$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json) Hash identifier: v0tuYjE7PA5u6JjwgTdIubcti7J5br4RVwgM9MQNmSU= Subject key identifier: 2F:02:EB:1E:85:1F:2C:DE:05:B7:1D:49:09:6F:3B:74:F4:47:8A:F3 Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Certificate serial: 751096DCDD15C44912C3E1A61CD777F243699FEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft Manifest number: 16 Signing time: Tue 14 Jul 2026 08:10:48 +0000 Manifest this update: Tue 14 Jul 2026 08:05:48 +0000 Manifest next update: Wed 15 Jul 2026 12:02:48 +0000 Files and hashes: 1: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: Z7HOUgXYZYkv8yX+OQDQOJL0HAy1m5utKrBSSn29z1k=) 2: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:96:dc:dd:15:c4:49:12:c3:e1:a6:1c:d7:77:f2:43:69:9f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Validity Not Before: Jul 14 08:05:48 2026 GMT Not After : Jul 15 12:02:48 2026 GMT Subject: CN=2F02EB1E851F2CDE05B71D49096F3B74F4478AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:02:a5:b2:dd:82:63:b9:f0:9a:a0:91:60: 81:cd:70:c1:62:83:3d:03:6b:00:7c:dd:1f:6e:ab: 7e:8d:91:c3:ff:cd:ec:ee:4a:2e:41:b7:dd:c8:d8: a2:ec:ed:50:56:db:e2:13:1e:98:53:c0:87:fc:d0: 0f:6f:f2:cf:06:b5:f0:07:07:73:ea:08:df:41:de: 0b:88:fb:96:1b:cb:14:ef:b3:e0:9c:08:fa:a6:3e: d9:3a:ee:21:28:a2:dd:5e:47:ea:b0:00:bf:f0:54: 17:70:32:c7:51:3c:09:8c:49:e5:1b:7c:3c:1f:33: dc:8a:94:39:83:9b:ce:b2:c1:a4:2b:36:e1:3a:16: 7e:94:f5:52:2e:fc:09:26:5f:64:e2:a4:7e:07:7e: 1d:96:eb:05:bf:2e:91:1a:03:c3:87:31:34:e0:92: 17:52:71:24:1e:cf:b0:4e:2a:b3:fa:c8:27:ba:41: 19:83:94:36:9e:de:fb:91:ee:f8:4d:72:bf:63:24: e4:0f:42:d4:ce:79:b1:6b:46:58:6a:dd:dd:8d:ea: 7e:06:10:19:4d:41:70:b1:cd:87:72:bd:be:50:18: 7a:7b:3d:fb:16:91:82:4e:00:61:8a:4d:6c:a0:01: 5c:49:e7:fa:f8:a4:db:53:5e:2e:87:90:d5:cd:70: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:EB:1E:85:1F:2C:DE:05:B7:1D:49:09:6F:3B:74:F4:47:8A:F3 X509v3 Authority Key Identifier: keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:eb:9c:9c:f5:04:22:0e:c6:26:00:bc:43:e5:a5:ec:74:fe: bd:9b:ce:6c:09:11:83:05:e3:8d:2e:34:59:1e:5b:5e:19:ec: 5c:a6:aa:f1:59:5d:15:4e:79:b0:cb:89:18:02:d7:95:eb:88: 1a:d9:8f:5d:08:bd:3f:a8:e6:d5:7b:43:bb:2d:ae:e2:88:96: ba:e5:2b:73:ce:c5:80:2e:5a:8b:a9:b4:e0:ed:f8:c7:36:f4: 0b:cb:e7:90:1e:9f:60:d1:51:7f:9b:ec:66:ed:95:1f:a1:5e: 6d:85:fe:ae:bc:1d:93:8d:98:34:e2:10:d6:38:c7:b2:35:a4: 65:1e:ba:48:47:86:32:21:2f:61:10:d6:dd:b1:26:0e:33:c8: 2d:c9:b7:6f:75:7c:90:d8:52:86:43:95:3f:0f:36:60:5f:1f: 7c:c9:c8:26:af:19:34:0c:df:b9:49:32:7a:f3:c8:78:5a:aa: 24:95:25:17:0c:45:b1:7e:62:d8:c8:0c:2a:ad:4e:d3:26:46: f3:e1:63:8f:c6:a1:67:49:0e:4f:dd:f4:e8:25:e4:05:50:67: e0:8f:e7:db:72:82:aa:5d:2f:80:aa:83:fe:7a:8a:9b:b2:0c: 77:83:9c:0c:0a:00:02:9a:94:f6:b6:cb:a6:40:a7:a0:46:57: 48:d5:8d:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdRCW3N0VxEkSw+GmHNd38kNpn+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENF NDY2QTYyMDAeFw0yNjA3MTQwODA1NDhaFw0yNjA3MTUxMjAyNDhaMDMxMTAvBgNV BAMTKDJGMDJFQjFFODUxRjJDREUwNUI3MUQ0OTA5NkYzQjc0RjQ0NzhBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVQKlst2CY7nwmqCRYIHNcMFi gz0DawB83R9uq36NkcP/zezuSi5Bt93I2KLs7VBW2+ITHphTwIf80A9v8s8GtfAH B3PqCN9B3guI+5YbyxTvs+CcCPqmPtk67iEoot1eR+qwAL/wVBdwMsdRPAmMSeUb fDwfM9yKlDmDm86ywaQrNuE6Fn6U9VIu/AkmX2TipH4Hfh2W6wW/LpEaA8OHMTTg khdScSQez7BOKrP6yCe6QRmDlDae3vuR7vhNcr9jJOQPQtTOebFrRlhq3d2N6n4G EBlNQXCxzYdyvb5QGHp7PfsWkYJOAGGKTWygAVxJ5/r4pNtTXi6HkNXNcEvTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULwLrHoUfLN4Ftx1JCW87dPRHivMwHwYDVR0j BBgwFoAUEr2A+2Zun/O3jFJXy4BgTORmpiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkxMTM2NTk4ODI1MzczMy8wLzEyQkQ4MEZCNjY2RTlGRjNCNzhDNTI1N0NCODA2 MDRDRTQ2NkE2MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENFNDY2QTYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MTEzNjU5ODgyNTM3MzMvMC8xMkJEODBGQjY2NkU5 RkYzQjc4QzUyNTdDQjgwNjA0Q0U0NjZBNjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeucnPUEIg7G JgC8Q+Wl7HT+vZvObAkRgwXjjS40WR5bXhnsXKaq8VldFU55sMuJGALXleuIGtmP XQi9P6jm1XtDuy2u4oiWuuUrc87FgC5ai6m04O34xzb0C8vnkB6fYNFRf5vsZu2V H6FebYX+rrwdk42YNOIQ1jjHsjWkZR66SEeGMiEvYRDW3bEmDjPILcm3b3V8kNhS hkOVPw82YF8ffMnIJq8ZNAzfuUkyevPIeFqqJJUlFwxFsX5i2MgMKq1O0yZG8+Fj j8ahZ0kOT9306CXkBVBn4I/n23KCql0vgKqD/nqKm7IMd4OcDAoAApqU9rbLpkCn oEZXSNWNpA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:04 2026 by rpki-client