$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: JswSAGqeTWuFI1WSgBCvEA6Cv8X7hJ2Avr4TZhOgbtU= Subject key identifier: 16:4B:F3:27:8C:A9:E7:B4:D6:2F:D9:3A:04:E6:5E:76:B2:4C:4C:C7 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 0110BF044B0767F895963C13E01823A8F38C1A1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 19:35:03 +0000 Manifest this update: Wed 29 Jul 2026 19:30:03 +0000 Manifest next update: Thu 30 Jul 2026 22:00:03 +0000 Files and hashes: 1: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 2: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 3: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: 6NMgIXOEzDvEhH8DRxBTqMrK1sEMthyu7hiIq2ZvSVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:10:bf:04:4b:07:67:f8:95:96:3c:13:e0:18:23:a8:f3:8c:1a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jul 29 19:30:03 2026 GMT Not After : Jul 30 22:00:03 2026 GMT Subject: CN=164BF3278CA9E7B4D62FD93A04E65E76B24C4CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:61:ab:1e:46:da:ed:c0:ce:30:a3:34:03: ce:b2:cb:c2:37:e2:72:94:9a:67:d9:4f:d9:2b:fc: 8d:d3:e8:9d:b1:40:39:53:91:2f:1a:21:f4:43:d6: 1b:9b:7a:e7:50:4b:bf:a2:f1:60:22:5e:bb:e6:f3: 8c:2a:e4:51:0f:9f:fa:ab:8b:e0:9e:9b:c1:82:a4: 7d:4b:04:7a:a5:6f:36:a9:34:dc:b3:8b:ee:01:42: b1:49:f9:1f:32:42:04:3c:08:47:32:9d:e5:7c:7a: 5d:8e:ca:cf:62:cb:87:2d:10:f1:16:b5:98:48:51: 90:73:cd:29:56:84:5e:0d:9b:b4:a2:7f:57:46:6a: b0:28:c2:f9:47:58:1f:29:73:29:5a:45:1e:92:11: 65:6e:f8:4c:f8:f9:73:03:40:1c:23:a8:cf:15:9a: 22:bf:ea:1d:6b:c2:d0:e4:29:91:e5:b4:08:ad:bb: 79:d3:c4:ac:77:fd:f5:9c:32:ee:8d:70:0b:31:4e: b7:fc:98:88:f5:6c:b7:11:70:19:8f:ac:96:f4:04: b2:2a:a5:08:78:3b:2e:ab:f8:84:c4:4e:f3:ca:2b: 92:ae:80:0a:1c:40:31:46:5e:21:4f:1b:41:a9:76: ee:eb:cc:f7:c9:cd:97:81:7b:c6:38:47:c2:60:0e: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4B:F3:27:8C:A9:E7:B4:D6:2F:D9:3A:04:E6:5E:76:B2:4C:4C:C7 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:56:d9:40:15:a4:12:2c:63:93:58:ad:9c:13:79:ab:2c:7e: 84:d2:24:3d:2f:65:35:04:57:36:9b:05:0a:86:56:ae:4d:48: 26:a4:d3:f0:76:9e:44:34:e0:ac:1f:72:fe:61:22:44:aa:a5: d0:4c:c7:10:94:77:17:37:53:d9:76:8b:0b:52:93:2d:5e:1d: 89:0f:55:e8:60:d1:ed:e0:bd:96:21:99:89:64:b6:67:06:b1: 41:43:cb:18:23:cb:ba:1f:a7:63:46:6e:d5:58:96:e8:30:fb: fa:c0:b6:5c:5f:54:b6:97:a2:cd:b1:e5:8e:75:1b:c4:87:e8: 8c:08:62:52:1f:43:4d:ed:0f:73:f6:b8:29:28:02:2a:1f:28: cc:33:49:10:20:e4:a2:11:76:00:60:93:47:97:e6:7f:4a:68: 08:ca:e9:9a:3e:70:f3:7b:2c:db:1a:2b:db:43:f6:55:58:3e: 4b:b7:23:c1:9d:65:76:bb:16:55:d9:27:dd:cf:be:48:b2:0f: d9:30:fb:c3:e2:1e:71:ef:3b:c4:47:f1:c8:37:e8:a5:ad:05: fe:9b:dd:5b:96:ce:48:c3:d7:74:16:bb:04:5b:44:a7:a0:65: 91:64:b9:21:56:42:2b:37:b1:e9:34:db:76:1a:1a:e5:ca:be: 16:5c:a8:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUARC/BEsHZ/iVljwT4BgjqPOMGh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA3MjkxOTMwMDNaFw0yNjA3MzAyMjAwMDNaMDMxMTAvBgNV BAMTKDE2NEJGMzI3OENBOUU3QjRENjJGRDkzQTA0RTY1RTc2QjI0QzRDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAk2GrHkba7cDOMKM0A86yy8I3 4nKUmmfZT9kr/I3T6J2xQDlTkS8aIfRD1hubeudQS7+i8WAiXrvm84wq5FEPn/qr i+Cem8GCpH1LBHqlbzapNNyzi+4BQrFJ+R8yQgQ8CEcyneV8el2Oys9iy4ctEPEW tZhIUZBzzSlWhF4Nm7Sif1dGarAowvlHWB8pcylaRR6SEWVu+Ez4+XMDQBwjqM8V miK/6h1rwtDkKZHltAitu3nTxKx3/fWcMu6NcAsxTrf8mIj1bLcRcBmPrJb0BLIq pQh4Oy6r+ITETvPKK5KugAocQDFGXiFPG0Gpdu7rzPfJzZeBe8Y4R8JgDvTnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFkvzJ4yp57TWL9k6BOZedrJMTMcwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVbZQBWkEixj k1itnBN5qyx+hNIkPS9lNQRXNpsFCoZWrk1IJqTT8HaeRDTgrB9y/mEiRKql0EzH EJR3FzdT2XaLC1KTLV4diQ9V6GDR7eC9liGZiWS2ZwaxQUPLGCPLuh+nY0Zu1ViW 6DD7+sC2XF9UtpeizbHljnUbxIfojAhiUh9DTe0Pc/a4KSgCKh8ozDNJECDkohF2 AGCTR5fmf0poCMrpmj5w83ss2xor20P2VVg+S7cjwZ1ldrsWVdkn3c++SLIP2TD7 w+Iece87xEfxyDfopa0F/pvdW5bOSMPXdBa7BFtEp6BlkWS5IVZCKzex6TTbdhoa 5cq+FlyoqQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:10:25 2026 by rpki-client