$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: 540Oc54CUaU0ZHN8aSUC3za3cDIFxcNlvBkPRczuH0g= Subject key identifier: C3:2E:05:EF:C1:BC:68:27:25:C7:63:9D:A8:04:05:D8:65:B0:0A:35 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 5DB6D052ED2A07435999B98BD0EA7E5E608361D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: FF Signing time: Wed 29 Jul 2026 11:59:18 +0000 Manifest this update: Wed 29 Jul 2026 11:54:18 +0000 Manifest next update: Thu 30 Jul 2026 14:10:18 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: EcH+I1TA06I9YnutJMV2DTDOG47iqtVag8pMZUyndZw=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b6:d0:52:ed:2a:07:43:59:99:b9:8b:d0:ea:7e:5e:60:83:61:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jul 29 11:54:18 2026 GMT Not After : Jul 30 14:10:18 2026 GMT Subject: CN=C32E05EFC1BC682725C7639DA80405D865B00A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:a9:c2:f1:56:d6:e6:4d:a3:19:91:66:92: e5:8a:7d:14:93:bf:fb:c9:7b:18:27:92:11:7c:1b: 7f:65:db:47:f9:4b:d5:5b:4a:d7:92:eb:38:6c:67: 17:f0:7d:c5:61:30:fa:f1:65:63:b1:43:a4:fc:81: cb:4a:0c:d8:0e:7d:c2:78:62:65:21:7e:c0:1f:30: b0:0a:de:52:e5:b5:da:3e:a4:1f:76:7a:25:af:0c: a0:44:5f:ea:bc:e7:73:54:dc:72:ba:97:c7:2e:2d: 01:48:3c:c9:12:33:4a:d7:6f:3f:12:5e:a7:9f:f4: e3:be:f4:69:21:84:c3:e5:66:83:02:e3:4a:b8:96: 60:c7:dd:67:26:51:2c:3a:78:b8:ca:44:f2:d9:ed: 17:40:d1:b6:64:e2:58:1d:90:0d:1d:df:46:7f:b6: 14:af:65:3c:45:4d:6d:b9:53:e3:3f:a0:86:a3:da: 19:8b:ec:f3:52:21:44:68:07:e6:5d:93:82:63:b4: dc:6b:04:ae:9f:73:e3:8a:f3:4f:55:82:29:92:62: 55:ae:e6:de:56:7c:6d:e7:1b:d7:2f:33:23:88:43: a7:97:b1:94:2d:9a:62:27:21:6e:08:2a:d0:45:f1: f9:e1:5a:71:a2:6d:f8:eb:08:bd:cd:b1:c1:c3:bb: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2E:05:EF:C1:BC:68:27:25:C7:63:9D:A8:04:05:D8:65:B0:0A:35 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d3:0c:51:4f:41:1e:ac:37:fe:94:8d:bb:5c:f5:5a:92:14: 31:0d:cb:97:67:25:f2:96:26:f9:e1:a0:96:5f:1f:51:75:a0: 5d:21:ed:96:d6:08:b0:c5:f6:6d:6d:5f:25:03:ed:55:2c:27: e8:3d:de:89:c7:64:33:50:96:c6:32:b4:93:b4:54:84:39:13: 98:81:f3:92:3b:8c:be:5a:a6:92:60:a9:30:b7:56:ad:a5:57: 9c:8d:56:94:2f:16:11:e4:67:e0:58:a5:10:18:c7:16:1b:12: 94:aa:3b:89:e7:d3:f1:f4:d5:ef:b8:77:96:ae:4e:47:3c:67: 60:1b:52:24:2c:da:88:24:0e:74:cd:30:73:06:bd:7c:39:20: 21:87:00:9b:85:a9:08:8f:5c:d7:e1:d0:4f:02:2f:ca:3f:95: 79:b1:de:c6:25:91:ba:a5:41:02:46:0c:16:96:78:21:15:c4: f0:e1:28:8d:6d:c7:b6:23:a8:24:4f:ed:1d:d5:7d:4c:10:7e: 58:2e:9f:b7:ab:fd:ba:f5:a0:05:93:ef:e3:c4:b0:43:7c:fe: f7:8b:d6:e5:19:b5:9a:75:dc:1e:0e:2b:e9:9b:e8:35:3b:dd: 2b:7d:6c:76:7a:5d:3b:58:1c:20:54:12:38:85:a4:86:8c:ad: a2:7a:f1:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXbbQUu0qB0NZmbmL0Op+XmCDYdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA3MjkxMTU0MThaFw0yNjA3MzAxNDEwMThaMDMxMTAvBgNV BAMTKEMzMkUwNUVGQzFCQzY4MjcyNUM3NjM5REE4MDQwNUQ4NjVCMDBBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4anC8VbW5k2jGZFmkuWKfRST v/vJexgnkhF8G39l20f5S9VbSteS6zhsZxfwfcVhMPrxZWOxQ6T8gctKDNgOfcJ4 YmUhfsAfMLAK3lLltdo+pB92eiWvDKBEX+q853NU3HK6l8cuLQFIPMkSM0rXbz8S Xqef9OO+9GkhhMPlZoMC40q4lmDH3WcmUSw6eLjKRPLZ7RdA0bZk4lgdkA0d30Z/ thSvZTxFTW25U+M/oIaj2hmL7PNSIURoB+Zdk4JjtNxrBK6fc+OK809VgimSYlWu 5t5WfG3nG9cvMyOIQ6eXsZQtmmInIW4IKtBF8fnhWnGibfjrCL3NscHDu/RtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwy4F78G8aCclx2OdqAQF2GWwCjUwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtMMUU9BHqw3 /pSNu1z1WpIUMQ3Ll2cl8pYm+eGgll8fUXWgXSHtltYIsMX2bW1fJQPtVSwn6D3e icdkM1CWxjK0k7RUhDkTmIHzkjuMvlqmkmCpMLdWraVXnI1WlC8WEeRn4FilEBjH FhsSlKo7iefT8fTV77h3lq5ORzxnYBtSJCzaiCQOdM0wcwa9fDkgIYcAm4WpCI9c 1+HQTwIvyj+VebHexiWRuqVBAkYMFpZ4IRXE8OEojW3HtiOoJE/tHdV9TBB+WC6f t6v9uvWgBZPv48SwQ3z+94vW5Rm1mnXcHg4r6ZvoNTvdK31sdnpdO1gcIFQSOIWk hoytonrxJQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:06 2026 by rpki-client