$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: ejljxHmcgaJLnHqZfH6hWvszPd2nDMH/xcS/rTxHVB4= Subject key identifier: 52:FD:8A:E2:19:58:31:DD:C5:38:CB:0A:3E:FD:CA:DE:DD:42:C1:43 Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 1BBE4C9B7A46F18C0A1067A64AB494441C020A28 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: 8E Signing time: Wed 29 Jul 2026 10:24:08 +0000 Manifest this update: Wed 29 Jul 2026 10:19:08 +0000 Manifest next update: Thu 30 Jul 2026 10:54:08 +0000 Files and hashes: 1: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: D8dY0Cf/DO8oIIMUakUrG3T4qkcGChZsjEIrp+ncp9Q=) 2: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) 3: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) 4: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:be:4c:9b:7a:46:f1:8c:0a:10:67:a6:4a:b4:94:44:1c:02:0a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Jul 29 10:19:08 2026 GMT Not After : Jul 30 10:54:08 2026 GMT Subject: CN=52FD8AE2195831DDC538CB0A3EFDCADEDD42C143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:0d:bd:76:46:9b:25:bd:bc:55:8f:4a:5a: 39:09:86:42:9f:46:3b:be:6b:27:39:0f:91:f5:a5: 37:98:7e:f6:d6:02:af:22:c1:b3:ac:e0:28:74:bb: 35:02:be:85:13:3f:21:20:eb:47:2b:8a:78:f5:f7: 8b:1f:8d:d4:06:47:72:17:30:5a:76:94:b2:35:9b: 47:c2:db:61:37:41:e7:7a:64:ab:4b:56:21:a5:82: 69:31:7b:f6:63:77:6e:4e:7e:63:cc:8d:e6:60:d9: 30:ef:34:2b:d3:02:90:b2:5d:0d:f6:50:c7:29:0b: 2b:97:b7:c2:d1:54:6a:23:9a:b6:97:0a:1e:44:10: 1b:f5:58:52:b9:86:6d:50:c4:1e:f1:3e:60:6c:ea: 2e:d0:7b:4e:35:19:82:36:2a:e0:b7:b3:52:ea:bc: 47:26:7b:7a:d6:d8:8b:58:b4:46:a8:11:b0:6c:9f: 7d:d4:ef:c8:f4:d6:4c:3f:bd:c8:64:62:ae:4d:03: ad:f4:ae:43:56:ed:4e:24:fc:bc:46:d3:10:c4:75: ca:1a:97:d7:d2:86:04:7c:5a:96:06:8d:07:7e:51: 01:74:c7:19:aa:82:4b:fb:35:d5:e2:d1:d6:40:58: 17:e5:0e:09:78:5d:53:84:07:17:0a:d7:dc:e3:51: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:8A:E2:19:58:31:DD:C5:38:CB:0A:3E:FD:CA:DE:DD:42:C1:43 X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3e:c6:f5:a3:f1:86:f1:ff:a3:a1:78:5b:c9:1d:ee:4b:fd: a0:9a:3d:31:45:f9:8a:59:b6:6b:24:7a:b5:f1:cc:b1:a2:a8: c6:90:f9:f7:09:8f:72:9e:97:3d:55:5f:60:39:34:77:8f:d2: 11:fc:0a:fb:29:8a:fc:99:94:aa:5c:db:b3:2b:6d:f1:2d:af: 8f:8a:55:11:be:06:ad:3a:41:af:ce:dd:65:a7:b1:44:cb:12: 2c:c1:59:19:4b:17:0e:e3:ab:f9:81:0a:37:12:c1:5a:78:31: d8:a2:23:32:f5:70:1c:f0:56:d5:d4:36:bb:33:de:da:eb:d5: cb:69:63:9e:11:56:f3:e1:d8:b7:47:56:da:59:85:a5:f0:1c: 05:7c:58:69:28:72:f0:2d:bb:03:0f:4a:db:6b:11:3b:c5:2c: fd:74:af:1e:5e:96:de:c7:88:34:76:7c:bd:92:7e:ac:fd:1e: 68:72:99:65:3b:e8:81:96:57:d0:fa:97:9b:62:b2:f6:f9:86: 8c:37:ae:97:53:4e:00:cd:49:be:ef:8e:d2:89:4b:46:76:8d: 4a:9d:4d:92:2e:73:49:a7:01:da:6c:d0:e6:fa:6c:23:62:0b: 00:93:ba:54:c3:27:9e:05:3e:e7:cc:4a:f2:e9:84:3b:49:3c: e9:9a:dd:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG75Mm3pG8YwKEGemSrSURBwCCigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjA3MjkxMDE5MDhaFw0yNjA3MzAxMDU0MDhaMDMxMTAvBgNV BAMTKDUyRkQ4QUUyMTk1ODMxRERDNTM4Q0IwQTNFRkRDQURFREQ0MkMxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEA29dkabJb28VY9KWjkJhkKf Rju+ayc5D5H1pTeYfvbWAq8iwbOs4Ch0uzUCvoUTPyEg60crinj194sfjdQGR3IX MFp2lLI1m0fC22E3Qed6ZKtLViGlgmkxe/Zjd25OfmPMjeZg2TDvNCvTApCyXQ32 UMcpCyuXt8LRVGojmraXCh5EEBv1WFK5hm1QxB7xPmBs6i7Qe041GYI2KuC3s1Lq vEcme3rW2ItYtEaoEbBsn33U78j01kw/vchkYq5NA630rkNW7U4k/LxG0xDEdcoa l9fShgR8WpYGjQd+UQF0xxmqgkv7NdXi0dZAWBflDgl4XVOEBxcK19zjUe0XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUv2K4hlYMd3FOMsKPv3K3t1CwUMwHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT7G9aPxhvH/ o6F4W8kd7kv9oJo9MUX5ilm2ayR6tfHMsaKoxpD59wmPcp6XPVVfYDk0d4/SEfwK +ymK/JmUqlzbsytt8S2vj4pVEb4GrTpBr87dZaexRMsSLMFZGUsXDuOr+YEKNxLB Wngx2KIjMvVwHPBW1dQ2uzPe2uvVy2ljnhFW8+HYt0dW2lmFpfAcBXxYaShy8C27 Aw9K22sRO8Us/XSvHl6W3seINHZ8vZJ+rP0eaHKZZTvogZZX0PqXm2Ky9vmGjDeu l1NOAM1Jvu+O0olLRnaNSp1Nki5zSacB2mzQ5vpsI2ILAJO6VMMnngU+58xK8umE O0k86ZrdDg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:35 2026 by rpki-client