$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft File: 7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json) Hash identifier: xfdLgLMZDn79ZeFJlOQbmFRUgZdia9KgA7TwBm7IwNU= Subject key identifier: EB:D8:F5:AA:31:57:82:BA:34:22:E2:28:31:F7:24:A0:FD:68:76:74 Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C Certificate serial: 1AD20DFC450B6E721C9391548264633DA1F08D13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft Manifest number: 0125 Signing time: Fri 28 Aug 2026 06:47:37 +0000 Manifest this update: Fri 28 Aug 2026 06:42:37 +0000 Manifest next update: Mon 31 Aug 2026 07:18:37 +0000 Files and hashes: 1: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=) 2: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: OvZJJpny8R/hH+iNcYfTCQaztHNMTPORZ78z7N+DZ9w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d2:0d:fc:45:0b:6e:72:1c:93:91:54:82:64:63:3d:a1:f0:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C Validity Not Before: Aug 28 06:42:37 2026 GMT Not After : Aug 31 07:18:37 2026 GMT Subject: CN=EBD8F5AA315782BA3422E22831F724A0FD687674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:be:b0:61:96:d9:d5:0b:68:31:f3:e8:06: 0c:bb:b3:f4:fc:08:1b:e9:d8:78:da:6c:d6:11:99: 70:b0:ca:f1:ba:cf:f2:7e:c3:5b:a7:69:67:5f:8e: 83:77:50:ad:a7:39:10:0a:42:5d:eb:25:b6:93:4f: f4:f2:17:fb:16:09:f4:66:fb:97:b4:50:ef:c4:d9: ee:a6:8f:52:91:29:5c:7c:b1:06:a6:75:c7:c2:d5: 89:d0:3f:e8:93:42:09:e6:cb:45:82:39:8e:72:23: f5:94:b7:b0:e1:23:83:a0:e7:f0:4e:a2:a0:26:ce: b9:d3:d8:5c:6a:65:f4:eb:0f:13:07:fa:68:8c:38: 7a:ee:eb:11:a9:09:77:55:2e:46:f4:31:b7:c3:b2: 13:0c:8c:81:e8:92:5b:7d:5c:05:0b:39:a3:9a:87: f4:e2:3c:7c:90:37:68:f6:e6:61:d6:94:38:09:1c: 1f:6f:63:79:4b:b6:a3:e8:dc:14:1a:0e:55:20:e9: f8:b6:f2:3e:6d:5c:80:7f:70:cd:99:60:86:50:26: 53:f1:35:02:e9:39:d1:2f:38:55:ca:e1:30:12:53: 7d:0c:fa:57:a4:a4:44:06:0b:15:68:e8:c1:81:76: e2:f9:c1:55:1d:20:fd:1f:97:1c:d4:5a:f5:02:16: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D8:F5:AA:31:57:82:BA:34:22:E2:28:31:F7:24:A0:FD:68:76:74 X509v3 Authority Key Identifier: keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4c:83:a8:89:2b:b2:b1:ee:23:e2:0a:8e:05:95:df:d6:b0: 39:d1:df:67:94:3d:b5:3a:20:4d:fe:b8:80:52:d8:5a:16:e5: f6:e8:1e:18:25:79:ef:dd:9f:d0:11:d2:28:78:8c:61:da:82: 60:ce:a2:ab:27:c6:f9:0b:dc:10:41:4d:cd:fb:20:7d:53:38: f6:f6:fc:ea:4f:c9:68:ed:75:8a:1e:9d:38:5e:95:9d:0a:72: fd:13:6c:b9:dd:26:93:9e:c7:58:e6:51:70:33:a8:a6:33:11: ec:9b:2d:32:95:a4:39:50:2a:4a:e2:25:df:00:52:3c:ea:d1: 31:c1:7c:d6:ab:f4:17:c9:bf:08:ac:27:51:09:76:f5:a3:d0: 14:35:0d:5c:27:ee:47:d6:3a:f4:77:4c:b8:09:a5:c5:85:fa: bd:f3:6e:2e:91:a6:5e:e3:e5:08:07:06:c5:42:96:dc:2d:f9: 87:46:5c:cb:2e:b9:0b:53:7f:df:59:e2:08:78:4f:a9:82:78: 25:f6:7c:0e:ab:39:fd:26:62:df:86:27:70:4c:7e:a6:46:01: 33:9f:f1:3d:65:46:34:75:79:00:6f:61:55:67:9f:41:18:77: b1:69:77:40:4b:a4:e2:78:23:40:f8:1c:c8:d4:a5:45:6c:a4: 02:2e:6b:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGtIN/EULbnIck5FUgmRjPaHwjRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5 RjU3NzI5QzAeFw0yNjA4MjgwNjQyMzdaFw0yNjA4MzEwNzE4MzdaMDMxMTAvBgNV BAMTKEVCRDhGNUFBMzE1NzgyQkEzNDIyRTIyODMxRjcyNEEwRkQ2ODc2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BL6wYZbZ1QtoMfPoBgy7s/T8 CBvp2HjabNYRmXCwyvG6z/J+w1unaWdfjoN3UK2nORAKQl3rJbaTT/TyF/sWCfRm +5e0UO/E2e6mj1KRKVx8sQamdcfC1YnQP+iTQgnmy0WCOY5yI/WUt7DhI4Og5/BO oqAmzrnT2FxqZfTrDxMH+miMOHru6xGpCXdVLkb0MbfDshMMjIHoklt9XAULOaOa h/TiPHyQN2j25mHWlDgJHB9vY3lLtqPo3BQaDlUg6fi28j5tXIB/cM2ZYIZQJlPx NQLpOdEvOFXK4TASU30M+lekpEQGCxVo6MGBduL5wVUdIP0flxzUWvUCFhMJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU69j1qjFXgro0IuIoMfckoP1odnQwHwYDVR0j BBgwFoAUfBUH8Iciiu3L8zdodSh04J9XcpwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjkyOTk2MzY4NjQyODY3NS8wLzdDMTUwN0YwODcyMjhBRURDQkYzMzc2ODc1Mjg3 NEUwOUY1NzcyOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5RjU3NzI5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY5Mjk5NjM2ODY0Mjg2NzUvMC83QzE1MDdGMDg3MjI4 QUVEQ0JGMzM3Njg3NTI4NzRFMDlGNTc3MjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEyDqIkrsrHu I+IKjgWV39awOdHfZ5Q9tTogTf64gFLYWhbl9ugeGCV5792f0BHSKHiMYdqCYM6i qyfG+QvcEEFNzfsgfVM49vb86k/JaO11ih6dOF6VnQpy/RNsud0mk57HWOZRcDOo pjMR7JstMpWkOVAqSuIl3wBSPOrRMcF81qv0F8m/CKwnUQl29aPQFDUNXCfuR9Y6 9HdMuAmlxYX6vfNuLpGmXuPlCAcGxUKW3C35h0Zcyy65C1N/31niCHhPqYJ4JfZ8 Dqs5/SZi34YncEx+pkYBM5/xPWVGNHV5AG9hVWefQRh3sWl3QEuk4ngjQPgcyNSl RWykAi5rfA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:23 2026 by rpki-client