$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: 42rdNIHAde7XPd3xxOsIAFyjxdBoAZ/NWcFReT79IHQ= Subject key identifier: 1A:1E:55:E4:DB:9B:44:E3:4C:EF:66:DD:73:02:AE:03:E1:65:83:87 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 501ECAABC781542F490BFB89F504CA50EAC4495A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: ED Signing time: Tue 14 Jul 2026 02:30:12 +0000 Manifest this update: Tue 14 Jul 2026 02:25:11 +0000 Manifest next update: Wed 15 Jul 2026 05:48:11 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: Ih6UU0udFAEKonJc8TSZY2trAd8kTdfGeD6Q0f2+xa0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1e:ca:ab:c7:81:54:2f:49:0b:fb:89:f5:04:ca:50:ea:c4:49:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Jul 14 02:25:11 2026 GMT Not After : Jul 15 05:48:11 2026 GMT Subject: CN=1A1E55E4DB9B44E34CEF66DD7302AE03E1658387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:ad:93:8a:dc:02:2e:0a:ca:53:e4:69:69: c9:b1:44:47:28:d0:67:c9:9a:7b:f6:90:69:78:3a: b4:cf:32:51:32:22:c8:86:00:bb:ff:90:e4:bd:e7: b1:9a:f6:eb:72:dc:60:f6:ec:71:91:13:3d:f6:59: 28:73:80:c8:d3:b3:e4:56:23:bc:2d:f3:f6:f1:cc: d2:67:02:5e:86:c5:13:15:b6:b9:44:19:33:9f:f4: ea:38:8d:f8:bd:74:70:04:8a:f6:02:d2:2c:ff:f1: 7b:92:cd:66:c1:66:7b:5c:4e:5a:be:b5:b4:e5:cf: da:e3:4b:1a:8c:68:c7:3e:85:06:f7:53:b0:0d:24: 9b:8b:17:e2:db:cc:67:3f:17:31:ac:ba:df:20:4c: 98:7f:9c:98:b7:99:88:ba:64:55:8f:b0:d5:92:8e: f5:01:b3:2f:fb:1f:58:44:37:31:52:37:d6:03:07: 16:6b:6a:60:de:64:a3:66:d4:9b:d6:ce:0a:b1:3e: be:75:d7:78:c0:6a:94:f8:ad:cc:03:aa:29:1c:03: 34:60:3f:68:8c:f7:d5:2f:12:a5:03:21:38:02:fa: c3:f3:0b:1f:0f:b0:7c:a1:a3:06:f1:d7:e3:d8:1b: 26:69:94:6f:75:ae:ef:19:4f:47:dd:6c:5c:96:26: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:55:E4:DB:9B:44:E3:4C:EF:66:DD:73:02:AE:03:E1:65:83:87 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:61:ea:de:61:ea:4d:4e:4b:f3:e3:02:42:fb:55:a2:b8:ab: 60:84:a8:26:3c:0b:a5:26:a0:dc:ba:a0:21:78:be:a2:94:4a: 28:78:bd:58:53:33:46:81:d3:b1:0c:5c:fd:a9:f6:e5:ec:06: ba:8a:63:49:98:1d:58:21:3a:e1:f3:3a:d5:48:b9:f3:15:92: 84:d0:3a:e7:e2:7e:6e:7c:73:3d:86:15:8c:2f:6b:c1:11:5b: 08:31:6c:ba:c1:c2:c5:b0:2c:f5:56:fa:f6:e2:2e:19:da:79: 3e:18:c3:09:42:1a:4b:ea:ad:7b:8d:d7:39:79:ea:c3:7e:0b: c3:85:9c:00:d4:06:cd:6e:bb:81:fa:27:6f:01:54:09:3f:c2: d5:ea:b5:4b:15:9f:80:96:9f:86:fd:54:97:ec:6b:88:08:85: d3:76:8b:db:c7:c1:f5:2b:fc:de:38:35:d3:52:7e:85:e2:f8: f0:d1:78:7d:96:7b:be:8b:20:56:d7:d1:bd:a4:02:4a:09:2c: 34:87:ea:8d:90:21:1f:fa:4f:05:62:9c:93:d5:c5:08:72:19: db:0a:a9:09:2e:d0:ad:79:aa:30:ed:79:87:a7:a6:80:4c:e3: ad:7e:94:e9:33:05:7b:50:e2:92:08:f7:8b:d3:ec:ec:59:bd: 38:56:59:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUB7Kq8eBVC9JC/uJ9QTKUOrESVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA3MTQwMjI1MTFaFw0yNjA3MTUwNTQ4MTFaMDMxMTAvBgNV BAMTKDFBMUU1NUU0REI5QjQ0RTM0Q0VGNjZERDczMDJBRTAzRTE2NTgzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaW62TitwCLgrKU+RpacmxREco 0GfJmnv2kGl4OrTPMlEyIsiGALv/kOS957Ga9uty3GD27HGREz32WShzgMjTs+RW I7wt8/bxzNJnAl6GxRMVtrlEGTOf9Oo4jfi9dHAEivYC0iz/8XuSzWbBZntcTlq+ tbTlz9rjSxqMaMc+hQb3U7ANJJuLF+LbzGc/FzGsut8gTJh/nJi3mYi6ZFWPsNWS jvUBsy/7H1hENzFSN9YDBxZramDeZKNm1JvWzgqxPr5113jAapT4rcwDqikcAzRg P2iM99UvEqUDITgC+sPzCx8PsHyhowbx1+PYGyZplG91ru8ZT0fdbFyWJsj/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGh5V5NubRONM72bdcwKuA+Flg4cwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WHq3mHqTU5L 8+MCQvtVorirYISoJjwLpSag3LqgIXi+opRKKHi9WFMzRoHTsQxc/an25ewGuopj SZgdWCE64fM61Ui58xWShNA65+J+bnxzPYYVjC9rwRFbCDFsusHCxbAs9Vb69uIu Gdp5PhjDCUIaS+qte43XOXnqw34Lw4WcANQGzW67gfonbwFUCT/C1eq1SxWfgJaf hv1Ul+xriAiF03aL28fB9Sv83jg101J+heL48NF4fZZ7vosgVtfRvaQCSgksNIfq jZAhH/pPBWKck9XFCHIZ2wqpCS7QrXmqMO15h6emgEzjrX6U6TMFe1Dikgj3i9Ps 7Fm9OFZZEw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:44 2026 by rpki-client