$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft File: 48394F266C145173319F25807E0F7F0C02A6894A.mft (raw, json) Hash identifier: rZe5kOM9+fXaOl65WBiNKdFCkEvFgIoxTqlwFLtGrb8= Subject key identifier: CD:27:39:4E:5F:50:01:0E:1C:FA:51:32:D6:07:C1:74:D5:15:D5:0D Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A Certificate serial: 6AE72F936E65DFEA5D9B9522DE7ADCDB58EA543C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft Manifest number: 93 Signing time: Wed 29 Jul 2026 11:49:17 +0000 Manifest this update: Wed 29 Jul 2026 11:44:17 +0000 Manifest next update: Thu 30 Jul 2026 14:34:17 +0000 Files and hashes: 1: 3130332e3135302e32342e302f32332d3233203d3e20313339313534.roa (hash: D8YNJPMwU58KLUevFRebwhHA8dOoH0VTSkz2kVFv0Sw=) 2: 3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa (hash: wXAduiWjp7UFtX2sJ8+R8PFnchSO4/z/J9zAx35yjFM=) 3: 3231392e3233352e302e302f32302d3230203d3e20313339313534.roa (hash: huRlYO+09FxgnCnNVPyqhV/uiBFlNuHHw2ZsrH3jefA=) 4: 48394F266C145173319F25807E0F7F0C02A6894A.crl (hash: Mqe/BfHs38vo53AzVc5SnrubJyKg0BR44ct8oO5BnaI=) 5: 323430353a663934303a3a2f33322d3332203d3e20313339313534.roa (hash: lhgN0L9WHGTQkGTRCfQY8FavApS7jNFQ59DMwInIVKM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e7:2f:93:6e:65:df:ea:5d:9b:95:22:de:7a:dc:db:58:ea:54:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A Validity Not Before: Jul 29 11:44:17 2026 GMT Not After : Jul 30 14:34:17 2026 GMT Subject: CN=CD27394E5F50010E1CFA5132D607C174D515D50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:8f:e7:b4:1e:85:b1:05:46:52:26:31:2e: b0:3b:24:53:3a:73:5c:1d:a4:e1:fe:6e:b3:31:36: 97:35:0c:81:8a:bc:83:1c:35:6d:9b:10:3f:22:fe: 18:af:df:55:b2:e5:68:2c:c1:ef:27:8b:b8:66:55: 3b:9d:42:53:a2:eb:95:16:63:57:67:67:68:f4:ab: 25:d1:b1:e7:a6:76:65:e0:49:56:2f:f3:a4:17:68: 92:fe:86:d9:23:4f:94:fb:25:23:29:64:fd:46:9c: 2d:e5:be:8d:8d:14:da:f5:93:9b:eb:3e:4a:fa:17: 00:d9:d5:30:35:b8:d1:a8:6d:57:3c:9b:45:71:5c: 23:4b:72:3b:01:30:2d:a0:83:b2:2a:ec:f5:bc:00: 71:ab:b1:87:d2:cf:89:6c:65:2a:55:aa:82:3b:d5: 1d:a9:96:5b:51:5d:8f:aa:16:bb:ae:a5:d1:56:20: f1:e7:2f:38:b3:5c:c1:9c:d6:ae:22:1c:70:c8:b3: 35:f7:75:76:1f:e9:fc:67:51:d4:a5:3c:0b:ac:83: 17:c4:44:44:87:42:9c:4e:f1:f8:97:f5:2f:ed:b2: 87:06:92:a2:84:a5:65:40:2e:79:16:11:d7:41:02: b0:a2:ef:a8:84:0a:77:46:ff:c0:fa:05:d7:cb:49: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:27:39:4E:5F:50:01:0E:1C:FA:51:32:D6:07:C1:74:D5:15:D5:0D X509v3 Authority