$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: D/s+cvZxoqL1V5o10jd2/NxSOu5w71VvHeI3w6WUF2I= Subject key identifier: 46:5A:F1:6F:DA:3D:5E:D8:35:72:F2:4A:A0:06:50:4E:29:3A:90:58 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 687F315AADCF3B0AD85405211E520495E80D886D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: FD Signing time: Sun 26 Jul 2026 23:12:46 +0000 Manifest this update: Sun 26 Jul 2026 23:07:46 +0000 Manifest next update: Tue 28 Jul 2026 02:00:46 +0000 Files and hashes: 1: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: AJLIxTEx6r7uHTv4NCB5/hblKht5hGhYnbHpBYRzdig=) 2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 3: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7f:31:5a:ad:cf:3b:0a:d8:54:05:21:1e:52:04:95:e8:0d:88:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Jul 26 23:07:46 2026 GMT Not After : Jul 28 02:00:46 2026 GMT Subject: CN=465AF16FDA3D5ED83572F24AA006504E293A9058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:fd:ee:3d:00:22:b8:20:10:f8:69:c3:2b: eb:60:bc:a0:b4:17:95:e9:ee:9a:2a:1e:2d:bd:cc: f0:12:03:7f:cc:50:16:7d:a4:27:59:17:35:aa:0a: 90:5d:a7:a3:d3:96:77:73:81:d2:23:a2:4b:a9:c4: 9e:91:3f:44:e3:c3:11:61:30:9e:43:95:bf:e1:ad: 94:2c:cb:80:e4:35:cb:95:8b:50:7c:42:08:53:63: 03:d0:46:20:0c:8c:b1:92:2b:fb:c3:5d:b1:7e:46: 72:0d:bd:d1:b5:b0:29:3e:92:fc:43:eb:a2:a1:6c: 6a:37:34:47:89:69:31:de:9d:02:7b:bf:4f:6d:6d: ec:ec:32:9d:25:d1:f9:31:6c:36:9e:33:99:b3:07: c5:77:73:55:5b:ce:6f:2d:7e:ce:3a:14:5c:8e:ce: 13:93:2e:9d:3d:13:6f:2d:aa:3b:00:0a:eb:59:12: 4c:9f:41:03:d3:30:c5:50:8e:10:0b:d6:cb:15:5b: 85:74:29:2b:b7:9e:62:7a:fc:40:f9:87:c7:80:6e: d1:24:2b:fe:e1:46:50:1c:36:5e:5d:74:00:36:3a: 34:f4:01:e3:49:0a:2c:d2:7b:e9:84:70:29:94:bf: f9:b7:a4:c2:58:fe:83:d6:44:40:6f:00:8e:09:b5: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5A:F1:6F:DA:3D:5E:D8:35:72:F2:4A:A0:06:50:4E:29:3A:90:58 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:49:fa:b8:55:79:a6:58:79:ff:48:ee:df:15:81:f6:96:aa: 47:4c:32:6d:52:3c:a1:57:08:47:be:af:38:08:f2:4f:e9:e0: 21:a0:ab:76:67:e6:77:a9:bb:0c:a4:01:ef:54:ed:fc:9d:a7: 16:75:84:7f:cb:cb:21:ab:b1:5a:a6:e0:87:e2:9b:23:3a:b7: 49:59:f0:60:8f:c2:91:c9:e3:03:8d:a6:2f:92:b4:47:77:ba: ee:7c:c5:94:6f:b3:4b:c2:26:b6:93:71:b3:38:1c:d8:a9:7a: 24:43:5e:2f:03:3a:c6:12:a9:1b:5c:b9:a6:fc:1c:c3:ef:e3: 43:28:61:ad:87:c3:8d:05:2b:21:b9:82:4c:4d:0d:37:f5:96: 89:f8:cd:26:2c:16:1f:91:72:7b:ee:c3:6a:71:18:08:2a:39: e9:6e:e8:f7:ce:77:24:fd:be:85:14:60:a4:a6:b0:9c:ee:98: d8:ae:16:be:3c:50:ed:20:18:bd:64:31:28:9b:15:5e:2f:a3: 06:08:f6:a1:ba:53:75:6e:aa:76:cf:ef:f5:95:2c:92:f8:8d: 63:d6:9c:d8:d3:ee:61:91:0e:3b:d3:d8:2d:dc:1d:9f:d1:04: a4:bc:26:fd:e6:3e:f8:1d:dc:19:79:f9:9c:5c:41:89:d3:3e: 30:80:41:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaH8xWq3POwrYVAUhHlIElegNiG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA3MjYyMzA3NDZaFw0yNjA3MjgwMjAwNDZaMDMxMTAvBgNV BAMTKDQ2NUFGMTZGREEzRDVFRDgzNTcyRjI0QUEwMDY1MDRFMjkzQTkwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF1f3uPQAiuCAQ+GnDK+tgvKC0 F5Xp7poqHi29zPASA3/MUBZ9pCdZFzWqCpBdp6PTlndzgdIjokupxJ6RP0TjwxFh MJ5Dlb/hrZQsy4DkNcuVi1B8QghTYwPQRiAMjLGSK/vDXbF+RnINvdG1sCk+kvxD 66KhbGo3NEeJaTHenQJ7v09tbezsMp0l0fkxbDaeM5mzB8V3c1Vbzm8tfs46FFyO zhOTLp09E28tqjsACutZEkyfQQPTMMVQjhAL1ssVW4V0KSu3nmJ6/ED5h8eAbtEk K/7hRlAcNl5ddAA2OjT0AeNJCizSe+mEcCmUv/m3pMJY/oPWREBvAI4Jtf9RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURlrxb9o9Xtg1cvJKoAZQTik6kFgwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUn6uFV5plh5 /0ju3xWB9paqR0wybVI8oVcIR76vOAjyT+ngIaCrdmfmd6m7DKQB71Tt/J2nFnWE f8vLIauxWqbgh+KbIzq3SVnwYI/CkcnjA42mL5K0R3e67nzFlG+zS8ImtpNxszgc 2Kl6JENeLwM6xhKpG1y5pvwcw+/jQyhhrYfDjQUrIbmCTE0NN/WWifjNJiwWH5Fy e+7DanEYCCo56W7o9853JP2+hRRgpKawnO6Y2K4WvjxQ7SAYvWQxKJsVXi+jBgj2 obpTdW6qds/v9ZUskviNY9ac2NPuYZEOO9PYLdwdn9EEpLwm/eY++B3cGXn5nFxB idM+MIBBMQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:36:08 2026 by rpki-client