$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: yj3sxCPic3DkW379b2uceRbf5HR1AZrNz6Z3iNGjRII= Subject key identifier: BE:10:3B:9F:D9:A4:FF:E9:8A:2A:28:F2:B3:02:32:F3:80:FE:DF:B5 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 2F0AFE46567FB32B79D4A92F2BEF5FFBB00311C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 06:23:42 +0000 Manifest this update: Wed 29 Jul 2026 06:18:42 +0000 Manifest next update: Thu 30 Jul 2026 08:05:42 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: N9g1UsplBeOi7NwM9+bmaTR9H1rkLmicDaBe74g53ks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0a:fe:46:56:7f:b3:2b:79:d4:a9:2f:2b:ef:5f:fb:b0:03:11:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Jul 29 06:18:42 2026 GMT Not After : Jul 30 08:05:42 2026 GMT Subject: CN=BE103B9FD9A4FFE98A2A28F2B30232F380FEDFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:b9:ca:37:6d:3d:b9:7a:15:f0:44:17:82: aa:4f:28:4a:f6:a1:c7:83:be:1c:0f:2b:4a:d5:08: 50:62:d6:bc:53:30:9c:81:e7:76:09:06:d9:85:b4: 25:d6:31:4e:47:e7:45:de:d1:6f:e2:be:2f:82:99: 40:dc:ee:ee:f7:4f:9a:9a:24:d7:f0:9c:bc:b4:6a: cb:af:41:05:cc:8a:74:59:b1:d9:52:fc:e5:cd:b1: 1f:36:0d:40:f3:69:dc:93:b8:25:70:c4:84:2a:a4: af:bc:8e:a4:d9:6d:0d:47:9b:eb:9a:ff:ea:c4:0d: 13:5a:62:a2:6d:98:28:36:bf:ac:c6:c1:75:a6:0d: f1:72:7d:cb:44:fc:a4:07:50:fa:98:ee:66:5b:7d: 8f:18:f3:72:5a:13:b3:3e:b9:c0:1f:bf:bd:f3:cd: d0:f1:b0:f0:c2:f8:ef:af:86:36:2c:cc:2b:e5:c8: cb:68:6d:d5:7d:e8:e8:d7:83:9e:04:2b:55:d0:fe: 1c:d0:4e:7d:d2:1d:f3:6b:61:21:d1:d2:4c:90:5c: e6:aa:ef:ac:cd:bf:d7:56:a0:2c:fa:04:bf:a4:de: 22:7b:a3:24:3e:02:66:35:57:93:55:c6:41:3e:a0: f2:c6:20:41:69:9e:88:dd:e3:35:de:4e:44:3d:e0: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:3B:9F:D9:A4:FF:E9:8A:2A:28:F2:B3:02:32:F3:80:FE:DF:B5 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1f:60:28:2e:73:6f:08:ad:28:c8:96:93:0b:ea:48:da:25: 56:29:69:70:a4:bc:81:27:d8:c0:2c:d1:e8:23:b5:12:d1:66: 54:94:70:c8:c7:68:c3:ab:7b:8a:1f:4c:23:d2:8b:f3:10:78: c5:4e:10:8f:82:b9:70:af:95:ec:12:f6:13:29:e6:5d:51:6f: 7c:ad:3e:d1:b6:4b:b6:79:f9:90:1d:fa:2e:f0:9d:d1:72:a9: 87:0c:bd:ea:ce:01:81:76:42:f2:7d:4c:02:93:cb:d6:4b:27: b2:a4:7a:62:9d:f5:09:43:e8:14:ed:10:45:a6:23:10:70:6e: 45:b8:80:dc:34:d2:fb:93:17:4f:f4:ea:14:9e:87:95:19:cc: 4b:ca:14:3c:2e:db:0c:f5:64:f3:56:f3:ff:19:68:f5:6b:97: 8a:26:12:50:18:aa:11:d8:05:77:22:9c:76:91:8d:2f:58:f2: 19:6c:d4:98:46:04:f0:2e:1c:b4:ae:2d:e5:02:26:75:15:a4: 32:9a:b9:4c:06:aa:2d:39:e2:c5:b9:c1:96:15:e7:a7:fd:35: 76:ca:ca:68:ad:b4:d5:fa:0e:24:fd:17:1a:70:20:f9:57:6e: 69:91:56:82:c3:92:66:d0:65:7d:a5:2d:ab:2e:21:82:59:e4: 8a:94:71:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULwr+RlZ/syt51KkvK+9f+7ADEckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA3MjkwNjE4NDJaFw0yNjA3MzAwODA1NDJaMDMxMTAvBgNV BAMTKEJFMTAzQjlGRDlBNEZGRTk4QTJBMjhGMkIzMDIzMkYzODBGRURGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzbnKN209uXoV8EQXgqpPKEr2 oceDvhwPK0rVCFBi1rxTMJyB53YJBtmFtCXWMU5H50Xe0W/ivi+CmUDc7u73T5qa JNfwnLy0asuvQQXMinRZsdlS/OXNsR82DUDzadyTuCVwxIQqpK+8jqTZbQ1Hm+ua /+rEDRNaYqJtmCg2v6zGwXWmDfFyfctE/KQHUPqY7mZbfY8Y83JaE7M+ucAfv73z zdDxsPDC+O+vhjYszCvlyMtobdV96OjXg54EK1XQ/hzQTn3SHfNrYSHR0kyQXOaq 76zNv9dWoCz6BL+k3iJ7oyQ+AmY1V5NVxkE+oPLGIEFpnojd4zXeTkQ94CtfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvhA7n9mk/+mKKijyswIy84D+37UwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR9gKC5zbwit KMiWkwvqSNolVilpcKS8gSfYwCzR6CO1EtFmVJRwyMdow6t7ih9MI9KL8xB4xU4Q j4K5cK+V7BL2EynmXVFvfK0+0bZLtnn5kB36LvCd0XKphwy96s4BgXZC8n1MApPL 1ksnsqR6Yp31CUPoFO0QRaYjEHBuRbiA3DTS+5MXT/TqFJ6HlRnMS8oUPC7bDPVk 81bz/xlo9WuXiiYSUBiqEdgFdyKcdpGNL1jyGWzUmEYE8C4ctK4t5QImdRWkMpq5 TAaqLTnixbnBlhXnp/01dsrKaK201foOJP0XGnAg+VduaZFWgsOSZtBlfaUtqy4h glnkipRxkQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:06 2026 by rpki-client