Key Identifier: keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:71:a2:47:06:3c:2a:58:b4:42:3a:63:5e:79:3b:bb:47:ad: dd:a1:e5:87:98:9d:c9:be:c1:a0:33:bb:05:10:36:30:63:53: fd:64:10:cf:a9:3c:41:f9:59:e9:41:11:e6:c0:f0:7e:b0:2b: 6a:a0:7c:33:94:53:78:86:8e:74:18:6a:d3:62:30:1b:33:b2: 27:34:0d:fb:96:e3:62:84:61:ab:7b:13:e5:b4:cb:c8:1f:78: 13:b3:be:f7:5d:91:38:4c:4e:11:45:05:eb:2e:2a:04:46:2a: c1:6e:6c:d3:84:a1:91:1f:ba:1b:8e:dd:63:87:ef:48:b1:e7: 81:44:56:f7:d1:82:92:9e:a3:c1:67:bb:21:c1:44:0e:b0:d9: 63:fa:14:eb:5e:41:72:d3:b6:23:83:92:91:3e:6a:b8:66:b2: c3:b4:a1:2d:c6:09:5c:6c:ee:8f:91:11:77:33:60:3e:dd:85: a7:40:08:2c:e8:39:dc:ea:53:8d:0d:88:cf:f7:fd:b6:81:27: bf:61:69:be:c6:ef:f2:96:54:40:57:fd:6b:60:01:7c:fa:d1: 78:06:76:0f:a2:a5:ea:28:95:86:34:ce:5a:06:67:03:12:88: 19:fc:13:fd:28:07:0a:cf:8c:ff:a1:9b:f9:a3:98:a9:d3:d5: 44:49:99:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaucvk25l3+pdm5Ui3nrc21jqVDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMw MkE2ODk0QTAeFw0yNjA3MjkxMTQ0MTdaFw0yNjA3MzAxNDM0MTdaMDMxMTAvBgNV BAMTKENEMjczOTRFNUY1MDAxMEUxQ0ZBNTEzMkQ2MDdDMTc0RDUxNUQ1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXo/ntB6FsQVGUiYxLrA7JFM6 c1wdpOH+brMxNpc1DIGKvIMcNW2bED8i/hiv31Wy5Wgswe8ni7hmVTudQlOi65UW Y1dnZ2j0qyXRseemdmXgSVYv86QXaJL+htkjT5T7JSMpZP1GnC3lvo2NFNr1k5vr Pkr6FwDZ1TA1uNGobVc8m0VxXCNLcjsBMC2gg7Iq7PW8AHGrsYfSz4lsZSpVqoI7 1R2plltRXY+qFruupdFWIPHnLzizXMGc1q4iHHDIszX3dXYf6fxnUdSlPAusgxfE RESHQpxO8fiX9S/tsocGkqKEpWVALnkWEddBArCi76iECndG/8D6BdfLSaRlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzSc5Tl9QAQ4c+lEy1gfBdNUV1Q0wHwYDVR0j BBgwFoAUSDlPJmwUUXMxnyWAfg9/DAKmiUowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc0MDg3NDk4Njk3OTMzMC8wLzQ4Mzk0RjI2NkMxNDUxNzMzMTlGMjU4MDdFMEY3 RjBDMDJBNjg5NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMwMkE2ODk0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NDA4NzQ5ODY5NzkzMzAvMC80ODM5NEYyNjZDMTQ1 MTczMzE5RjI1ODA3RTBGN0YwQzAyQTY4OTRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHGiRwY8Kli0 QjpjXnk7u0et3aHlh5idyb7BoDO7BRA2MGNT/WQQz6k8QflZ6UER5sDwfrAraqB8 M5RTeIaOdBhq02IwGzOyJzQN+5bjYoRhq3sT5bTLyB94E7O+912ROExOEUUF6y4q BEYqwW5s04ShkR+6G47dY4fvSLHngURW99GCkp6jwWe7IcFEDrDZY/oU615BctO2 I4OSkT5quGayw7ShLcYJXGzuj5ERdzNgPt2Fp0AILOg53OpTjQ2Iz/f9toEnv2Fp vsbv8pZUQFf9a2ABfPrReAZ2D6Kl6iiVhjTOWgZnAxKIGfwT/SgHCs+M/6Gb+aOY qdPVREmZSg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:46 2026 by rpki-client