$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: zk5L0G4i8S62RouUuIqWkEb2UZLMkelua4lEXnTy0a8= Subject key identifier: C7:1F:AA:BB:4A:DC:EA:88:6E:B8:5A:BB:E3:9B:24:E1:53:96:C2:46 Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 54CC39DAB43A08C0D72C354F952BC4378E5C496F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 98 Signing time: Wed 29 Jul 2026 01:58:08 +0000 Manifest this update: Wed 29 Jul 2026 01:53:08 +0000 Manifest next update: Thu 30 Jul 2026 03:45:08 +0000 Files and hashes: 1: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: cNKSO/tC+az3C0Bp/zTEISUSuaHBOtGmYkZANm1zLkM=) 2: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cc:39:da:b4:3a:08:c0:d7:2c:35:4f:95:2b:c4:37:8e:5c:49:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Jul 29 01:53:08 2026 GMT Not After : Jul 30 03:45:08 2026 GMT Subject: CN=C71FAABB4ADCEA886EB85ABBE39B24E15396C246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:76:79:51:54:d6:6e:29:37:18:4b:6f:02: a5:d2:98:94:36:3e:2a:64:66:ae:e9:4d:3d:40:24: 9e:a7:65:a8:af:fc:4c:19:cc:48:ad:f6:c2:fe:73: 8a:31:81:d9:a5:80:a7:65:2c:75:d9:78:32:9b:ca: 38:e3:3f:84:3a:96:37:26:3b:db:22:54:41:31:b0: 33:96:1a:34:72:b5:65:52:21:09:11:c8:bf:c3:84: 86:9d:07:10:a9:3f:e5:75:ea:43:d4:36:96:b1:2b: 77:e1:df:36:4a:6a:59:aa:e1:e0:90:b6:28:41:42: b5:da:03:d8:91:23:bd:3c:83:11:c5:db:a0:4c:26: 3a:76:05:2b:2a:a5:0f:7a:0f:83:31:48:6e:d2:83: 04:1f:77:03:4a:48:33:ed:bb:d8:09:3a:ab:1e:ff: f4:45:7b:13:52:11:28:43:d2:3b:47:d2:28:80:2f: 47:a6:63:1e:7d:8f:a8:c5:fa:c2:55:ac:6d:8d:cc: fd:4b:20:c4:1d:20:be:69:c1:24:19:59:7c:b5:50: e6:e4:c7:ac:bd:37:b9:94:a5:a9:a9:d6:bf:3c:a8: e5:93:16:1e:76:98:9a:31:2c:0d:f4:3b:e4:19:e4: 35:3a:60:55:32:44:06:32:c3:ee:f2:4b:3a:3b:b6: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:AA:BB:4A:DC:EA:88:6E:B8:5A:BB:E3:9B:24:E1:53:96:C2:46 X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:60:c8:c5:46:40:70:9b:9e:0a:cb:22:ee:0e:66:26:ac:84: 84:fc:3b:c6:e5:e9:aa:e9:a0:3f:33:e5:62:2e:50:e4:e1:15: 11:b4:ff:79:fd:67:bc:7c:61:12:34:ce:f4:c6:54:bb:57:b7: 08:b8:61:4d:36:20:90:27:9f:5c:f1:81:71:74:8f:14:f0:e9: f7:f8:b3:76:71:56:f5:4f:16:1f:14:22:3c:85:a6:d0:70:99: 5a:f9:ea:d9:78:c5:e6:c7:93:81:57:83:0a:d9:a1:f1:07:da: 19:6d:06:66:ff:e4:3b:44:13:82:1e:06:3a:70:9b:c2:8b:fb: a2:18:99:4a:22:24:9c:e9:91:b2:c3:7c:7e:28:b6:12:bb:36: 49:a8:4a:0e:86:b1:88:02:ec:e5:e1:a7:4d:15:02:07:d1:21: 9a:5a:03:8a:ab:b3:61:f1:4a:32:97:b8:5c:ea:3e:bb:07:2b: 00:8d:a4:8a:72:c3:74:97:05:c3:1c:5f:e0:e0:98:90:44:df: 4b:3c:63:4d:9a:7d:cf:48:58:95:a2:5c:ab:42:cd:8e:2c:7d: 15:13:6f:2b:4b:2a:ff:9c:be:1f:9c:21:b0:a3:2c:85:71:a1: 2a:f4:07:e6:e2:5f:87:a4:29:e3:b4:31:7a:33:a3:6c:65:10: 9b:8d:0a:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVMw52rQ6CMDXLDVPlSvEN45cSW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA3MjkwMTUzMDhaFw0yNjA3MzAwMzQ1MDhaMDMxMTAvBgNV BAMTKEM3MUZBQUJCNEFEQ0VBODg2RUI4NUFCQkUzOUIyNEUxNTM5NkMyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfXZ5UVTWbik3GEtvAqXSmJQ2 PipkZq7pTT1AJJ6nZaiv/EwZzEit9sL+c4oxgdmlgKdlLHXZeDKbyjjjP4Q6ljcm O9siVEExsDOWGjRytWVSIQkRyL/DhIadBxCpP+V16kPUNpaxK3fh3zZKalmq4eCQ tihBQrXaA9iRI708gxHF26BMJjp2BSsqpQ96D4MxSG7SgwQfdwNKSDPtu9gJOqse //RFexNSEShD0jtH0iiAL0emYx59j6jF+sJVrG2NzP1LIMQdIL5pwSQZWXy1UObk x6y9N7mUpamp1r88qOWTFh52mJoxLA30O+QZ5DU6YFUyRAYyw+7ySzo7tnrNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxx+qu0rc6ohuuFq745sk4VOWwkYwHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWDIxUZAcJue Cssi7g5mJqyEhPw7xuXpqumgPzPlYi5Q5OEVEbT/ef1nvHxhEjTO9MZUu1e3CLhh TTYgkCefXPGBcXSPFPDp9/izdnFW9U8WHxQiPIWm0HCZWvnq2XjF5seTgVeDCtmh 8QfaGW0GZv/kO0QTgh4GOnCbwov7ohiZSiIknOmRssN8fii2Ers2SahKDoaxiALs 5eGnTRUCB9EhmloDiquzYfFKMpe4XOo+uwcrAI2kinLDdJcFwxxf4OCYkETfSzxj TZp9z0hYlaJcq0LNjix9FRNvK0sq/5y+H5whsKMshXGhKvQH5uJfh6Qp47QxejOj bGUQm40KIg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:57:54 2026 by rpki-client