$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: InKh9yrUC467gPE0aNdkJtdH/MkzHknLhtLbFyn5eic= Subject key identifier: 10:45:CC:C7:AC:D3:C5:DA:4C:9A:0D:B6:A1:79:79:8E:FB:92:A1:9C Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 771B5BD17D2106391E2AC4481F4839726C069F57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 8C Signing time: Tue 28 Jul 2026 17:42:24 +0000 Manifest this update: Tue 28 Jul 2026 17:37:24 +0000 Manifest next update: Wed 29 Jul 2026 20:41:24 +0000 Files and hashes: 1: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 2: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: nPZGwt+939cBEVRZXyKCI8JGyPW4K1rMdIUL7j53XX4=) 3: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 4: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 5: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1b:5b:d1:7d:21:06:39:1e:2a:c4:48:1f:48:39:72:6c:06:9f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Jul 28 17:37:24 2026 GMT Not After : Jul 29 20:41:24 2026 GMT Subject: CN=1045CCC7ACD3C5DA4C9A0DB6A179798EFB92A19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:85:3c:51:82:83:4d:cc:19:18:85:99:76: c9:e9:38:57:36:c6:16:a9:b9:00:a3:12:16:65:ac: 65:4d:95:63:b6:25:45:5d:da:68:a2:e9:1f:28:e7: e2:e9:a9:27:d4:bd:91:4e:cf:1d:97:39:3c:eb:16: d6:e2:69:2e:0b:4b:80:8a:d9:72:28:09:80:aa:7d: 8e:6d:3b:21:31:38:c7:86:ec:ae:41:3a:be:48:84: c8:39:77:de:aa:f6:d8:fa:b9:af:e7:e1:6f:de:5d: 84:8d:ae:ea:44:21:50:84:b1:c0:f7:bf:7d:96:9a: bb:7d:14:e4:07:c6:69:d9:35:97:17:0b:f1:dd:e5: 04:2a:97:68:f6:a9:39:86:c4:76:b6:21:15:90:55: 11:8d:1f:18:05:9d:58:f0:41:bd:27:7f:d8:f2:c1: d2:4a:e1:d6:4a:54:1b:6c:b0:8e:64:a4:f7:7d:4e: 86:a7:0c:69:76:a4:a7:08:0b:0d:cf:2f:64:d0:56: a8:f4:46:4f:5f:43:31:d3:f1:29:1d:f2:a3:9b:b6: 64:24:bd:04:13:49:5e:99:c3:ed:a5:5f:92:16:f2: 79:c2:2b:7c:43:27:c5:50:98:da:96:37:52:38:a6: 1f:b4:c5:51:d8:96:d6:18:1f:fd:78:3e:26:5d:d2: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:45:CC:C7:AC:D3:C5:DA:4C:9A:0D:B6:A1:79:79:8E:FB:92:A1:9C X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:61:8f:c8:5c:1e:d6:80:b2:3d:bf:48:06:93:90:22:16:ae: 96:5e:04:2d:07:b7:27:fe:9e:53:ff:37:55:ef:53:be:60:ec: b0:f4:88:a4:86:9a:80:9f:ba:90:aa:ea:4b:40:57:a2:8f:24: d5:d1:f1:05:23:28:95:65:a8:03:f4:46:ff:a6:81:fe:ef:c9: 33:1e:f7:dd:51:45:a9:31:67:27:3f:c7:94:83:47:a2:19:9f: 68:47:33:d1:11:60:88:67:3b:a8:f8:79:60:2f:92:23:13:91: 3d:c8:09:4e:34:a1:9d:06:fb:ee:f9:e0:d8:1f:84:1b:81:fa: 18:ef:47:a5:2c:66:cb:57:eb:ea:70:8a:fa:5b:a9:c1:4d:e1: 7b:74:80:60:7e:fa:b0:07:8c:f6:31:48:6d:1f:4f:17:ea:b8: 99:75:1a:f3:bb:a9:85:73:f4:db:83:4c:a5:4d:95:b6:33:e0: 8a:10:e5:90:70:0b:bc:c6:be:04:50:c6:0f:b7:7b:30:f5:23: a5:4c:4b:b2:ed:fc:05:7e:23:30:14:51:7f:f1:98:3e:6c:ed: 9d:86:31:d0:4f:05:a4:ff:7c:43:9a:f3:81:1a:93:b5:9b:0e: c0:91:2c:aa:87:75:23:e7:5b:a3:28:aa:8f:8c:14:a9:17:ea: a2:16:09:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdxtb0X0hBjkeKsRIH0g5cmwGn1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA3MjgxNzM3MjRaFw0yNjA3MjkyMDQxMjRaMDMxMTAvBgNV BAMTKDEwNDVDQ0M3QUNEM0M1REE0QzlBMERCNkExNzk3OThFRkI5MkExOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlIU8UYKDTcwZGIWZdsnpOFc2 xhapuQCjEhZlrGVNlWO2JUVd2mii6R8o5+LpqSfUvZFOzx2XOTzrFtbiaS4LS4CK 2XIoCYCqfY5tOyExOMeG7K5BOr5IhMg5d96q9tj6ua/n4W/eXYSNrupEIVCEscD3 v32Wmrt9FOQHxmnZNZcXC/Hd5QQql2j2qTmGxHa2IRWQVRGNHxgFnVjwQb0nf9jy wdJK4dZKVBtssI5kpPd9ToanDGl2pKcICw3PL2TQVqj0Rk9fQzHT8Skd8qObtmQk vQQTSV6Zw+2lX5IW8nnCK3xDJ8VQmNqWN1I4ph+0xVHYltYYH/14PiZd0muXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEEXMx6zTxdpMmg22oXl5jvuSoZwwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2GPyFwe1oCy Pb9IBpOQIhaull4ELQe3J/6eU/83Ve9TvmDssPSIpIaagJ+6kKrqS0BXoo8k1dHx BSMolWWoA/RG/6aB/u/JMx733VFFqTFnJz/HlINHohmfaEcz0RFgiGc7qPh5YC+S IxORPcgJTjShnQb77vng2B+EG4H6GO9HpSxmy1fr6nCK+lupwU3he3SAYH76sAeM 9jFIbR9PF+q4mXUa87uphXP024NMpU2VtjPgihDlkHALvMa+BFDGD7d7MPUjpUxL su38BX4jMBRRf/GYPmztnYYx0E8FpP98Q5rzgRqTtZsOwJEsqod1I+dboyiqj4wU qRfqohYJNg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:30 2026 by rpki-client