$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: r4jXrOHyLn/E1SuGa+EKqNOCcbUk8PliGs/FbWTRhLk= Subject key identifier: 8C:A0:6B:4D:6A:CF:74:6F:24:A7:DE:21:0B:0D:43:C2:87:21:A8:F6 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 2DF56D39A8902BE4F1D6C44BB8E4AFB00D606CCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 92 Signing time: Wed 29 Jul 2026 14:09:31 +0000 Manifest this update: Wed 29 Jul 2026 14:04:31 +0000 Manifest next update: Thu 30 Jul 2026 16:31:31 +0000 Files and hashes: 1: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 2: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 3: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: wkVh0S1okrT1iS2hX1FCN8R1gJ3P4k5Eji6/s7STvk4=) 4: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 5: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 6: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f5:6d:39:a8:90:2b:e4:f1:d6:c4:4b:b8:e4:af:b0:0d:60:6c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Jul 29 14:04:31 2026 GMT Not After : Jul 30 16:31:31 2026 GMT Subject: CN=8CA06B4D6ACF746F24A7DE210B0D43C28721A8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:b0:fe:61:76:d3:d5:8e:e7:88:31:34:d5: 6a:14:16:55:58:80:27:71:c9:7f:c0:3a:1f:aa:50: a7:39:49:34:2f:4d:d7:4b:eb:0f:a0:a5:46:ea:83: c9:29:e8:33:4e:f4:d7:c4:b4:0f:69:3a:fb:d3:99: 3d:00:3c:cf:7a:32:7c:96:c8:c7:38:34:2e:8e:6f: 80:0b:9c:1a:f3:f2:e6:b3:81:81:d8:a9:09:26:d4: 46:99:88:9e:6e:b3:64:5d:b5:30:f2:52:71:32:96: 3a:8d:9d:06:45:de:8f:98:00:1a:f3:ac:69:06:66: 21:f8:51:36:00:6e:1f:db:ab:b4:fe:93:69:f3:b0: 20:29:75:8d:61:e6:92:7c:e0:fd:e4:e4:71:3e:b7: a1:2e:73:b0:ab:8d:7a:bb:de:82:4c:63:a9:6a:a4: 3a:00:18:e7:8f:2c:02:ae:f3:dd:10:3a:67:72:f6: 2d:1b:d7:31:bf:0b:14:cd:c4:21:0e:44:5d:fa:d7: 51:07:bb:0a:27:d1:d3:a9:07:f1:c5:1f:bd:d5:76: 90:ee:39:90:cb:7f:19:33:41:35:0b:47:a5:ae:f6: b7:7b:98:ec:23:cd:38:a2:3b:69:5b:97:9d:e9:b6: 98:f3:3a:7c:29:d3:37:4e:43:c2:f4:49:0a:b0:5b: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:6B:4D:6A:CF:74:6F:24:A7:DE:21:0B:0D:43:C2:87:21:A8:F6 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:d8:51:0c:c8:39:a2:25:73:a4:4e:ac:c9:d2:4b:84:ef: 24:ff:f2:15:ee:38:95:0e:37:a4:e2:8c:6b:b8:f2:0f:10:f3: 92:6a:35:e7:58:32:27:dd:b3:9a:1d:93:80:14:e0:c6:88:04: 09:21:bf:02:78:9c:dd:b0:df:c2:a5:0c:79:70:84:d4:f9:2b: a0:b6:a9:5c:78:f4:b7:74:39:a9:51:ad:17:07:0f:5f:32:68: 95:41:5b:e7:d4:d6:c7:ea:17:4a:8c:82:2a:42:23:a4:03:3f: 2b:0e:b4:2a:79:14:f8:a5:36:fb:92:3f:34:f5:94:1d:ba:93: e2:4d:e9:ca:fa:69:51:13:da:49:33:08:37:d3:6c:5b:c8:42: 1d:62:0c:53:6f:19:26:2e:b2:87:d1:4d:37:89:fd:25:31:ae: 82:45:02:ae:ac:e1:d5:77:2a:0a:5a:a8:90:d8:e3:ac:e5:81: b1:d6:cd:d6:09:53:9a:a5:49:18:84:af:7f:a0:1a:68:a8:32: 9d:e6:e2:c7:e0:f9:e6:ca:76:55:58:57:53:ff:dc:d1:aa:5a: 71:7f:5b:5e:25:7e:c9:0c:d0:2f:dc:3b:ae:75:52:3b:ad:10: 63:7f:50:a1:c3:bb:da:31:10:a0:2b:e7:b7:e7:ff:a5:d2:55: 1e:92:66:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULfVtOaiQK+Tx1sRLuOSvsA1gbMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA3MjkxNDA0MzFaFw0yNjA3MzAxNjMxMzFaMDMxMTAvBgNV BAMTKDhDQTA2QjRENkFDRjc0NkYyNEE3REUyMTBCMEQ0M0MyODcyMUE4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0G7D+YXbT1Y7niDE01WoUFlVY gCdxyX/AOh+qUKc5STQvTddL6w+gpUbqg8kp6DNO9NfEtA9pOvvTmT0APM96MnyW yMc4NC6Ob4ALnBrz8uazgYHYqQkm1EaZiJ5us2RdtTDyUnEyljqNnQZF3o+YABrz rGkGZiH4UTYAbh/bq7T+k2nzsCApdY1h5pJ84P3k5HE+t6Euc7CrjXq73oJMY6lq pDoAGOePLAKu890QOmdy9i0b1zG/CxTNxCEORF3611EHuwon0dOpB/HFH73VdpDu OZDLfxkzQTULR6Wu9rd7mOwjzTiiO2lbl53ptpjzOnwp0zdOQ8L0SQqwW3fXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjKBrTWrPdG8kp94hCw1DwochqPYwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAainYUQzIOaIl c6ROrMnSS4TvJP/yFe44lQ43pOKMa7jyDxDzkmo151gyJ92zmh2TgBTgxogECSG/ Anic3bDfwqUMeXCE1PkroLapXHj0t3Q5qVGtFwcPXzJolUFb59TWx+oXSoyCKkIj pAM/Kw60KnkU+KU2+5I/NPWUHbqT4k3pyvppURPaSTMIN9NsW8hCHWIMU28ZJi6y h9FNN4n9JTGugkUCrqzh1XcqClqokNjjrOWBsdbN1glTmqVJGISvf6AaaKgynebi x+D55sp2VVhXU//c0apacX9bXiV+yQzQL9w7rnVSO60QY39QocO72jEQoCvnt+f/ pdJVHpJm1w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:47 2026 by rpki-client