$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: mF7ENfsPzadMoIDoVabzIcTX9ogcgFp5VimA2h0PMDM= Subject key identifier: A8:E8:CC:EB:AA:24:00:56:60:A8:7E:35:A1:C5:90:A1:75:24:34:5E Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 30E1D9DC575CE387DC552D94D43798BA2FA70069 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: 92 Signing time: Wed 29 Jul 2026 12:19:20 +0000 Manifest this update: Wed 29 Jul 2026 12:14:20 +0000 Manifest next update: Thu 30 Jul 2026 14:25:20 +0000 Files and hashes: 1: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: Yw4eP88mK1NLxQjweAuMER0vLWuSf9Mmhw5uBQqPpsY=) 2: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) 3: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 4: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) 5: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) 6: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 7: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) 8: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 9: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 10: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 11: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 12: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 13: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 14: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 15: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:d9:dc:57:5c:e3:87:dc:55:2d:94:d4:37:98:ba:2f:a7:00:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: Jul 29 12:14:20 2026 GMT Not After : Jul 30 14:25:20 2026 GMT Subject: CN=A8E8CCEBAA24005660A87E35A1C590A17524345E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:3a:f6:f0:73:22:a0:c6:6d:0f:3f:34:44: 4f:c0:05:06:aa:7b:68:e8:0e:6e:11:e1:c6:36:cb: d7:9c:41:11:93:37:3e:47:a0:0f:69:9e:d7:e0:cc: 08:73:10:f9:4e:a1:25:bd:0b:4c:26:d8:66:5a:da: fd:8f:6b:e4:fe:73:73:ab:7e:bb:05:61:43:f7:57: 51:41:4c:44:e3:6b:cd:c6:92:0e:ec:b2:3e:97:ef: 0a:51:3a:bf:c2:bc:bd:f7:31:50:0f:13:44:a4:26: 0c:f3:fc:ff:8a:9a:cf:13:68:c0:f4:ee:e3:f7:a8: 6c:09:98:8b:12:59:ad:23:10:26:3c:9f:39:df:f1: a7:19:c2:e4:99:63:1e:2e:7b:f4:02:79:78:16:e9: a3:85:32:de:69:23:89:ec:65:fa:59:1a:4f:01:c0: cb:08:c8:aa:08:31:b1:20:4d:81:05:f2:e2:1f:13: cd:31:cc:40:33:96:ab:fb:00:8b:fc:81:08:24:bb: 42:9d:5b:8f:92:75:8e:3f:dc:fe:bb:fd:93:f7:d7: 6a:5c:a8:5f:08:fa:44:99:4f:44:d4:e6:63:e5:ea: 62:9b:95:ce:b6:c0:70:cc:ef:65:ff:73:23:c0:4a: b9:e0:b3:d9:44:24:f5:22:0e:9f:aa:7f:31:7d:d7: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:CC:EB:AA:24:00:56:60:A8:7E:35:A1:C5:90:A1:75:24:34:5E X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:69:d5:f9:d1:e7:c8:d0:5a:35:51:d7:c7:6d:17:b8:f1:3c: 1b:28:5f:f8:3d:65:0b:57:73:bf:22:3b:be:05:2d:c6:46:60: 67:13:8a:eb:ea:c7:b8:23:d7:74:5d:0a:b2:22:1b:be:54:14: 5d:30:71:84:ad:22:f3:f1:f4:73:a6:71:0d:e3:5b:65:04:af: 2b:1b:b6:bd:e5:00:98:07:16:82:5c:f1:0a:12:a2:c5:65:49: bf:0e:66:c8:89:1f:59:3b:c7:31:df:93:92:03:40:31:37:52: 21:9c:b0:4c:32:94:aa:c9:f0:3f:fe:59:94:6e:22:4e:63:4c: 95:fb:d3:6f:97:23:14:95:23:cf:dd:56:73:8a:d6:e0:9c:17: 3b:b8:a2:46:c8:2f:31:1d:53:f3:d2:13:e1:9d:d1:36:76:47: c5:0d:f8:66:cc:b9:b9:80:0a:7d:08:b6:45:01:27:b9:ce:77: a6:ee:b0:69:38:1a:31:89:ec:2c:d7:f7:35:75:e5:63:31:5b: 21:f6:17:b6:2c:de:15:65:73:5f:f1:97:4c:9d:9b:3f:b0:f4: 87:98:d9:f2:6f:42:7e:82:8e:21:11:c8:1c:f9:33:6c:34:16: 97:1a:c1:f4:37:93:86:c2:b5:56:7b:dc:a3:49:5d:d6:f9:fe: e2:25:1b:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMOHZ3Fdc44fcVS2U1DeYui+nAGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA3MjkxMjE0MjBaFw0yNjA3MzAxNDI1MjBaMDMxMTAvBgNV BAMTKEE4RThDQ0VCQUEyNDAwNTY2MEE4N0UzNUExQzU5MEExNzUyNDM0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbDr28HMioMZtDz80RE/ABQaq e2joDm4R4cY2y9ecQRGTNz5HoA9pntfgzAhzEPlOoSW9C0wm2GZa2v2Pa+T+c3Or frsFYUP3V1FBTETja83Gkg7ssj6X7wpROr/CvL33MVAPE0SkJgzz/P+Kms8TaMD0 7uP3qGwJmIsSWa0jECY8nznf8acZwuSZYx4ue/QCeXgW6aOFMt5pI4nsZfpZGk8B wMsIyKoIMbEgTYEF8uIfE80xzEAzlqv7AIv8gQgku0KdW4+SdY4/3P67/ZP312pc qF8I+kSZT0TU5mPl6mKblc62wHDM72X/cyPASrngs9lEJPUiDp+qfzF911M9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqOjM66okAFZgqH41ocWQoXUkNF4wHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2nV+dHnyNBa NVHXx20XuPE8Gyhf+D1lC1dzvyI7vgUtxkZgZxOK6+rHuCPXdF0KsiIbvlQUXTBx hK0i8/H0c6ZxDeNbZQSvKxu2veUAmAcWglzxChKixWVJvw5myIkfWTvHMd+TkgNA MTdSIZywTDKUqsnwP/5ZlG4iTmNMlfvTb5cjFJUjz91Wc4rW4JwXO7iiRsgvMR1T 89IT4Z3RNnZHxQ34Zsy5uYAKfQi2RQEnuc53pu6waTgaMYnsLNf3NXXlYzFbIfYX tizeFWVzX/GXTJ2bP7D0h5jZ8m9CfoKOIRHIHPkzbDQWlxrB9DeThsK1Vnvco0ld 1vn+4iUbKg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:08 2026 by rpki-client