$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft File: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft (raw, json) Hash identifier: frqe1jby0n3uyzZPD58sLqDBOOme3RcIuoLknL1OXRk= Subject key identifier: A0:19:0F:19:1D:54:78:1E:76:AD:4B:31:24:B8:9E:50:FA:6C:12:36 Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F Certificate issuer: /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Certificate serial: 0801A4A35C1E77538A1AAF7F4ECF33A03B03FF7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft Manifest number: 16 Signing time: Tue 14 Jul 2026 04:00:22 +0000 Manifest this update: Tue 14 Jul 2026 03:55:22 +0000 Manifest next update: Wed 15 Jul 2026 06:30:22 +0000 Files and hashes: 1: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl (hash: nRMhExvWaxbWnk3t3sjiQ3fEhzrFRhA2z0vzJpLv8SY=) 2: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (hash: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=) 3: 3131312e3231302e31362e302f32342d3332203d3e203435313036.roa (hash: y6rLG5MGWhuQpG3jyn5ZyzIM4qeNCE/D+iaUlbOa8X8=) 4: 3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (hash: 8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=) 5: 3131312e3230382e3132312e302f32342d3332203d3e2034383337.roa (hash: 1dEopTFRZW8mtpna1k4UYOCNYv3DaJ2ov+N+MWZqkTk=) 6: 3131312e3230382e3235342e302f32342d3332203d3e203435313036.roa (hash: /9/wcHPixQ3zSf0oWBQhT74E0lowSuv9Eu8B3+gZotQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:01:a4:a3:5c:1e:77:53:8a:1a:af:7f:4e:cf:33:a0:3b:03:ff:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Validity Not Before: Jul 14 03:55:22 2026 GMT Not After : Jul 15 06:30:22 2026 GMT Subject: CN=A0190F191D54781E76AD4B3124B89E50FA6C1236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:14:ce:f9:bc:59:41:a6:cc:32:55:ba:b4: db:25:9b:98:05:46:44:2c:06:6b:98:d1:8b:f6:51: 6b:38:3c:79:53:3c:17:85:04:93:47:ce:d3:25:97: ee:59:36:25:f0:20:58:bd:f2:ac:a7:23:80:33:c9: f8:44:8b:08:c8:bc:69:a3:d6:7f:c5:fa:b4:1d:6f: 32:32:e6:38:ca:e4:8a:d1:d6:88:2b:cc:73:90:02: b9:34:56:3d:0d:99:18:16:67:d2:58:8d:c9:ee:ce: c7:03:8d:6f:94:27:c6:15:3c:26:c5:5f:b7:a9:5d: 6a:1f:8d:1b:a8:8a:12:8c:14:5f:ab:1d:d5:16:1e: 57:c1:22:a7:52:27:53:ff:f3:29:8a:26:0a:e1:a8: fe:a3:87:e1:b7:bc:6e:74:17:df:ba:55:88:09:f2: 67:7a:45:30:2d:73:00:66:f7:5b:40:48:af:e9:b0: 5c:4d:54:30:f6:47:68:d3:e6:69:5f:ef:03:86:6d: ce:3e:d7:9b:af:1d:95:7f:6b:d0:ea:0c:e8:48:f3: d7:da:67:6c:9c:ca:c7:f6:09:f0:3c:24:65:91:48: 3d:b5:01:56:db:1a:46:17:d5:4d:5a:b4:c8:8b:a8: