$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json) Hash identifier: 0R9dIMIcP/ugyn3nun4fSORsVWhKdFw0tMmIE4RJtSI= Subject key identifier: 2E:BC:AE:2B:9B:8B:6A:F9:85:95:68:9C:A7:0E:63:D3:A6:32:F5:79 Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 2779BC89489AC5E9F77F1E2C51BAEAF8AC266F3C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft Manifest number: 43 Signing time: Mon 13 Jul 2026 23:34:51 +0000 Manifest this update: Mon 13 Jul 2026 23:29:51 +0000 Manifest next update: Wed 15 Jul 2026 03:04:51 +0000 Files and hashes: 1: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=) 2: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=) 3: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=) 4: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: fzUNRz1+O3zUCvCdritYYKGgAqeYoB/s8ie7rRLOxvE=) 5: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:79:bc:89:48:9a:c5:e9:f7:7f:1e:2c:51:ba:ea:f8:ac:26:6f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: Jul 13 23:29:51 2026 GMT Not After : Jul 15 03:04:51 2026 GMT Subject: CN=2EBCAE2B9B8B6AF98595689CA70E63D3A632F579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:de:4e:10:2f:51:0d:d6:1b:73:bd:b5:a2:9d: 8b:44:66:46:33:52:b4:23:f9:65:f0:17:95:d8:c2: e3:92:59:09:ac:bd:00:ff:b6:8f:b1:9d:18:6e:87: 52:07:58:1c:7a:cc:d1:ae:2a:1a:09:a0:b9:6d:6a: f2:95:04:08:4c:df:06:a8:cf:25:bb:a3:c4:48:23: 8a:cc:72:21:8d:33:03:25:50:f4:0e:0a:ec:2b:bf: 0c:81:c9:09:0d:ef:40:72:ab:49:38:af:a7:1e:5c: 03:c8:cd:40:07:67:34:f9:b3:be:4d:5f:56:ca:64: 86:19:94:5f:54:4e:cc:df:aa:ee:d5:4c:ad:c7:74: 08:38:e0:5e:78:b7:27:53:e5:77:63:42:7f:fb:77: 9a:2d:50:c7:de:68:f0:f6:94:fa:6e:b9:ab:08:07: c3:52:51:84:bf:05:27:73:26:3e:09:59:e7:62:ba: 3f:af:6c:5f:da:a9:c5:34:fd:78:3b:1d:d4:38:87: dc:f8:a4:03:d3:37:15:90:3e:53:2a:b6:5e:cf:cd: b4:48:3b:26:dd:e1:c1:af:d8:24:41:f1:d9:0e:36: de:3e:ea:29:4e:ce:a1:f6:1d:89:b1:fe:6b:a2:d6: 91:95:ce:ff:dc:cc:72:9e:c9:00:fb:b4:f0:53:5b: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BC:AE:2B:9B:8B:6A:F9:85:95:68:9C:A7:0E:63:D3:A6:32:F5:79 X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e4:d3:61:c4:c2:0f:77:30:17:67:63:bb:5a:80:db:7b:8e: 51:55:33:44:ef:3d:fa:b8:a0:65:ac:5f:a6:18:75:fb:2a:62: 51:4d:5c:6c:1a:1c:d2:69:a7:f3:ce:df:e8:f1:ed:dd:79:fe: 72:12:20:7a:67:2b:d0:61:45:2a:9e:72:d8:29:29:5e:28:d6: b9:c9:1e:d1:6d:e6:cb:7e:97:43:1c:95:f7:04:7b:e6:0a:da: c0:ff:a0:7f:80:03:cc:61:0a:8d:d3:13:a1:35:ac:51:8e:17: 8c:52:41:c6:da:12:fa:9c:a4:36:12:93:10:e2:54:47:28:f6: 03:35:c4:15:60:a4:16:2c:40:7a:b6:0c:aa:6f:e9:39:d1:4a: fc:d7:2a:f3:8e:80:70:91:d5:6b:00:6e:4d:2d:12:e3:d7:41: 52:6e:d1:d6:1e:e4:c0:a4:c9:81:8d:e4:91:8b:de:90:f9:e4: 9a:a1:16:dd:35:5e:ba:35:30:31:c7:16:81:24:97:5d:ab:9e: 25:4f:74:38:7b:7f:c9:99:95:41:4a:4a:ee:e5:8b:66:08:64: a8:22:bc:18:b4:42:05:c4:a2:ed:49:1b:84:bc:2e:0c:6e:91: 69:16:06:4a:7e:12:49:c8:eb:32:c9:d0:9a:a0:8b:77:40:71: 11:97:0b:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ3m8iUiaxen3fx4sUbrq+KwmbzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjA3MTMyMzI5NTFaFw0yNjA3MTUwMzA0NTFaMDMxMTAvBgNV BAMTKDJFQkNBRTJCOUI4QjZBRjk4NTk1Njg5Q0E3MEU2M0QzQTYzMkY1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH3k4QL1EN1htzvbWinYtEZkYz UrQj+WXwF5XYwuOSWQmsvQD/to+xnRhuh1IHWBx6zNGuKhoJoLltavKVBAhM3wao zyW7o8RII4rMciGNMwMlUPQOCuwrvwyByQkN70Byq0k4r6ceXAPIzUAHZzT5s75N X1bKZIYZlF9UTszfqu7VTK3HdAg44F54tydT5XdjQn/7d5otUMfeaPD2lPpuuasI B8NSUYS/BSdzJj4JWediuj+vbF/aqcU0/Xg7HdQ4h9z4pAPTNxWQPlMqtl7PzbRI Oybd4cGv2CRB8dkONt4+6ilOzqH2HYmx/mui1pGVzv/czHKeyQD7tPBTW5AvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULryuK5uLavmFlWicpw5j06Yy9XkwHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE1NTI0MzMyMjM0MzQyNTkvMC9BNjg3RUEzMEZEOUU5 NUIwQkI0NjZEQURGMEUyN0FGOThGMjE3Q0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOTTYcTCD3cw F2dju1qA23uOUVUzRO89+rigZaxfphh1+ypiUU1cbBoc0mmn887f6PHt3Xn+chIg emcr0GFFKp5y2CkpXijWucke0W3my36XQxyV9wR75grawP+gf4ADzGEKjdMToTWs UY4XjFJBxtoS+pykNhKTEOJURyj2AzXEFWCkFixAerYMqm/pOdFK/Ncq846AcJHV awBuTS0S49dBUm7R1h7kwKTJgY3kkYvekPnkmqEW3TVeujUwMccWgSSXXaueJU90 OHt/yZmVQUpK7uWLZghkqCK8GLRCBcSi7UkbhLwuDG6RaRYGSn4SScjrMsnQmqCL d0BxEZcLFw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:13:59 2026 by rpki-client