$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: gpNKjyQUTlnFTJqWhs9kF689SrOQiEcRa0eKdL0XnWM= Subject key identifier: F2:02:2A:9F:3C:AB:51:A6:99:95:48:11:68:0B:FE:C9:4E:12:93:8E Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 05F9D353262FB776283099D76FB221D56472F81B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: FE Signing time: Tue 28 Jul 2026 16:57:18 +0000 Manifest this update: Tue 28 Jul 2026 16:52:18 +0000 Manifest next update: Wed 29 Jul 2026 17:59:18 +0000 Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: yrFx7FsMygtfxG1NuwizKV96/bZfNPFsNu1NWbYVoW0=) 2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f9:d3:53:26:2f:b7:76:28:30:99:d7:6f:b2:21:d5:64:72:f8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Jul 28 16:52:18 2026 GMT Not After : Jul 29 17:59:18 2026 GMT Subject: CN=F2022A9F3CAB51A699954811680BFEC94E12938E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:bb:f5:09:46:b6:4a:7b:b6:c6:28:4d:7c: 72:3f:0e:0a:00:1f:95:2b:fc:24:36:ab:38:db:15: f8:ae:1e:5f:5c:5a:5d:06:70:e2:64:c5:b3:d2:10: 51:2f:98:61:50:89:0d:2a:96:6a:99:59:30:34:f9: e0:40:b1:dc:e7:5c:89:cf:43:ec:04:c3:65:67:ba: 72:7c:8e:91:16:42:0f:cf:cf:64:c7:da:9a:2d:31: 75:74:1b:bb:17:b0:b6:38:f9:41:59:3d:08:ac:cc: be:a1:4a:3d:cf:3e:75:a3:e9:ca:82:16:5d:20:b9: f0:61:48:db:e5:59:64:97:b0:5c:c8:3b:9b:ac:60: c5:ab:10:08:54:2d:a3:11:b5:f1:00:63:bd:e1:bf: af:11:aa:17:b0:48:f7:0e:65:62:d5:9f:5e:20:10: bb:82:37:7c:53:87:bb:5d:93:64:90:32:24:ce:77: b1:bc:f3:31:08:51:77:0a:10:fb:a0:fb:55:85:a4: 17:dd:8e:0d:7d:dd:25:cb:b9:c5:c1:5a:ee:ed:c4: 49:ba:13:34:15:d5:d2:23:81:f1:6c:84:b2:14:8c: 66:10:60:c9:c2:c7:a5:5a:f0:f1:b7:84:48:a1:87: 06:8b:43:4e:51:4c:60:ad:0e:59:9d:0e:28:09:f3: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:2A:9F:3C:AB:51:A6:99:95:48:11:68:0B:FE:C9:4E:12:93:8E X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f8:90:d5:d1:e2:ea:c2:22:87:5d:ef:53:2c:c3:ba:4a:bb: d0:a2:8e:46:23:46:33:b0:8b:a7:c8:dd:6a:bd:75:9d:4b:8a: d3:34:8c:5f:19:da:a2:5d:81:af:9b:79:a3:bc:d0:c9:e9:36: 33:59:58:d4:86:8b:a2:4e:9f:db:63:fe:53:77:cb:72:ea:56: ec:a1:3f:11:dd:c6:14:66:e3:4f:b4:8a:84:f5:ef:58:e2:14: bb:e6:30:27:44:16:a4:78:0b:f4:0f:cc:57:5f:2b:bf:27:de: ee:e8:98:a3:3c:4f:28:71:86:26:c0:3d:80:29:6d:af:92:da: 79:79:8d:c8:46:c1:f2:d1:ee:92:03:e4:2d:07:a0:99:d5:6c: 0b:ec:2a:f0:d2:0b:a9:2d:56:e9:91:2a:de:bc:c8:bd:d3:a1: 2a:10:ba:26:8e:57:7f:44:f4:14:ab:66:3b:c1:bc:0a:e0:79: 25:6e:7b:60:d3:7d:c3:e5:13:ee:29:63:c3:ec:42:ac:0a:b3: da:94:8e:bc:84:df:4f:b7:f3:ad:4b:29:61:79:0e:25:9d:cc: 75:00:6e:4e:db:97:85:b6:bb:44:25:bf:f6:ce:09:9d:45:81: 16:1d:5c:40:f1:00:27:a7:af:0a:cc:63:2c:72:7b:be:bc:27: 8e:05:6c:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBfnTUyYvt3YoMJnXb7Ih1WRy+BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjA3MjgxNjUyMThaFw0yNjA3MjkxNzU5MThaMDMxMTAvBgNV BAMTKEYyMDIyQTlGM0NBQjUxQTY5OTk1NDgxMTY4MEJGRUM5NEUxMjkzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC407v1CUa2Snu2xihNfHI/DgoA H5Ur/CQ2qzjbFfiuHl9cWl0GcOJkxbPSEFEvmGFQiQ0qlmqZWTA0+eBAsdznXInP Q+wEw2VnunJ8jpEWQg/Pz2TH2potMXV0G7sXsLY4+UFZPQiszL6hSj3PPnWj6cqC Fl0gufBhSNvlWWSXsFzIO5usYMWrEAhULaMRtfEAY73hv68RqhewSPcOZWLVn14g ELuCN3xTh7tdk2SQMiTOd7G88zEIUXcKEPug+1WFpBfdjg193SXLucXBWu7txEm6 EzQV1dIjgfFshLIUjGYQYMnCx6Va8PG3hEihhwaLQ05RTGCtDlmdDigJ84ofAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8gIqnzyrUaaZlUgRaAv+yU4Sk44wHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/iQ1dHi6sIi h13vUyzDukq70KKORiNGM7CLp8jdar11nUuK0zSMXxnaol2Br5t5o7zQyek2M1lY 1IaLok6f22P+U3fLcupW7KE/Ed3GFGbjT7SKhPXvWOIUu+YwJ0QWpHgL9A/MV18r vyfe7uiYozxPKHGGJsA9gCltr5LaeXmNyEbB8tHukgPkLQegmdVsC+wq8NILqS1W 6ZEq3rzIvdOhKhC6Jo5Xf0T0FKtmO8G8CuB5JW57YNN9w+UT7iljw+xCrAqz2pSO vITfT7fzrUspYXkOJZ3MdQBuTtuXhba7RCW/9s4JnUWBFh1cQPEAJ6evCsxjLHJ7 vrwnjgVsKg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:02:18 2026 by rpki-client