$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: RRpcAy+2hLxGoKr4iSICVxLWZbs7MTjPkbmuWzNaL+o= Subject key identifier: BD:47:A8:D8:6E:BA:51:86:74:7F:CB:37:49:F5:21:47:5A:E8:38:01 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 73BC672F297A445A8840F1959DA8B1BD62577AB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 012D Signing time: Tue 28 Jul 2026 18:42:32 +0000 Manifest this update: Tue 28 Jul 2026 18:37:32 +0000 Manifest next update: Wed 29 Jul 2026 19:21:32 +0000 Files and hashes: 1: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=) 2: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=) 3: AS54994.roa (hash: 9DefOK5XxXnJzTec5kqRFcozhtzg8e+5NjI/KjSCGRo=) 4: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=) 5: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: ASyocKBvSVaez7vrEhnv+aNLJMDMM1e3JIElkxwEyDg=) 6: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=) 7: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=) 8: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=) 9: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bc:67:2f:29:7a:44:5a:88:40:f1:95:9d:a8:b1:bd:62:57:7a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Jul 28 18:37:32 2026 GMT Not After : Jul 29 19:21:32 2026 GMT Subject: CN=BD47A8D86EBA5186747FCB3749F521475AE83801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:36:05:d6:9b:1b:f6:ce:89:a5:0e:37:9e:ad: 8b:b4:fe:f0:a0:1b:8d:51:01:b3:aa:c0:1c:fa:97: 16:aa:28:a0:91:28:06:da:6c:0a:26:4b:a9:79:85: c9:fd:38:2a:b4:26:99:d6:0f:40:c0:d3:bc:4a:e0: 7b:f9:6e:9b:e7:0c:d1:02:c2:90:92:db:d0:03:78: 36:96:f0:9f:c7:21:a4:eb:fb:ad:99:90:79:5a:24: 71:52:0c:26:8a:7d:9d:6a:db:d7:81:a4:f8:90:c0: 05:76:b0:17:ec:95:a1:76:e4:48:97:c2:de:fb:0d: 1e:e4:d4:08:1c:a2:02:c9:80:14:37:ed:28:af:8b: db:48:61:92:da:97:f0:b6:48:41:fb:27:f5:47:2c: 57:07:8f:dd:84:01:0d:4d:71:b3:90:c5:30:dd:96: 34:82:dc:48:54:c4:91:10:df:ad:4c:9d:78:84:65: a4:17:b7:34:80:41:06:d4:60:be:20:6a:f0:eb:db: dd:35:b0:09:25:52:97:cd:4f:8f:02:db:eb:46:66: 10:28:e2:ce:1c:0a:dd:cc:97:9e:cd:90:2b:85:29: 50:4d:2c:d9:54:f6:b5:0d:7e:b6:08:e7:04:58:86: fb:d4:6f:38:a6:59:9b:1d:60:10:01:39:0c:2b:2b: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:A8:D8:6E:BA:51:86:74:7F:CB:37:49:F5:21:47:5A:E8:38:01 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cd:ca:18:1b:d4:84:61:aa:66:c6:8e:17:4b:9f:40:c8:59: 92:b2:6d:f8:f7:1a:1f:5c:04:bd:e0:03:77:68:de:1b:ad:61: b6:28:60:2e:ec:9e:03:a1:69:90:cb:e0:29:35:cd:c7:28:ec: 4c:1b:3d:7d:68:f2:b2:36:d2:3a:0d:b0:6a:f7:b3:4a:dd:39: f3:47:e1:2e:b7:07:09:94:40:0e:4f:0f:a2:94:c8:c7:d4:dd: b1:36:45:83:e6:aa:65:4c:fb:75:d3:40:b6:09:a0:f3:d0:b2: 1e:c3:d6:ec:53:5d:b1:27:f9:92:7c:45:84:1b:27:a4:78:9d: 34:e0:8b:a2:20:fd:c8:ca:13:e7:2f:c8:f4:d6:28:aa:53:d5: 05:0a:fd:fe:67:22:3f:97:8d:26:54:05:80:fe:56:e4:13:42: 7d:ad:aa:21:ed:05:98:2e:fa:f2:4b:c3:8f:c8:b4:66:65:ce: b5:b2:34:41:7b:8b:7f:93:9a:2e:58:91:d3:c9:cc:1a:46:02: 26:f6:1e:1b:a6:cd:3e:ea:d6:e5:97:fe:81:7e:ce:64:cb:c9: d7:54:31:60:c0:15:29:73:4e:76:ed:2e:c9:8f:16:4e:3b:26: e2:63:da:e9:f7:8e:e5:0c:e6:65:2c:b5:13:89:9a:41:da:24: 18:55:46:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc7xnLyl6RFqIQPGVnaixvWJXerUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA3MjgxODM3MzJaFw0yNjA3MjkxOTIxMzJaMDMxMTAvBgNV BAMTKEJENDdBOEQ4NkVCQTUxODY3NDdGQ0IzNzQ5RjUyMTQ3NUFFODM4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNgXWmxv2zomlDjeerYu0/vCg G41RAbOqwBz6lxaqKKCRKAbabAomS6l5hcn9OCq0JpnWD0DA07xK4Hv5bpvnDNEC wpCS29ADeDaW8J/HIaTr+62ZkHlaJHFSDCaKfZ1q29eBpPiQwAV2sBfslaF25EiX wt77DR7k1AgcogLJgBQ37Sivi9tIYZLal/C2SEH7J/VHLFcHj92EAQ1NcbOQxTDd ljSC3EhUxJEQ361MnXiEZaQXtzSAQQbUYL4gavDr2901sAklUpfNT48C2+tGZhAo 4s4cCt3Ml57NkCuFKVBNLNlU9rUNfrYI5wRYhvvUbzimWZsdYBABOQwrKwwLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvUeo2G66UYZ0f8s3SfUhR1roOAEwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc3KGBvUhGGq ZsaOF0ufQMhZkrJt+PcaH1wEveADd2jeG61htihgLuyeA6FpkMvgKTXNxyjsTBs9 fWjysjbSOg2wavezSt0580fhLrcHCZRADk8PopTIx9TdsTZFg+aqZUz7ddNAtgmg 89CyHsPW7FNdsSf5knxFhBsnpHidNOCLoiD9yMoT5y/I9NYoqlPVBQr9/mciP5eN JlQFgP5W5BNCfa2qIe0FmC768kvDj8i0ZmXOtbI0QXuLf5OaLliR08nMGkYCJvYe G6bNPurW5Zf+gX7OZMvJ11QxYMAVKXNOdu0uyY8WTjsm4mPa6feO5QzmZSy1E4ma QdokGFVG/g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:18:01 2026 by rpki-client