$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft File: 209BC812EEDDC6074713463D5583CB221EADC76F.mft (raw, json) Hash identifier: NDwjFMRobmnOUvvy0bIz0+6D9iRM+RKs1sT36qkljuE= Subject key identifier: 46:D6:98:BE:6B:0F:BF:47:8A:12:4B:3F:AD:36:ED:30:B8:3E:A2:8D Authority key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Certificate issuer: /CN=209BC812EEDDC6074713463D5583CB221EADC76F Certificate serial: 4323AD88AA4E07B7961993E20F4FAB96322B7127 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft Manifest number: 18 Signing time: Tue 14 Jul 2026 01:05:03 +0000 Manifest this update: Tue 14 Jul 2026 01:00:03 +0000 Manifest next update: Wed 15 Jul 2026 03:36:03 +0000 Files and hashes: 1: 209BC812EEDDC6074713463D5583CB221EADC76F.crl (hash: NtFVhmxjJMp71UHgey1cMKKYj69IYeDayMh3F9IEduQ=) 2: 3130332e39342e3230302e302f32322d3232203d3e20313331353139.roa (hash: JkhFH/THm9PGFP3jbTiekW7qVacmJjfKOzsxGbPKmW8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:23:ad:88:aa:4e:07:b7:96:19:93:e2:0f:4f:ab:96:32:2b:71:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209BC812EEDDC6074713463D5583CB221EADC76F Validity Not Before: Jul 14 01:00:03 2026 GMT Not After : Jul 15 03:36:03 2026 GMT Subject: CN=46D698BE6B0FBF478A124B3FAD36ED30B83EA28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:36:4d:13:3e:95:96:20:8e:55:63:f3:02: d9:d2:e8:0a:1a:cf:fe:cc:fe:0a:b4:82:ab:20:16: ca:60:cb:24:ea:04:ae:e0:c7:9e:5b:86:d7:99:b3: 5f:dc:fb:e7:e4:80:b7:19:56:13:69:b2:8e:5f:fc: d1:9a:4c:f0:9e:3a:15:d4:29:d7:1b:02:5f:c1:27: c4:e3:e4:25:51:ba:64:67:d1:b0:a6:cd:46:5c:89: d8:de:c7:e8:06:ab:74:2c:dd:0d:ae:f7:4c:08:71: 6a:f4:24:42:66:6c:a2:74:94:af:c9:62:ca:14:64: 49:91:5f:e6:62:d5:55:8a:58:e3:a9:de:c3:70:a4: 9b:28:dd:4e:37:23:93:7a:64:87:34:37:42:cf:2a: cf:87:70:10:40:6c:a4:88:12:1b:ae:b1:a0:d4:aa: 66:8a:c0:d8:7f:50:14:39:cc:31:f6:e5:74:21:08: 45:87:1d:78:d1:8e:15:ce:4c:52:a3:fa:8d:68:bc: 9b:74:9b:2f:aa:b9:98:fa:dc:49:5c:50:82:b1:8b: f1:9a:61:bd:11:38:f6:62:fa:b8:87:cf:77:f3:2f: 41:98:9a:63:21:60:0c:bf:4b:5b:d9:24:f6:2c:a3: d6:9f:15:03:7e:e8:56:ea:18:c0:c0:2a:88:21:6c: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:98:BE:6B:0F:BF:47:8A:12:4B:3F:AD:36:ED:30:B8:3E:A2:8D X509v3 Authority Key Identifier: keyid:20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8c:00:7f:fa:e6:e3:83:ac:24:da:47:18:04:ad:1f:1d:12: 