$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: OiQwlQ8SWt1uq3o0amGO0K63ivC4aOEB/cF0RgeR5Ew= Subject key identifier: D8:72:C2:AC:5C:BD:6C:A4:DC:AD:B7:DC:A2:FB:CD:64:A1:D5:4B:DF Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: 66E5D3CA60F315716BC0C77EE61FABBC34FC0BB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 4C Signing time: Mon 27 Jul 2026 14:24:15 +0000 Manifest this update: Mon 27 Jul 2026 14:19:15 +0000 Manifest next update: Tue 28 Jul 2026 17:00:15 +0000 Files and hashes: 1: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: Iat3Xb3uV9xQGjxrq0JpT7Bovw+MH7hkcc1wGpWHA1M=) 2: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=) 3: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=) 4: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e5:d3:ca:60:f3:15:71:6b:c0:c7:7e:e6:1f:ab:bc:34:fc:0b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Jul 27 14:19:15 2026 GMT Not After : Jul 28 17:00:15 2026 GMT Subject: CN=D872C2AC5CBD6CA4DCADB7DCA2FBCD64A1D54BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:98:f6:a0:d5:d7:6b:8f:91:eb:7b:f1:a1:06: 37:20:f1:24:49:c5:12:73:11:fb:a1:4e:3c:7a:7d: 07:c9:41:6d:9c:23:48:18:d2:c9:e8:7e:d2:d3:aa: 05:09:93:be:af:d3:37:5d:cc:44:3e:cd:e0:46:a0: b0:de:7b:bc:11:44:d0:ac:7e:f3:06:78:27:92:dd: 5b:19:21:05:3c:19:8c:02:ce:a8:d4:81:0b:e7:cd: 14:08:d1:cc:35:72:b1:0d:3f:44:40:3f:b2:f9:39: 8d:5f:0c:5b:20:a5:44:83:5d:b6:cb:12:6f:87:75: f5:55:24:83:fa:2c:51:e6:78:96:8e:d1:95:95:f0: 26:5b:36:8d:29:91:d7:18:2d:a4:fd:da:4a:01:0a: 43:95:2b:60:e9:27:59:0a:6f:5c:c6:59:ae:f8:6a: 39:f8:28:cc:a4:85:72:bd:e4:fc:39:27:76:10:dc: a2:49:b1:4e:59:d8:07:90:23:5d:b8:cd:9f:06:84: d4:db:05:83:b1:0e:f8:e4:82:f6:40:6e:e5:e2:b2: fa:6d:da:75:3e:96:10:a3:06:27:9b:5e:4f:1e:a8: d9:8e:ce:39:e3:74:a2:be:03:1f:4d:f8:9f:46:0d: 47:e0:1d:fd:19:75:51:ec:a3:26:23:e2:b9:10:ef: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:C2:AC:5C:BD:6C:A4:DC:AD:B7:DC:A2:FB:CD:64:A1:D5:4B:DF X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7c:6d:5e:38:02:d2:de:3b:d3:34:bb:0d:ad:3a:35:ef:1c: 18:3b:78:ca:ae:80:07:ea:77:e2:d6:0e:3e:37:25:f9:de:38: f8:14:5a:60:4c:ae:24:07:e5:95:38:56:f1:59:33:28:68:6a: 8b:ae:7a:c9:ba:fa:db:85:47:87:1e:5f:64:cc:d0:23:75:a6: 42:6b:33:c8:8f:26:ed:46:6a:70:b6:19:56:19:83:b9:7e:cb: 15:74:4e:c2:15:e4:45:2f:96:c0:82:9c:02:32:70:48:66:b7: 53:dd:e7:f0:06:17:18:e0:0e:e3:06:36:0d:1d:dd:d4:db:e3: 2c:89:5d:c8:1d:ea:30:ef:b2:4c:92:b9:71:0a:0c:bd:c1:da: d5:cc:00:03:84:fa:ae:c8:cb:b0:ff:61:ac:59:4d:59:cf:b8: 19:ec:9d:34:2c:1d:39:91:2b:a5:0d:17:0e:68:17:a5:4d:cc: a5:58:82:90:28:ab:05:1f:1f:60:38:ef:74:60:99:bd:80:b8: 70:f3:51:f3:52:a5:d3:4f:fc:ae:39:6e:8e:e4:6a:a6:11:19: fb:75:7f:27:39:84:77:71:7f:29:91:fd:7c:bf:6d:30:a7:ed: 70:08:f6:ed:a4:14:b8:a2:61:07:43:c7:ec:b1:41:49:b4:b9: f7:a2:01:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZuXTymDzFXFrwMd+5h+rvDT8C7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjA3MjcxNDE5MTVaFw0yNjA3MjgxNzAwMTVaMDMxMTAvBgNV BAMTKEQ4NzJDMkFDNUNCRDZDQTREQ0FEQjdEQ0EyRkJDRDY0QTFENTRCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzmPag1ddrj5Hre/GhBjcg8SRJ xRJzEfuhTjx6fQfJQW2cI0gY0snoftLTqgUJk76v0zddzEQ+zeBGoLDee7wRRNCs fvMGeCeS3VsZIQU8GYwCzqjUgQvnzRQI0cw1crENP0RAP7L5OY1fDFsgpUSDXbbL Em+HdfVVJIP6LFHmeJaO0ZWV8CZbNo0pkdcYLaT92koBCkOVK2DpJ1kKb1zGWa74 ajn4KMykhXK95Pw5J3YQ3KJJsU5Z2AeQI124zZ8GhNTbBYOxDvjkgvZAbuXisvpt 2nU+lhCjBiebXk8eqNmOzjnjdKK+Ax9N+J9GDUfgHf0ZdVHsoyYj4rkQ7xz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2HLCrFy9bKTcrbfcovvNZKHVS98wHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHxtXjgC0t47 0zS7Da06Ne8cGDt4yq6AB+p34tYOPjcl+d44+BRaYEyuJAfllThW8VkzKGhqi656 ybr624VHhx5fZMzQI3WmQmszyI8m7UZqcLYZVhmDuX7LFXROwhXkRS+WwIKcAjJw SGa3U93n8AYXGOAO4wY2DR3d1NvjLIldyB3qMO+yTJK5cQoMvcHa1cwAA4T6rsjL sP9hrFlNWc+4GeydNCwdOZErpQ0XDmgXpU3MpViCkCirBR8fYDjvdGCZvYC4cPNR 81Kl00/8rjlujuRqphEZ+3V/JzmEd3F/KZH9fL9tMKftcAj27aQUuKJhB0PH7LFB SbS596IBVQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:41:38 2026 by rpki-client