$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: yPLB5lVPY80l92UGWV/gLX3qp4A7YVfk815KlD+Nb0Q= Subject key identifier: 5D:02:6E:AF:B1:27:90:BD:50:4F:B8:02:1A:F6:47:26:69:AB:B7:A3 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 138330413B1B1BB5645F1BC15DF456A890E879E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 0112 Signing time: Wed 29 Jul 2026 14:59:38 +0000 Manifest this update: Wed 29 Jul 2026 14:54:38 +0000 Manifest next update: Thu 30 Jul 2026 15:32:38 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: NuKvRXgvMnpcz312Vb3E1RnaOnoTivz7PyNXwzd91m8=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:83:30:41:3b:1b:1b:b5:64:5f:1b:c1:5d:f4:56:a8:90:e8:79:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Jul 29 14:54:38 2026 GMT Not After : Jul 30 15:32:38 2026 GMT Subject: CN=5D026EAFB12790BD504FB8021AF6472669ABB7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:99:8c:ac:21:b9:fc:d4:99:36:55:56:45: f8:24:6a:40:e6:38:29:d3:ec:76:64:4e:fe:e7:33: c2:33:55:a2:ce:70:1a:3e:9c:81:c5:d9:d1:3a:79: a1:8f:e9:d7:f9:8a:72:62:a8:d5:c2:b2:60:13:c3: 07:e1:9c:8e:38:54:ba:1b:00:58:b7:42:17:0b:9d: 18:f1:1d:f0:29:ca:1a:b4:fb:1d:aa:a0:5c:c0:4f: 93:06:98:9c:26:ae:12:40:1a:58:49:e2:93:07:3e: d3:73:a9:ec:2d:a0:b0:52:67:3e:1a:7b:8a:93:9d: b8:d6:3a:e8:47:13:4e:83:b4:97:b0:9a:dd:8f:af: 4f:ca:ae:12:d8:7c:84:67:9b:91:09:5d:ab:26:14: 46:7b:86:b2:4a:98:c0:ac:7e:11:bc:65:69:72:f8: 67:ae:0c:d1:ce:5c:0f:0f:59:88:cf:17:83:10:cf: 98:8d:47:58:dd:b2:8e:87:28:c4:4c:f6:bb:d0:b3: 33:69:8a:89:39:e6:d8:15:d2:8f:d7:11:bb:ed:75: 45:58:ec:b0:3e:18:22:ae:72:16:eb:c9:a6:1e:e7: 8a:92:7b:90:1a:47:74:f4:a2:12:2a:53:92:c3:e7: 9d:cd:f1:37:95:e2:08:e6:89:c0:f2:f0:22:e1:f7: 9a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:6E:AF:B1:27:90:BD:50:4F:B8:02:1A:F6:47:26:69:AB:B7:A3 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8f:10:62:f7:44:1f:58:3b:35:cf:04:5c:de:38:96:2f:3e: ea:b7:79:35:aa:cf:17:f6:8f:3d:97:1a:05:fd:b2:ad:8d:42: b4:54:f8:76:e9:fe:97:0d:b3:b7:3e:17:6c:c4:08:7c:59:2e: b4:89:60:46:c9:b9:97:c5:bd:f2:4b:2b:f0:52:50:71:f7:9e: 49:1f:4c:69:e5:6e:39:3b:a7:60:7a:4c:8b:3b:6b:f3:6e:77: e9:fb:17:54:a1:41:14:22:b1:b0:a3:38:41:07:ed:95:a6:6d: d2:ac:09:12:fe:41:51:94:6c:63:6b:03:3e:00:80:7b:06:17: e5:dd:59:54:24:e6:65:4f:96:ce:0e:b7:f6:06:32:3b:36:c8: bd:e0:b7:db:d1:7f:33:e1:be:eb:73:e8:1c:3b:b6:8e:83:c5: f9:e0:d5:5c:c6:2a:b2:f8:b2:35:d1:27:02:5e:8c:d3:89:bd: 82:dd:ba:ac:57:cd:16:c4:0f:27:e2:1c:8c:7a:9e:db:1d:14: 1d:80:8b:f3:d6:f8:10:57:47:32:cb:db:f4:29:65:25:af:69: 27:83:27:e1:a7:77:99:e8:48:3c:7c:24:f5:2c:fd:75:e1:f0: 8a:e7:a3:1b:cd:c4:33:6a:74:3a:41:94:a5:d9:7c:4d:bb:bf: 00:55:47:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE4MwQTsbG7VkXxvBXfRWqJDoeegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA3MjkxNDU0MzhaFw0yNjA3MzAxNTMyMzhaMDMxMTAvBgNV BAMTKDVEMDI2RUFGQjEyNzkwQkQ1MDRGQjgwMjFBRjY0NzI2NjlBQkI3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUJmMrCG5/NSZNlVWRfgkakDm OCnT7HZkTv7nM8IzVaLOcBo+nIHF2dE6eaGP6df5inJiqNXCsmATwwfhnI44VLob AFi3QhcLnRjxHfApyhq0+x2qoFzAT5MGmJwmrhJAGlhJ4pMHPtNzqewtoLBSZz4a e4qTnbjWOuhHE06DtJewmt2Pr0/KrhLYfIRnm5EJXasmFEZ7hrJKmMCsfhG8ZWly +GeuDNHOXA8PWYjPF4MQz5iNR1jdso6HKMRM9rvQszNpiok55tgV0o/XEbvtdUVY 7LA+GCKuchbryaYe54qSe5AaR3T0ohIqU5LD553N8TeV4gjmicDy8CLh95pjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXQJur7EnkL1QT7gCGvZHJmmrt6MwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY8QYvdEH1g7 Nc8EXN44li8+6rd5NarPF/aPPZcaBf2yrY1CtFT4dun+lw2ztz4XbMQIfFkutIlg Rsm5l8W98ksr8FJQcfeeSR9MaeVuOTunYHpMiztr82536fsXVKFBFCKxsKM4QQft laZt0qwJEv5BUZRsY2sDPgCAewYX5d1ZVCTmZU+Wzg639gYyOzbIveC329F/M+G+ 63PoHDu2joPF+eDVXMYqsviyNdEnAl6M04m9gt26rFfNFsQPJ+IcjHqe2x0UHYCL 89b4EFdHMsvb9CllJa9pJ4Mn4ad3mehIPHwk9Sz9deHwiuejG83EM2p0OkGUpdl8 Tbu/AFVHmg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:56 2026 by rpki-client