$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: vEt2xmd0Ga1MfDy4QURJWpbAWqV+7CUIVOcGDl1X4xo= Subject key identifier: 8E:C6:40:27:43:D5:C0:2F:75:69:42:DA:BF:0F:8E:8A:B8:CB:CE:E3 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 1E964989303B604CD60923DE569F83CB52A11358 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 8A Signing time: Sun 26 Jul 2026 20:42:35 +0000 Manifest this update: Sun 26 Jul 2026 20:37:35 +0000 Manifest next update: Mon 27 Jul 2026 22:52:35 +0000 Files and hashes: 1: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) 2: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: VOvMZE1v7Wn01zv7MOUh73Nke3uUw8IarfquFS6xoNk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:96:49:89:30:3b:60:4c:d6:09:23:de:56:9f:83:cb:52:a1:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Jul 26 20:37:35 2026 GMT Not After : Jul 27 22:52:35 2026 GMT Subject: CN=8EC6402743D5C02F756942DABF0F8E8AB8CBCEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:e4:b6:30:5a:8a:3a:fa:52:60:24:ba:6c: a9:19:e6:60:f3:98:ed:11:21:93:f6:bc:ba:b8:08: f3:21:b7:2b:9b:d6:7a:c5:ac:df:d1:85:2b:00:a7: ca:c0:2d:09:42:05:23:b7:fe:31:2a:ff:5e:f0:88: 81:38:67:65:40:a4:7c:19:f8:7e:2b:57:2e:6a:d7: 10:9e:f6:f6:05:4c:36:09:7f:3c:07:be:5d:13:87: 1d:24:9a:0f:16:d6:1d:e0:df:f8:f1:e4:29:14:42: ad:b4:8c:56:23:19:ef:15:72:18:d4:98:90:be:d5: 6e:44:1b:6e:3e:72:fe:5e:b5:d3:72:8f:84:96:91: bf:d4:bf:86:70:2a:8a:ed:eb:09:3d:74:20:ae:65: f8:7d:bd:a3:ff:5a:d1:bb:02:8d:f1:e8:44:40:f3: bc:40:88:25:a7:46:14:9f:cb:df:21:ba:33:22:8f: 06:6d:c1:ab:be:34:ac:7f:3e:82:6b:d0:99:d4:86: 07:94:ef:76:53:4f:b3:1a:db:d4:aa:37:de:e0:b3: 6b:e9:9b:eb:14:55:a3:f7:48:e6:42:0a:96:32:d3: 03:e3:31:1f:a4:6f:c8:82:82:6a:9e:e2:ff:fd:49: 9f:af:88:a9:96:95:c8:bf:ac:c6:83:26:bd:b0:23: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C6:40:27:43:D5:C0:2F:75:69:42:DA:BF:0F:8E:8A:B8:CB:CE:E3 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:a7:c6:df:9e:ad:66:a3:ad:8f:8b:f3:9f:28:01:bf:99: 99:a7:e9:27:0a:76:d3:bc:ba:a6:42:9a:77:c1:47:57:de:91: 48:f4:8e:d2:86:0a:28:c2:3b:63:8a:c7:f7:dd:94:c7:29:2c: 98:24:75:2a:9f:ef:02:d7:95:7e:88:36:a4:93:bd:20:1d:bc: 9c:47:18:c9:12:5d:1e:d7:db:c6:f3:f7:07:c8:f2:16:fe:00: 49:4a:d2:be:1d:1c:c2:d7:54:f9:a9:31:d7:4b:0b:3a:61:87: e2:64:19:58:a4:ff:7f:20:cd:c8:5f:57:d0:c7:60:3c:71:ef: e7:99:4b:f8:2b:b0:91:03:4b:53:86:28:c6:40:e3:52:d1:cd: cf:a4:af:e1:a4:f0:49:71:d9:00:49:20:7e:20:3c:7e:c5:23: 4a:c4:cd:ec:dc:6d:f0:fa:ed:e3:16:be:1b:75:4c:cf:1d:b0: 0b:5a:01:85:90:52:ee:9b:74:af:da:a4:01:ba:8e:e2:3e:b2: 55:7f:c9:e8:31:25:57:cc:12:dc:82:13:4e:b3:cc:21:17:6f: 3e:9f:44:86:22:a9:60:f8:2e:18:c4:0a:08:3a:b0:d4:72:aa: 92:04:ee:72:33:c5:11:6f:30:8a:9a:10:3f:85:63:ba:6b:9c: f9:c4:21:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHpZJiTA7YEzWCSPeVp+Dy1KhE1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA3MjYyMDM3MzVaFw0yNjA3MjcyMjUyMzVaMDMxMTAvBgNV BAMTKDhFQzY0MDI3NDNENUMwMkY3NTY5NDJEQUJGMEY4RThBQjhDQkNFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuuS2MFqKOvpSYCS6bKkZ5mDz mO0RIZP2vLq4CPMhtyub1nrFrN/RhSsAp8rALQlCBSO3/jEq/17wiIE4Z2VApHwZ +H4rVy5q1xCe9vYFTDYJfzwHvl0Thx0kmg8W1h3g3/jx5CkUQq20jFYjGe8VchjU mJC+1W5EG24+cv5etdNyj4SWkb/Uv4ZwKort6wk9dCCuZfh9vaP/WtG7Ao3x6ERA 87xAiCWnRhSfy98hujMijwZtwau+NKx/PoJr0JnUhgeU73ZTT7Ma29SqN97gs2vp m+sUVaP3SOZCCpYy0wPjMR+kb8iCgmqe4v/9SZ+viKmWlci/rMaDJr2wIzOLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjsZAJ0PVwC91aULavw+OirjLzuMwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCanxt+erWaj rY+L858oAb+ZmafpJwp207y6pkKad8FHV96RSPSO0oYKKMI7Y4rH992UxyksmCR1 Kp/vAteVfog2pJO9IB28nEcYyRJdHtfbxvP3B8jyFv4ASUrSvh0cwtdU+akx10sL OmGH4mQZWKT/fyDNyF9X0MdgPHHv55lL+CuwkQNLU4YoxkDjUtHNz6Sv4aTwSXHZ AEkgfiA8fsUjSsTN7Nxt8Prt4xa+G3VMzx2wC1oBhZBS7pt0r9qkAbqO4j6yVX/J 6DElV8wS3IITTrPMIRdvPp9EhiKpYPguGMQKCDqw1HKqkgTucjPFEW8wipoQP4Vj umuc+cQhPA== -----END CERTIFICATE-----Generated at Mon Jul 27 11:19:32 2026 by rpki-client