$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: 9LZnmnYfq/ucNRVtHD/VlhPvumxbEyJAChrfmN+Kbdw= Subject key identifier: B0:CB:74:17:7B:A6:8E:55:C4:2B:C0:6D:08:F6:27:23:53:F5:5B:61 Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 08688A175852344F4D03892BECF1BF2C732EEA6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: ED Signing time: Tue 14 Jul 2026 18:31:53 +0000 Manifest this update: Tue 14 Jul 2026 18:26:53 +0000 Manifest next update: Wed 15 Jul 2026 20:55:53 +0000 Files and hashes: 1: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=) 2: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=) 3: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=) 4: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: NrUuFcrPuK8VW0d0KXdFFJi0lJ3WHK1XQc2YYJpdHs8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:68:8a:17:58:52:34:4f:4d:03:89:2b:ec:f1:bf:2c:73:2e:ea:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Jul 14 18:26:53 2026 GMT Not After : Jul 15 20:55:53 2026 GMT Subject: CN=B0CB74177BA68E55C42BC06D08F6272353F55B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:d6:e4:c4:8a:0e:9d:1e:6c:ef:17:45:53: 47:1b:04:e3:9d:e3:59:6a:64:70:7c:40:55:21:05: 53:de:49:2e:81:90:dc:51:4e:17:07:6e:63:97:57: 34:71:a8:0e:44:c2:5a:44:da:d9:5b:d6:4a:08:26: df:4b:0d:55:36:bd:19:92:61:b8:d7:1d:74:10:0e: 92:ae:b7:2c:da:b8:94:54:b5:fd:37:b4:b0:2f:5a: b6:83:8a:a7:dd:db:16:4b:cc:f8:5e:34:c0:b0:75: 16:b1:02:72:a4:23:0d:a4:9d:1a:3f:6b:db:5c:07: 9b:0b:a5:45:52:22:04:96:56:0d:cc:27:c2:4d:39: 36:c0:29:7d:74:75:2e:9b:ef:f4:7a:ec:fe:48:76: 62:a5:ac:42:7f:d4:ec:bf:41:f1:02:7a:d1:2d:f0: d9:03:9b:87:75:9d:b7:64:aa:b6:4d:2f:8d:41:e1: 8d:a1:44:9b:f6:45:9d:de:3b:cc:17:13:e1:39:cf: df:14:a6:b3:3d:3b:d6:e9:67:3f:cd:0c:f6:27:6a: 59:a6:e3:64:5d:dc:a5:24:0f:a1:b8:09:90:47:ed: 96:ff:d2:06:db:8a:a0:45:57:1c:8e:1e:8a:2b:2e: 54:db:e2:6d:82:15:f9:5b:e1:3d:8d:25:8d:22:fd: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CB:74:17:7B:A6:8E:55:C4:2B:C0:6D:08:F6:27:23:53:F5:5B:61 X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1a:ee:bf:b2:cd:ca:19:01:9a:be:f3:89:75:54:b6:2e:d1: db:ab:c4:2e:93:89:ac:86:e1:31:f6:a5:54:eb:c6:52:17:35: 9a:86:e0:64:cb:99:05:6f:f5:e9:18:ab:bb:8f:d0:0c:04:3b: 3e:2d:15:59:5e:6b:78:b1:52:80:76:ce:f5:8e:fb:dd:c4:a6: 77:e6:4a:b8:1a:64:66:64:7b:86:b3:28:28:87:4d:21:21:8a: 67:03:70:0a:56:71:c2:56:cf:fa:af:dc:b7:f3:9c:17:83:26: 61:86:4c:22:61:e0:5c:cb:ce:4e:1a:ea:ef:4a:14:37:e9:53: b4:69:ab:c4:0d:16:73:28:80:a6:94:6b:14:61:17:7c:fe:88: e9:01:5f:15:d0:d7:7e:c3:c7:06:93:48:a0:63:60:73:b1:5e: 92:d3:7b:c1:de:aa:23:31:44:00:bd:0b:49:2e:0a:57:08:68: b3:7a:b1:b7:3d:3b:6b:32:0b:d8:2e:8d:9b:4d:dd:a1:01:b0: 70:f8:17:b0:da:26:61:39:59:85:95:fc:67:ae:70:ef:f8:1c: 99:63:12:a4:3d:91:42:9e:b4:22:0c:e5:67:ab:20:00:78:68: de:0b:d1:fc:e5:d3:3e:e3:da:71:23:33:c3:87:01:55:97:b6: a0:a8:db:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGiKF1hSNE9NA4kr7PG/LHMu6mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA3MTQxODI2NTNaFw0yNjA3MTUyMDU1NTNaMDMxMTAvBgNV BAMTKEIwQ0I3NDE3N0JBNjhFNTVDNDJCQzA2RDA4RjYyNzIzNTNGNTVCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoF9bkxIoOnR5s7xdFU0cbBOOd 41lqZHB8QFUhBVPeSS6BkNxRThcHbmOXVzRxqA5EwlpE2tlb1koIJt9LDVU2vRmS YbjXHXQQDpKutyzauJRUtf03tLAvWraDiqfd2xZLzPheNMCwdRaxAnKkIw2knRo/ a9tcB5sLpUVSIgSWVg3MJ8JNOTbAKX10dS6b7/R67P5IdmKlrEJ/1Oy/QfECetEt 8NkDm4d1nbdkqrZNL41B4Y2hRJv2RZ3eO8wXE+E5z98UprM9O9bpZz/NDPYnalmm 42Rd3KUkD6G4CZBH7Zb/0gbbiqBFVxyOHoorLlTb4m2CFflb4T2NJY0i/bGTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsMt0F3umjlXEK8BtCPYnI1P1W2EwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBruv7LNyhkB mr7ziXVUti7R26vELpOJrIbhMfalVOvGUhc1mobgZMuZBW/16Riru4/QDAQ7Pi0V WV5reLFSgHbO9Y773cSmd+ZKuBpkZmR7hrMoKIdNISGKZwNwClZxwlbP+q/ct/Oc F4MmYYZMImHgXMvOThrq70oUN+lTtGmrxA0WcyiAppRrFGEXfP6I6QFfFdDXfsPH BpNIoGNgc7FektN7wd6qIzFEAL0LSS4KVwhos3qxtz07azIL2C6Nm03doQGwcPgX sNomYTlZhZX8Z65w7/gcmWMSpD2RQp60IgzlZ6sgAHho3gvR/OXTPuPacSMzw4cB VZe2oKjbgw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:39 2026 by rpki-client