$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: N86V8nqHNw7E++hAobz3fE9PRHBDVRhbOLpK8EYACdU= Subject key identifier: 49:B4:33:9F:B4:DE:33:87:E5:BA:97:FB:B6:82:6F:D7:53:8C:F1:C8 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 39075CD73C10D248E1FA18F7B7C23BD55A80B588 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 94 Signing time: Tue 28 Jul 2026 10:31:41 +0000 Manifest this update: Tue 28 Jul 2026 10:26:41 +0000 Manifest next update: Wed 29 Jul 2026 12:39:41 +0000 Files and hashes: 1: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 2: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: DY+Ow+KErD3qeP8bspT00MmspSq+O+h6XFskB8Zy2qQ=) 3: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) 4: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:07:5c:d7:3c:10:d2:48:e1:fa:18:f7:b7:c2:3b:d5:5a:80:b5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Jul 28 10:26:41 2026 GMT Not After : Jul 29 12:39:41 2026 GMT Subject: CN=49B4339FB4DE3387E5BA97FBB6826FD7538CF1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:f8:74:8f:6a:1a:bf:36:be:02:8d:20:21: 85:d8:50:76:12:18:19:4b:e8:9e:9d:2e:6b:a7:33: 5f:af:c7:7c:e9:57:4c:8e:8c:e5:aa:87:30:bf:62: 51:98:88:1c:96:a3:48:f7:cf:ce:af:44:f8:be:cb: cf:de:5a:40:80:5a:f4:28:42:66:b7:cb:a5:71:a1: 4c:ee:3c:4f:ee:a1:9b:25:fa:a7:0c:37:af:67:a2: 44:40:c1:26:83:f9:98:ca:b6:39:4e:b5:b1:bb:74: c4:cd:13:68:4f:8e:dd:66:ff:91:67:24:a0:53:b3: bc:27:28:5b:dc:a3:1d:61:a2:ff:c8:46:2f:97:e3: e6:ad:62:75:cf:98:7c:18:73:fe:26:73:19:ba:5d: ac:06:86:56:26:8d:4e:d3:7d:1e:64:87:07:33:3b: 77:fd:9e:9b:22:88:3d:b4:2d:fd:52:42:d0:06:a5: 65:f6:25:f8:11:f1:bb:40:31:13:b1:da:f6:a1:a9: 89:7c:da:e3:7d:d9:5e:de:fa:70:5f:80:35:c0:12: b8:4f:82:c4:ee:a9:63:75:50:76:44:14:1c:ff:08: cf:24:0e:11:3c:3f:2c:b4:72:26:fe:8d:75:6b:9b: 69:c7:b6:0e:f2:19:5f:a9:fd:14:85:a5:ed:6f:b4: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:33:9F:B4:DE:33:87:E5:BA:97:FB:B6:82:6F:D7:53:8C:F1:C8 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:a0:f6:ee:00:64:d9:0c:2c:b6:66:21:76:e6:4c:ee:6a: 60:d4:ec:2d:79:8e:a2:8e:a1:39:ec:af:f4:a1:b2:c4:06:08: b4:83:61:df:e7:e5:7a:a2:35:64:32:fc:f3:8a:aa:03:20:ed: b1:79:6d:ed:1f:ac:d7:fc:1e:08:56:25:a4:b1:bf:fc:44:4e: 69:6a:3e:6a:ac:fb:96:0d:18:a1:64:47:f4:e4:79:d5:8a:0b: ae:8f:32:d7:22:e4:53:b5:d8:fe:de:f1:4f:71:10:e9:68:c6: b6:3b:8d:cc:35:d4:87:70:10:0a:09:3f:73:3a:86:18:79:f1: bb:d2:c2:f0:7f:5b:75:9c:c0:8c:f1:53:b7:e2:ca:fc:d9:11: 07:75:bc:42:d3:77:fc:d3:3d:6f:70:ce:48:10:05:a1:4c:6d: a6:93:48:38:df:15:e1:43:cf:e1:3a:08:9e:6e:eb:08:46:4a: 6d:20:5d:af:6c:3d:5c:2a:c8:8d:a2:6e:07:b9:57:a3:b1:4d: 04:2b:d1:65:b5:52:a3:5d:e0:2c:e1:d4:d0:4b:d5:c6:33:73: 5d:65:4c:e3:e8:4b:92:2e:42:84:d4:f0:37:ba:28:32:f9:3f: f6:9f:f3:82:27:8e:5b:1b:bf:60:4f:61:ab:a2:f8:ba:d4:ca: f2:46:dd:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOQdc1zwQ0kjh+hj3t8I71VqAtYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA3MjgxMDI2NDFaFw0yNjA3MjkxMjM5NDFaMDMxMTAvBgNV BAMTKDQ5QjQzMzlGQjRERTMzODdFNUJBOTdGQkI2ODI2RkQ3NTM4Q0YxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65/h0j2oavza+Ao0gIYXYUHYS GBlL6J6dLmunM1+vx3zpV0yOjOWqhzC/YlGYiByWo0j3z86vRPi+y8/eWkCAWvQo Qma3y6VxoUzuPE/uoZsl+qcMN69nokRAwSaD+ZjKtjlOtbG7dMTNE2hPjt1m/5Fn JKBTs7wnKFvcox1hov/IRi+X4+atYnXPmHwYc/4mcxm6XawGhlYmjU7TfR5khwcz O3f9npsiiD20Lf1SQtAGpWX2JfgR8btAMROx2vahqYl82uN92V7e+nBfgDXAErhP gsTuqWN1UHZEFBz/CM8kDhE8Pyy0cib+jXVrm2nHtg7yGV+p/RSFpe1vtPHtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSbQzn7TeM4flupf7toJv11OM8cgwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe92g9u4AZNkM LLZmIXbmTO5qYNTsLXmOoo6hOeyv9KGyxAYItINh3+fleqI1ZDL884qqAyDtsXlt 7R+s1/weCFYlpLG//EROaWo+aqz7lg0YoWRH9OR51YoLro8y1yLkU7XY/t7xT3EQ 6WjGtjuNzDXUh3AQCgk/czqGGHnxu9LC8H9bdZzAjPFTt+LK/NkRB3W8QtN3/NM9 b3DOSBAFoUxtppNION8V4UPP4ToInm7rCEZKbSBdr2w9XCrIjaJuB7lXo7FNBCvR ZbVSo13gLOHU0EvVxjNzXWVM4+hLki5ChNTwN7ooMvk/9p/zgieOWxu/YE9hq6L4 utTK8kbdvw== -----END CERTIFICATE-----Generated at Wed Jul 29 06:21:48 2026 by rpki-client