$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: 0zIANEFSFXmKvs5Och4ifHm3C6Vm5nnAgOqgKkv476o= Subject key identifier: 4C:AA:75:A3:F3:FF:D4:10:34:B2:92:96:11:95:CF:CA:B8:21:EB:11 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 3CA4BF70D9A7F78C8F740F82A04836CA258DBDA9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 96 Signing time: Wed 29 Jul 2026 20:35:12 +0000 Manifest this update: Wed 29 Jul 2026 20:30:12 +0000 Manifest next update: Thu 30 Jul 2026 23:08:12 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: L9ZhCoGKnpPg+VshrlgyYnsdN6H5U5dpGPsXsl2zdng=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a4:bf:70:d9:a7:f7:8c:8f:74:0f:82:a0:48:36:ca:25:8d:bd:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Jul 29 20:30:12 2026 GMT Not After : Jul 30 23:08:12 2026 GMT Subject: CN=4CAA75A3F3FFD41034B292961195CFCAB821EB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:5e:a7:18:50:ae:c7:8a:f3:b2:24:8a:6b: 12:c9:f4:8e:82:fb:5f:f0:0b:e0:ad:85:bf:8f:64: fa:a4:11:ac:24:e9:32:6e:21:7d:5f:58:ab:9c:1d: 14:c1:2b:36:06:b0:9e:09:46:fa:83:00:15:30:53: 9f:0a:24:f3:4f:86:c1:0c:38:2a:d9:24:43:b5:71: d5:1e:9d:4a:41:f9:44:4f:76:16:89:b5:d9:a5:b0: 46:57:f4:9d:20:40:43:0c:86:c4:c2:92:3e:d4:79: 2b:0d:6f:e4:b7:85:9f:e7:8b:d5:ea:c1:f2:8e:90: 1c:32:bd:76:e9:0a:71:1f:ef:b9:b7:35:f2:13:5a: ca:55:64:6b:40:54:99:d0:9a:12:41:86:26:dc:9c: 03:86:05:17:4d:95:a8:56:6d:7e:90:8e:c7:41:2c: fe:68:dd:54:cd:9c:c2:82:b4:ee:e7:7d:53:1c:4b: 2f:20:bd:7b:bb:cf:d7:7c:5b:4a:06:6f:bc:a0:92: f0:af:93:75:4a:e3:d6:18:a1:1a:83:1a:87:c6:5b: c6:56:9c:20:c5:aa:35:85:98:fc:77:de:c5:14:5e: 64:23:34:f5:31:01:79:88:32:9d:9a:31:d0:52:1b: fd:3e:dd:a0:87:af:f1:46:d4:1d:18:62:c1:c7:40: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AA:75:A3:F3:FF:D4:10:34:B2:92:96:11:95:CF:CA:B8:21:EB:11 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:71:a9:e1:d4:44:67:7d:57:03:cd:f4:d6:e2:be:18:30:c4: 4d:ef:98:62:b6:87:bb:0a:0b:1b:2c:59:81:f3:83:e6:f0:7f: 96:4d:50:c7:8e:a8:89:86:72:73:a7:52:da:96:76:84:6d:34: 28:be:08:9d:98:de:48:1a:ad:14:ca:ff:9c:cb:ef:2e:1d:dc: b1:78:8c:98:81:bd:69:55:eb:76:65:0a:d4:31:21:c0:c4:a5: 64:47:9e:07:7a:d4:d3:5c:d6:24:7d:08:db:7e:b9:cb:c6:c4: ca:ea:fb:63:78:c7:49:68:be:56:1a:30:45:24:76:38:b9:c8: 51:b4:79:e2:5c:6d:52:9b:35:63:07:d8:63:2a:d9:86:75:99: da:58:0c:ed:1f:a0:3d:d7:95:ae:15:0d:6a:00:68:72:63:82: 04:29:f7:15:c0:64:77:2f:dd:77:f2:57:25:0a:08:c1:7f:ab: a0:de:03:d7:ac:62:1c:30:7e:b9:47:92:56:cc:ed:9c:9e:1c: 69:c7:a0:d5:a7:29:eb:00:1a:3b:c1:d6:4e:26:3d:b6:9f:48: c1:88:11:f0:8d:5f:90:e7:1a:fe:5e:ce:3f:ab:a0:65:ec:60: f8:64:6d:c3:5a:5b:65:0a:af:8d:4f:0b:cb:12:5e:cd:1d:0b: 01:16:ae:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPKS/cNmn94yPdA+CoEg2yiWNvakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA3MjkyMDMwMTJaFw0yNjA3MzAyMzA4MTJaMDMxMTAvBgNV BAMTKDRDQUE3NUEzRjNGRkQ0MTAzNEIyOTI5NjExOTVDRkNBQjgyMUVCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS16nGFCux4rzsiSKaxLJ9I6C +1/wC+Cthb+PZPqkEawk6TJuIX1fWKucHRTBKzYGsJ4JRvqDABUwU58KJPNPhsEM OCrZJEO1cdUenUpB+URPdhaJtdmlsEZX9J0gQEMMhsTCkj7UeSsNb+S3hZ/ni9Xq wfKOkBwyvXbpCnEf77m3NfITWspVZGtAVJnQmhJBhibcnAOGBRdNlahWbX6QjsdB LP5o3VTNnMKCtO7nfVMcSy8gvXu7z9d8W0oGb7ygkvCvk3VK49YYoRqDGofGW8ZW nCDFqjWFmPx33sUUXmQjNPUxAXmIMp2aMdBSG/0+3aCHr/FG1B0YYsHHQOuVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTKp1o/P/1BA0spKWEZXPyrgh6xEwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3Gp4dREZ31X A8301uK+GDDETe+YYraHuwoLGyxZgfOD5vB/lk1Qx46oiYZyc6dS2pZ2hG00KL4I nZjeSBqtFMr/nMvvLh3csXiMmIG9aVXrdmUK1DEhwMSlZEeeB3rU01zWJH0I2365 y8bEyur7Y3jHSWi+VhowRSR2OLnIUbR54lxtUps1YwfYYyrZhnWZ2lgM7R+gPdeV rhUNagBocmOCBCn3FcBkdy/dd/JXJQoIwX+roN4D16xiHDB+uUeSVsztnJ4caceg 1acp6wAaO8HWTiY9tp9IwYgR8I1fkOca/l7OP6ugZexg+GRtw1pbZQqvjU8LyxJe zR0LARaubg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:45 2026 by rpki-client