$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: AgiobwagLDfEQg1/GiyOaUMF7gMS2UZXz1ElAGe942Y= Subject key identifier: F6:62:98:27:08:1B:5C:7F:D4:C5:3D:F3:BA:DE:54:AB:BE:02:6D:EA Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 28D2C1C81C1F63D51C8B2B3A52FA261BE3722FD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 83 Signing time: Tue 14 Jul 2026 15:36:34 +0000 Manifest this update: Tue 14 Jul 2026 15:31:34 +0000 Manifest next update: Wed 15 Jul 2026 17:36:34 +0000 Files and hashes: 1: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: 8HdNDHAJ/kTbP/Sg/C2xGU6qFTG12gA08xHbDBbj4aw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d2:c1:c8:1c:1f:63:d5:1c:8b:2b:3a:52:fa:26:1b:e3:72:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Jul 14 15:31:34 2026 GMT Not After : Jul 15 17:36:34 2026 GMT Subject: CN=F6629827081B5C7FD4C53DF3BADE54ABBE026DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:74:ae:e4:c6:a8:91:b1:88:6f:c0:3c:cb: d7:f0:35:57:3f:13:f3:05:81:35:1e:46:96:1c:b8: 63:21:f2:fb:8e:4c:f2:f4:41:c8:65:c2:b6:8a:d9: f1:05:e6:0a:fe:c9:78:36:37:7a:aa:74:bf:ab:a1: 65:91:eb:03:8f:4b:f0:a1:4d:9b:f3:fc:fd:cf:af: c6:37:ce:4c:b4:99:30:87:bc:5c:b1:87:44:15:9f: 0a:05:a4:8c:98:33:a6:be:1b:5d:e3:04:74:13:87: d4:45:bc:d9:ed:59:f9:09:ac:d7:d4:cb:49:7d:25: a2:a8:25:46:6a:86:88:22:52:c5:ae:c2:3f:0a:fa: 55:c5:0b:f2:67:f8:ab:43:66:ae:5a:88:dc:9c:51: a4:bd:5c:ab:0f:7a:63:b6:a8:90:a6:46:db:08:b8: ef:72:e5:0b:ec:37:c5:e7:57:10:11:1d:7a:94:55: c0:44:a1:7b:bd:01:05:d5:9f:7e:0f:8f:86:6f:7b: 3d:d2:c0:00:47:1a:e0:10:bc:72:e7:58:10:ec:a0: f7:9d:b8:7d:de:11:73:3a:da:bc:8b:d5:b4:c1:2b: 38:55:fa:16:5c:bc:57:1a:5e:58:59:86:7a:cf:03: 19:b8:d1:93:7c:0b:26:a3:e5:9b:58:ed:a3:de:ae: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:98:27:08:1B:5C:7F:D4:C5:3D:F3:BA:DE:54:AB:BE:02:6D:EA X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:9c:c8:1d:fa:f9:94:e1:88:46:8c:a1:5a:81:ad:3c:47:b8: 85:9f:f6:2f:70:d7:af:62:fd:bf:49:d9:1f:1c:b1:51:03:d2: 62:60:49:29:37:d0:ba:fa:44:05:c3:fc:5e:d5:3c:53:cf:8d: 9b:68:48:59:e7:0e:9e:8e:12:83:44:78:51:da:c1:c0:cc:bd: 40:49:04:24:d9:19:c3:93:58:b6:2b:e5:2a:cd:be:ef:8c:e1: 10:e1:2f:8e:09:3a:ec:7b:bc:4d:4c:ad:27:eb:e5:ea:a0:6a: 76:fb:92:01:31:40:f2:b0:b8:b1:eb:b0:68:f5:a9:e8:9c:b8: 32:b7:e0:09:83:5e:c3:d9:d1:96:d1:1b:41:ca:6b:b5:81:dd: 5e:09:dd:db:5c:7f:a1:c0:b2:e6:1a:d4:6a:ed:0a:50:63:65: c4:4e:19:af:28:7d:b8:e8:48:c8:7d:38:e1:01:3c:fd:df:13: f5:1e:18:12:e0:58:a8:ac:b9:5f:33:d9:f4:a5:72:5d:02:37: b4:e4:47:d3:d0:01:b1:2f:96:71:80:07:35:06:40:41:53:e0: fb:2a:e8:94:f9:bf:a4:12:3e:7c:4f:78:79:91:a8:30:73:78: fd:c8:c9:ca:4a:4d:11:2a:df:37:ed:05:ed:cf:eb:4b:7e:fe: de:dd:99:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKNLByBwfY9Uciys6UvomG+NyL9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA3MTQxNTMxMzRaFw0yNjA3MTUxNzM2MzRaMDMxMTAvBgNV BAMTKEY2NjI5ODI3MDgxQjVDN0ZENEM1M0RGM0JBREU1NEFCQkUwMjZERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvXSu5MaokbGIb8A8y9fwNVc/ E/MFgTUeRpYcuGMh8vuOTPL0QchlwraK2fEF5gr+yXg2N3qqdL+roWWR6wOPS/Ch TZvz/P3Pr8Y3zky0mTCHvFyxh0QVnwoFpIyYM6a+G13jBHQTh9RFvNntWfkJrNfU y0l9JaKoJUZqhogiUsWuwj8K+lXFC/Jn+KtDZq5aiNycUaS9XKsPemO2qJCmRtsI uO9y5QvsN8XnVxARHXqUVcBEoXu9AQXVn34Pj4Zvez3SwABHGuAQvHLnWBDsoPed uH3eEXM62ryL1bTBKzhV+hZcvFcaXlhZhnrPAxm40ZN8Cyaj5ZtY7aPerrpbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9mKYJwgbXH/UxT3zut5Uq74CbeowHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA55zIHfr5lOGI RoyhWoGtPEe4hZ/2L3DXr2L9v0nZHxyxUQPSYmBJKTfQuvpEBcP8XtU8U8+Nm2hI WecOno4Sg0R4UdrBwMy9QEkEJNkZw5NYtivlKs2+74zhEOEvjgk67Hu8TUytJ+vl 6qBqdvuSATFA8rC4seuwaPWp6Jy4MrfgCYNew9nRltEbQcprtYHdXgnd21x/ocCy 5hrUau0KUGNlxE4Zryh9uOhIyH044QE8/d8T9R4YEuBYqKy5XzPZ9KVyXQI3tORH 09ABsS+WcYAHNQZAQVPg+yrolPm/pBI+fE94eZGoMHN4/cjJykpNESrfN+0F7c/r S37+3t2ZIQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:17:23 2026 by rpki-client