$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: nM2c9THN3vgT4R/gnTjmEnBd9ja6XJwBs8h5HHChqps= Subject key identifier: 63:A9:68:A6:9F:C3:71:7E:0E:C3:81:16:03:59:E2:53:3D:2D:C5:27 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 28D16CB4FFE459E1AA597E8960078872B7A5DC3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 6B Signing time: Mon 06 Jul 2026 20:57:45 +0000 Manifest this update: Mon 06 Jul 2026 20:52:45 +0000 Manifest next update: Tue 07 Jul 2026 23:02:45 +0000 Files and hashes: 1: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 2: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 3: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 4: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 5: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 6: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: FMAfg3oOFVg8j/Zw7+pSvxmUhnonU+JV/gGIogtJ4gk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 23:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d1:6c:b4:ff:e4:59:e1:aa:59:7e:89:60:07:88:72:b7:a5:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Jul 6 20:52:45 2026 GMT Not After : Jul 7 23:02:45 2026 GMT Subject: CN=63A968A69FC3717E0EC381160359E2533D2DC527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:52:69:0f:67:ec:c5:02:70:9f:f0:3c:36: 59:4b:8e:a4:10:b3:90:12:a2:c8:6c:9c:51:8e:cb: 3f:3a:8e:ef:6c:07:d6:89:cf:8a:e9:26:cc:db:ac: 50:38:ba:25:d3:68:62:41:4e:1d:53:63:01:1c:88: 8f:85:2c:24:c4:77:e0:4a:05:bb:49:06:32:77:37: cc:54:7d:c3:dd:92:20:09:b4:ab:a8:72:73:75:73: ea:c5:57:e5:6f:48:96:84:91:1a:5f:e1:76:df:a9: b7:12:8d:a2:22:7b:b4:29:37:cc:81:93:5c:01:ed: 17:d9:de:9f:b7:a1:a7:de:96:f9:35:37:88:29:dd: 53:eb:63:29:f1:29:64:c8:24:b7:2b:2c:a8:07:54: a2:a7:99:a9:96:91:f5:0b:ed:b2:25:3a:cd:62:70: aa:64:db:36:e1:a8:46:a4:10:65:05:7f:48:db:30: 8d:bb:f9:09:de:b0:d7:bf:86:58:9d:1c:6d:1e:e6: a9:0e:cf:30:aa:53:53:73:1a:cf:aa:ee:11:75:d7: a9:4f:d0:27:dc:0e:ee:25:04:93:c6:8b:7c:61:4a: 26:5e:c6:fc:dc:4b:5e:3b:ae:dc:dc:02:11:52:97: f8:05:2e:64:d6:91:57:a5:19:3d:73:b3:7b:a4:1a: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A9:68:A6:9F:C3:71:7E:0E:C3:81:16:03:59:E2:53:3D:2D:C5:27 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:36:73:07:a1:85:ea:b1:91:4c:73:63:40:89:ef:48:38:90: 9b:21:1e:d1:30:d8:58:24:54:83:2e:34:41:4b:cd:04:31:46: df:82:a6:76:8b:78:e5:5c:bf:08:0f:86:9c:aa:82:e5:4b:1f: 4c:f5:2b:41:e7:75:65:ec:d8:b3:7e:89:52:2d:6e:c1:b0:ca: 04:2f:95:3f:29:b0:95:ea:5e:ec:c3:8b:15:51:51:d3:0c:7a: 4d:06:ff:ee:6b:37:fb:78:02:1e:9d:17:3e:c4:cc:57:1a:1b: 26:0d:79:9f:c3:db:2a:6d:0f:4b:9f:7b:38:e9:f6:d1:7d:ac: 78:ba:df:c2:25:94:5f:5e:8d:84:de:38:94:b7:1b:37:6d:77: b6:e0:5a:6a:a1:db:ee:2c:11:4b:18:da:14:95:f9:87:98:a3: 21:03:35:d9:d9:40:b2:e5:c5:0c:56:2f:57:1e:89:1b:12:4d: b6:73:60:1c:0c:f9:97:99:e5:92:82:65:9d:91:b1:3e:c2:4b: 94:77:c4:35:91:10:73:89:0c:3a:fc:7c:69:96:cd:a8:a8:1f: eb:7d:30:13:fb:84:e6:06:58:ed:9d:e1:d8:c9:10:5f:13:1e: 74:d9:d6:fa:7e:f7:c6:d8:63:7d:f6:95:0b:8d:48:ec:9c:0f: 7c:49:95:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKNFstP/kWeGqWX6JYAeIcrel3D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA3MDYyMDUyNDVaFw0yNjA3MDcyMzAyNDVaMDMxMTAvBgNV BAMTKDYzQTk2OEE2OUZDMzcxN0UwRUMzODExNjAzNTlFMjUzM0QyREM1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yFJpD2fsxQJwn/A8NllLjqQQ s5ASoshsnFGOyz86ju9sB9aJz4rpJszbrFA4uiXTaGJBTh1TYwEciI+FLCTEd+BK BbtJBjJ3N8xUfcPdkiAJtKuocnN1c+rFV+VvSJaEkRpf4XbfqbcSjaIie7QpN8yB k1wB7RfZ3p+3oafelvk1N4gp3VPrYynxKWTIJLcrLKgHVKKnmamWkfUL7bIlOs1i cKpk2zbhqEakEGUFf0jbMI27+QnesNe/hlidHG0e5qkOzzCqU1NzGs+q7hF116lP 0CfcDu4lBJPGi3xhSiZexvzcS147rtzcAhFSl/gFLmTWkVelGT1zs3ukGs93AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY6lopp/DcX4Ow4EWA1niUz0txScwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITZzB6GF6rGR THNjQInvSDiQmyEe0TDYWCRUgy40QUvNBDFG34Kmdot45Vy/CA+GnKqC5UsfTPUr Qed1ZezYs36JUi1uwbDKBC+VPymwlepe7MOLFVFR0wx6TQb/7ms3+3gCHp0XPsTM VxobJg15n8PbKm0PS597OOn20X2seLrfwiWUX16NhN44lLcbN213tuBaaqHb7iwR SxjaFJX5h5ijIQM12dlAsuXFDFYvVx6JGxJNtnNgHAz5l5nlkoJlnZGxPsJLlHfE NZEQc4kMOvx8aZbNqKgf630wE/uE5gZY7Z3h2MkQXxMedNnW+n73xthjffaVC41I 7JwPfEmVdQ== -----END CERTIFICATE-----Generated at Tue Jul 7 10:48:36 2026 by rpki-client