43:74:ca:37:2e:53:dc:96:7c:8f:84:43:59:50:d9:14:82:34: 6d:29:6a:24:cc:6a:3c:7b:b9:50:ae:06:2d:54:f3:51:82:e1: fe:87:88:6f:a5:70:b6:20:2e:43:5c:c3:4a:13:f9:e3:a2:f7: c4:78:9c:b2:79:e4:53:6d:d4:89:61:c0:d0:ce:f6:38:90:72: 24:a2:08:e8:12:58:11:76:9b:96:ee:26:f0:65:9a:ad:30:18: b7:c7:c9:05:1a:77:21:b5:3a:bd:1b:f9:33:ad:af:68:e5:73: da:ad:f7:c5:b5:1d:9e:6f:5e:98:30:53:64:09:ef:e5:9a:56: 9d:34:fe:05:73:9e:7f:6e:4f:71:de:e2:b6:2e:6f:4e:c5:24: bb:4d:80:b1:79:c7:41:f9:27:ec:cf:e3:08:de:04:f0:43:aa: 53:9f:0e:73:19:09:53:82:bc:83:94:0b:ba:11:29:6f:3d:14: e9:0c:39:f3:6a:85:aa:b4:9b:4c:bd:1e:92:8f:99:dc:a5:01: 46:33:8e:73:fb:4a:ff:6f:fb:d2:19:ef:e1:5d:20:47:7f:6c: 56:37:7f:89:08:8c:e6:d0:96:3c:f1:91:e4:58:1a:2e:6f:f7: 17:dc:e3:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQyOtiKpOB7eWGZPiD0+rljIrcScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIx RUFEQzc2RjAeFw0yNjA3MTQwMTAwMDNaFw0yNjA3MTUwMzM2MDNaMDMxMTAvBgNV BAMTKDQ2RDY5OEJFNkIwRkJGNDc4QTEyNEIzRkFEMzZFRDMwQjgzRUEyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqDZNEz6VliCOVWPzAtnS6Aoa z/7M/gq0gqsgFspgyyTqBK7gx55bhteZs1/c++fkgLcZVhNpso5f/NGaTPCeOhXU KdcbAl/BJ8Tj5CVRumRn0bCmzUZcidjex+gGq3Qs3Q2u90wIcWr0JEJmbKJ0lK/J YsoUZEmRX+Zi1VWKWOOp3sNwpJso3U43I5N6ZIc0N0LPKs+HcBBAbKSIEhuusaDU qmaKwNh/UBQ5zDH25XQhCEWHHXjRjhXOTFKj+o1ovJt0my+quZj63ElcUIKxi/Ga Yb0ROPZi+riHz3fzL0GYmmMhYAy/S1vZJPYso9afFQN+6FbqGMDAKoghbH5FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURtaYvmsPv0eKEks/rTbtMLg+oo0wHwYDVR0j BBgwFoAUIJvIEu7dxgdHE0Y9VYPLIh6tx28wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzI4MTMyNTg0MzgwODI5NS8wLzIwOUJDODEyRUVEREM2MDc0NzEzNDYzRDU1ODND QjIyMUVBREM3NkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjMyODEzMjU4NDM4MDgyOTUvMC8yMDlCQzgxMkVFRERD NjA3NDcxMzQ2M0Q1NTgzQ0IyMjFFQURDNzZGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYwAf/rm44Os JNpHGAStHx0SQ3TKNy5T3JZ8j4RDWVDZFII0bSlqJMxqPHu5UK4GLVTzUYLh/oeI b6VwtiAuQ1zDShP546L3xHicsnnkU23UiWHA0M72OJByJKII6BJYEXablu4m8GWa rTAYt8fJBRp3IbU6vRv5M62vaOVz2q33xbUdnm9emDBTZAnv5ZpWnTT+BXOef25P cd7iti5vTsUku02AsXnHQfkn7M/jCN4E8EOqU58OcxkJU4K8g5QLuhEpbz0U6Qw5 82qFqrSbTL0eko+Z3KUBRjOOc/tK/2/70hnv4V0gR39sVjd/iQiM5tCWPPGR5Fga Lm/3F9zjng== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:58 2026 by rpki-client