$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: JFXpNaKIIiz3F6it9Ulj4YwU8cEuWLAi4G6rTgdMYxE= Subject key identifier: B1:14:A9:23:AA:71:DF:BC:B3:52:68:9C:8D:AF:D6:B2:BB:95:C8:9C Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 3E6456A4D7D81645FF99ABDC85967E811E2ED05D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: EA Signing time: Tue 14 Jul 2026 11:51:11 +0000 Manifest this update: Tue 14 Jul 2026 11:46:11 +0000 Manifest next update: Wed 15 Jul 2026 14:52:11 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: gMo9aXRlhMKlEVmncneCTdbwPjIq2ldubrsihVPf3A0=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:64:56:a4:d7:d8:16:45:ff:99:ab:dc:85:96:7e:81:1e:2e:d0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Jul 14 11:46:11 2026 GMT Not After : Jul 15 14:52:11 2026 GMT Subject: CN=B114A923AA71DFBCB352689C8DAFD6B2BB95C89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:38:50:43:b4:51:6d:77:7c:9f:08:e9:6b: 6b:22:4f:82:85:83:51:a4:c1:d3:87:1a:16:f0:cd: de:ae:9f:44:1d:3c:c0:4b:07:b9:bb:95:2b:06:ce: ce:d7:86:df:bb:58:b1:b0:4a:8c:49:f5:c5:12:f1: b3:8f:8a:d8:44:98:84:d4:11:d4:db:75:8f:3f:3d: c1:bc:18:59:6a:d4:e6:64:a1:df:a9:32:20:f9:ce: 68:51:37:74:fb:1b:d4:91:fe:40:51:1c:96:cc:da: 38:96:54:fe:df:a6:ca:ec:40:6f:0b:82:b1:51:93: ab:f4:d2:e0:a5:fb:86:59:95:6f:9b:9b:c5:45:4a: 8f:8d:fb:30:05:c9:90:35:0c:0f:83:2e:61:35:63: de:29:a4:38:37:c7:81:39:10:1c:e0:7d:90:36:b0: 15:81:f9:16:83:ba:50:77:fa:d6:9f:36:7d:a5:7c: ff:b1:0f:d4:b2:27:ef:ab:fd:54:95:de:97:5a:f9: b8:6e:ae:cc:54:67:10:4e:8a:88:d4:09:23:8b:a2: df:35:c1:42:e5:c9:19:22:a9:f8:7c:6b:83:00:bc: 60:e6:cc:27:73:72:4e:cf:df:eb:a1:6f:89:b2:db: 93:d8:6b:5b:15:91:ea:e6:ea:47:69:59:50:82:07: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:A9:23:AA:71:DF:BC:B3:52:68:9C:8D:AF:D6:B2:BB:95:C8:9C X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:53:7c:e7:d0:19:d2:d3:2e:dc:0e:00:aa:9c:11:e2:31:68: 01:af:41:7b:13:ed:ea:65:de:32:a0:11:26:61:64:c1:d4:a5: fe:7b:ef:4e:f9:df:43:91:95:43:30:37:14:c3:88:00:4b:dd: 44:cb:3f:fd:92:0c:ab:54:4d:5e:0d:9c:cd:53:18:e6:d5:cb: 0c:4a:ac:2a:77:5c:a3:69:8e:0e:7c:b1:43:f2:37:9a:95:14: 83:45:b0:12:dd:da:1a:19:db:59:8a:28:76:33:ab:e2:5f:4b: 45:c7:a0:74:63:5c:dc:71:bc:aa:63:be:61:cd:8a:72:49:ee: 98:59:a4:a5:51:41:73:7f:02:80:7f:b1:8f:62:bc:6c:12:24: 06:ed:73:09:61:b6:c3:09:2e:31:e9:84:5b:3a:1c:b9:e4:a6: 95:47:15:ad:49:0e:a3:02:e3:81:ed:8e:ac:2f:2d:c5:76:a4: 83:3d:a1:c7:3f:73:80:ce:a0:cc:6a:fd:cb:72:02:f5:31:7d: e1:26:02:94:f6:4a:27:68:89:7c:83:83:46:01:1e:0f:94:ec: 4e:82:36:55:e0:74:55:52:a5:39:23:39:bc:f2:8e:b2:f8:88: 38:b9:6d:e2:e0:30:0b:36:4d:19:ff:36:5a:51:58:29:b5:71: e0:38:c2:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPmRWpNfYFkX/mavchZZ+gR4u0F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA3MTQxMTQ2MTFaFw0yNjA3MTUxNDUyMTFaMDMxMTAvBgNV BAMTKEIxMTRBOTIzQUE3MURGQkNCMzUyNjg5QzhEQUZENkIyQkI5NUM4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HDhQQ7RRbXd8nwjpa2siT4KF g1GkwdOHGhbwzd6un0QdPMBLB7m7lSsGzs7Xht+7WLGwSoxJ9cUS8bOPithEmITU EdTbdY8/PcG8GFlq1OZkod+pMiD5zmhRN3T7G9SR/kBRHJbM2jiWVP7fpsrsQG8L grFRk6v00uCl+4ZZlW+bm8VFSo+N+zAFyZA1DA+DLmE1Y94ppDg3x4E5EBzgfZA2 sBWB+RaDulB3+tafNn2lfP+xD9SyJ++r/VSV3pda+bhursxUZxBOiojUCSOLot81 wULlyRkiqfh8a4MAvGDmzCdzck7P3+uhb4my25PYa1sVkerm6kdpWVCCB1ObAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsRSpI6px37yzUmicja/WsruVyJwwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlN859AZ0tMu 3A4AqpwR4jFoAa9BexPt6mXeMqARJmFkwdSl/nvvTvnfQ5GVQzA3FMOIAEvdRMs/ /ZIMq1RNXg2czVMY5tXLDEqsKndco2mODnyxQ/I3mpUUg0WwEt3aGhnbWYoodjOr 4l9LRcegdGNc3HG8qmO+Yc2KcknumFmkpVFBc38CgH+xj2K8bBIkBu1zCWG2wwku MemEWzocueSmlUcVrUkOowLjge2OrC8txXakgz2hxz9zgM6gzGr9y3IC9TF94SYC lPZKJ2iJfIODRgEeD5TsToI2VeB0VVKlOSM5vPKOsviIOLlt4uAwCzZNGf82WlFY KbVx4DjCPg== -----END CERTIFICATE-----Generated at Wed Jul 15 00:21:38 2026 by rpki-client