$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: BPIMN5F0ehyV7jFB6jjtmPAyVd7Gp0UVnx+bfbgpCkg= Subject key identifier: 21:A6:E0:CB:4B:E3:03:88:60:E6:53:7D:25:18:97:A0:BA:04:5C:45 Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 7944E1A00CFC17F7B8373EE1F333511B90D9257B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 0F Signing time: Tue 07 Jul 2026 03:18:18 +0000 Manifest this update: Tue 07 Jul 2026 03:13:18 +0000 Manifest next update: Wed 08 Jul 2026 05:50:18 +0000 Files and hashes: 1: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) 2: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: ma6qxP9/qz6eAFZLq6ruj7NJFIQbD+jLOLqdlHAxd4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 05:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:44:e1:a0:0c:fc:17:f7:b8:37:3e:e1:f3:33:51:1b:90:d9:25:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Jul 7 03:13:18 2026 GMT Not After : Jul 8 05:50:18 2026 GMT Subject: CN=21A6E0CB4BE3038860E6537D251897A0BA045C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:a2:25:42:90:e2:3b:25:71:70:2a:90:64: 02:c4:af:b7:ed:fb:be:14:b0:67:68:f5:96:bd:9a: a0:11:eb:0a:81:97:c8:24:60:a2:ee:83:d7:db:7d: 1f:9b:47:6d:b9:40:12:56:be:72:99:f2:c8:fb:b5: 31:f8:2c:00:72:4c:41:e5:d1:f3:62:21:8b:e0:aa: 38:ca:38:45:70:a9:0f:ad:65:04:f1:0a:2e:3e:fe: 34:70:89:a1:ac:99:3e:f9:a3:24:b9:e1:1a:4f:fb: cc:af:6f:c0:6e:12:b4:f6:37:88:8a:ad:78:3e:e2: 5c:ef:3d:21:73:6f:12:20:08:f5:1f:0a:cb:e5:43: a0:12:8f:2c:6b:c7:5a:6b:0c:15:67:25:e0:0a:0c: 44:f3:ab:a8:24:95:5b:d9:da:67:51:6a:07:c3:4d: 80:90:3c:f2:67:03:df:52:06:04:a5:d8:e4:61:3e: 34:3a:16:30:cc:d2:c1:ed:c3:03:31:df:33:b7:6f: de:ae:59:65:82:d5:bb:90:4c:a5:1a:06:2d:fc:45: 14:0a:2c:54:d8:f3:66:6e:10:67:12:e1:fe:9b:13: 94:2c:32:63:1a:84:a0:8b:c1:4d:3a:4d:96:50:aa: 5b:d8:e7:0a:35:cd:84:b9:2e:df:62:e1:d7:13:19: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:E0:CB:4B:E3:03:88:60:E6:53:7D:25:18:97:A0:BA:04:5C:45 X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:92:1c:ec:26:81:ba:50:33:95:d5:60:c2:08:fa:e7:6b:68: 6d:92:c0:c2:f2:e3:f8:df:d1:93:f8:a4:b0:58:e4:e6:45:36: 11:f8:42:c6:78:a1:38:7b:f8:07:91:a1:59:d1:64:69:2e:1d: c2:b3:c7:57:02:3e:ab:7d:2c:9e:d5:ca:89:ea:48:b5:10:33: a6:50:3e:01:fa:cf:d4:f6:9e:6a:1f:e3:e2:23:5a:ce:e3:5c: db:62:18:53:2a:f9:9b:e8:61:7c:1e:75:43:ab:06:90:a0:ce: 95:94:c7:ac:59:d1:13:a9:96:a3:d1:f2:86:86:e7:fa:04:ea: 8a:4c:f5:2f:bb:47:53:1d:74:14:c8:b1:27:f6:7c:0f:8b:55: 76:37:2b:ad:9e:94:ca:60:08:2c:68:63:69:1a:88:16:02:06: 86:c4:fe:dd:df:86:0e:b0:e2:65:03:17:65:b8:19:f3:e5:4e: c0:6c:6c:7c:46:89:1c:3a:64:33:79:5a:ac:70:6d:4a:e4:a0: da:8c:3c:6e:06:ef:06:c9:08:26:cd:6d:0f:fe:b9:79:a1:a4: 0c:d5:83:cd:bd:cd:2e:bd:5f:5f:69:55:3f:81:04:52:60:08: 31:1d:88:ab:77:9b:b0:5f:91:24:ab:98:4d:a6:cc:88:c8:96: 2b:a6:ae:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeUThoAz8F/e4Nz7h8zNRG5DZJXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjA3MDcwMzEzMThaFw0yNjA3MDgwNTUwMThaMDMxMTAvBgNV BAMTKDIxQTZFMENCNEJFMzAzODg2MEU2NTM3RDI1MTg5N0EwQkEwNDVDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaKIlQpDiOyVxcCqQZALEr7ft +74UsGdo9Za9mqAR6wqBl8gkYKLug9fbfR+bR225QBJWvnKZ8sj7tTH4LAByTEHl 0fNiIYvgqjjKOEVwqQ+tZQTxCi4+/jRwiaGsmT75oyS54RpP+8yvb8BuErT2N4iK rXg+4lzvPSFzbxIgCPUfCsvlQ6ASjyxrx1prDBVnJeAKDETzq6gklVvZ2mdRagfD TYCQPPJnA99SBgSl2ORhPjQ6FjDM0sHtwwMx3zO3b96uWWWC1buQTKUaBi38RRQK LFTY82ZuEGcS4f6bE5QsMmMahKCLwU06TZZQqlvY5wo1zYS5Lt9i4dcTGUubAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIabgy0vjA4hg5lN9JRiXoLoEXEUwHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5Ic7CaBulAz ldVgwgj652tobZLAwvLj+N/Rk/iksFjk5kU2EfhCxnihOHv4B5GhWdFkaS4dwrPH VwI+q30sntXKiepItRAzplA+AfrP1Paeah/j4iNazuNc22IYUyr5m+hhfB51Q6sG kKDOlZTHrFnRE6mWo9Hyhobn+gTqikz1L7tHUx10FMixJ/Z8D4tVdjcrrZ6UymAI LGhjaRqIFgIGhsT+3d+GDrDiZQMXZbgZ8+VOwGxsfEaJHDpkM3larHBtSuSg2ow8 bgbvBskIJs1tD/65eaGkDNWDzb3NLr1fX2lVP4EEUmAIMR2Iq3ebsF+RJKuYTabM iMiWK6auhQ== -----END CERTIFICATE-----Generated at Tue Jul 7 14:38:06 2026 by rpki-client