$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json) Hash identifier: meBqov6vxK5UVZ/QdbNUc4r0avby+ETo2IpdUa94h8s= Subject key identifier: F0:1B:F9:49:C8:25:76:9A:86:16:E0:8F:75:BB:30:5B:01:B3:17:A1 Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Certificate serial: 1AAF03C7316BC9D3CF599304DD862E8D8CD983EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft Manifest number: 0102 Signing time: Tue 28 Jul 2026 22:32:52 +0000 Manifest this update: Tue 28 Jul 2026 22:27:52 +0000 Manifest next update: Wed 29 Jul 2026 23:53:52 +0000 Files and hashes: 1: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=) 2: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=) 3: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=) 4: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=) 5: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=) 6: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=) 7: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=) 8: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=) 9: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: UmH1xHheyxzM9ete9vM4/WPS4Pw1dAur/r6rVnDmlpk=) 10: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=) 11: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=) 12: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:af:03:c7:31:6b:c9:d3:cf:59:93:04:dd:86:2e:8d:8c:d9:83:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Validity Not Before: Jul 28 22:27:52 2026 GMT Not After : Jul 29 23:53:52 2026 GMT Subject: CN=F01BF949C825769A8616E08F75BB305B01B317A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:8e:80:d4:b2:28:65:26:8d:4b:16:83:a0: 98:68:44:bf:48:2c:3d:5f:5e:3a:9b:04:ef:62:fe: df:d9:c3:3c:ef:72:aa:0c:45:dd:50:02:12:06:ba: c6:68:5d:c2:d8:75:43:15:5a:e0:8a:76:45:cd:9e: 64:c2:48:a1:28:e8:99:ce:9d:17:83:40:cc:c5:90: a5:d9:74:4a:b2:73:58:3d:cb:51:7a:ac:0a:92:45: 32:54:af:c2:11:ce:1e:46:76:e6:76:a2:d6:67:c3: 83:a6:01:74:19:c2:9e:58:c3:69:ed:e5:33:e8:62: fb:95:d3:75:be:e1:92:5c:da:8e:86:ba:f0:f4:96: 61:8d:4d:5e:02:8e:59:34:f8:77:6e:b0:17:14:05: 49:df:de:bf:20:1d:e3:6f:17:81:ed:07:c4:64:56: b6:6d:78:5f:7c:dc:2d:b1:47:5b:50:78:38:3d:cd: be:19:db:7a:dc:f0:61:d8:7d:62:7f:ab:93:4d:06: 2f:79:1a:5b:ff:9e:9e:01:ef:8d:4d:ca:5e:38:bb: 5b:bc:a9:95:8d:33:69:e0:3f:cd:0b:c4:6b:dc:1c: 2a:9a:e8:32:d6:1d:52:c3:67:53:ee:94:56:aa:7e: 22:8f:fb:7e:89:5c:ae:ed:18:a9:bc:1b:ba:6e:d7: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:F9:49:C8:25:76:9A:86:16:E0:8F:75:BB:30:5B:01:B3:17:A1 X509v3 Authority Key Identifier: keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:88:f8:f1:56:be:f4:ee:63:08:be:be:a4:91:11:41:4c:0e: f3:99:5c:63:a9:6f:2a:7b:72:f1:17:5b:18:cb:27:06:aa:f7: 5c:eb:13:15:4b:59:92:1b:71:cc:c6:bb:3e:9e:d0:81:bb:89: 40:44:13:2d:b1:d1:e7:0d:8a:a9:6a:94:bc:9f:b9:9b:4d:01: f6:57:6d:ea:aa:de:35:73:79:60:8e:8a:0f:95:fa:8b:7b:2e: 30:e0:aa:c1:5b:0f:27:6b:5d:c0:79:e3:93:0e:bc:70:bb:fa: 5b:2c:1d:ec:f1:db:44:b3:ca:18:89:c0:31:a4:88:88:de:48: a1:5f:5c:67:b1:f6:fc:cd:68:8d:83:b5:07:79:2b:8f:3e:10: 77:81:fe:50:ae:70:e5:b9:1d:8f:b6:9b:7d:ad:24:dc:5e:0c: 1f:65:a5:53:b7:b8:6f:c2:08:47:f7:e1:55:3c:d3:8d:d0:77: 07:17:1c:dd:33:6e:57:c1:f2:f5:af:d9:4e:81:c7:ff:97:65: 5b:5b:8a:1e:38:a0:8e:14:b1:20:99:5e:ca:50:98:ae:60:03: 3b:15:dd:25:e2:11:7a:4b:11:9c:4c:10:79:33:c3:05:b4:dd: 5e:44:b3:a3:62:4b:22:5d:34:62:56:9c:e7:24:5a:24:18:2d: 78:a4:f2:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGq8DxzFrydPPWZME3YYujYzZg+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0 NjczREFDMDAeFw0yNjA3MjgyMjI3NTJaFw0yNjA3MjkyMzUzNTJaMDMxMTAvBgNV BAMTKEYwMUJGOTQ5QzgyNTc2OUE4NjE2RTA4Rjc1QkIzMDVCMDFCMzE3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+o6A1LIoZSaNSxaDoJhoRL9I LD1fXjqbBO9i/t/ZwzzvcqoMRd1QAhIGusZoXcLYdUMVWuCKdkXNnmTCSKEo6JnO nReDQMzFkKXZdEqyc1g9y1F6rAqSRTJUr8IRzh5GduZ2otZnw4OmAXQZwp5Yw2nt 5TPoYvuV03W+4ZJc2o6GuvD0lmGNTV4Cjlk0+HdusBcUBUnf3r8gHeNvF4HtB8Rk VrZteF983C2xR1tQeDg9zb4Z23rc8GHYfWJ/q5NNBi95Glv/np4B741Nyl44u1u8 qZWNM2ngP80LxGvcHCqa6DLWHVLDZ1PulFaqfiKP+36JXK7tGKm8G7pu1wC3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8Bv5ScgldpqGFuCPdbswWwGzF6EwHwYDVR0j BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMC8wQUQzNEMwNUU4OEQx MkMzMEVEN0ZFMUREMkFCRUE1NjQ2NzNEQUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYj48Va+9O5j CL6+pJERQUwO85lcY6lvKnty8RdbGMsnBqr3XOsTFUtZkhtxzMa7Pp7QgbuJQEQT LbHR5w2KqWqUvJ+5m00B9ldt6qreNXN5YI6KD5X6i3suMOCqwVsPJ2tdwHnjkw68 cLv6Wywd7PHbRLPKGInAMaSIiN5IoV9cZ7H2/M1ojYO1B3krjz4Qd4H+UK5w5bkd j7abfa0k3F4MH2WlU7e4b8IIR/fhVTzTjdB3Bxcc3TNuV8Hy9a/ZToHH/5dlW1uK HjigjhSxIJleylCYrmADOxXdJeIReksRnEwQeTPDBbTdXkSzo2JLIl00Ylac5yRa JBgteKTyFQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:37:14 2026 by rpki-client