$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft File: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json) Hash identifier: qzEO7LCl/HNDN+qwVaHWjUgMoTKnim28nP16l/4paPk= Subject key identifier: 97:5E:9A:28:EC:51:7F:1D:CD:D9:2F:2D:10:32:96:8E:D0:FA:FA:2A Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C Certificate issuer: /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C Certificate serial: 414A506531DC0DA1D92E9F7E37A5F4350A93916F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft Manifest number: 3E Signing time: Tue 21 Jul 2026 11:43:42 +0000 Manifest this update: Tue 21 Jul 2026 11:38:42 +0000 Manifest next update: Wed 22 Jul 2026 13:20:42 +0000 Files and hashes: 1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: YQHQudh+nBBaSusXJ4+BvY6HaWLcoRXMW5vtEY8yRA4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 13:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4a:50:65:31:dc:0d:a1:d9:2e:9f:7e:37:a5:f4:35:0a:93:91:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C Validity Not Before: Jul 21 11:38:42 2026 GMT Not After : Jul 22 13:20:42 2026 GMT Subject: CN=975E9A28EC517F1DCDD92F2D1032968ED0FAFA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:dd:c2:06:73:7e:50:fc:79:56:2f:a1:b9: 01:78:a7:22:b0:35:e9:62:ff:90:20:81:a5:03:75: 5a:36:4e:08:60:c5:41:76:eb:52:b2:25:41:a3:32: 7b:76:d5:e3:62:37:4f:a3:95:36:99:04:b4:7d:67: 94:e2:be:5c:ac:68:90:d3:88:21:3e:ec:a8:ac:a4: 7e:32:26:ca:65:56:cf:c3:a1:84:8b:75:23:de:e3: 62:72:c5:ff:b9:34:07:52:d9:f5:b2:ce:57:93:08: 97:9e:cc:1c:bf:b3:47:89:be:8f:14:1d:1d:93:01: 66:74:f3:10:7c:f2:7f:6b:de:09:c4:c1:4d:e7:31: d8:8d:82:26:a3:14:81:df:7c:a9:b3:ea:2c:21:42: 95:cc:57:6d:73:f3:a7:69:89:2f:08:55:4a:f0:16: 18:9c:a7:1b:a4:f6:f1:33:d7:16:fe:a5:09:78:14: 67:c3:eb:b9:77:34:75:0e:3a:02:27:42:5a:1f:2d: 43:53:b7:32:d8:cc:f5:b1:dc:cb:de:dc:bb:a2:21: c5:f7:ad:d7:02:73:7b:89:25:d5:8d:4c:d3:ee:61: 97:b4:44:2a:18:b1:29:c2:cf:7e:6f:b1:fe:35:af: 89:53:70:25:91:76:2f:ba:08:83:7f:50:18:46:58: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5E:9A:28:EC:51:7F:1D:CD:D9:2F:2D:10:32:96:8E:D0:FA:FA:2A X509v3 Authority Key Identifier: keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:43:fe:71:f0:2b:57:bd:ce:ff:99:69:c2:13:a6:95:7f:c2: 9d:dd:3f:9a:c8:b4:2e:84:e9:a6:eb:58:97:3b:1c:f2:c2:2c: c8:16:e1:aa:1b:5f:ad:78:dc:80:41:02:23:b5:f4:4e:af:e8: fa:00:0a:0b:2c:76:77:39:fc:d8:0f:29:82:49:0a:70:0c:6d: ad:ab:ee:06:de:6d:ce:2a:f4:91:9e:c2:f9:43:9c:64:bb:dd: f2:76:df:01:da:de:00:7c:af:db:37:c1:38:94:4f:87:07:69: dc:e2:56:cb:73:1c:a4:18:b8:88:ba:65:48:0d:cd:c6:7f:9a: f3:51:a8:d1:23:1d:b8:21:6d:bc:40:95:ac:1e:c0:20:be:27: d5:65:0d:0e:fd:b6:e6:38:66:61:f4:88:0c:32:81:28:45:14: 1c:f2:f3:c5:e3:67:e0:1d:9a:fa:55:32:69:47:8b:4e:29:b9: 8c:22:3e:ae:89:5c:e4:77:f5:17:3a:d9:ae:69:65:c2:04:56: c3:7f:fd:2b:c5:05:ba:4c:5e:cf:da:b9:81:67:c3:90:0d:95: 08:68:81:45:47:54:38:7d:74:e2:c8:51:51:5c:b6:58:1e:fd: 49:7a:65:90:9a:e6:7f:10:17:0f:e1:23:fc:d0:d9:8b:8d:0c: 8c:a5:b2:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQUpQZTHcDaHZLp9+N6X0NQqTkW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwM0QwMjlFRUZGQkQwM0MzMzY0N0E3NUMyQzU0RTlB ODFERDM4QzAeFw0yNjA3MjExMTM4NDJaFw0yNjA3MjIxMzIwNDJaMDMxMTAvBgNV BAMTKDk3NUU5QTI4RUM1MTdGMURDREQ5MkYyRDEwMzI5NjhFRDBGQUZBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACt3CBnN+UPx5Vi+huQF4pyKw Neli/5AggaUDdVo2TghgxUF261KyJUGjMnt21eNiN0+jlTaZBLR9Z5TivlysaJDT iCE+7KispH4yJsplVs/DoYSLdSPe42Jyxf+5NAdS2fWyzleTCJeezBy/s0eJvo8U HR2TAWZ08xB88n9r3gnEwU3nMdiNgiajFIHffKmz6iwhQpXMV21z86dpiS8IVUrw Fhicpxuk9vEz1xb+pQl4FGfD67l3NHUOOgInQlofLUNTtzLYzPWx3Mve3LuiIcX3 rdcCc3uJJdWNTNPuYZe0RCoYsSnCz35vsf41r4lTcCWRdi+6CIN/UBhGWA5fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl16aKOxRfx3N2S8tEDKWjtD6+iowHwYDVR0j BBgwFoAUXwPQKe7/vQPDNkenXCxU6agd04wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8wLzVGMDNEMDI5RUVGRkJEMDNDMzM2NDdBNzVDMkM1 NEU5QTgxREQzOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvNUYwM0QwMjlFRUZGQkQwM0MzMzY0N0E3NUMyQzU0RTlBODFERDM4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMC81RjAzRDAyOUVFRkZC RDAzQzMzNjQ3QTc1QzJDNTRFOUE4MUREMzhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUP+cfArV73O /5lpwhOmlX/Cnd0/msi0LoTpputYlzsc8sIsyBbhqhtfrXjcgEECI7X0Tq/o+gAK Cyx2dzn82A8pgkkKcAxtravuBt5tzir0kZ7C+UOcZLvd8nbfAdreAHyv2zfBOJRP hwdp3OJWy3McpBi4iLplSA3Nxn+a81Go0SMduCFtvECVrB7AIL4n1WUNDv225jhm YfSIDDKBKEUUHPLzxeNn4B2a+lUyaUeLTim5jCI+rolc5Hf1FzrZrmllwgRWw3/9 K8UFukxez9q5gWfDkA2VCGiBRUdUOH104shRUVy2WB79SXplkJrmfxAXD+Ej/NDZ i40MjKWywg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:19:56 2026 by rpki-client