$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: g1vst28Wc4B29jCMxg9b/JH+SQ9PWHtllWJKirGfjYE= Subject key identifier: 3A:AF:50:3F:17:65:D8:0D:9B:DB:31:34:70:FD:91:23:7C:2E:36:EC Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 70A24B3A0125CF5E1A546332E83C690213E3F85C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 92 Signing time: Tue 28 Jul 2026 14:01:55 +0000 Manifest this update: Tue 28 Jul 2026 13:56:55 +0000 Manifest next update: Wed 29 Jul 2026 16:55:55 +0000 Files and hashes: 1: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 2: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 3: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 4: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 5: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 6: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 7: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 8: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 9: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: T9f58+GcH50SPA/LCakr/lPkh8eTiYqrWhYQJhAhl/s=) 10: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 11: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 12: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 13: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 14: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 15: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 16: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 17: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 18: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 19: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 20: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 21: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 22: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 23: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 24: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 25: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 26: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 27: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 28: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 29: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 30: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 31: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 32: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 33: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 34: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 35: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 36: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 37: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 38: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 39: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 40: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 41: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a2:4b:3a:01:25:cf:5e:1a:54:63:32:e8:3c:69:02:13:e3:f8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Jul 28 13:56:55 2026 GMT Not After : Jul 29 16:55:55 2026 GMT Subject: CN=3AAF503F1765D80D9BDB313470FD91237C2E36EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:21:f0:ad:fb:76:e1:33:d8:72:37:7d:40: 30:54:1d:12:15:d0:76:f2:04:52:7d:a5:60:61:1a: 0b:9e:bd:08:ac:c9:37:a4:98:0f:a5:e4:dd:83:3d: ba:6b:4f:0c:dc:c6:26:50:7a:9a:aa:19:a3:db:0c: 53:40:60:7f:c2:d8:bb:e4:a9:4a:e7:c9:c9:f2:73: af:c0:e9:72:72:5f:8a:a6:0e:c8:3b:fc:aa:60:e3: ea:1c:5c:b6:89:0e:a9:be:e7:b4:fd:bd:54:4c:67: 0a:8e:cb:f5:89:1a:6a:fe:97:c4:2f:ac:84:c7:51: 9b:22:33:82:8b:01:c8:12:24:27:ce:0b:d2:20:7f: ea:27:35:0a:40:08:e0:13:41:b8:d2:6c:31:a8:6e: b6:34:68:8d:87:1f:47:c6:a5:39:5d:81:3e:41:ec: 25:3c:b4:b2:01:bb:e2:bf:10:d8:d3:fb:4a:6e:5c: 9d:79:3b:a8:4c:5e:b3:e5:82:1e:fb:83:32:75:02: 69:4e:d9:c9:1f:02:48:65:3e:70:04:ae:4b:31:77: d7:05:e6:44:a6:c5:35:96:01:00:3f:31:07:63:9e: 99:29:4c:b8:88:c0:a5:36:14:1f:80:f6:a5:39:6b: 45:39:84:16:f9:9e:3c:8a:1d:ac:6f:bb:2e:65:0c: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:50:3F:17:65:D8:0D:9B:DB:31:34:70:FD:91:23:7C:2E:36:EC X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d2:c0:b5:af:94:be:b1:98:b9:b6:21:0c:9e:ef:d6:26:a2: 33:6a:94:da:49:ba:61:48:cc:a8:91:79:d2:89:ca:b5:27:0f: e0:56:17:a5:70:50:67:53:0f:9a:03:43:bb:39:1c:13:b0:8c: 56:66:b4:46:78:bc:4c:b5:2d:ab:a5:9c:d8:3c:50:41:56:31: 78:fd:e9:8b:0f:32:51:85:e7:94:46:d0:c6:33:1c:f2:01:b4: 3f:60:ac:93:a4:c8:1c:84:98:3f:60:30:0c:13:ec:4a:89:cd: 34:6a:9a:87:be:a0:6c:77:c8:b1:c4:81:c0:66:31:2c:19:7d: cd:3a:22:4c:22:6d:48:bb:62:83:fb:37:b2:86:a6:a3:cd:56: 2f:cc:78:bc:39:59:6d:bc:85:4a:47:12:32:c8:3f:a3:54:69: d5:36:07:b7:20:8e:e8:45:a2:aa:ac:a5:90:d3:5f:d8:3f:0c: a2:e6:b1:4f:4a:9d:2b:dc:a7:ac:a1:45:91:1c:23:4a:62:40: a1:ab:d9:c1:d8:46:5e:55:46:a4:a3:9e:e9:85:24:74:d7:07: 5e:1e:36:ce:49:ad:4e:c2:6b:65:b8:b8:3e:8d:06:c9:c5:a3: 27:09:7b:43:f6:37:b3:c5:b1:4e:a5:d3:49:ce:54:7b:b9:fb: 3c:77:a2:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcKJLOgElz14aVGMy6DxpAhPj+FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA3MjgxMzU2NTVaFw0yNjA3MjkxNjU1NTVaMDMxMTAvBgNV BAMTKDNBQUY1MDNGMTc2NUQ4MEQ5QkRCMzEzNDcwRkQ5MTIzN0MyRTM2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDyHwrft24TPYcjd9QDBUHRIV 0HbyBFJ9pWBhGguevQisyTekmA+l5N2DPbprTwzcxiZQepqqGaPbDFNAYH/C2Lvk qUrnycnyc6/A6XJyX4qmDsg7/Kpg4+ocXLaJDqm+57T9vVRMZwqOy/WJGmr+l8Qv rITHUZsiM4KLAcgSJCfOC9Igf+onNQpACOATQbjSbDGobrY0aI2HH0fGpTldgT5B 7CU8tLIBu+K/ENjT+0puXJ15O6hMXrPlgh77gzJ1AmlO2ckfAkhlPnAErksxd9cF 5kSmxTWWAQA/MQdjnpkpTLiIwKU2FB+A9qU5a0U5hBb5njyKHaxvuy5lDH4HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOq9QPxdl2A2b2zE0cP2RI3wuNuwwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9LAta+UvrGY ubYhDJ7v1iaiM2qU2km6YUjMqJF50onKtScP4FYXpXBQZ1MPmgNDuzkcE7CMVma0 Rni8TLUtq6Wc2DxQQVYxeP3piw8yUYXnlEbQxjMc8gG0P2Csk6TIHISYP2AwDBPs SonNNGqah76gbHfIscSBwGYxLBl9zToiTCJtSLtig/s3soamo81WL8x4vDlZbbyF SkcSMsg/o1Rp1TYHtyCO6EWiqqylkNNf2D8MouaxT0qdK9ynrKFFkRwjSmJAoavZ wdhGXlVGpKOe6YUkdNcHXh42zkmtTsJrZbi4Po0GycWjJwl7Q/Y3s8WxTqXTSc5U e7n7PHeiGg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:41:01 2026 by rpki-client