$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: Uy5S70nPH/9Q4c4obPhphehIRN0cibZMIpKBbFA2ZJU= Subject key identifier: 1A:B1:9A:AF:28:21:AD:A2:61:B8:BA:2B:9C:C0:2B:B1:CC:E9:CF:B4 Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 2F388C4961B588B404E86D9B05F67FB9278F8D4C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: DF Signing time: Tue 14 Jul 2026 14:06:26 +0000 Manifest this update: Tue 14 Jul 2026 14:01:26 +0000 Manifest next update: Wed 15 Jul 2026 16:42:26 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: 7vPQQC6zdXb4fPAiUzr+rnRPL1EfFLDJCG8xEaiZNAo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 16:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:38:8c:49:61:b5:88:b4:04:e8:6d:9b:05:f6:7f:b9:27:8f:8d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: Jul 14 14:01:26 2026 GMT Not After : Jul 15 16:42:26 2026 GMT Subject: CN=1AB19AAF2821ADA261B8BA2B9CC02BB1CCE9CFB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:21:a8:40:13:5b:19:0e:09:06:79:74:a1: 24:31:b8:1b:11:b9:ce:3f:c5:c7:96:ba:49:50:fc: 6c:fd:18:6d:52:2d:f6:17:d9:4c:d8:6c:92:78:d8: af:77:1b:45:97:ed:a5:af:8c:45:08:99:9f:65:58: 76:91:1e:4b:37:9d:5e:ce:bd:26:ff:12:f8:60:bf: 1b:ee:df:99:49:9f:53:f6:c6:55:c3:0a:43:83:85: 78:6f:9e:1d:1a:ac:a7:ad:4f:94:ec:1f:07:5b:ed: 46:b5:ce:78:1d:1b:a7:a9:60:f0:01:ca:33:11:05: 88:97:ae:d2:7a:1d:32:99:e8:0e:0b:89:56:b5:81: 9e:d0:3c:ae:68:d4:4a:d8:e8:3d:25:ac:30:94:dd: b0:91:4f:4f:36:31:29:83:00:0a:a0:fb:41:cc:9b: 42:ad:a8:b4:8b:dc:60:33:ce:12:b8:3e:97:22:36: d3:cb:a4:9c:7c:51:7c:2d:07:3f:93:25:8c:29:2c: eb:b0:50:50:ec:0c:2d:2d:df:79:4d:88:06:d5:fa: 15:f0:cc:10:75:ab:7b:d7:10:7e:9c:a4:b7:0d:2a: ab:f1:ff:b5:5c:95:4a:f0:2d:0b:19:3f:ea:4b:5d: d0:ef:dc:98:e6:7a:5a:2e:0c:ed:fe:10:c4:3a:e6: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:9A:AF:28:21:AD:A2:61:B8:BA:2B:9C:C0:2B:B1:CC:E9:CF:B4 X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5f:ff:04:13:dc:ad:59:06:55:bc:5d:02:57:6d:fd:54:24: 49:30:69:68:74:56:c6:06:2e:61:97:c7:ba:37:ef:02:a3:91: 38:b6:a7:a2:37:dc:4f:ff:89:ab:cc:21:55:13:ee:9d:59:6c: ff:8c:af:fc:44:85:7b:7c:d4:12:5e:0c:ea:b5:90:7f:3f:59: ea:0f:08:21:b0:15:44:0a:cc:2d:e2:bd:26:f2:34:8d:b2:9d: 3e:1a:05:54:81:d8:04:09:52:c1:15:0a:bd:a0:e0:df:26:30: 2f:8c:f3:1e:93:50:64:e3:8f:b0:f8:e3:c5:f7:5a:d2:35:96: 46:e1:aa:da:5d:5c:9e:28:b8:db:6b:00:ea:c4:e4:c2:71:a9: 52:99:e4:1b:88:a7:d5:77:17:f0:4a:ac:00:ef:f2:3e:aa:0e: be:c4:9e:c6:8a:cb:73:60:89:c9:f6:a5:c4:b8:46:f0:41:14: 62:fe:55:d5:4d:b1:a4:87:3c:bf:1f:a2:f2:47:5f:b2:0e:aa: 26:58:db:ac:13:98:08:78:24:a4:29:e1:ab:09:28:58:cb:e7: 50:83:d0:bd:b8:e3:62:ad:11:14:d4:92:61:0f:ae:56:2e:5e: 7c:00:e6:52:1d:d5:8d:00:4f:27:e8:61:c2:62:e5:37:9b:3a: b6:7f:07:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULziMSWG1iLQE6G2bBfZ/uSePjUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjA3MTQxNDAxMjZaFw0yNjA3MTUxNjQyMjZaMDMxMTAvBgNV BAMTKDFBQjE5QUFGMjgyMUFEQTI2MUI4QkEyQjlDQzAyQkIxQ0NFOUNGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOSGoQBNbGQ4JBnl0oSQxuBsR uc4/xceWuklQ/Gz9GG1SLfYX2UzYbJJ42K93G0WX7aWvjEUImZ9lWHaRHks3nV7O vSb/Evhgvxvu35lJn1P2xlXDCkODhXhvnh0arKetT5TsHwdb7Ua1zngdG6epYPAB yjMRBYiXrtJ6HTKZ6A4LiVa1gZ7QPK5o1ErY6D0lrDCU3bCRT082MSmDAAqg+0HM m0KtqLSL3GAzzhK4PpciNtPLpJx8UXwtBz+TJYwpLOuwUFDsDC0t33lNiAbV+hXw zBB1q3vXEH6cpLcNKqvx/7VclUrwLQsZP+pLXdDv3JjmelouDO3+EMQ65t2hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGrGaryghraJhuLornMArsczpz7QwHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1//BBPcrVkG VbxdAldt/VQkSTBpaHRWxgYuYZfHujfvAqOROLanojfcT/+Jq8whVRPunVls/4yv /ESFe3zUEl4M6rWQfz9Z6g8IIbAVRArMLeK9JvI0jbKdPhoFVIHYBAlSwRUKvaDg 3yYwL4zzHpNQZOOPsPjjxfda0jWWRuGq2l1cnii422sA6sTkwnGpUpnkG4in1XcX 8EqsAO/yPqoOvsSexorLc2CJyfalxLhG8EEUYv5V1U2xpIc8vx+i8kdfsg6qJljb rBOYCHgkpCnhqwkoWMvnUIPQvbjjYq0RFNSSYQ+uVi5efADmUh3VjQBPJ+hhwmLl N5s6tn8HKQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:17 2026 by rpki-client