$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: 2nH1xUQltRFAnx+Qo09SCxdPmujHfOJ4vhflrpGFaSo= Subject key identifier: 78:AC:79:1F:0C:3D:E2:93:1E:B2:52:33:80:4A:2B:2E:83:0A:8F:2C Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 7C57361BB562BEA2655CDC9A161BB9A07E32A274 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 00:34:58 +0000 Manifest this update: Tue 14 Jul 2026 00:29:58 +0000 Manifest next update: Wed 15 Jul 2026 04:12:58 +0000 Files and hashes: 1: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: JjktXSk4Zj42UmNPUWhQVhFKozQVHYlkq1343Pavync=) 2: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 3: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:36:1b:b5:62:be:a2:65:5c:dc:9a:16:1b:b9:a0:7e:32:a2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Jul 14 00:29:58 2026 GMT Not After : Jul 15 04:12:58 2026 GMT Subject: CN=78AC791F0C3DE2931EB25233804A2B2E830A8F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:f4:f2:82:22:e1:54:0a:ac:66:3f:1c:e1: 12:3a:5a:8f:a5:3d:02:3c:b4:0b:8e:97:38:e3:0f: db:a3:1d:11:1f:74:46:1c:e3:1d:b0:7b:91:40:f7: 95:ef:70:3f:d1:f0:c9:b5:7d:8c:44:4e:42:84:b2: a3:6b:f8:ac:c0:ba:39:84:47:2b:cf:98:d9:4b:98: cd:a4:16:4d:89:72:85:a7:39:80:76:80:8f:4d:9b: 94:d6:e0:71:ea:62:73:65:1b:50:44:df:29:7f:0e: b8:03:a3:24:26:92:75:6b:eb:d7:53:d1:65:3e:62: ca:0b:b3:e3:1a:b2:de:50:43:4e:9c:b9:fc:d8:5a: b8:c9:ff:15:93:39:2b:bc:c4:a0:48:d3:ae:12:18: 14:67:22:32:09:c2:5f:b6:29:19:b5:43:04:0a:8b: 31:3a:61:e0:8c:dd:db:d5:cb:20:75:f9:f8:03:4d: 49:e4:5b:5f:a6:9d:25:17:91:14:c6:3a:51:60:e0: 59:48:9b:f7:73:08:78:6f:de:46:5d:c1:95:6f:b8: fa:2f:b6:e0:59:f7:7b:f7:df:79:df:05:35:f7:58: 89:11:84:ba:50:4a:3b:bd:c0:ea:6d:d6:92:28:31: b8:02:d7:d1:1b:d9:4f:4f:75:ac:7f:32:39:33:4a: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AC:79:1F:0C:3D:E2:93:1E:B2:52:33:80:4A:2B:2E:83:0A:8F:2C X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a8:fb:ab:92:06:1b:1c:0a:7b:1e:c6:fc:c3:43:f1:0e:38: 82:f5:96:95:3c:35:ea:ee:74:14:15:1f:af:f6:25:10:c0:4f: f0:45:8f:c8:10:cb:cd:3c:01:7a:6f:ac:59:fb:b7:a2:52:a9: e4:53:9d:2f:0d:93:a8:f0:b5:8c:72:af:2b:1c:2a:49:14:35: 1c:e0:41:e2:0b:1b:ac:6c:1a:96:8c:34:1d:5d:e7:34:48:6c: 2a:9c:75:6b:86:d0:75:2b:60:dc:c8:b2:31:20:80:30:02:0c: 82:b7:8b:d2:6a:1b:7d:41:82:01:b5:e2:b5:6a:02:85:6d:dc: 2a:12:8b:77:8d:52:13:be:e1:f1:2a:6c:71:35:20:d0:fe:6c: d4:8a:c0:1f:6b:03:6a:4d:0a:8f:c9:09:73:d0:d0:b6:2b:af: 78:44:1c:16:89:1a:e2:ae:db:30:cc:36:54:25:e2:b1:fe:c0: a9:15:3b:b6:95:f7:77:95:ae:45:0d:f5:a2:73:29:a8:26:90: 10:65:93:8b:23:f9:88:a6:3c:9e:e2:4a:b5:32:cf:a0:40:37: 65:30:0a:c7:bf:2c:50:75:4c:21:79:50:70:70:dc:0e:13:c0: 3e:2f:ed:f5:e2:c0:d1:ee:37:01:ea:ee:75:e8:93:ce:c7:51: fd:18:63:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfFc2G7VivqJlXNyaFhu5oH4yonQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA3MTQwMDI5NThaFw0yNjA3MTUwNDEyNThaMDMxMTAvBgNV BAMTKDc4QUM3OTFGMEMzREUyOTMxRUIyNTIzMzgwNEEyQjJFODMwQThGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTPTygiLhVAqsZj8c4RI6Wo+l PQI8tAuOlzjjD9ujHREfdEYc4x2we5FA95XvcD/R8Mm1fYxETkKEsqNr+KzAujmE RyvPmNlLmM2kFk2JcoWnOYB2gI9Nm5TW4HHqYnNlG1BE3yl/DrgDoyQmknVr69dT 0WU+YsoLs+Mast5QQ06cufzYWrjJ/xWTOSu8xKBI064SGBRnIjIJwl+2KRm1QwQK izE6YeCM3dvVyyB1+fgDTUnkW1+mnSUXkRTGOlFg4FlIm/dzCHhv3kZdwZVvuPov tuBZ93v333nfBTX3WIkRhLpQSju9wOpt1pIoMbgC19Eb2U9Pdax/MjkzSpIBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeKx5Hww94pMeslIzgEorLoMKjywwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqj7q5IGGxwK ex7G/MND8Q44gvWWlTw16u50FBUfr/YlEMBP8EWPyBDLzTwBem+sWfu3olKp5FOd Lw2TqPC1jHKvKxwqSRQ1HOBB4gsbrGwalow0HV3nNEhsKpx1a4bQdStg3MiyMSCA MAIMgreL0mobfUGCAbXitWoChW3cKhKLd41SE77h8SpscTUg0P5s1IrAH2sDak0K j8kJc9DQtiuveEQcFoka4q7bMMw2VCXisf7AqRU7tpX3d5WuRQ31onMpqCaQEGWT iyP5iKY8nuJKtTLPoEA3ZTAKx78sUHVMIXlQcHDcDhPAPi/t9eLA0e43AerudeiT zsdR/Rhjqw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:14:50 2026 by rpki-client