$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: JgHoMOC+f1RkuX6tSYaTKxOrfXMXAZcj9GDNvBdGBuc= Subject key identifier: CA:FD:CE:C0:FC:2A:F8:25:07:2A:53:3F:80:00:F6:82:21:77:6A:46 Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 4DED40ED538B6F3C5EB3112B9DC62AA90F189B49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: 90 Signing time: Wed 29 Jul 2026 06:03:38 +0000 Manifest this update: Wed 29 Jul 2026 05:58:38 +0000 Manifest next update: Thu 30 Jul 2026 06:44:38 +0000 Files and hashes: 1: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) 2: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) 3: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: kiaHoQden19a9ky/bkKmx1E45BSy3QY3UTObgAXA6C0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ed:40:ed:53:8b:6f:3c:5e:b3:11:2b:9d:c6:2a:a9:0f:18:9b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: Jul 29 05:58:38 2026 GMT Not After : Jul 30 06:44:38 2026 GMT Subject: CN=CAFDCEC0FC2AF825072A533F8000F68221776A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4d:08:6d:10:ac:9f:d5:8e:9d:bc:ad:dd:d9: df:cf:6d:5f:2c:15:34:40:70:08:92:55:50:a7:b8: 76:10:99:03:0c:94:e1:ca:c6:b7:e6:ed:a1:7c:ff: 98:c3:c0:4a:aa:f3:71:ee:64:03:4a:dd:a9:ed:2b: e7:dc:c0:55:5e:4b:6c:90:21:72:da:a2:80:5a:ab: 66:9f:f7:e3:94:21:c1:30:f5:9c:a6:4c:43:0d:87: 00:f2:b4:a3:43:b3:8a:69:d6:53:03:b6:b8:b0:b1: f6:b9:e1:d5:b0:81:9b:0f:2a:30:1a:29:cd:eb:14: b1:d6:b7:6c:f4:2c:07:f0:89:02:31:a8:f5:46:23: 70:42:90:07:24:57:ff:4c:2d:c7:a8:ab:f6:e9:5e: 94:0d:26:eb:92:00:16:f0:1b:ff:0d:1d:de:31:09: 26:8c:2b:f0:17:d1:f6:83:a1:dd:2a:81:61:3e:51: a6:b0:6d:87:88:f2:7c:1e:5c:60:c6:46:2e:13:bd: 20:3b:2b:c6:a9:25:39:1f:a0:ba:c6:4c:60:00:b4: 42:ff:2b:44:8c:15:3f:18:a4:4a:69:82:6a:67:af: 3f:7b:ab:ae:00:e3:39:45:f5:fa:cd:ec:3b:a2:49: 3b:ab:83:11:cb:e8:64:4e:29:6d:7a:c8:ac:d9:c7: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:CE:C0:FC:2A:F8:25:07:2A:53:3F:80:00:F6:82:21:77:6A:46 X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:85:0d:a2:ae:70:4c:c7:a3:cb:d1:e7:9e:89:49:fd:53:af: 33:4b:3d:5b:38:72:2a:92:b7:43:29:b8:ec:00:2d:53:df:bb: 96:02:13:04:1d:7b:3f:59:4d:f5:a4:4e:49:62:b9:36:67:c8: 3f:4e:f1:c6:b6:b8:59:05:cf:2b:b6:f6:c0:1b:9f:1d:70:8a: ba:ec:90:7b:64:27:bf:a6:8c:75:42:8d:60:77:ea:38:2c:42: 42:b0:c6:47:7c:f3:1f:83:5b:b1:da:21:95:f0:f3:bd:89:d9: f2:9e:da:2c:ae:49:63:85:a8:36:58:c5:65:26:c7:2b:9c:cd: 1c:ff:a4:02:7a:0c:f8:5b:2c:d7:a7:2a:e1:6a:93:a9:ec:cd: c2:de:12:8e:8b:9e:02:0d:8e:39:d0:da:f0:c0:7c:f3:c5:66: d0:f4:49:61:b0:12:7e:6e:ae:b6:7a:9f:2d:f3:8d:71:1e:d9: cb:0c:0c:ec:ac:5d:e6:e1:db:76:be:32:28:11:71:ab:98:68: e7:05:ac:3d:c9:8f:bc:3f:4d:99:88:28:b5:0e:bb:fc:7c:6a: 93:a6:81:3d:88:3f:33:4e:bf:31:26:3b:11:bf:8c:00:f5:be: c7:80:7d:4b:43:02:ab:91:45:1a:8a:49:e1:7f:ff:25:95:52: ec:96:da:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTe1A7VOLbzxesxErncYqqQ8Ym0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjA3MjkwNTU4MzhaFw0yNjA3MzAwNjQ0MzhaMDMxMTAvBgNV BAMTKENBRkRDRUMwRkMyQUY4MjUwNzJBNTMzRjgwMDBGNjgyMjE3NzZBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrTQhtEKyf1Y6dvK3d2d/PbV8s FTRAcAiSVVCnuHYQmQMMlOHKxrfm7aF8/5jDwEqq83HuZANK3antK+fcwFVeS2yQ IXLaooBaq2af9+OUIcEw9ZymTEMNhwDytKNDs4pp1lMDtriwsfa54dWwgZsPKjAa Kc3rFLHWt2z0LAfwiQIxqPVGI3BCkAckV/9MLceoq/bpXpQNJuuSABbwG/8NHd4x CSaMK/AX0faDod0qgWE+UaawbYeI8nweXGDGRi4TvSA7K8apJTkfoLrGTGAAtEL/ K0SMFT8YpEppgmpnrz97q64A4zlF9frN7DuiSTurgxHL6GROKW16yKzZx2fnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyv3OwPwq+CUHKlM/gAD2giF3akYwHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYUNoq5wTMej y9HnnolJ/VOvM0s9WzhyKpK3Qym47AAtU9+7lgITBB17P1lN9aROSWK5NmfIP07x xra4WQXPK7b2wBufHXCKuuyQe2Qnv6aMdUKNYHfqOCxCQrDGR3zzH4NbsdohlfDz vYnZ8p7aLK5JY4WoNljFZSbHK5zNHP+kAnoM+Fss16cq4WqTqezNwt4SjoueAg2O OdDa8MB888Vm0PRJYbASfm6utnqfLfONcR7ZywwM7Kxd5uHbdr4yKBFxq5ho5wWs PcmPvD9NmYgotQ67/Hxqk6aBPYg/M06/MSY7Eb+MAPW+x4B9S0MCq5FFGopJ4X// JZVS7JbawQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:10:25 2026 by rpki-client