$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: Y2Di6XMpi7P2q327SSWlucuA40ZKuNdIr7JljdcJNss= Subject key identifier: 86:D5:23:1D:45:93:B7:C7:02:9B:80:C9:36:30:25:3D:FC:33:5D:C7 Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: B4BFE5F51644D0F450A8C4392F82081858116A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 7D Signing time: Wed 09 Sep 2026 22:25:33 +0000 Manifest this update: Wed 09 Sep 2026 22:20:33 +0000 Manifest next update: Sun 13 Sep 2026 08:01:33 +0000 Files and hashes: 1: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) 2: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: 7YkwuhU8XFh/t3mOYZCU4b84VvLw9e3qbFrbVvl9JW0=) 3: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=) 4: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b4:bf:e5:f5:16:44:d0:f4:50:a8:c4:39:2f:82:08:18:58:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Sep 9 22:20:33 2026 GMT Not After : Sep 13 08:01:33 2026 GMT Subject: CN=86D5231D4593B7C7029B80C93630253DFC335DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:05:e3:1c:9e:c1:bd:92:60:69:a9:82:7e: 8f:8e:02:af:d2:ae:2e:58:f4:24:f1:b9:1b:b2:c9: b1:2b:d4:ba:ac:98:0c:c4:1d:4b:8b:ee:f7:24:66: de:72:f5:e2:6a:f4:c9:9d:8d:dd:e8:74:ed:0a:c5: d8:47:3d:f3:b0:f8:b8:9a:3e:42:82:d7:0a:91:ad: 5d:3f:6a:87:a1:c2:d4:20:09:8d:ec:c2:60:56:0e: c3:40:e1:59:c2:36:2a:a3:b2:00:fd:77:b8:4c:6d: df:5c:c8:a1:5e:f1:4b:cf:91:42:b4:22:06:84:fa: f1:f9:f6:1d:c4:9d:01:bf:b7:33:10:a0:b7:47:e4: b5:3c:f1:ef:a9:29:00:53:d9:0d:83:26:c6:19:27: e9:68:c4:38:6e:79:43:6d:de:8e:92:bf:6e:16:53: c4:e1:60:f2:b3:50:51:89:ea:d1:11:eb:22:5e:50: 18:f5:fe:ef:2a:3b:ec:f9:f2:04:47:46:c5:8d:b8: 54:c2:86:f5:a3:04:d5:5f:fc:dc:07:75:27:a4:22: ce:fa:15:c0:3a:a6:c4:3f:14:17:cc:93:73:e5:3c: 6d:f3:eb:88:6b:66:49:31:9a:11:84:ea:cb:0a:4d: 8d:51:41:64:0c:95:3a:ac:ae:82:ce:8f:49:4a:24: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:23:1D:45:93:B7:C7:02:9B:80:C9:36:30:25:3D:FC:33:5D:C7 X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:0c:cd:2b:d6:6e:80:82:94:ea:3b:f3:b3:56:a1:c5:23: 00:fb:ab:8b:51:a1:73:b6:8b:fa:23:e2:63:37:d2:65:ae:56: 83:f2:50:ac:aa:ac:0c:95:16:f0:d8:fb:bf:91:1a:47:2d:82: 51:c2:86:66:be:7a:9e:99:a5:d9:5f:d9:bd:ea:17:8e:b7:6a: d1:d9:8d:4f:7e:56:53:47:05:3a:2f:9d:b1:b9:00:63:a2:8b: 98:57:bd:15:99:e6:05:b1:52:4b:72:a0:0b:06:dc:9f:89:39: eb:90:fb:7d:d0:61:60:1c:dd:a1:95:5c:e7:c9:03:3b:8f:c9: 4d:eb:71:98:2e:3d:51:61:4d:f1:66:73:56:d6:16:81:4d:b1: 48:b7:2d:51:46:9b:73:24:0d:9c:24:79:cb:ca:52:ec:3b:fa: 99:25:cc:06:0f:59:62:26:21:5d:56:e5:52:d6:48:ca:c6:aa: ec:15:1c:f3:5b:c6:7e:bf:40:7d:12:20:a4:78:34:bf:79:7c: 56:b6:3b:20:44:d4:e5:46:84:49:12:f9:01:bc:66:ba:1a:9f: 04:01:1f:52:30:72:a9:59:3a:b0:2f:50:81:2b:ba:f0:0e:a6: b6:1f:86:2e:d2:a4:e0:fd:ca:cf:e8:a2:b8:b0:47:2e:86:c9: 36:5d:38:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUALS/5fUWRND0UKjEOS+CCBhYEWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjA5MDkyMjIwMzNaFw0yNjA5MTMwODAxMzNaMDMxMTAvBgNV BAMTKDg2RDUyMzFENDU5M0I3QzcwMjlCODBDOTM2MzAyNTNERkMzMzVEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FgXjHJ7BvZJgaamCfo+OAq/S ri5Y9CTxuRuyybEr1LqsmAzEHUuL7vckZt5y9eJq9Mmdjd3odO0KxdhHPfOw+Lia PkKC1wqRrV0/aoehwtQgCY3swmBWDsNA4VnCNiqjsgD9d7hMbd9cyKFe8UvPkUK0 IgaE+vH59h3EnQG/tzMQoLdH5LU88e+pKQBT2Q2DJsYZJ+loxDhueUNt3o6Sv24W U8ThYPKzUFGJ6tER6yJeUBj1/u8qO+z58gRHRsWNuFTChvWjBNVf/NwHdSekIs76 FcA6psQ/FBfMk3PlPG3z64hrZkkxmhGE6ssKTY1RQWQMlTqsroLOj0lKJC1lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhtUjHUWTt8cCm4DJNjAlPfwzXccwHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmcMzSvWboCC lOo787NWocUjAPuri1Ghc7aL+iPiYzfSZa5Wg/JQrKqsDJUW8Nj7v5EaRy2CUcKG Zr56npml2V/ZveoXjrdq0dmNT35WU0cFOi+dsbkAY6KLmFe9FZnmBbFSS3KgCwbc n4k565D7fdBhYBzdoZVc58kDO4/JTetxmC49UWFN8WZzVtYWgU2xSLctUUabcyQN nCR5y8pS7Dv6mSXMBg9ZYiYhXVblUtZIysaq7BUc81vGfr9AfRIgpHg0v3l8VrY7 IETU5UaESRL5AbxmuhqfBAEfUjByqVk6sC9QgSu68A6mth+GLtKk4P3Kz+iiuLBH LobJNl04qA== -----END CERTIFICATE-----Generated at Thu Sep 10 17:47:30 2026 by rpki-client