$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: LILYr7i9CKIQ4195QpwqILVNzRPeAvOWEBRdIlfN/eg= Subject key identifier: 5B:A3:91:39:8A:10:EB:7A:4F:CD:49:6F:DF:D6:F3:1B:F1:39:31:76 Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 037AD65818A095A1B3B068DB2DA7C0F66C30E4BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: FF Signing time: Wed 29 Jul 2026 03:33:19 +0000 Manifest this update: Wed 29 Jul 2026 03:28:19 +0000 Manifest next update: Thu 30 Jul 2026 06:16:19 +0000 Files and hashes: 1: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 2: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: bp6xQoX4baa/z/wGhXXnjbcRjyYBclxbk8gceQq7TRM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7a:d6:58:18:a0:95:a1:b3:b0:68:db:2d:a7:c0:f6:6c:30:e4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jul 29 03:28:19 2026 GMT Not After : Jul 30 06:16:19 2026 GMT Subject: CN=5BA391398A10EB7A4FCD496FDFD6F31BF1393176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:90:fc:2c:e8:7c:50:fb:a8:13:f5:6f:f9: fe:bc:02:d2:1d:87:85:4d:06:6c:6f:03:e0:1b:9f: 27:4a:39:98:44:02:97:c7:58:55:d8:75:81:d4:63: 80:46:96:e2:98:f9:93:2a:50:bd:0c:08:38:c7:e9: e6:37:7e:a4:af:00:1a:a9:e6:65:0d:95:72:39:c9: a9:e7:eb:4c:d9:8a:38:22:ae:bf:c3:60:3c:23:0d: 6c:e8:8e:54:60:1d:03:54:30:5e:bf:27:01:2e:93: 96:6a:36:e8:c3:2d:f2:20:b4:76:bd:23:42:ed:25: 4f:16:cd:51:06:7f:aa:08:9e:33:c7:0d:f4:cf:9b: 23:76:62:65:51:36:1f:ce:af:c9:9f:4e:eb:5a:3b: ff:17:bf:69:40:80:56:6b:b7:32:ca:48:25:cd:74: c1:eb:ba:74:e3:d7:b1:03:d5:eb:f5:89:6f:40:41: f0:5b:c3:72:29:5b:7b:a0:4a:20:e2:1b:c6:1c:f5: ea:d9:eb:55:76:5f:a1:b1:ed:09:5c:39:90:c1:fb: a8:75:82:93:25:91:33:28:bc:15:41:2d:16:78:fc: 70:5c:24:7e:4e:21:1f:16:22:8c:6c:3f:d6:cf:eb: f5:4c:ef:43:2d:00:72:bb:fe:42:fc:dd:9e:14:0a: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:91:39:8A:10:EB:7A:4F:CD:49:6F:DF:D6:F3:1B:F1:39:31:76 X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6e:b9:59:a7:a1:6e:77:44:07:d6:5f:48:73:8b:9b:47:67: 80:03:45:b7:79:58:45:91:91:d3:52:28:37:40:88:e4:06:c1: a0:be:73:62:61:a1:50:ff:8c:4f:c1:25:57:20:c0:c7:0a:88: 27:19:39:21:9d:17:41:8d:02:1d:39:a0:25:6b:b5:1e:09:e4: eb:2c:b3:b2:33:13:68:42:9d:83:a2:f7:91:b9:e1:57:34:fb: 09:b2:51:26:a6:a4:0d:6d:fb:1e:89:07:87:84:41:b0:87:e5: 19:fa:ec:49:cf:35:a7:18:d2:e2:25:74:a1:35:de:80:da:3b: 14:e9:fb:c9:79:59:10:3b:31:57:87:69:f2:14:fb:29:3b:fd: 81:16:8e:f8:93:25:8e:b8:05:cb:1e:e6:df:8f:b4:0e:10:e6: 49:13:e1:56:37:ab:e4:39:5e:04:b7:68:ca:01:d4:2f:71:37: 2a:c9:96:d0:dd:9b:a8:0c:9d:2e:db:2f:62:3b:f4:49:c1:a6: f5:06:e3:40:ef:25:4d:33:fa:85:f8:2a:95:05:26:b5:d1:c7: 35:27:e1:00:5c:82:de:8d:79:8e:0d:76:b7:99:b4:53:0b:c4: d2:7e:e4:80:8f:26:0b:a0:61:59:14:74:cb:f9:0a:ec:c7:77: e8:a3:5d:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA3rWWBiglaGzsGjbLafA9mww5L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA3MjkwMzI4MTlaFw0yNjA3MzAwNjE2MTlaMDMxMTAvBgNV BAMTKDVCQTM5MTM5OEExMEVCN0E0RkNENDk2RkRGRDZGMzFCRjEzOTMxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMZD8LOh8UPuoE/Vv+f68AtId h4VNBmxvA+AbnydKOZhEApfHWFXYdYHUY4BGluKY+ZMqUL0MCDjH6eY3fqSvABqp 5mUNlXI5yann60zZijgirr/DYDwjDWzojlRgHQNUMF6/JwEuk5ZqNujDLfIgtHa9 I0LtJU8WzVEGf6oInjPHDfTPmyN2YmVRNh/Or8mfTutaO/8Xv2lAgFZrtzLKSCXN dMHrunTj17ED1ev1iW9AQfBbw3IpW3ugSiDiG8Yc9erZ61V2X6Gx7QlcOZDB+6h1 gpMlkTMovBVBLRZ4/HBcJH5OIR8WIoxsP9bP6/VM70MtAHK7/kL83Z4UCvpnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW6OROYoQ63pPzUlv39bzG/E5MXYwHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm65WaehbndE B9ZfSHOLm0dngANFt3lYRZGR01IoN0CI5AbBoL5zYmGhUP+MT8ElVyDAxwqIJxk5 IZ0XQY0CHTmgJWu1Hgnk6yyzsjMTaEKdg6L3kbnhVzT7CbJRJqakDW37HokHh4RB sIflGfrsSc81pxjS4iV0oTXegNo7FOn7yXlZEDsxV4dp8hT7KTv9gRaO+JMljrgF yx7m34+0DhDmSRPhVjer5DleBLdoygHUL3E3KsmW0N2bqAydLtsvYjv0ScGm9Qbj QO8lTTP6hfgqlQUmtdHHNSfhAFyC3o15jg12t5m0UwvE0n7kgI8mC6BhWRR0y/kK 7Md36KNdKA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:22 2026 by rpki-client