$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: PngOsPwEm+si2O+DqfyObI69FRKS3ulj6TG9m8XR4Go= Subject key identifier: 60:DC:4F:0D:2B:39:21:E4:5E:4A:0E:28:5B:CE:FE:97:41:9B:D6:C2 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 6EEA72165CDFD4CC90F9AAA05CB010ADCA4A192E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 90 Signing time: Tue 28 Jul 2026 18:42:32 +0000 Manifest this update: Tue 28 Jul 2026 18:37:32 +0000 Manifest next update: Wed 29 Jul 2026 18:55:32 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 0LxQFW8jbxTQINPmuLZoWO5MV1q5C84TbZX46tpUtCM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ea:72:16:5c:df:d4:cc:90:f9:aa:a0:5c:b0:10:ad:ca:4a:19:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Jul 28 18:37:32 2026 GMT Not After : Jul 29 18:55:32 2026 GMT Subject: CN=60DC4F0D2B3921E45E4A0E285BCEFE97419BD6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:bb:4c:3f:4e:53:8a:99:87:c7:74:26:21: 58:0c:db:a1:81:27:18:ee:db:cc:51:50:f2:1d:71: 4b:4d:2e:33:51:fc:55:e1:e4:03:a7:f4:e9:31:a6: b1:1e:5b:67:44:44:e2:ed:28:75:89:da:b1:61:c1: aa:0b:33:54:4e:40:71:6e:f1:d9:7e:3a:67:c5:65: 40:fa:7d:88:70:78:7d:77:dd:39:03:f9:3d:46:15: 74:bf:84:00:82:af:7e:91:5b:60:55:f5:e1:61:89: 95:e2:27:b5:6f:a5:4b:ef:4f:76:6c:3f:6b:1b:02: cb:37:3f:a8:40:c8:b9:89:64:0f:95:72:be:a0:38: 88:46:86:08:ba:00:bc:b4:71:33:4f:31:ac:3e:6b: 7f:0d:c6:27:3a:88:0f:ce:ab:27:c2:c1:86:52:0b: 80:34:49:4e:da:4a:37:e4:70:d0:ad:b9:d6:45:1d: 3c:a6:cc:d2:13:d8:74:04:b2:38:68:fc:53:76:2a: b4:e9:ce:26:0d:44:2f:e1:94:49:95:40:1d:9c:48: 7a:c0:19:e6:3b:83:c0:76:cc:87:c8:1b:be:3c:13: c1:fd:49:4b:df:76:f5:ed:ad:9e:54:bd:4f:a3:bc: 0f:f3:e2:54:2c:05:8b:1d:50:b9:d1:f1:30:5b:1f: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DC:4F:0D:2B:39:21:E4:5E:4A:0E:28:5B:CE:FE:97:41:9B:D6:C2 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e9:46:00:6e:6a:28:4d:31:d1:8a:65:15:e4:cb:bd:9b:30: bb:2e:0d:f9:24:30:2c:40:d5:3b:cc:08:26:d0:01:e4:0c:b1: 67:ba:c1:45:3a:cd:76:03:61:b8:54:5c:83:40:79:a8:04:7b: 2a:f3:18:61:99:01:2d:1c:55:bb:d3:02:db:c4:e2:c2:1b:62: 8b:5b:73:ae:03:2b:47:7c:ca:f4:2c:0d:8e:36:a5:c2:1c:f9: 78:5b:71:27:6f:c8:db:ae:6f:27:e0:d8:6a:e0:4b:3c:a9:39: 1b:1b:6f:08:33:82:75:8a:02:8d:ab:54:ff:59:16:da:d5:c7: 38:3c:c2:23:76:79:e8:75:85:3e:ec:c5:5e:01:c1:b8:e7:78: 30:5a:ea:a1:63:4e:37:01:48:c5:67:b3:eb:2b:d2:3d:4a:95: 36:6d:eb:bf:ff:e4:34:4e:ba:bd:93:02:fc:63:5b:b8:f4:cf: 51:0b:03:c1:58:cf:38:fa:fb:01:5c:50:64:16:9c:3d:1d:13: 6f:12:07:4e:46:ae:15:3b:0c:6b:d9:f0:d2:f7:32:e0:2f:d8: a1:a3:c2:06:93:dc:29:91:ea:bb:55:66:92:bf:ae:02:b2:95: 39:ab:50:5a:06:b9:bc:c8:62:73:c5:2a:c9:55:fd:a6:c7:5f: 49:7a:cd:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbupyFlzf1MyQ+aqgXLAQrcpKGS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA3MjgxODM3MzJaFw0yNjA3MjkxODU1MzJaMDMxMTAvBgNV BAMTKDYwREM0RjBEMkIzOTIxRTQ1RTRBMEUyODVCQ0VGRTk3NDE5QkQ2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI3btMP05TipmHx3QmIVgM26GB Jxju28xRUPIdcUtNLjNR/FXh5AOn9OkxprEeW2dEROLtKHWJ2rFhwaoLM1ROQHFu 8dl+OmfFZUD6fYhweH133TkD+T1GFXS/hACCr36RW2BV9eFhiZXiJ7VvpUvvT3Zs P2sbAss3P6hAyLmJZA+Vcr6gOIhGhgi6ALy0cTNPMaw+a38Nxic6iA/OqyfCwYZS C4A0SU7aSjfkcNCtudZFHTymzNIT2HQEsjho/FN2KrTpziYNRC/hlEmVQB2cSHrA GeY7g8B2zIfIG748E8H9SUvfdvXtrZ5UvU+jvA/z4lQsBYsdULnR8TBbH4tJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYNxPDSs5IeReSg4oW87+l0Gb1sIwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKulGAG5qKE0x 0YplFeTLvZswuy4N+SQwLEDVO8wIJtAB5AyxZ7rBRTrNdgNhuFRcg0B5qAR7KvMY YZkBLRxVu9MC28Tiwhtii1tzrgMrR3zK9CwNjjalwhz5eFtxJ2/I265vJ+DYauBL PKk5GxtvCDOCdYoCjatU/1kW2tXHODzCI3Z56HWFPuzFXgHBuOd4MFrqoWNONwFI xWez6yvSPUqVNm3rv//kNE66vZMC/GNbuPTPUQsDwVjPOPr7AVxQZBacPR0TbxIH TkauFTsMa9nw0vcy4C/YoaPCBpPcKZHqu1Vmkr+uArKVOatQWga5vMhic8UqyVX9 psdfSXrNjQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:57:57 2026 by rpki-client