$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: SN1ZJ0SjSEzV7aDaLq2IqfTqyKFQjCleMnWyAsGio5s= Subject key identifier: C3:03:5B:9A:71:3D:1D:15:8B:FA:86:BD:CB:A7:DC:D8:08:AE:61:08 Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 1B8A092E227BB94CF2A25C1DB4751E8B81E8CB23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: 72 Signing time: Tue 14 Jul 2026 14:41:32 +0000 Manifest this update: Tue 14 Jul 2026 14:36:32 +0000 Manifest next update: Wed 15 Jul 2026 16:15:32 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: wixzVM1iFqb7h7PiP5SFT/hZtLllWJTcnRJffCufryI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8a:09:2e:22:7b:b9:4c:f2:a2:5c:1d:b4:75:1e:8b:81:e8:cb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: Jul 14 14:36:32 2026 GMT Not After : Jul 15 16:15:32 2026 GMT Subject: CN=C3035B9A713D1D158BFA86BDCBA7DCD808AE6108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:64:67:f3:cd:b7:69:51:f1:c5:eb:be:3a: 4d:f4:c3:a3:a9:5c:9c:81:88:5a:14:f9:19:b8:95: bc:13:94:65:9d:ac:65:d0:0a:35:1e:b4:88:94:cb: 22:42:8f:0c:8e:81:9d:28:9f:25:7c:d3:25:97:6f: c4:cd:70:fc:5c:25:39:ec:14:21:7a:2c:05:d4:84: a9:0a:a5:26:4d:a7:0d:76:f2:e3:d8:8b:82:b7:e2: 76:e5:31:92:70:14:7d:0f:4a:be:0a:4c:c6:f3:7a: 0a:ae:62:92:32:df:39:e1:4c:21:d4:85:bf:7f:c4: 7b:71:a0:2f:18:4b:ba:50:25:4c:51:6e:3f:08:40: 16:28:37:88:d5:86:9e:9f:b8:5a:c0:74:0d:2d:2e: f5:23:fb:87:46:b7:74:05:ae:2b:d3:6e:c7:41:9c: ce:66:42:23:19:74:20:e7:70:38:d5:7e:ce:ba:61: 2e:d2:d6:10:41:e6:24:f3:be:65:97:a2:1f:e0:03: 28:10:91:e0:08:b4:93:7c:c6:1e:a1:6f:8b:72:71: cc:a9:2b:8e:c6:18:c4:ec:14:2f:9f:b9:be:df:39: d7:4a:bd:54:dd:0f:9b:15:2a:4b:86:49:d1:fc:d7: 87:58:aa:5a:6c:a7:03:21:53:6d:ec:c7:1b:20:8f: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:5B:9A:71:3D:1D:15:8B:FA:86:BD:CB:A7:DC:D8:08:AE:61:08 X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b4:2d:37:3a:b2:24:07:b5:28:3a:b0:b1:07:e6:02:7e:c4: cf:55:86:91:82:9e:ec:25:47:c8:90:16:73:48:78:c4:4d:d6: 93:b8:d1:d3:c2:9a:b5:2e:37:bc:56:c4:7d:4c:fe:a3:c4:9b: 34:db:48:d9:73:31:fd:77:16:3f:c3:29:60:a4:9b:56:2f:26: 15:bd:1c:a8:39:de:62:c5:10:47:bf:8d:39:9e:15:9e:c1:79: 41:ba:1e:09:e3:be:69:42:30:19:f7:fd:32:e5:a6:cd:cc:7e: 56:3c:d2:de:21:4f:c3:4b:35:e2:17:33:80:53:e3:dd:6c:af: d7:ec:e4:5b:d1:de:c5:d8:13:19:7c:5d:88:29:2b:25:e7:c4: e2:02:82:db:34:8b:24:09:d1:36:b0:83:95:b7:97:f8:54:76: a5:85:5c:6a:cb:45:02:84:6b:b6:a2:47:bd:fd:83:26:c3:fc: a6:78:b1:a7:92:0a:be:25:8e:b7:4c:19:33:8c:9a:9d:5d:05: ed:fd:e9:79:96:45:52:8c:23:84:ee:50:ab:50:07:69:c9:e8: 27:a6:83:f8:d8:2d:be:f5:4c:94:21:fe:3b:91:55:ed:77:7a: 72:13:b1:30:f7:a2:87:07:aa:ab:85:9e:29:ad:12:2a:6d:59: 35:84:02:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG4oJLiJ7uUzyolwdtHUei4HoyyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjA3MTQxNDM2MzJaFw0yNjA3MTUxNjE1MzJaMDMxMTAvBgNV BAMTKEMzMDM1QjlBNzEzRDFEMTU4QkZBODZCRENCQTdEQ0Q4MDhBRTYxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZGRn8823aVHxxeu+Ok30w6Op XJyBiFoU+Rm4lbwTlGWdrGXQCjUetIiUyyJCjwyOgZ0onyV80yWXb8TNcPxcJTns FCF6LAXUhKkKpSZNpw128uPYi4K34nblMZJwFH0PSr4KTMbzegquYpIy3znhTCHU hb9/xHtxoC8YS7pQJUxRbj8IQBYoN4jVhp6fuFrAdA0tLvUj+4dGt3QFrivTbsdB nM5mQiMZdCDncDjVfs66YS7S1hBB5iTzvmWXoh/gAygQkeAItJN8xh6hb4tyccyp K47GGMTsFC+fub7fOddKvVTdD5sVKkuGSdH814dYqlpspwMhU23sxxsgj9ARAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwwNbmnE9HRWL+oa9y6fc2AiuYQgwHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrQtNzqyJAe1 KDqwsQfmAn7Ez1WGkYKe7CVHyJAWc0h4xE3Wk7jR08KatS43vFbEfUz+o8SbNNtI 2XMx/XcWP8MpYKSbVi8mFb0cqDneYsUQR7+NOZ4VnsF5QboeCeO+aUIwGff9MuWm zcx+VjzS3iFPw0s14hczgFPj3Wyv1+zkW9HexdgTGXxdiCkrJefE4gKC2zSLJAnR NrCDlbeX+FR2pYVcastFAoRrtqJHvf2DJsP8pnixp5IKviWOt0wZM4yanV0F7f3p eZZFUowjhO5Qq1AHacnoJ6aD+NgtvvVMlCH+O5FV7Xd6chOxMPeihweqq4WeKa0S Km1ZNYQCWw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:15:07 2026 by rpki-client