cd:4a:24:a6:d9:82:9f:63:85:d6:d0:a2:b2:56:4e: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:0F:19:1D:54:78:1E:76:AD:4B:31:24:B8:9E:50:FA:6C:12:36 X509v3 Authority Key Identifier: keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f7:ff:03:3b:2d:8b:d5:3a:32:23:60:e0:15:a9:4c:a6:bb: 41:49:42:f5:9b:c1:cc:54:5e:20:9a:68:ce:a1:2e:cc:62:f8: 5d:2c:38:65:21:97:b1:5e:5a:2b:03:8c:98:37:1d:cd:e2:1e: 2d:d5:9f:2f:52:ef:e4:ac:dd:c9:0f:c7:f2:9c:12:b4:d8:c6: 3f:48:d1:c9:20:8a:0b:3d:ca:05:fc:fa:2b:8d:d9:58:d6:0f: b4:dd:fa:8f:90:cd:98:8e:ca:48:24:34:df:3e:d4:be:21:d0: 48:77:78:81:71:55:92:f6:56:4d:3d:ef:9c:52:96:14:9a:39: 5b:a1:b3:50:a5:23:2d:92:dd:22:5f:1e:3f:2d:81:e4:bb:98: 8c:6a:bc:44:42:41:50:15:d1:f4:a0:6f:2e:0e:b5:b3:2f:2e: d2:bd:3d:6c:7d:0c:47:00:c2:f5:99:a0:5a:20:ec:e8:d9:66: 74:69:9b:7c:15:9a:fa:18:39:a7:75:4f:13:6d:e3:76:79:2e: 1c:5b:6f:1e:5b:ae:9d:17:38:25:04:01:6b:07:35:d8:96:8b: ab:68:b8:83:36:c6:b2:c8:2b:01:d6:ab:be:fb:0f:04:1c:44: ef:de:6c:c9:3c:05:07:27:0f:3d:d3:19:fa:bb:c8:45:ba:30: a5:a4:b7:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCAGko1wed1OKGq9/Ts8zoDsD/3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdB RjM1RkE4RjAeFw0yNjA3MTQwMzU1MjJaFw0yNjA3MTUwNjMwMjJaMDMxMTAvBgNV BAMTKEEwMTkwRjE5MUQ1NDc4MUU3NkFENEIzMTI0Qjg5RTUwRkE2QzEyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7xTO+bxZQabMMlW6tNslm5gF RkQsBmuY0Yv2UWs4PHlTPBeFBJNHztMll+5ZNiXwIFi98qynI4AzyfhEiwjIvGmj 1n/F+rQdbzIy5jjK5IrR1ogrzHOQArk0Vj0NmRgWZ9JYjcnuzscDjW+UJ8YVPCbF X7epXWofjRuoihKMFF+rHdUWHlfBIqdSJ1P/8ymKJgrhqP6jh+G3vG50F9+6VYgJ 8md6RTAtcwBm91tASK/psFxNVDD2R2jT5mlf7wOGbc4+15uvHZV/a9DqDOhI89fa Z2ycysf2CfA8JGWRSD21AVbbGkYX1U1atMiLqM1KJKbZgp9jhdbQorJWTrhPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoBkPGR1UeB52rUsxJLieUPpsEjYwHwYDVR0j BBgwFoAUfo693OIzEvr5F1hYH7FD9681+o8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MDUyMzEzMTc4MTE1NS8wLzdFOEVCRERDRTIzMzEyRkFGOTE3NTg1ODFGQjE0 M0Y3QUYzNUZBOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdBRjM1RkE4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4ODA1MjMxMzE3ODExNTUvMC83RThFQkREQ0UyMzMx MkZBRjkxNzU4NTgxRkIxNDNGN0FGMzVGQThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEff/Azsti9U6 MiNg4BWpTKa7QUlC9ZvBzFReIJpozqEuzGL4XSw4ZSGXsV5aKwOMmDcdzeIeLdWf L1Lv5KzdyQ/H8pwStNjGP0jRySCKCz3KBfz6K43ZWNYPtN36j5DNmI7KSCQ03z7U viHQSHd4gXFVkvZWTT3vnFKWFJo5W6GzUKUjLZLdIl8ePy2B5LuYjGq8REJBUBXR 9KBvLg61sy8u0r09bH0MRwDC9ZmgWiDs6NlmdGmbfBWa+hg5p3VPE23jdnkuHFtv HluunRc4JQQBawc12JaLq2i4gzbGssgrAdarvvsPBBxE795syTwFBycPPdMZ+rvI RbowpaS3Tw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:58 2026 by rpki-client