$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft File: C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json) Hash identifier: NHoe4u/BtXC3dlnhP+QQF5tvS6Ied53Iz7LJurPl1Y8= Subject key identifier: 1C:60:8B:EA:C2:C5:BA:4F:4C:F6:78:13:5E:C0:3F:EB:CA:A4:30:F1 Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B Certificate issuer: /CN=C178E89AC582AE71D7881FC86E201466F09D849B Certificate serial: 6622F1E7DB16776584C0F5409CA662C3F472D3EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft Manifest number: 52 Signing time: Tue 14 Jul 2026 09:41:01 +0000 Manifest this update: Tue 14 Jul 2026 09:36:01 +0000 Manifest next update: Wed 15 Jul 2026 12:39:01 +0000 Files and hashes: 1: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=) 2: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: 3ZvPw6Lz8ydkUcZfy7kTyBTEbVZv5+OeRCA/ZKl/K/Q=) 3: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:22:f1:e7:db:16:77:65:84:c0:f5:40:9c:a6:62:c3:f4:72:d3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B Validity Not Before: Jul 14 09:36:01 2026 GMT Not After : Jul 15 12:39:01 2026 GMT Subject: CN=1C608BEAC2C5BA4F4CF678135EC03FEBCAA430F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:96:13:f8:6a:9b:d2:22:93:7c:20:72:a9: 0a:a8:ec:62:a4:2e:99:b4:d7:90:cc:0b:4f:64:01: c3:7f:7d:9b:d7:4e:1f:9e:16:32:0b:07:80:b8:3a: 28:40:8b:11:a4:a1:2f:70:f6:67:7e:d3:54:e5:9e: ed:ee:fb:e6:c4:70:77:89:d6:a1:84:6a:97:d2:68: a4:4f:aa:cb:5a:58:ec:15:b4:48:b6:0b:9e:f2:16: d6:39:92:e1:e2:3d:ec:13:53:40:7d:c7:44:b8:dc: bd:73:df:64:e2:f4:b6:86:8c:b4:60:ba:66:a3:00: 61:11:47:71:05:ab:a8:f3:7a:e1:7f:fe:6d:9e:8e: 65:62:28:0a:66:fb:82:81:3b:f6:df:a9:20:1e:73: 0e:28:17:24:f5:6d:32:f7:cc:08:2f:39:48:14:a9: c2:03:13:58:3e:4f:96:7b:23:c5:4e:ba:85:cd:4d: 6e:b1:ed:66:12:e4:18:80:74:14:24:52:f2:3a:6b: ad:87:d2:5f:46:94:f5:4d:74:fb:7d:05:85:bd:ee: 19:6e:a2:e6:83:2f:9e:2f:2a:17:ac:b7:1c:73:33: 76:29:e1:7a:55:46:7d:f3:02:aa:05:97:92:ee:17: ae:1a:0b:fa:42:45:a1:1d:18:95:91:d6:9f:bc:0a: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:60:8B:EA:C2:C5:BA:4F:4C:F6:78:13:5E:C0:3F:EB:CA:A4:30:F1 X509v3 Authority Key Identifier: keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:43:43:18:01:56:f9:88:34:c9:66:97:29:dd:d3:8e:f2:94: e0:50:a4:eb:56:0c:e5:aa:e0:c3:7f:e9:31:6d:a6:58:7d:48: e5:42:d6:27:f0:fa:3a:88:14:12:c2:bb:d6:c7:50:a7:a6:c8: 35:c4:a8:27:99:ee:88:b9:dd:56:57:4b:c0:19:e6:fb:53:69: 16:80:d4:9b:1d:77:7a:ce:83:01:cf:a3:95:94:4b:b9:de:f1: a5:94:b4:d9:b2:f9:f8:f1:bc:87:37:a6:ca:d8:9d:15:e9:9f: 04:61:7b:cd:97:44:e7:fc:e5:01:b7:5e:df:49:cf:66:b5:86: d9:5f:d4:a4:4c:43:ab:d0:ce:26:f9:c4:7f:ac:46:75:e2:02: 11:c6:6a:2d:a5:34:67:ce:4a:3c:1c:87:68:fc:54:7a:4a:36: 86:3f:61:f8:dc:2a:4f:a7:02:82:37:d8:0c:08:36:de:56:36: a2:67:3a:3a:82:70:ba:a4:19:9a:bb:8f:8f:2a:ba:61:90:5a: d5:2d:b4:32:06:27:09:9f:2d:d0:d4:62:90:fe:4a:91:85:ce: 0a:51:09:5e:b4:94:92:7e:86:b5:91:94:fc:f2:55:de:42:48: 6e:ef:45:e2:5c:41:73:83:9f:0e:6f:d6:a3:73:dc:c7:1b:2a: 46:60:79:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZiLx59sWd2WEwPVAnKZiw/Ry0+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZG MDlEODQ5QjAeFw0yNjA3MTQwOTM2MDFaFw0yNjA3MTUxMjM5MDFaMDMxMTAvBgNV BAMTKDFDNjA4QkVBQzJDNUJBNEY0Q0Y2NzgxMzVFQzAzRkVCQ0FBNDMwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDJYT+Gqb0iKTfCByqQqo7GKk Lpm015DMC09kAcN/fZvXTh+eFjILB4C4OihAixGkoS9w9md+01Tlnu3u++bEcHeJ 1qGEapfSaKRPqstaWOwVtEi2C57yFtY5kuHiPewTU0B9x0S43L1z32Ti9LaGjLRg umajAGERR3EFq6jzeuF//m2ejmViKApm+4KBO/bfqSAecw4oFyT1bTL3zAgvOUgU qcIDE1g+T5Z7I8VOuoXNTW6x7WYS5BiAdBQkUvI6a62H0l9GlPVNdPt9BYW97hlu ouaDL54vKhestxxzM3Yp4XpVRn3zAqoFl5LuF64aC/pCRaEdGJWR1p+8Cjz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHGCL6sLFuk9M9ngTXsA/68qkMPEwHwYDVR0j BBgwFoAUwXjomsWCrnHXiB/IbiAUZvCdhJswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzUwODI4NTE4NDkzMzkwNS8wL0MxNzhFODlBQzU4MkFFNzFENzg4MUZDODZFMjAx NDY2RjA5RDg0OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZGMDlEODQ5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1MDgyODUxODQ5MzM5MDUvMC9DMTc4RTg5QUM1ODJB RTcxRDc4ODFGQzg2RTIwMTQ2NkYwOUQ4NDlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUNDGAFW+Yg0 yWaXKd3TjvKU4FCk61YM5argw3/pMW2mWH1I5ULWJ/D6OogUEsK71sdQp6bINcSo J5nuiLndVldLwBnm+1NpFoDUmx13es6DAc+jlZRLud7xpZS02bL5+PG8hzemytid FemfBGF7zZdE5/zlAbde30nPZrWG2V/UpExDq9DOJvnEf6xGdeICEcZqLaU0Z85K PByHaPxUeko2hj9h+NwqT6cCgjfYDAg23lY2omc6OoJwuqQZmruPjyq6YZBa1S20 MgYnCZ8t0NRikP5KkYXOClEJXrSUkn6GtZGU/PJV3kJIbu9F4lxBc4OfDm/Wo3Pc xxsqRmB56A== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:52 2026 by rpki-client