signing time: Tue 14 Jul 2026 08:05:47 +0000 Manifest this update: Tue 14 Jul 2026 08:00:47 +0000 Manifest next update: Wed 15 Jul 2026 09:56:47 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: x6RkneGsxzTpfR3cJuG8ZzedljvZFJm8qy6Y/l8FSv4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:33:9a:f0:93:54:82:aa:ea:51:02:53:5b:35:15:2c:e0:2c:3f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Jul 14 08:00:47 2026 GMT Not After : Jul 15 09:56:47 2026 GMT Subject: CN=5BB5F0462EC867CCBCE0BA3049280FCCD8E9A3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:36:06:4a:e1:17:0c:03:61:f5:b2:45:fa: 06:a0:0a:4e:7c:1e:9d:ee:eb:1a:fe:1e:76:b5:60: 2f:3c:b3:41:bb:ec:d5:ba:08:f1:aa:5e:d6:b4:19: b0:25:53:7a:2a:eb:c0:9f:a4:07:82:1e:7e:6d:71: 64:e9:98:4f:bd:7c:86:69:d3:b9:6e:1f:71:11:6f: ef:66:0d:c3:a3:bb:1e:00:2f:b5:52:a0:8b:37:42: 38:33:83:eb:29:96:de:ba:36:5a:d1:d6:37:07:60: f2:f3:a6:5c:28:f1:9b:dc:66:7e:87:3d:21:db:2f: 4e:41:fc:91:f3:bb:52:95:59:da:63:f0:9b:95:67: a8:a1:21:ab:d2:2d:06:e1:2b:2a:71:6e:61:48:cc: 5e:91:22:5c:c8:dc:3c:ff:d4:87:79:7d:fd:f6:df: da:1e:f5:a2:38:d9:c2:a8:cf:ba:a3:7c:c9:80:2f: 3b:7f:0c:64:29:51:59:36:6c:86:c1:55:5d:19:7a: 53:24:3d:a9:39:fb:53:f8:df:4a:27:cf:c3:7a:8a: 39:31:e7:2f:b4:44:fe:c4:55:57:68:af:3b:4a:45: 36:ef:0e:f1:4a:cd:a2:d5:72:d7:80:00:08:79:92: 0b:a4:8a:f1:52:f0:7c:5b:01:fd:d6:ee:a5:e2:02: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B5:F0:46:2E:C8:67:CC:BC:E0:BA:30:49:28:0F:CC:D8:E9:A3:F1 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:80:21:4a:2c:91:74:f9:7d:ec:ae:bc:c7:ff:0c:2d:6d:a8: ad:08:cb:52:56:0d:69:9c:13:90:13:17:e6:bb:45:14:46:d4: e9:e2:36:4d:37:35:ec:2d:cf:b9:36:dc:ff:54:ac:06:7a:38: b9:b2:5d:a7:4c:c5:b7:19:f6:7e:4f:11:6e:6f:18:d3:42:a9: 8c:6b:d7:4b:b5:e6:d4:96:e6:c9:49:99:78:83:87:18:1c:66: 88:3a:a6:1c:a2:77:ba:6e:8a:16:fc:01:dc:c0:60:32:65:17: a8:38:e2:07:00:8c:aa:89:6a:64:da:79:06:c0:a1:ba:4c:c9: b4:5e:de:59:05:e7:bb:6a:79:21:06:d4:4d:35:83:10:23:b1: 6f:0c:b1:81:6f:fd:b4:da:7b:cf:e5:85:62:aa:7c:fc:5c:49: 0d:36:0b:0f:e5:c0:ce:6a:8b:38:0e:63:c0:d8:8c:e7:44:d3: a9:c9:9c:1e:4f:72:c6:32:0c:91:46:16:f2:fb:6c:00:62:10: b8:86:e1:34:2a:85:53:37:13:50:09:3d:4a:e7:44:1f:1a:71: da:59:f1:d9:7a:97:68:58:c5:c6:26:46:b8:2d:76:74:06:6a: de:ac:e0:09:3a:7a:c5:42:65:a6:35:45:b7:d1:d1:38:0a:31: b3:8b:aa:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdzOa8JNUgqrqUQJTWzUVLOAsP+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA3MTQwODAwNDdaFw0yNjA3MTUwOTU2NDdaMDMxMTAvBgNV BAMTKDVCQjVGMDQ2MkVDODY3Q0NCQ0UwQkEzMDQ5MjgwRkNDRDhFOUEzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1jYGSuEXDANh9bJF+gagCk58 Hp3u6xr+Hna1YC88s0G77NW6CPGqXta0GbAlU3oq68CfpAeCHn5tcWTpmE+9fIZp 07luH3ERb+9mDcOjux4AL7VSoIs3Qjgzg+splt66NlrR1jcHYPLzplwo8ZvcZn6H PSHbL05B/JHzu1KVWdpj8JuVZ6ihIavSLQbhKypxbmFIzF6RIlzI3Dz/1Id5ff32 39oe9aI42cKoz7qjfMmALzt/DGQpUVk2bIbBVV0ZelMkPak5+1P430onz8N6ijkx 5y+0RP7EVVdorztKRTbvDvFKzaLVcteAAAh5kgukivFS8HxbAf3W7qXiArqRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW7XwRi7IZ8y84LowSSgPzNjpo/EwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYAhSiyRdPl9 7K68x/8MLW2orQjLUlYNaZwTkBMX5rtFFEbU6eI2TTc17C3PuTbc/1SsBno4ubJd p0zFtxn2fk8Rbm8Y00KpjGvXS7Xm1JbmyUmZeIOHGBxmiDqmHKJ3um6KFvwB3MBg MmUXqDjiBwCMqolqZNp5BsChukzJtF7eWQXnu2p5IQbUTTWDECOxbwyxgW/9tNp7 z+WFYqp8/FxJDTYLD+XAzmqLOA5jwNiM50TTqcmcHk9yxjIMkUYW8vtsAGIQuIbh NCqFUzcTUAk9SudEHxpx2lnx2XqXaFjFxiZGuC12dAZq3qzgCTp6xUJlpjVFt9HR OAoxs4uqcg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:13:31 2026 by rpki-client