$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: 1dOT8u4Bk168mbx05/iI220LO8v3C3oM+EUn7I4q/8s= Subject key identifier: C6:3B:4A:B0:84:48:03:18:2A:90:DD:59:B6:D8:44:75:0E:29:E5:E2 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 325186524C782346B1E3604479374396B8356CD4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 01B4 Signing time: Tue 28 Jul 2026 15:32:08 +0000 Manifest this update: Tue 28 Jul 2026 15:27:08 +0000 Manifest next update: Wed 29 Jul 2026 15:34:08 +0000 Files and hashes: 1: AS45090.roa (hash: Av2ZX7t33Xg0taWsYCm0lcTG3scBZ1h+SzWX8W5uoPk=) 2: AS132203.roa (hash: MGh7geS9q7/6iNL2Np6bgBq+89E2Xke7QjRB3yPNdgk=) 3: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: xeCF4QqdkxnYCzbQAiflTMjxhoqpK33kdKtU6k1BNK4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:51:86:52:4c:78:23:46:b1:e3:60:44:79:37:43:96:b8:35:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Jul 28 15:27:08 2026 GMT Not After : Jul 29 15:34:08 2026 GMT Subject: CN=C63B4AB0844803182A90DD59B6D844750E29E5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:95:71:ac:b2:dc:c5:b1:43:6d:73:31:a5: c6:4d:60:e8:57:2b:89:9f:97:16:b2:0d:05:dd:6e: 35:2f:cf:55:87:10:bd:e2:14:9a:50:a5:77:26:1b: e4:ef:89:d9:0b:a5:10:c2:ff:0f:1d:ab:96:df:8e: 4c:3d:a0:e2:ae:ee:dd:88:27:d9:20:88:94:ca:ec: 2e:5d:37:99:ad:b4:df:95:87:2f:2c:38:d0:f0:9f: 4e:64:66:cd:08:23:ab:39:11:6c:e5:a4:f6:b0:0b: 50:b5:30:b0:23:7b:4f:d1:97:d5:e0:5c:a4:a5:70: c2:30:c2:6b:5c:73:34:16:11:e1:78:e3:b4:7c:8e: 3b:97:2e:35:1c:be:1c:36:81:2f:1f:d5:07:48:dd: 57:56:82:02:21:3d:0f:fd:dc:0c:ca:da:38:2d:99: 0c:02:49:df:0d:3a:e8:77:23:8e:83:c2:4c:22:68: a1:eb:79:30:a4:f5:2e:6f:a2:95:50:d9:c6:29:5f: 9c:0e:36:3b:e1:79:7e:3b:4d:d4:c7:96:79:c7:bf: 1d:74:8c:ce:cd:b7:44:01:96:b1:ec:a8:3e:0a:ba: ed:bd:54:1b:b4:39:da:d2:24:df:85:f0:9c:c4:5c: 89:89:14:32:ae:7c:bb:28:01:73:5d:bc:d3:b6:ae: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:4A:B0:84:48:03:18:2A:90:DD:59:B6:D8:44:75:0E:29:E5:E2 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:87:ab:d2:40:b9:05:bb:be:3a:ac:83:b5:d1:61:1d:ce:13: 2f:57:bd:81:6a:91:7d:0b:e2:48:8c:6b:91:cc:80:1f:9d:70: dc:01:f1:e5:75:49:f8:c3:df:13:40:e5:d9:27:ee:1b:73:62: 82:7d:7a:42:d3:8a:f8:8c:e8:96:3f:23:74:9b:72:50:d8:bd: 2d:5f:3c:ad:d8:24:5e:c9:4b:87:a1:81:10:05:60:46:39:5b: bf:67:c1:f2:ae:72:85:08:8d:4a:29:4e:05:06:0b:38:b5:8a: c8:12:b7:98:9a:5d:23:66:c7:7e:59:7d:18:8b:9e:fa:77:d5: d0:6a:1a:fe:d2:97:48:a5:1e:01:f1:a2:67:6a:ea:9b:91:92: 86:fb:ce:63:8c:bd:ca:44:b6:6c:ba:2d:ac:79:9e:a6:da:6e: a4:b6:33:e8:ec:f5:44:29:93:e9:ea:b2:82:76:da:ba:8d:54: 6d:bf:9d:79:a1:c9:bf:19:30:95:f2:39:72:dc:71:b8:4b:f5: e6:92:10:dd:2b:0f:dd:7c:d9:3b:50:0b:07:b5:81:96:6c:54: fb:f8:eb:ed:78:fd:85:c0:f7:d7:64:94:4b:10:f5:5c:3f:1e: ae:e8:e8:9a:58:aa:1b:d1:26:68:99:37:f1:cd:02:cc:69:93: 81:2a:75:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMlGGUkx4I0ax42BEeTdDlrg1bNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjA3MjgxNTI3MDhaFw0yNjA3MjkxNTM0MDhaMDMxMTAvBgNV BAMTKEM2M0I0QUIwODQ0ODAzMTgyQTkwREQ1OUI2RDg0NDc1MEUyOUU1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NJVxrLLcxbFDbXMxpcZNYOhX K4mflxayDQXdbjUvz1WHEL3iFJpQpXcmG+TvidkLpRDC/w8dq5bfjkw9oOKu7t2I J9kgiJTK7C5dN5mttN+Vhy8sONDwn05kZs0II6s5EWzlpPawC1C1MLAje0/Rl9Xg XKSlcMIwwmtcczQWEeF447R8jjuXLjUcvhw2gS8f1QdI3VdWggIhPQ/93AzK2jgt mQwCSd8NOuh3I46DwkwiaKHreTCk9S5vopVQ2cYpX5wONjvheX47TdTHlnnHvx10 jM7Nt0QBlrHsqD4Kuu29VBu0OdrSJN+F8JzEXImJFDKufLsoAXNdvNO2rjXHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxjtKsIRIAxgqkN1ZtthEdQ4p5eIwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIer0kC5Bbu+ OqyDtdFhHc4TL1e9gWqRfQviSIxrkcyAH51w3AHx5XVJ+MPfE0Dl2SfuG3Nign16 QtOK+Izolj8jdJtyUNi9LV88rdgkXslLh6GBEAVgRjlbv2fB8q5yhQiNSilOBQYL OLWKyBK3mJpdI2bHfll9GIue+nfV0Goa/tKXSKUeAfGiZ2rqm5GShvvOY4y9ykS2 bLotrHmeptpupLYz6Oz1RCmT6eqygnbauo1Ubb+deaHJvxkwlfI5ctxxuEv15pIQ 3SsP3XzZO1ALB7WBlmxU+/jr7Xj9hcD312SUSxD1XD8erujomliqG9EmaJk38c0C zGmTgSp1jw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:55:02 2026 by rpki-client