$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft File: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft (raw, json) Hash identifier: gEJHMEgcanl61fK7bHv7FE3whO8DYBUiwV8nCHOV2ew= Subject key identifier: AB:B9:17:60:A6:AF:EE:28:77:26:06:B5:31:43:14:72:F4:5D:0D:FF Authority key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3 Certificate issuer: /CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3 Certificate serial: 12EA11F0CA1D46D47EEE4FE3ED5C1D715B86A5BC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft Manifest number: 03 Signing time: Tue 28 Jul 2026 21:42:48 +0000 Manifest this update: Tue 28 Jul 2026 21:37:48 +0000 Manifest next update: Wed 29 Jul 2026 22:33:48 +0000 Files and hashes: 1: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl (hash: iX0CpOYLmN8Q9/BFsmR0Zp4TVgtuJZ+vzmnHitJl7E8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ea:11:f0:ca:1d:46:d4:7e:ee:4f:e3:ed:5c:1d:71:5b:86:a5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3 Validity Not Before: Jul 28 21:37:48 2026 GMT Not After : Jul 29 22:33:48 2026 GMT Subject: CN=ABB91760A6AFEE28772606B531431472F45D0DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:92:45:f4:5f:d8:98:c7:46:26:20:10:be: 54:4e:0b:bb:92:b7:87:ed:3b:c3:bd:47:50:83:05: e1:d5:c9:ec:e7:4b:07:6f:c6:76:71:0d:75:66:b9: 9d:7b:4e:47:29:d7:9c:4a:62:52:cb:23:cf:ea:cb: 35:ed:2d:97:3f:76:ee:f3:b5:a1:5a:3a:f6:21:ec: 89:47:70:d5:a7:50:e7:00:33:59:19:48:a7:8c:50: 4f:a8:d5:57:18:55:64:68:00:dd:c8:35:ca:a3:49: 2f:b2:06:31:b0:48:66:cd:5e:f1:e1:cc:93:0c:20: 60:30:b9:46:85:73:f4:ad:23:12:2b:b0:11:62:b6: 15:a0:27:1b:e3:e3:58:2c:94:70:a6:b6:71:77:84: f9:70:d2:d9:6d:63:23:46:c4:e2:63:4d:16:be:53: 17:9b:f0:db:ae:b5:cf:55:50:a8:c0:24:41:f6:53: 45:cd:3d:f8:f8:2e:f5:ca:0c:27:18:58:b9:db:30: 20:80:51:51:0d:20:95:df:ad:99:21:2d:b9:39:9f: 19:8d:82:94:46:00:79:62:49:65:2d:96:60:15:2f: 43:b2:c9:0c:5c:09:f1:2c:36:a5:42:63:99:81:43: 13:e9:c1:67:86:08:82:5e:67:e6:8a:49:56:6e:b6: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:17:60:A6:AF:EE:28:77:26:06:B5:31:43:14:72:F4:5D:0D:FF X509v3 Authority Key Identifier: keyid:00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:11:c9:54:b7:25:61:bd:12:d7:e9:13:7b:f9:b8:72:5a:35: f9:0c:bc:b4:a9:e6:23:98:ee:ff:20:92:b2:a0:2c:80:a4:20: 74:be:2f:95:71:75:01:c2:1c:61:f5:10:b4:4b:7b:3f:9c:f8: a7:28:8d:81:86:fa:67:53:8b:a6:e7:1e:a9:32:cf:21:16:78: ec:cd:b9:d4:73:76:7a:14:e6:b2:7c:81:6c:a0:86:dc:c7:cd: b5:3e:3c:87:ef:bc:2d:65:00:9f:16:1c:1c:50:35:7b:92:a2: b0:b1:3c:82:85:1c:53:ec:46:f9:5a:dd:70:fa:21:20:be:e7: 74:68:4a:de:8d:c5:8f:9b:9b:f1:bb:cd:11:9b:1c:5b:9a:28: a7:47:c8:97:ab:e1:47:ee:9e:52:09:da:49:cc:67:7e:5c:c9: fc:06:57:f7:72:d0:5a:d2:78:d8:55:e4:55:a8:1e:df:35:09: a1:37:9c:75:8d:f3:ae:f5:23:a3:a4:bc:58:14:a0:4a:65:79: 60:18:cd:fa:3b:30:bc:8e:83:3b:8c:2d:b8:7f:a8:4d:65:11: 78:72:93:2f:60:24:d5:b2:22:c6:db:76:aa:53:c2:f8:31:3d: 95:bd:b3:f1:72:e8:1b:51:e7:d7:f3:d5:9c:3a:e9:19:69:86: 11:19:8f:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEuoR8ModRtR+7k/j7VwdcVuGpbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAxNUZDREE1NDFGRkY1RUUyNjc3MEM3OEUzMEI1RUE4 OTQ0MjFFMzAeFw0yNjA3MjgyMTM3NDhaFw0yNjA3MjkyMjMzNDhaMDMxMTAvBgNV BAMTKEFCQjkxNzYwQTZBRkVFMjg3NzI2MDZCNTMxNDMxNDcyRjQ1RDBERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklZJF9F/YmMdGJiAQvlROC7uS t4ftO8O9R1CDBeHVyeznSwdvxnZxDXVmuZ17Tkcp15xKYlLLI8/qyzXtLZc/du7z taFaOvYh7IlHcNWnUOcAM1kZSKeMUE+o1VcYVWRoAN3INcqjSS+yBjGwSGbNXvHh zJMMIGAwuUaFc/StIxIrsBFithWgJxvj41gslHCmtnF3hPlw0tltYyNGxOJjTRa+ Uxeb8Nuutc9VUKjAJEH2U0XNPfj4LvXKDCcYWLnbMCCAUVENIJXfrZkhLbk5nxmN gpRGAHliSWUtlmAVL0OyyQxcCfEsNqVCY5mBQxPpwWeGCIJeZ+aKSVZuthS7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUq7kXYKav7ih3Jga1MUMUcvRdDf8wHwYDVR0j BBgwFoAUABX82lQf/17iZ3DHjjC16olEIeMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8xLzAwMTVGQ0RBNTQxRkZGNUVFMjY3NzBDNzhFMzBC NUVBODk0NDIxRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDAxNUZDREE1NDFGRkY1RUUyNjc3MEM3OEUzMEI1RUE4OTQ0MjFFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMS8wMDE1RkNEQTU0MUZG RjVFRTI2NzcwQzc4RTMwQjVFQTg5NDQyMUUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxHJVLclYb0S 1+kTe/m4clo1+Qy8tKnmI5ju/yCSsqAsgKQgdL4vlXF1AcIcYfUQtEt7P5z4pyiN gYb6Z1OLpuceqTLPIRZ47M251HN2ehTmsnyBbKCG3MfNtT48h++8LWUAnxYcHFA1 e5KisLE8goUcU+xG+VrdcPohIL7ndGhK3o3Fj5ub8bvNEZscW5oop0fIl6vhR+6e UgnaScxnflzJ/AZX93LQWtJ42FXkVage3zUJoTecdY3zrvUjo6S8WBSgSmV5YBjN +jswvI6DO4wtuH+oTWUReHKTL2Ak1bIixtt2qlPC+DE9lb2z8XLoG1Hn1/PVnDrp GWmGERmPeg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:31:29 2026 by rpki-client