$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: 0mTKX7a/e1LQjRiCzihFU1IE5LapXKeUfHZqt8q/EYE= Subject key identifier: 5D:E6:EE:CC:D3:BE:36:26:A5:40:47:3B:50:63:82:B3:0B:B8:1B:0A Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 296A48CE1648CF7920986E0313228A4E1F7DCEC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 0106 Signing time: Wed 29 Jul 2026 06:28:42 +0000 Manifest this update: Wed 29 Jul 2026 06:23:42 +0000 Manifest next update: Thu 30 Jul 2026 10:07:42 +0000 Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: kyqvvfWXUlD/KmFBwslKXOnP/8in4TN0lDC8FbBJKvc=) 2: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) 3: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6a:48:ce:16:48:cf:79:20:98:6e:03:13:22:8a:4e:1f:7d:ce:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Jul 29 06:23:42 2026 GMT Not After : Jul 30 10:07:42 2026 GMT Subject: CN=5DE6EECCD3BE3626A540473B506382B30BB81B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:63:75:3b:10:a3:49:7f:da:a2:12:16:75: 09:a6:d2:63:97:69:9f:e3:5a:66:0b:9f:41:f3:8a: f2:75:71:02:af:56:e2:c3:ba:da:15:5c:c0:c4:60: 9f:10:6d:e8:29:45:6d:0f:3b:24:8f:24:ad:65:24: 29:af:70:4b:bf:57:07:05:c6:10:40:6c:91:ee:8e: 08:8d:37:72:eb:34:c8:ba:b0:2a:c6:31:3d:70:d7: 4f:1e:01:d8:6f:eb:ad:aa:62:a1:25:95:c1:7a:d6: 20:f2:3a:b6:b2:67:27:b1:52:08:52:dd:3b:78:d2: 35:3e:e2:5d:e9:5d:4b:58:a6:8b:c3:4c:33:df:e2: ce:9c:99:09:63:d0:12:6f:27:a6:27:dc:a8:1e:9c: de:a5:d7:60:59:3b:f1:f3:6f:ea:1a:b2:eb:ef:50: ca:cf:34:2f:be:eb:91:5a:81:38:ef:ef:72:39:bd: fe:e3:64:aa:e6:1f:47:c5:8e:c8:22:3b:c0:84:ef: 23:86:bc:ba:fb:ed:b4:ca:54:4c:bd:77:bd:59:65: 32:fe:45:7f:1d:bb:27:d1:b6:c1:c9:96:93:ac:b9: af:d8:39:43:4d:c6:01:c0:3e:1e:a1:b3:06:9a:fe: d4:1a:1e:37:2c:63:2b:c6:8d:bf:32:5d:8a:8b:65: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E6:EE:CC:D3:BE:36:26:A5:40:47:3B:50:63:82:B3:0B:B8:1B:0A X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1b:aa:d1:9d:d0:2f:1c:82:c2:04:29:84:50:26:f6:d2:f9: ab:6f:15:bf:77:7f:f7:d2:29:68:fd:95:3d:ed:21:db:54:3e: 80:88:0d:f9:26:ff:98:da:e8:8f:ac:79:0f:4c:37:69:a6:12: 2e:9e:be:b8:a8:38:df:1e:2f:9b:98:f5:06:3e:88:06:7a:4f: 61:80:5f:ff:5d:42:b9:ff:25:7f:97:e7:31:d5:fa:18:1a:d1: 22:59:73:5c:e8:29:1d:d8:22:7f:f6:61:e6:e8:f9:ba:6c:25: 5f:20:f0:67:87:db:d1:e0:df:7b:a9:4c:91:29:cf:dd:00:db: 7f:ff:40:d1:8e:ef:92:4c:7d:b2:e3:80:45:24:41:0b:b9:21: bc:6d:c1:ae:48:83:f9:63:1b:bb:89:34:6e:eb:e6:c4:d6:9a: ff:f1:03:c4:4f:7b:58:77:71:42:f8:78:8a:00:9f:0e:3b:d2: e0:c7:1d:89:75:3e:c0:45:32:89:75:e8:d5:f1:72:d9:4d:ea: a1:56:9b:3c:47:a6:01:de:d7:2f:27:e4:e6:2a:eb:70:31:76: b1:ea:0e:12:66:9f:4d:ec:7c:08:f0:71:1b:46:61:58:22:b1: f4:a9:70:32:bd:1c:73:24:91:4d:58:1f:7a:d9:72:20:2d:45: 7d:bd:ea:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKWpIzhZIz3kgmG4DEyKKTh99zsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjA3MjkwNjIzNDJaFw0yNjA3MzAxMDA3NDJaMDMxMTAvBgNV BAMTKDVERTZFRUNDRDNCRTM2MjZBNTQwNDczQjUwNjM4MkIzMEJCODFCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0mN1OxCjSX/aohIWdQmm0mOX aZ/jWmYLn0HzivJ1cQKvVuLDutoVXMDEYJ8QbegpRW0POySPJK1lJCmvcEu/VwcF xhBAbJHujgiNN3LrNMi6sCrGMT1w108eAdhv662qYqEllcF61iDyOrayZyexUghS 3Tt40jU+4l3pXUtYpovDTDPf4s6cmQlj0BJvJ6Yn3KgenN6l12BZO/Hzb+oasuvv UMrPNC++65FagTjv73I5vf7jZKrmH0fFjsgiO8CE7yOGvLr77bTKVEy9d71ZZTL+ RX8duyfRtsHJlpOsua/YOUNNxgHAPh6hswaa/tQaHjcsYyvGjb8yXYqLZfRfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXebuzNO+NialQEc7UGOCswu4GwowHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBuq0Z3QLxyC wgQphFAm9tL5q28Vv3d/99IpaP2VPe0h21Q+gIgN+Sb/mNroj6x5D0w3aaYSLp6+ uKg43x4vm5j1Bj6IBnpPYYBf/11Cuf8lf5fnMdX6GBrRIllzXOgpHdgif/Zh5uj5 umwlXyDwZ4fb0eDfe6lMkSnP3QDbf/9A0Y7vkkx9suOARSRBC7khvG3BrkiD+WMb u4k0buvmxNaa//EDxE97WHdxQvh4igCfDjvS4McdiXU+wEUyiXXo1fFy2U3qoVab PEemAd7XLyfk5irrcDF2seoOEmafTex8CPBxG0ZhWCKx9KlwMr0ccySRTVgfetly IC1Ffb3qMA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:33:57 2026 by rpki-client