$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: 0K4uYDqiGJKc9i9RDWMf8w9OyM+8USiuI6DUqju9ou4= Subject key identifier: 7A:C6:BF:6E:8C:4C:F1:FA:6B:F5:26:47:DF:FA:6F:F1:F3:E2:1F:48 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 304D6734EA3B63087D3851579E5796514F256221 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: EC Signing time: Tue 14 Jul 2026 17:56:49 +0000 Manifest this update: Tue 14 Jul 2026 17:51:49 +0000 Manifest next update: Wed 15 Jul 2026 18:22:49 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: yYcR1YYduKth8CRuW069uDycPZRMEEFp7kM8ZJDIYJM=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:67:34:ea:3b:63:08:7d:38:51:57:9e:57:96:51:4f:25:62:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Jul 14 17:51:49 2026 GMT Not After : Jul 15 18:22:49 2026 GMT Subject: CN=7AC6BF6E8C4CF1FA6BF52647DFFA6FF1F3E21F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:bb:60:46:c6:88:a5:0b:d9:b5:c1:01:36: 98:c1:04:7c:7d:89:d9:e7:86:3f:52:28:0a:8f:44: 09:de:18:49:a0:17:d3:d5:3d:e9:68:00:e8:c9:b8: 68:6e:7e:c5:2b:55:21:d0:c6:77:8d:49:08:35:57: 1b:40:54:3e:a3:84:c9:7a:aa:5b:2a:dc:a5:c6:21: b5:a0:9b:a6:06:ad:96:19:78:4f:ca:98:00:fa:07: 4a:1a:ac:e4:ff:76:f3:01:4f:56:1b:3e:7e:30:e6: da:c9:1e:42:10:67:96:4b:7a:70:a4:d7:bf:f1:40: d6:11:6a:dd:70:fd:af:ee:a5:e2:ff:29:ac:06:18: 12:d3:cc:0e:e2:87:df:f9:b1:c8:55:3a:b8:af:a3: a2:de:0d:16:95:54:f8:ac:fe:e5:03:d3:61:d1:74: 31:63:f2:40:9e:ec:aa:7c:25:9a:07:2b:38:3a:c2: 78:5a:4a:26:96:2f:8e:92:fc:67:e7:5d:a2:b1:fe: d4:88:d5:08:20:86:d9:e3:3d:1b:d4:e0:70:00:46: fb:33:41:f2:b2:12:df:24:ec:7b:1a:0e:06:0a:d5: ff:6f:36:89:ed:e3:00:a5:59:93:1e:14:0c:82:bd: 02:30:90:fb:a6:bf:e0:3c:1f:44:b9:fe:6d:9e:ae: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C6:BF:6E:8C:4C:F1:FA:6B:F5:26:47:DF:FA:6F:F1:F3:E2:1F:48 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:17:96:d3:65:e4:1e:f4:91:f8:c3:36:db:eb:ef:d8:f2:c7: 28:fe:8e:c2:15:89:8c:14:4d:f5:32:2d:e1:2d:12:d9:11:99: 04:27:de:21:5d:67:d0:6f:2c:94:2b:6d:55:b4:0f:19:a4:8d: 31:9f:4c:54:b4:e2:72:5d:23:9c:5f:be:de:00:b4:e4:ec:83: d2:e8:19:34:06:00:29:9c:da:30:ad:79:e3:80:b9:0b:2f:ad: 15:53:dd:ed:29:4e:0b:ce:6c:83:e8:04:bc:30:21:28:48:f5: 8c:9a:fa:58:43:d7:03:30:ce:b4:5e:94:56:d0:f9:62:cf:2c: e5:0d:e0:bc:c3:7f:99:ac:ee:d0:bf:0a:ea:6b:8b:a0:7d:b8: 1c:db:e7:bf:c2:c0:7f:51:12:ff:ef:b9:60:b8:58:87:1a:4f: 7c:67:d1:29:bd:c9:5b:e1:4c:b8:28:ca:7b:51:37:d9:6d:4e: 83:31:0e:44:46:83:eb:d1:5f:29:ad:e9:f2:2f:3f:b9:f9:4c: bc:eb:35:20:5b:80:e8:45:5c:ac:7a:ca:9e:e1:c1:51:c4:ca: fb:2e:2d:08:da:19:43:f5:53:46:e0:fc:0f:bf:7e:da:c0:57: 1f:cf:dd:84:d0:f8:47:dd:34:55:4d:0d:94:5b:48:60:ff:87: f1:10:4e:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUME1nNOo7Ywh9OFFXnleWUU8lYiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA3MTQxNzUxNDlaFw0yNjA3MTUxODIyNDlaMDMxMTAvBgNV BAMTKDdBQzZCRjZFOEM0Q0YxRkE2QkY1MjY0N0RGRkE2RkYxRjNFMjFGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCia7tgRsaIpQvZtcEBNpjBBHx9 idnnhj9SKAqPRAneGEmgF9PVPeloAOjJuGhufsUrVSHQxneNSQg1VxtAVD6jhMl6 qlsq3KXGIbWgm6YGrZYZeE/KmAD6B0oarOT/dvMBT1YbPn4w5trJHkIQZ5ZLenCk 17/xQNYRat1w/a/upeL/KawGGBLTzA7ih9/5schVOrivo6LeDRaVVPis/uUD02HR dDFj8kCe7Kp8JZoHKzg6wnhaSiaWL46S/GfnXaKx/tSI1QgghtnjPRvU4HAARvsz QfKyEt8k7HsaDgYK1f9vNont4wClWZMeFAyCvQIwkPumv+A8H0S5/m2ernsrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUesa/boxM8fpr9SZH3/pv8fPiH0gwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuheW02XkHvSR +MM22+vv2PLHKP6OwhWJjBRN9TIt4S0S2RGZBCfeIV1n0G8slCttVbQPGaSNMZ9M VLTicl0jnF++3gC05OyD0ugZNAYAKZzaMK1544C5Cy+tFVPd7SlOC85sg+gEvDAh KEj1jJr6WEPXAzDOtF6UVtD5Ys8s5Q3gvMN/mazu0L8K6muLoH24HNvnv8LAf1ES /++5YLhYhxpPfGfRKb3JW+FMuCjKe1E32W1OgzEOREaD69FfKa3p8i8/uflMvOs1 IFuA6EVcrHrKnuHBUcTK+y4tCNoZQ/VTRuD8D79+2sBXH8/dhND4R900VU0NlFtI YP+H8RBOjA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:59 2026 by rpki-client