$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: 649/cXTXRrtkEaldl5rcwxrWY60UMbMfO70JWfsyKME= Subject key identifier: 34:CF:83:EE:DE:32:77:AB:DF:7E:7A:D9:3F:94:BB:B2:23:5F:64:42 Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 3A31568E45594720D29B5F2455A9DBA4DFEBEDCF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: 90 Signing time: Wed 29 Jul 2026 04:48:28 +0000 Manifest this update: Wed 29 Jul 2026 04:43:28 +0000 Manifest next update: Thu 30 Jul 2026 06:52:28 +0000 Files and hashes: 1: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 2: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: cWA0afEzDVA9c2rtxVEuXRr3Rp2vARrvYPypjm8unCs=) 3: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 4: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 5: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:31:56:8e:45:59:47:20:d2:9b:5f:24:55:a9:db:a4:df:eb:ed:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Jul 29 04:43:28 2026 GMT Not After : Jul 30 06:52:28 2026 GMT Subject: CN=34CF83EEDE3277ABDF7E7AD93F94BBB2235F6442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:13:55:8d:da:4e:59:0d:f4:ec:e0:e0:9e: e5:65:c0:2d:22:60:a7:c5:74:ed:ee:d5:9a:f5:37: d9:b6:26:e3:06:6e:c0:18:d6:4e:39:6d:58:fe:22: c4:df:22:98:5d:c7:ff:00:d8:f9:71:db:65:81:72: 68:f2:5c:f2:a7:5b:ae:f5:48:fb:1b:4c:cd:6a:aa: 0f:be:be:0c:0b:4f:5d:b4:39:a6:66:03:64:e6:7c: 2a:db:5e:c3:de:10:38:33:27:ec:a1:b0:47:b6:2b: 52:19:f4:e2:aa:21:3d:71:10:b8:9e:93:66:d5:f9: 20:93:c6:46:32:87:c1:9b:44:7f:af:aa:87:54:13: b0:1a:34:9b:9c:87:c8:8f:dd:ae:df:55:66:a4:97: 64:12:59:72:60:04:89:7b:34:72:01:19:6f:34:bd: ae:95:05:35:00:2f:20:8a:d2:e8:99:8c:44:6b:f5: 35:7a:83:06:1d:26:35:31:e8:79:92:b9:7b:5f:87: c8:ab:d7:52:f5:fb:11:7b:05:63:11:6f:fd:d0:9f: 9e:91:96:7b:30:a4:32:03:70:51:0a:fa:8e:33:20: f1:2d:ad:d8:ff:46:36:24:54:8d:40:6d:6c:08:c4: d4:f4:7b:a4:37:4c:2f:af:f9:c9:46:62:b8:1c:5a: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:83:EE:DE:32:77:AB:DF:7E:7A:D9:3F:94:BB:B2:23:5F:64:42 X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:66:92:64:24:d7:af:95:43:f2:fb:1f:73:f0:7c:0c:2b:dc: 4e:a7:83:05:30:0d:25:6d:1e:54:62:d4:0a:f7:ec:df:23:81: 95:e0:26:2f:8b:ad:04:e9:71:a5:9f:48:e4:2a:8b:9c:5b:2b: c8:ee:09:14:f9:cd:84:01:65:da:d9:0c:20:95:ec:ed:82:dc: f1:a4:23:38:26:04:55:6f:a4:a6:fb:72:df:25:95:52:e4:27: ed:49:ad:99:52:9c:d1:bb:9d:73:e4:00:ab:e4:21:a8:0e:92: 77:45:4e:97:cc:2a:a7:cf:a3:70:41:f9:74:42:1b:f3:63:32: b3:55:59:48:57:18:d7:aa:36:bf:95:c3:62:10:cd:c5:13:59: 2a:ab:ec:21:19:1b:e8:1a:13:a1:b2:55:91:e4:de:af:d9:76: 93:98:41:79:c0:eb:ee:3a:89:6e:9d:74:24:aa:36:05:18:0f: c0:4e:23:98:fa:6b:0e:51:46:e4:2f:29:df:6b:01:cd:22:bb: 04:6b:6a:53:40:d7:e2:6f:22:54:a0:9d:56:e4:bc:3b:69:3c: 88:12:4e:cc:98:ea:40:91:a4:06:0d:84:9d:9e:86:9e:66:3b: fc:21:c5:3d:e4:82:fe:4c:be:b9:f5:8a:e3:6a:42:4a:f7:26: f8:78:74:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOjFWjkVZRyDSm18kVanbpN/r7c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA3MjkwNDQzMjhaFw0yNjA3MzAwNjUyMjhaMDMxMTAvBgNV BAMTKDM0Q0Y4M0VFREUzMjc3QUJERjdFN0FEOTNGOTRCQkIyMjM1RjY0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb9BNVjdpOWQ307ODgnuVlwC0i YKfFdO3u1Zr1N9m2JuMGbsAY1k45bVj+IsTfIphdx/8A2Plx22WBcmjyXPKnW671 SPsbTM1qqg++vgwLT120OaZmA2TmfCrbXsPeEDgzJ+yhsEe2K1IZ9OKqIT1xELie k2bV+SCTxkYyh8GbRH+vqodUE7AaNJuch8iP3a7fVWakl2QSWXJgBIl7NHIBGW80 va6VBTUALyCK0uiZjERr9TV6gwYdJjUx6HmSuXtfh8ir11L1+xF7BWMRb/3Qn56R lnswpDIDcFEK+o4zIPEtrdj/RjYkVI1AbWwIxNT0e6Q3TC+v+clGYrgcWqXtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNM+D7t4yd6vffnrZP5S7siNfZEIwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmaSZCTXr5VD 8vsfc/B8DCvcTqeDBTANJW0eVGLUCvfs3yOBleAmL4utBOlxpZ9I5CqLnFsryO4J FPnNhAFl2tkMIJXs7YLc8aQjOCYEVW+kpvty3yWVUuQn7UmtmVKc0budc+QAq+Qh qA6Sd0VOl8wqp8+jcEH5dEIb82Mys1VZSFcY16o2v5XDYhDNxRNZKqvsIRkb6BoT obJVkeTer9l2k5hBecDr7jqJbp10JKo2BRgPwE4jmPprDlFG5C8p32sBzSK7BGtq U0DX4m8iVKCdVuS8O2k8iBJOzJjqQJGkBg2EnZ6GnmY7/CHFPeSC/ky+ufWK42pC Svcm+Hh0wA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:42 2026 by rpki-client