$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft File: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft (raw, json) Hash identifier: +2KA7G2spV8NV1eVbKh2xJQN70xXNe6GkVYfWUKy2Ww= Subject key identifier: 89:09:6C:10:93:E5:A0:81:BB:57:E9:F3:03:0E:58:81:9A:67:63:83 Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 19CA83CDF6FE3030720CD7E638C66E2A59958429 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 18:24:54 +0000 Manifest this update: Wed 29 Jul 2026 18:19:54 +0000 Manifest next update: Thu 30 Jul 2026 19:26:54 +0000 Files and hashes: 1: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (hash: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick=) 2: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl (hash: ZoUlr16xG7mXhpjlXZswIftSIMy2H7rc4/qvc/xkgFQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 19:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ca:83:cd:f6:fe:30:30:72:0c:d7:e6:38:c6:6e:2a:59:95:84:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Jul 29 18:19:54 2026 GMT Not After : Jul 30 19:26:54 2026 GMT Subject: CN=89096C1093E5A081BB57E9F3030E58819A676383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:30:08:ab:03:99:06:91:2c:ec:7b:50:c0: 71:53:03:63:26:3c:f7:73:22:a8:be:7f:af:2b:15: 96:f9:fe:a4:47:92:df:1c:19:69:bf:d4:65:9f:b2: fb:ee:e1:4a:63:a7:07:12:14:86:f1:e7:39:c7:0a: 3a:e3:ee:4d:d4:7a:66:2d:2b:33:92:2f:ba:78:82: 45:c2:5f:97:ea:89:70:10:93:d2:37:4d:04:43:66: 19:14:2c:66:dd:0c:6a:23:77:7d:d6:c7:0e:68:8f: 44:35:54:e5:8d:8c:03:85:e4:b2:8a:17:d4:e9:e0: 88:84:b0:90:f0:db:58:f9:19:13:07:16:ea:10:a3: e4:57:6d:5d:d2:58:53:16:1d:8f:dd:86:bc:1c:c9: 56:9d:29:e8:26:c9:0c:4d:53:c6:7c:07:de:d8:79: 26:91:3e:96:2e:f5:85:58:f5:b3:33:aa:96:c1:a4: c1:ae:ee:1c:b6:83:68:fc:50:1b:b7:e6:78:34:9a: b6:33:22:ae:9d:ec:2d:4f:49:43:4f:e0:07:a6:a8: ea:56:5b:f0:11:69:f6:46:4c:95:df:f8:45:3e:79: 00:6f:bc:a0:84:27:0b:0a:83:5a:2b:87:ab:1d:fa: 38:82:bf:11:e3:dd:8d:ee:2a:db:2b:1f:11:86:22: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:6C:10:93:E5:A0:81:BB:57:E9:F3:03:0E:58:81:9A:67:63:83 X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bc:03:de:d3:12:d2:79:98:53:a2:23:16:1f:73:11:85:c7: a2:e6:18:e3:91:38:15:e8:f1:ad:12:66:7d:0e:ad:0b:39:20: 55:9e:68:95:54:9d:5a:32:55:7d:bb:00:85:69:17:7c:33:31: ce:4a:1c:5f:99:4e:7e:f6:82:0b:4c:d2:f6:90:35:91:1d:0b: b4:b2:f6:6d:84:72:44:e7:e0:99:8f:6e:58:03:e8:02:ae:5f: 2e:fe:be:0f:3a:9c:e2:0f:af:cc:8b:05:16:fa:6b:d2:cb:5f: 39:13:92:a2:3f:31:40:04:94:4b:f9:e4:e3:01:75:a4:d6:a2: bb:3f:b2:6c:5d:2a:a0:62:ac:04:3a:bd:5d:a7:5e:e5:50:ca: 6e:19:2e:65:a9:1c:75:f4:e1:45:dc:df:6e:a1:f5:89:20:f1: 3d:9f:a8:3f:04:09:0b:fa:ce:4e:3a:f4:a0:f3:4f:49:2b:49: 5e:0d:aa:71:79:88:be:b6:21:44:2b:db:a7:f4:27:3d:12:a4: 41:7c:23:5d:7d:f6:1b:c0:71:6e:3b:72:3f:fc:86:86:78:46: 56:80:a0:ac:bf:31:80:6a:ef:92:bf:4c:c9:2e:ab:8d:b4:54: cd:a0:f8:87:75:3d:dd:1e:4e:f0:41:c3:10:ed:97:4f:11:c7: 9c:78:c2:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGcqDzfb+MDByDNfmOMZuKlmVhCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjA3MjkxODE5NTRaFw0yNjA3MzAxOTI2NTRaMDMxMTAvBgNV BAMTKDg5MDk2QzEwOTNFNUEwODFCQjU3RTlGMzAzMEU1ODgxOUE2NzYzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvzAIqwOZBpEs7HtQwHFTA2Mm PPdzIqi+f68rFZb5/qRHkt8cGWm/1GWfsvvu4UpjpwcSFIbx5znHCjrj7k3UemYt KzOSL7p4gkXCX5fqiXAQk9I3TQRDZhkULGbdDGojd33Wxw5oj0Q1VOWNjAOF5LKK F9Tp4IiEsJDw21j5GRMHFuoQo+RXbV3SWFMWHY/dhrwcyVadKegmyQxNU8Z8B97Y eSaRPpYu9YVY9bMzqpbBpMGu7hy2g2j8UBu35ng0mrYzIq6d7C1PSUNP4AemqOpW W/ARafZGTJXf+EU+eQBvvKCEJwsKg1orh6sd+jiCvxHj3Y3uKtsrHxGGIu8rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiQlsEJPloIG7V+nzAw5YgZpnY4MwHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU1NTEzNjEvMC9EMkZGMUQ3QzZERjFE RDc3NUE2MTA2OTcwRDA1RkY0NEJDQUQxOTQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbwD3tMS0nmY U6IjFh9zEYXHouYY45E4FejxrRJmfQ6tCzkgVZ5olVSdWjJVfbsAhWkXfDMxzkoc X5lOfvaCC0zS9pA1kR0LtLL2bYRyROfgmY9uWAPoAq5fLv6+Dzqc4g+vzIsFFvpr 0stfOROSoj8xQASUS/nk4wF1pNaiuz+ybF0qoGKsBDq9Xade5VDKbhkuZakcdfTh RdzfbqH1iSDxPZ+oPwQJC/rOTjr0oPNPSStJXg2qcXmIvrYhRCvbp/QnPRKkQXwj XX32G8BxbjtyP/yGhnhGVoCgrL8xgGrvkr9MyS6rjbRUzaD4h3U93R5O8EHDEO2X TxHHnHjCNw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:07 2026 by rpki-client