$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: HCWjv56gHmRYMWfWPXNmAwtz6ubGU8Xc6K83NB04E2Y= Subject key identifier: 81:54:DC:41:B0:E7:E1:56:6A:71:B4:F5:99:AD:FC:32:DB:F3:34:C0 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 3875CF843D6B85268949CC6CB80C95B9A7674E4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: EE Signing time: Tue 14 Jul 2026 05:05:32 +0000 Manifest this update: Tue 14 Jul 2026 05:00:32 +0000 Manifest next update: Wed 15 Jul 2026 08:06:32 +0000 Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 2: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: 04Av/Bkwg38RoYKUbNnNn5oEmLaOfUjuQwBGSoM+bDs=) 3: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) 4: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:75:cf:84:3d:6b:85:26:89:49:cc:6c:b8:0c:95:b9:a7:67:4e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Jul 14 05:00:32 2026 GMT Not After : Jul 15 08:06:32 2026 GMT Subject: CN=8154DC41B0E7E1566A71B4F599ADFC32DBF334C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:81:0e:69:6b:32:50:75:73:07:9b:73:f0: 0d:cf:53:3b:d3:4f:49:a6:1f:c3:55:a1:86:54:ab: 1a:6e:ab:bf:24:ee:7d:25:ab:ab:d4:0d:eb:22:dc: f3:4c:34:d6:f1:d8:a1:02:cb:d9:c6:37:79:3f:ee: 64:0c:7e:e1:a6:9d:75:f0:d4:c2:17:36:94:a7:32: e4:9e:c7:e4:e3:d6:0c:ba:d0:48:f8:68:d2:58:d5: 1b:6b:c0:1f:84:a6:b6:64:be:05:f6:c1:73:c3:59: d2:8d:a7:e4:f8:de:ff:b5:d7:c1:f4:98:cf:e8:b6: 28:12:0a:31:61:2e:83:aa:c5:a3:7d:37:39:10:28: 97:6b:e0:81:96:92:73:fd:32:2d:78:03:c0:b9:1c: 63:59:6d:5c:12:02:05:fe:af:12:00:75:16:ca:a2: ab:17:8f:94:87:a3:14:6c:d9:e8:a1:a6:26:e1:d3: af:80:c6:c6:03:87:d7:ba:d2:31:2e:1d:6d:db:62: 1c:4d:68:7c:3a:55:fe:37:18:1f:d0:4a:5b:68:4f: d7:e5:76:42:4d:99:43:1d:7c:71:1f:7e:09:1c:93: 0f:e9:d3:ad:71:44:fd:3d:6f:d4:65:b5:71:be:d8: 15:e0:5a:ab:87:60:28:9d:cb:7d:2d:74:64:c4:a9: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:54:DC:41:B0:E7:E1:56:6A:71:B4:F5:99:AD:FC:32:DB:F3:34:C0 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:10:bc:b3:92:21:f1:95:09:59:a9:71:10:4a:5f:ce:b9:fc: 33:f3:7d:75:6f:fe:02:72:9a:91:47:1f:4e:eb:5f:a4:0d:03: 79:d9:68:f5:fc:59:2d:da:04:b2:49:19:fe:6b:25:aa:37:46: e0:dd:85:e6:9c:2c:34:92:99:bc:0c:1f:78:7f:37:f7:58:79: e9:74:43:7f:4f:1a:7c:32:09:43:cd:6e:c0:e4:3d:6b:ea:25: f2:06:e5:c8:c3:71:d1:0f:2a:6b:db:4b:ca:3a:aa:ef:cf:dd: e1:1e:64:1c:4d:d4:eb:c3:6d:d6:1e:01:3f:48:29:a9:04:c6: fe:ec:64:70:ce:a2:96:48:ce:bc:8f:ac:4a:c1:91:57:1b:be: 06:ea:3c:65:16:4c:2a:ff:cc:fc:81:97:91:3f:2d:93:21:f8: 76:1c:f3:16:b9:5b:bf:3c:7d:55:73:b5:97:80:5d:ad:fd:53: 20:88:92:fd:93:7c:8c:72:1e:b2:21:5e:87:c6:41:46:7c:24: d2:00:5b:84:dc:24:d8:e9:b8:9b:75:ba:33:dc:04:27:bc:cf: ba:58:88:4a:2b:68:11:e7:37:9c:ac:01:fd:9b:aa:0b:9f:2b: 33:83:92:3a:a7:d1:2c:c8:ea:47:32:e9:ad:37:26:c4:c1:86: 99:88:cd:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOHXPhD1rhSaJScxsuAyVuadnTkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA3MTQwNTAwMzJaFw0yNjA3MTUwODA2MzJaMDMxMTAvBgNV BAMTKDgxNTREQzQxQjBFN0UxNTY2QTcxQjRGNTk5QURGQzMyREJGMzM0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiUYEOaWsyUHVzB5tz8A3PUzvT T0mmH8NVoYZUqxpuq78k7n0lq6vUDesi3PNMNNbx2KECy9nGN3k/7mQMfuGmnXXw 1MIXNpSnMuSex+Tj1gy60Ej4aNJY1RtrwB+EprZkvgX2wXPDWdKNp+T43v+118H0 mM/otigSCjFhLoOqxaN9NzkQKJdr4IGWknP9Mi14A8C5HGNZbVwSAgX+rxIAdRbK oqsXj5SHoxRs2eihpibh06+AxsYDh9e60jEuHW3bYhxNaHw6Vf43GB/QSltoT9fl dkJNmUMdfHEffgkckw/p061xRP09b9RltXG+2BXgWquHYCidy30tdGTEqRBFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgVTcQbDn4VZqcbT1ma38MtvzNMAwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixC8s5Ih8ZUJ WalxEEpfzrn8M/N9dW/+AnKakUcfTutfpA0Dedlo9fxZLdoEskkZ/mslqjdG4N2F 5pwsNJKZvAwfeH8391h56XRDf08afDIJQ81uwOQ9a+ol8gblyMNx0Q8qa9tLyjqq 78/d4R5kHE3U68Nt1h4BP0gpqQTG/uxkcM6ilkjOvI+sSsGRVxu+Buo8ZRZMKv/M /IGXkT8tkyH4dhzzFrlbvzx9VXO1l4Bdrf1TIIiS/ZN8jHIesiFeh8ZBRnwk0gBb hNwk2Om4m3W6M9wEJ7zPuliISitoEec3nKwB/ZuqC58rM4OSOqfRLMjqRzLprTcm xMGGmYjNmQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:07:43 2026 by rpki-client