$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json) Hash identifier: Fo5kejEjtS7fKmcMWZMhuPWxUOdD3JIJCvlaoH5QCHA= Subject key identifier: 1A:55:9E:AD:9E:F6:C8:0C:C9:AC:E2:24:C6:15:6D:40:36:F0:D6:FA Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 0E086484857F6D1A72B7549C05AF9D42705F7D9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft Manifest number: 27 Signing time: Tue 14 Jul 2026 09:20:57 +0000 Manifest this update: Tue 14 Jul 2026 09:15:57 +0000 Manifest next update: Wed 15 Jul 2026 13:08:57 +0000 Files and hashes: 1: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=) 2: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: 5+T+mqNbbdE90qYItO2oFgJxWDLSY84vrN6OWD1RhyU=) 3: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=) 4: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:08:64:84:85:7f:6d:1a:72:b7:54:9c:05:af:9d:42:70:5f:7d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Jul 14 09:15:57 2026 GMT Not After : Jul 15 13:08:57 2026 GMT Subject: CN=1A559EAD9EF6C80CC9ACE224C6156D4036F0D6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:e8:e2:8b:bf:18:b5:65:d8:dc:89:65:0b: 14:99:3a:36:aa:2f:4d:b2:4a:d3:ce:a3:78:ec:d5: c1:dd:ec:8b:c8:a6:29:47:08:94:19:63:e0:18:e3: 06:02:74:f1:ad:40:59:f7:31:f5:78:92:bf:cb:85: 1b:af:b4:f3:ea:f6:d7:c0:cb:ff:fd:4e:8f:bf:91: e5:dd:4d:c9:f4:7a:b4:ea:e4:df:48:04:c2:28:9a: c1:a3:a5:51:d4:59:f1:ff:f0:c8:c0:62:44:d2:b1: 08:bb:2d:4d:af:2a:8d:45:17:6d:63:34:04:e4:60: 04:eb:15:4f:48:13:b1:ca:08:69:38:75:4c:84:f3: c4:62:7b:24:9c:32:09:51:09:24:93:1a:28:c0:45: 95:6e:08:72:b6:78:da:f2:96:6a:b5:34:cd:5a:45: 46:9b:71:9f:c9:02:c9:5b:fa:0b:25:15:79:b5:fb: 09:7a:b9:5b:1f:50:c3:bd:6f:3a:c9:52:5e:16:df: a8:8c:9a:0b:46:7f:69:90:87:00:f0:45:e5:fe:76: a2:41:9d:7e:9c:9a:68:ee:5e:4e:40:a9:a9:e4:4d: 8b:a7:d5:ed:93:3c:4d:de:d5:4e:00:78:99:e7:15: 5a:ea:bd:b6:fc:c3:84:64:cb:74:a3:f0:56:5e:4c: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:55:9E:AD:9E:F6:C8:0C:C9:AC:E2:24:C6:15:6D:40:36:F0:D6:FA X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ad:41:b0:b5:60:d6:6e:e1:ea:2c:51:db:8c:ca:17:96:87: 35:d0:02:f2:76:90:b5:9b:9f:94:a8:15:10:ad:95:6d:90:68: 8e:72:86:d9:af:c6:5c:fe:4b:10:1a:4e:39:75:19:a4:5a:d1: 70:4f:60:69:71:b8:d7:ea:e6:90:4c:67:56:de:05:86:da:9e: 64:12:fe:9a:df:ee:3f:9d:1a:93:bb:b4:7c:95:e1:89:ce:3f: 97:e1:9f:a3:9e:a7:3f:32:92:82:49:28:88:88:6e:69:77:ce: 34:eb:4b:85:61:5b:75:9a:4f:d3:50:ba:b0:1c:6b:bf:d4:95: b2:29:cc:7c:bd:71:09:db:55:26:19:90:a5:18:b1:7e:c7:cc: ec:08:79:57:ab:e2:74:00:b3:af:df:3a:9d:9f:f8:67:f7:c8: 89:6b:e3:5c:18:67:35:90:ab:23:f8:8b:9e:47:d7:ae:a0:50: 84:cf:2a:b7:c3:19:3b:1b:3a:e7:80:66:0a:b4:fe:7e:67:04: 4f:dd:7a:f1:ff:ae:91:08:c1:5b:fd:f4:eb:9b:01:8c:34:5e: e2:ec:bf:2a:c3:0d:11:15:62:8c:28:18:0b:6e:a3:a7:13:29: 3a:75:22:43:87:4e:e4:46:34:c6:ad:c4:d5:03:d2:8b:bc:79: 6c:aa:8f:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDghkhIV/bRpyt1ScBa+dQnBffZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQx RDU0RTdEODAeFw0yNjA3MTQwOTE1NTdaFw0yNjA3MTUxMzA4NTdaMDMxMTAvBgNV BAMTKDFBNTU5RUFEOUVGNkM4MENDOUFDRTIyNEM2MTU2RDQwMzZGMEQ2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHOjii78YtWXY3IllCxSZOjaq L02yStPOo3js1cHd7IvIpilHCJQZY+AY4wYCdPGtQFn3MfV4kr/LhRuvtPPq9tfA y//9To+/keXdTcn0erTq5N9IBMIomsGjpVHUWfH/8MjAYkTSsQi7LU2vKo1FF21j NATkYATrFU9IE7HKCGk4dUyE88RieyScMglRCSSTGijARZVuCHK2eNrylmq1NM1a RUabcZ/JAslb+gslFXm1+wl6uVsfUMO9bzrJUl4W36iMmgtGf2mQhwDwReX+dqJB nX6cmmjuXk5AqankTYun1e2TPE3e1U4AeJnnFVrqvbb8w4Rky3Sj8FZeTOkbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGlWerZ72yAzJrOIkxhVtQDbw1vowHwYDVR0j BBgwFoAUGGaTOzQn2b7+V+PyCnBJvR1U59gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx OTE1MjY4NDU5MTQ4MDg2My8wLzE4NjY5MzNCMzQyN0Q5QkVGRTU3RTNGMjBBNzA0 OUJEMUQ1NEU3RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8xODY2OTMzQjM0MjdE OUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK1BsLVg1m7h 6ixR24zKF5aHNdAC8naQtZuflKgVEK2VbZBojnKG2a/GXP5LEBpOOXUZpFrRcE9g aXG41+rmkExnVt4FhtqeZBL+mt/uP50ak7u0fJXhic4/l+Gfo56nPzKSgkkoiIhu aXfONOtLhWFbdZpP01C6sBxrv9SVsinMfL1xCdtVJhmQpRixfsfM7Ah5V6vidACz r986nZ/4Z/fIiWvjXBhnNZCrI/iLnkfXrqBQhM8qt8MZOxs654BmCrT+fmcET916 8f+ukQjBW/3065sBjDRe4uy/KsMNERVijCgYC26jpxMpOnUiQ4dO5EY0xq3E1QPS i7x5bKqPkw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:03 2026 by rpki-client