$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: r9agF8fm+a9vOo53DC0RPUBwSYaiW8t5HO/vj2e0A/U= Subject key identifier: 1E:E3:5D:CB:EB:BA:05:38:CD:41:CC:0F:E8:40:0E:D3:64:49:AE:E6 Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 6A40BD288127CFE496AF9B390D06B8F3919C814F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: 96 Signing time: Wed 29 Jul 2026 02:18:09 +0000 Manifest this update: Wed 29 Jul 2026 02:13:09 +0000 Manifest next update: Thu 30 Jul 2026 03:01:09 +0000 Files and hashes: 1: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: pRaoaNAtsJ1F1q6Rw6VybwvHnkbF4BPjEd/uHttH4Lw=) 2: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 3: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 4: 3130312e3132352e3235332e302f32342d3234203d3e20313337373032.roa (hash: opKyhsmS++FYHtfTnj/kaqOGfgLAE1EmtkYwGMmQCYc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:40:bd:28:81:27:cf:e4:96:af:9b:39:0d:06:b8:f3:91:9c:81:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Jul 29 02:13:09 2026 GMT Not After : Jul 30 03:01:09 2026 GMT Subject: CN=1EE35DCBEBBA0538CD41CC0FE8400ED36449AEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:7e:71:2f:21:31:eb:c1:b6:53:ea:e7:ee: ac:d1:a1:32:63:69:c3:d7:35:62:ef:7f:50:ea:35: 1d:e5:58:fa:57:5d:75:82:96:5e:47:c8:c9:fb:77: 4a:1b:10:7a:d8:8f:71:7e:59:5a:50:d8:d9:ca:87: fb:13:54:88:3b:b0:13:1b:4f:99:53:fd:a8:d5:c3: 8b:04:bc:03:76:84:f4:98:be:ce:d5:9e:37:4f:a6: f9:cc:73:b0:6e:e0:a5:07:b1:e5:5b:68:1a:21:65: d2:4c:4e:b3:84:bd:00:1b:14:cb:e5:1e:e7:1e:d4: 73:5d:94:e4:c6:63:7b:26:99:6e:f6:1a:ef:6e:e4: 8f:39:d8:8e:90:fe:19:da:81:a3:27:bf:92:ed:49: 10:29:75:45:22:d7:cb:16:fe:ca:82:7a:b0:0f:ec: fa:22:d2:ee:b5:56:69:1f:b0:b6:94:4b:d1:2c:1a: 1f:99:4e:83:9f:6a:46:9a:5b:db:22:cc:d4:7d:aa: 24:b3:26:75:cd:ee:bb:5d:e6:c1:2a:2b:e2:48:35: 1c:33:dc:91:3b:04:36:36:3d:06:8d:b2:13:af:31: b1:0d:ef:a2:18:a3:fd:62:80:20:8a:3c:40:3d:bc: 76:f4:06:09:ba:1f:8e:87:b0:9e:ca:88:30:32:72: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:5D:CB:EB:BA:05:38:CD:41:CC:0F:E8:40:0E:D3:64:49:AE:E6 X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:80:26:70:b8:e5:9c:88:f4:0d:30:09:9a:70:1e:d0:25:fe: 48:bb:44:8b:0c:2d:ef:fc:46:fd:13:ec:72:1c:29:bb:7c:49: 69:c0:45:8b:33:1a:3a:a9:c0:c5:fa:0c:a5:08:98:d0:93:ad: bb:38:25:3f:51:c6:ce:e2:cb:36:5e:40:47:a7:c1:3e:80:2d: 3b:25:84:be:16:3d:b3:fc:dd:d0:33:a0:31:96:ae:05:3a:8d: c3:a4:34:51:40:a4:f0:44:31:c1:23:96:84:27:08:5b:2a:ca: 12:95:b1:89:61:52:1c:63:5e:9b:9d:ad:13:fb:56:48:11:b8: b5:3c:2b:21:01:ec:8b:ea:82:56:76:25:be:39:9d:5e:f2:39: ce:cf:b8:c3:e1:71:84:73:bc:57:e5:e5:a7:fb:00:f9:35:2f: f7:19:e3:07:28:2a:8a:30:32:5f:34:00:49:26:d1:fa:b0:c6: 82:64:aa:ca:da:dc:6a:2d:c5:7f:06:9c:ab:d3:2d:ee:60:97: b3:c6:b3:39:83:e3:d5:47:a3:a6:4a:87:e0:70:92:54:32:40: b6:8a:56:98:9a:5d:69:40:6a:09:45:31:18:a4:db:16:b8:53: 38:4d:0a:15:9e:dd:c7:51:8b:3f:68:7d:01:9f:06:10:37:98: e0:3d:d9:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUakC9KIEnz+SWr5s5DQa485GcgU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA3MjkwMjEzMDlaFw0yNjA3MzAwMzAxMDlaMDMxMTAvBgNV BAMTKDFFRTM1RENCRUJCQTA1MzhDRDQxQ0MwRkU4NDAwRUQzNjQ0OUFFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbX5xLyEx68G2U+rn7qzRoTJj acPXNWLvf1DqNR3lWPpXXXWCll5HyMn7d0obEHrYj3F+WVpQ2NnKh/sTVIg7sBMb T5lT/ajVw4sEvAN2hPSYvs7VnjdPpvnMc7Bu4KUHseVbaBohZdJMTrOEvQAbFMvl Huce1HNdlOTGY3smmW72Gu9u5I852I6Q/hnagaMnv5LtSRApdUUi18sW/sqCerAP 7Poi0u61VmkfsLaUS9EsGh+ZToOfakaaW9sizNR9qiSzJnXN7rtd5sEqK+JINRwz 3JE7BDY2PQaNshOvMbEN76IYo/1igCCKPEA9vHb0Bgm6H46HsJ7KiDAyclU3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHuNdy+u6BTjNQcwP6EAO02RJruYwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIAmcLjlnIj0 DTAJmnAe0CX+SLtEiwwt7/xG/RPschwpu3xJacBFizMaOqnAxfoMpQiY0JOtuzgl P1HGzuLLNl5AR6fBPoAtOyWEvhY9s/zd0DOgMZauBTqNw6Q0UUCk8EQxwSOWhCcI WyrKEpWxiWFSHGNem52tE/tWSBG4tTwrIQHsi+qCVnYlvjmdXvI5zs+4w+FxhHO8 V+Xlp/sA+TUv9xnjBygqijAyXzQASSbR+rDGgmSqytrcai3Ffwacq9Mt7mCXs8az OYPj1UejpkqH4HCSVDJAtopWmJpdaUBqCUUxGKTbFrhTOE0KFZ7dx1GLP2h9AZ8G EDeY4D3ZEA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:53:55 2026 by rpki-client