$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: 6SV+3LUMMtxE/i1djR8ges8AuK9F/p9lACEC9Wswj3M= Subject key identifier: 04:B2:0D:53:EC:37:8C:ED:87:C0:16:04:9F:D5:7C:26:3E:32:E7:00 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 580670F006D37AFD53BB9439B2C1D5CA7CEF1384 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 013D Signing time: Wed 29 Jul 2026 01:08:02 +0000 Manifest this update: Wed 29 Jul 2026 01:03:02 +0000 Manifest next update: Thu 30 Jul 2026 02:43:02 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 2: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 3: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 4: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 5: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: jwrwUP3FXzjkYtxeh9PIRVX+/CHCRY0NnaeGbjSbdG8=) 6: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:06:70:f0:06:d3:7a:fd:53:bb:94:39:b2:c1:d5:ca:7c:ef:13:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Jul 29 01:03:02 2026 GMT Not After : Jul 30 02:43:02 2026 GMT Subject: CN=04B20D53EC378CED87C016049FD57C263E32E700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:37:d1:37:ff:49:c6:d7:ff:cf:59:4c:b0: 5d:55:0d:c0:22:0d:43:69:99:fc:d3:66:03:62:c0: 31:7c:bc:3c:a3:77:af:f0:70:f6:c7:33:e4:f3:12: c2:f2:a2:80:81:1c:09:5c:05:6a:71:29:ec:de:f4: 9d:1e:bd:bd:85:e3:16:d1:26:ea:c1:39:86:3f:95: 3e:e7:00:b2:29:2f:42:b6:b5:0b:25:41:01:c2:67: 95:ed:e5:a4:e3:76:ed:5c:8a:85:4c:bd:23:3d:bf: 1a:c3:bc:0d:45:ac:3d:9b:b3:15:f7:34:08:c3:bb: ef:61:e7:eb:8a:cd:89:51:fa:10:ff:20:19:79:39: 66:5e:a1:8b:c5:9c:4b:01:78:b9:ee:db:e1:e4:dd: 85:24:63:6f:d7:0a:f0:ba:76:6a:ea:6c:f8:ba:f1: 5a:fa:43:ea:e8:a8:52:b7:d1:5b:d1:a1:00:93:34: 13:4d:92:f3:09:ad:bd:a6:00:6b:e1:b7:36:34:5a: 1f:3f:c5:d3:3b:e6:cf:0d:2f:c2:6b:23:61:53:16: f9:cb:69:2b:02:40:14:8d:ee:b4:0d:c8:4d:20:54: 65:e4:31:c4:c5:5d:b7:b9:b1:dd:96:f4:87:9b:45: 8b:2e:c1:e6:dc:61:12:8d:d3:28:0e:27:1a:77:2a: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:0D:53:EC:37:8C:ED:87:C0:16:04:9F:D5:7C:26:3E:32:E7:00 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fe:68:bc:cc:12:3a:a4:52:a6:60:0d:11:a1:9a:f6:e4:65: 40:ee:cd:d1:17:4f:89:5d:9f:dc:7b:5f:5c:f7:4d:e1:f9:df: 9d:c2:a1:af:d3:bc:8e:ab:c3:8e:9a:65:b0:e9:a5:f1:4b:bb: 56:3b:b0:6b:ae:af:23:e1:df:43:f3:93:57:15:4c:ac:93:83: 12:67:f0:2c:d1:d6:a0:3d:8b:aa:66:db:4b:63:39:5c:00:c1: 40:c7:1c:05:09:d5:23:c3:d3:86:91:f2:ff:25:8d:c4:6f:36: a4:7a:41:9f:85:d1:67:42:6a:df:f3:27:c0:98:15:14:31:b4: 98:9c:33:4a:00:b7:73:c3:be:6e:2e:f7:26:16:4e:76:54:97: 2f:da:c4:8f:cf:6b:c5:d3:50:76:09:d6:94:13:63:29:de:de: c5:00:37:1c:6e:36:4c:2a:52:31:da:c5:47:bf:67:30:8b:ce: b5:e5:39:fa:2a:e2:bc:de:6a:81:40:b4:2b:f6:d7:c7:98:3b: 60:48:04:1d:90:18:a8:96:24:01:71:69:c0:9c:a1:28:1a:f8: ab:26:eb:8d:02:40:48:39:7e:d2:b0:9c:76:2e:07:3e:57:43: a6:c6:81:45:20:b3:4f:80:6f:99:41:4c:17:66:bc:80:48:46: e0:dc:dc:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWAZw8AbTev1Tu5Q5ssHVynzvE4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA3MjkwMTAzMDJaFw0yNjA3MzAwMjQzMDJaMDMxMTAvBgNV BAMTKDA0QjIwRDUzRUMzNzhDRUQ4N0MwMTYwNDlGRDU3QzI2M0UzMkU3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWTfRN/9Jxtf/z1lMsF1VDcAi DUNpmfzTZgNiwDF8vDyjd6/wcPbHM+TzEsLyooCBHAlcBWpxKeze9J0evb2F4xbR JurBOYY/lT7nALIpL0K2tQslQQHCZ5Xt5aTjdu1cioVMvSM9vxrDvA1FrD2bsxX3 NAjDu+9h5+uKzYlR+hD/IBl5OWZeoYvFnEsBeLnu2+Hk3YUkY2/XCvC6dmrqbPi6 8Vr6Q+roqFK30VvRoQCTNBNNkvMJrb2mAGvhtzY0Wh8/xdM75s8NL8JrI2FTFvnL aSsCQBSN7rQNyE0gVGXkMcTFXbe5sd2W9IebRYsuwebcYRKN0ygOJxp3KmfZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBLINU+w3jO2HwBYEn9V8Jj4y5wAwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf5ovMwSOqRS pmANEaGa9uRlQO7N0RdPiV2f3HtfXPdN4fnfncKhr9O8jqvDjpplsOml8Uu7Vjuw a66vI+HfQ/OTVxVMrJODEmfwLNHWoD2LqmbbS2M5XADBQMccBQnVI8PThpHy/yWN xG82pHpBn4XRZ0Jq3/MnwJgVFDG0mJwzSgC3c8O+bi73JhZOdlSXL9rEj89rxdNQ dgnWlBNjKd7exQA3HG42TCpSMdrFR79nMIvOteU5+irivN5qgUC0K/bXx5g7YEgE HZAYqJYkAXFpwJyhKBr4qybrjQJASDl+0rCcdi4HPldDpsaBRSCzT4BvmUFMF2a8 gEhG4NzcqA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:41:10 2026 by rpki-client