$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: a0bqTQlCfBHOLcP0T+N35EIvjg0LFGPG7FtPFXettFo= Subject key identifier: AE:D3:F8:A2:53:74:D2:09:D9:A7:65:59:9F:47:8A:40:72:F1:67:31 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 39F86699BAD6E707D734DC2491EAD520FB1616DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 17:16:46 +0000 Manifest this update: Tue 14 Jul 2026 17:11:46 +0000 Manifest next update: Wed 15 Jul 2026 20:26:46 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: 65GhEBLows22vjdwzR8IOlzgVLcWBEJVGc/p2JS5STM=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f8:66:99:ba:d6:e7:07:d7:34:dc:24:91:ea:d5:20:fb:16:16:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Jul 14 17:11:46 2026 GMT Not After : Jul 15 20:26:46 2026 GMT Subject: CN=AED3F8A25374D209D9A765599F478A4072F16731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:c1:03:b5:2a:a4:0d:a9:43:67:0e:a2:a0: 5e:cf:81:61:e0:36:50:6c:a6:27:8b:b1:b0:ad:cd: 8f:c1:e4:14:a5:e8:b1:7f:76:a6:91:23:38:9d:47: e6:54:85:52:6b:df:a6:ba:a0:1e:af:08:31:ce:77: f0:00:68:e5:83:d7:50:7c:d5:6b:39:bc:b7:e5:0c: c9:68:22:9f:a1:fd:ee:94:8c:0e:f1:b8:23:8c:2c: e9:5d:21:92:87:40:a1:d4:c8:1f:16:98:c4:2f:7b: f0:39:21:98:0d:29:98:1a:b8:95:1c:c2:93:14:b8: a9:0d:d6:d1:15:b0:21:de:64:fd:32:df:fa:22:51: 46:56:de:42:2c:30:01:56:09:63:f3:a9:57:2f:e7: 96:e6:41:d8:58:6e:a5:f7:3f:d0:dc:3c:29:8d:92: e8:c5:e5:0d:c6:05:ac:a7:d1:a5:b1:9e:eb:ce:ff: 6f:0e:2f:4b:19:8a:90:3e:09:9a:ad:da:72:83:36: e5:eb:be:06:3d:91:be:cf:0c:2f:fd:2c:c7:d9:97: 13:47:db:fd:87:a1:fe:8b:93:32:30:e6:dc:51:9f: 9f:cd:61:db:ff:1f:27:24:a1:57:77:18:df:5c:41: 87:e9:1f:7b:fe:02:95:16:c1:15:e0:87:f2:5c:c4: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D3:F8:A2:53:74:D2:09:D9:A7:65:59:9F:47:8A:40:72:F1:67:31 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:50:53:6d:81:b2:3f:c5:b6:27:d4:87:0a:51:3b:d1:53: 63:d3:e1:2e:d7:53:28:64:15:01:eb:46:54:15:fa:d9:07:eb: b4:12:6b:8a:d5:da:d3:27:ff:2d:d8:fb:ae:17:8c:07:a1:29: 35:bb:b1:e6:cb:6a:0e:ce:c7:49:34:d2:5a:55:95:83:38:9a: b0:9f:ba:b0:7b:ec:e6:4b:c6:71:95:ad:2f:15:b6:ce:42:36: 7f:a6:1d:e6:f5:5f:9f:30:2b:0a:d8:25:71:1c:8b:47:b4:6b: 53:36:3f:77:4e:4d:c7:00:61:8f:d9:f2:dc:dd:86:f3:06:21: 97:59:d5:12:e9:91:ad:21:90:b3:4e:28:92:7e:d4:46:d7:e7: cc:64:3c:bb:c3:93:42:20:4a:8f:66:8b:30:ed:b6:e4:cc:25: c9:9a:cf:ff:98:2f:12:7b:a6:2b:f7:d2:44:77:b9:9a:fd:67: 14:f6:c7:96:67:bc:ad:e7:a5:88:f6:04:0d:bd:69:bb:7d:76: 5d:f9:b4:08:3e:ab:4b:ac:0d:77:9c:30:85:45:ec:f3:74:dc: 30:8a:82:b0:80:59:96:6e:6e:d3:c3:c7:3b:42:24:cf:6e:2f: b5:8d:ad:7c:3e:29:4a:ed:f9:21:6f:fc:1d:29:09:b3:db:bd: f6:32:89:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOfhmmbrW5wfXNNwkkerVIPsWFt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA3MTQxNzExNDZaFw0yNjA3MTUyMDI2NDZaMDMxMTAvBgNV BAMTKEFFRDNGOEEyNTM3NEQyMDlEOUE3NjU1OTlGNDc4QTQwNzJGMTY3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaMEDtSqkDalDZw6ioF7PgWHg NlBspieLsbCtzY/B5BSl6LF/dqaRIzidR+ZUhVJr36a6oB6vCDHOd/AAaOWD11B8 1Ws5vLflDMloIp+h/e6UjA7xuCOMLOldIZKHQKHUyB8WmMQve/A5IZgNKZgauJUc wpMUuKkN1tEVsCHeZP0y3/oiUUZW3kIsMAFWCWPzqVcv55bmQdhYbqX3P9DcPCmN kujF5Q3GBayn0aWxnuvO/28OL0sZipA+CZqt2nKDNuXrvgY9kb7PDC/9LMfZlxNH 2/2Hof6LkzIw5txRn5/NYdv/HyckoVd3GN9cQYfpH3v+ApUWwRXgh/JcxIthAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrtP4olN00gnZp2VZn0eKQHLxZzEwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVNQU22Bsj/F tifUhwpRO9FTY9PhLtdTKGQVAetGVBX62QfrtBJritXa0yf/Ldj7rheMB6EpNbux 5stqDs7HSTTSWlWVgziasJ+6sHvs5kvGcZWtLxW2zkI2f6Yd5vVfnzArCtglcRyL R7RrUzY/d05NxwBhj9ny3N2G8wYhl1nVEumRrSGQs04okn7URtfnzGQ8u8OTQiBK j2aLMO225MwlyZrP/5gvEnumK/fSRHe5mv1nFPbHlme8reeliPYEDb1pu312Xfm0 CD6rS6wNd5wwhUXs83TcMIqCsIBZlm5u08PHO0Ikz24vtY2tfD4pSu35IW/8HSkJ s9u99jKJhw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:38 2026 by rpki-client