$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: YjzHnITxmd8frScOdnt5gQswbgl2OTyx/8uRkIzVfuA= Subject key identifier: 64:34:44:79:92:F2:8F:0C:4D:2E:BE:AC:29:06:47:E1:47:A1:9F:EE Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 15BE776BCF67175E0C1B60D95C29AED219E0A5B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: 75 Signing time: Tue 14 Jul 2026 16:26:39 +0000 Manifest this update: Tue 14 Jul 2026 16:21:39 +0000 Manifest next update: Wed 15 Jul 2026 19:33:39 +0000 Files and hashes: 1: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: SveseSj9OudFSmHlV5zyrueKgzUbuTqVUNYRecewsjY=) 2: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:77:6b:cf:67:17:5e:0c:1b:60:d9:5c:29:ae:d2:19:e0:a5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Jul 14 16:21:39 2026 GMT Not After : Jul 15 19:33:39 2026 GMT Subject: CN=6434447992F28F0C4D2EBEAC290647E147A19FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:33:21:f4:e8:8b:5c:04:d5:9b:d8:f7:1f: 64:d6:bc:17:cb:c7:ff:b1:fa:dc:09:d1:8f:16:65: 9d:65:ce:f6:a2:d2:97:59:f3:22:18:fc:23:de:1b: 8e:7f:2d:ef:1e:8c:73:8d:c1:83:aa:d0:d5:87:80: 64:b1:1e:ad:5e:d8:75:ad:5a:27:0e:39:9f:c0:b7: 72:71:c1:ff:46:4a:ce:ce:23:53:3e:fd:37:e4:7b: c4:a2:34:1c:70:1a:e0:b2:af:e2:04:13:87:73:6a: 59:5c:1a:ba:23:5a:58:90:5a:70:ab:68:55:c1:49: e4:bb:a6:e1:8d:7b:a8:fb:c0:96:b4:3a:a6:92:a1: 16:4a:4a:3d:db:3f:2f:43:fd:5d:9e:80:0b:d0:0e: 93:51:56:10:0a:77:a5:54:67:18:02:6f:5b:02:ad: 5e:03:eb:5d:51:20:e9:b9:c5:ce:5a:b9:de:86:55: 32:a2:52:5d:d2:d5:0a:83:92:c3:7c:0a:f6:e1:b8: 47:75:b5:f9:4c:9f:5a:c5:15:dd:b6:39:f0:14:2c: 1c:1f:6e:35:17:7c:ad:5e:32:52:78:7f:fb:99:16: ce:56:ce:50:43:51:ae:43:9f:86:0f:2c:ff:ce:80: 30:bb:3a:cb:a2:31:d5:38:06:aa:31:85:8f:5d:40: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:44:79:92:F2:8F:0C:4D:2E:BE:AC:29:06:47:E1:47:A1:9F:EE X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:96:4c:7a:a8:19:18:21:cd:89:87:fe:c2:2c:70:c7:ba: 6f:be:a0:15:ac:61:de:a8:d7:b8:e9:c9:8f:ae:38:51:67:9c: ab:f7:98:3a:fb:a8:27:0e:62:ec:4e:12:05:77:da:a4:8d:2d: 83:4a:ab:e5:bd:e5:17:e3:3b:11:24:a0:73:16:71:ee:03:4d: 15:8d:4e:6a:db:83:bf:33:c5:f4:73:69:56:61:30:3f:f8:5e: 18:72:37:2c:27:32:d7:d2:d0:89:d9:70:42:71:24:aa:72:79: f6:38:bf:0e:fc:ee:ba:1e:50:db:1c:3f:0b:82:31:7d:83:04: 88:1c:9e:af:9b:76:e9:a1:b7:48:c1:8a:f6:42:4b:d9:6b:69: 9d:1b:54:a4:82:10:f3:c8:e3:d0:0f:ce:65:db:90:ce:c3:35: 68:18:92:5b:3a:2b:60:5c:b1:55:1f:a7:e5:99:c6:09:c7:ab: 97:36:e4:1a:a3:cf:8a:8d:51:c3:0d:43:d5:8b:94:f4:a6:4c: 61:58:dd:50:b0:43:65:d3:53:81:35:ca:7f:d9:98:b7:4e:88: 2b:65:02:6f:29:fd:e3:34:e0:c6:ae:a9:a6:9a:d1:50:54:8e: 62:38:5d:01:03:51:5b:e5:02:db:3b:99:db:63:e6:a6:46:77: cc:b9:80:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFb53a89nF14MG2DZXCmu0hngpbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA3MTQxNjIxMzlaFw0yNjA3MTUxOTMzMzlaMDMxMTAvBgNV BAMTKDY0MzQ0NDc5OTJGMjhGMEM0RDJFQkVBQzI5MDY0N0UxNDdBMTlGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiODMh9OiLXATVm9j3H2TWvBfL x/+x+twJ0Y8WZZ1lzvai0pdZ8yIY/CPeG45/Le8ejHONwYOq0NWHgGSxHq1e2HWt WicOOZ/At3Jxwf9GSs7OI1M+/Tfke8SiNBxwGuCyr+IEE4dzallcGrojWliQWnCr aFXBSeS7puGNe6j7wJa0OqaSoRZKSj3bPy9D/V2egAvQDpNRVhAKd6VUZxgCb1sC rV4D611RIOm5xc5aud6GVTKiUl3S1QqDksN8CvbhuEd1tflMn1rFFd22OfAULBwf bjUXfK1eMlJ4f/uZFs5WzlBDUa5Dn4YPLP/OgDC7OsuiMdU4BqoxhY9dQB4vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZDREeZLyjwxNLr6sKQZH4Uehn+4wHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDaWTHqoGRgh zYmH/sIscMe6b76gFaxh3qjXuOnJj644UWecq/eYOvuoJw5i7E4SBXfapI0tg0qr 5b3lF+M7ESSgcxZx7gNNFY1OatuDvzPF9HNpVmEwP/heGHI3LCcy19LQidlwQnEk qnJ59ji/Dvzuuh5Q2xw/C4IxfYMEiByer5t26aG3SMGK9kJL2WtpnRtUpIIQ88jj 0A/OZduQzsM1aBiSWzorYFyxVR+n5ZnGCcerlzbkGqPPio1Rww1D1YuU9KZMYVjd ULBDZdNTgTXKf9mYt06IK2UCbyn94zTgxq6ppprRUFSOYjhdAQNRW+UC2zuZ22Pm pkZ3zLmA0g== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:38 2026 by rpki-client