$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: OmUZ94UMPljy6zAtASipgEqG2Q+be7fwx8xNH4hQE1w= Subject key identifier: 04:9E:A6:00:04:FC:44:01:82:BE:FA:CA:F9:16:53:9A:49:EA:4A:68 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 3CF6F682BD94143D314B20FDC617A494C4209714 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: EA Signing time: Tue 14 Jul 2026 03:30:19 +0000 Manifest this update: Tue 14 Jul 2026 03:25:19 +0000 Manifest next update: Wed 15 Jul 2026 06:01:19 +0000 Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: e5RCHHJjegpsCIrFdUU44IRX4gg42jolbeRGQYjtxak=) 2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:f6:82:bd:94:14:3d:31:4b:20:fd:c6:17:a4:94:c4:20:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Jul 14 03:25:19 2026 GMT Not After : Jul 15 06:01:19 2026 GMT Subject: CN=049EA60004FC440182BEFACAF916539A49EA4A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:e7:89:b2:21:3b:93:ea:57:ce:a0:9f:7f: 57:16:4a:b1:56:f1:67:2a:65:67:bb:56:a2:62:da: ff:81:c5:2a:e9:92:03:f9:ab:d2:08:dc:99:80:d3: 12:e5:dc:32:cd:4a:37:0f:e4:9d:67:79:2c:54:1c: cf:18:88:74:56:09:b4:ee:7b:fc:7d:63:eb:46:bb: 2e:d5:74:02:f2:b6:76:40:1b:d4:78:76:f6:37:60: 35:86:46:05:37:d8:c8:88:c1:24:1f:1a:73:ad:e1: fc:14:da:54:ea:33:3b:07:d7:33:d2:0c:60:98:cc: 85:d6:c3:34:73:e8:17:d3:39:dc:8f:f0:70:61:39: d6:93:91:de:ab:b5:53:da:fa:37:d3:e3:3f:45:8f: 06:31:e0:62:5d:d0:13:38:f2:ec:e4:21:70:a5:b0: 45:d9:10:ba:db:ba:ca:6f:39:8f:9a:79:2d:ce:25: 68:09:64:1d:2a:a7:1d:9d:80:b2:d3:39:86:db:1a: 53:ca:1f:a9:20:2d:4a:1c:69:22:7a:84:bc:a0:1b: 30:3a:52:90:7a:28:72:b8:05:e1:3c:38:1d:a0:2c: d2:5a:9c:78:74:04:9b:99:cf:4a:3e:79:81:eb:6a: 5e:8a:23:f4:8e:4d:8e:7d:bf:e1:35:71:79:a1:a8: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:A6:00:04:FC:44:01:82:BE:FA:CA:F9:16:53:9A:49:EA:4A:68 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0e:8a:1b:11:90:62:61:e6:83:c8:72:52:0e:77:fa:5e:3e: 01:48:af:81:6d:5f:c8:f3:6f:8a:af:3e:26:bc:02:b6:f7:a2: 83:86:2b:36:11:80:b4:b3:97:db:2a:ba:6e:eb:bd:a6:99:01: 06:9e:a7:d2:f9:e6:34:31:e4:3f:7c:0a:91:7e:64:18:2e:3a: bf:6c:58:05:d9:bf:ba:f0:49:6c:09:23:66:67:91:f3:21:cd: 59:81:70:66:e5:94:3b:ae:71:df:1f:3d:a4:1a:42:5e:07:89: 18:d6:ed:d6:44:d6:1d:2e:99:ca:26:89:7e:fc:f9:76:f4:3e: 2a:17:ee:f3:75:71:f7:6c:51:b6:59:6a:05:5e:76:46:6b:7c: 84:78:e8:4f:17:c9:25:96:e2:70:72:9f:01:f5:7f:63:f1:47: 17:e3:dd:08:30:e4:23:45:89:ce:fd:0d:c4:3f:fe:de:8c:1e: 4f:06:86:ca:63:29:0d:16:26:23:b8:94:71:4e:1f:47:0e:c4: 5e:e6:eb:52:cb:8e:33:fb:49:35:d2:3d:ce:0a:b2:2d:a9:10: ea:56:83:75:40:d4:89:6b:0e:21:2d:25:bc:a3:62:a8:a6:2f: b1:c7:93:50:d8:d9:5d:3c:54:31:73:5d:25:70:4d:37:7c:22: 6f:e1:3f:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPPb2gr2UFD0xSyD9xheklMQglxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA3MTQwMzI1MTlaFw0yNjA3MTUwNjAxMTlaMDMxMTAvBgNV BAMTKDA0OUVBNjAwMDRGQzQ0MDE4MkJFRkFDQUY5MTY1MzlBNDlFQTRBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFueJsiE7k+pXzqCff1cWSrFW 8WcqZWe7VqJi2v+BxSrpkgP5q9II3JmA0xLl3DLNSjcP5J1neSxUHM8YiHRWCbTu e/x9Y+tGuy7VdALytnZAG9R4dvY3YDWGRgU32MiIwSQfGnOt4fwU2lTqMzsH1zPS DGCYzIXWwzRz6BfTOdyP8HBhOdaTkd6rtVPa+jfT4z9FjwYx4GJd0BM48uzkIXCl sEXZELrbuspvOY+aeS3OJWgJZB0qpx2dgLLTOYbbGlPKH6kgLUocaSJ6hLygGzA6 UpB6KHK4BeE8OB2gLNJanHh0BJuZz0o+eYHral6KI/SOTY59v+E1cXmhqIdnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBJ6mAAT8RAGCvvrK+RZTmknqSmgwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw6KGxGQYmHm g8hyUg53+l4+AUivgW1fyPNviq8+JrwCtveig4YrNhGAtLOX2yq6buu9ppkBBp6n 0vnmNDHkP3wKkX5kGC46v2xYBdm/uvBJbAkjZmeR8yHNWYFwZuWUO65x3x89pBpC XgeJGNbt1kTWHS6ZyiaJfvz5dvQ+Khfu83Vx92xRtllqBV52Rmt8hHjoTxfJJZbi cHKfAfV/Y/FHF+PdCDDkI0WJzv0NxD/+3oweTwaGymMpDRYmI7iUcU4fRw7EXubr UsuOM/tJNdI9zgqyLakQ6laDdUDUiWsOIS0lvKNiqKYvsceTUNjZXTxUMXNdJXBN N3wib+E/LQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:06 2026 by rpki-client