$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: BAT0Pji1zrmpLhMs9gBDgqGXSHyZfy5TcEToehaQFAg= Subject key identifier: 64:21:21:F6:7F:78:64:20:9F:EC:DD:2F:71:DD:2A:F5:26:A5:73:FE Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 1A5AF2BFCB92E7CDA625B723BD79539DB8EA83F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: 8D Signing time: Wed 29 Jul 2026 06:53:44 +0000 Manifest this update: Wed 29 Jul 2026 06:48:44 +0000 Manifest next update: Thu 30 Jul 2026 08:11:44 +0000 Files and hashes: 1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) 2: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: JWPjN6FSHLv5paJA23dUfhwK3sJeqj5I4YnwS2eaBek=) 3: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5a:f2:bf:cb:92:e7:cd:a6:25:b7:23:bd:79:53:9d:b8:ea:83:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: Jul 29 06:48:44 2026 GMT Not After : Jul 30 08:11:44 2026 GMT Subject: CN=642121F67F7864209FECDD2F71DD2AF526A573FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:b2:9c:4f:ed:cf:a7:10:5a:75:bd:05:42: c0:6e:21:c4:29:68:a2:f9:89:6a:4b:fb:d0:0b:cb: 3a:80:d9:2b:a2:af:96:de:88:9b:cc:21:ab:56:7d: 10:32:e3:71:25:8e:47:a0:ec:27:f8:45:c2:99:ee: e1:d6:5b:8b:c1:12:8c:56:e9:cc:d3:4c:8b:eb:98: 46:5b:73:a7:7c:59:ef:41:87:4d:d2:d2:55:09:85: d8:eb:4d:f3:5f:a6:d8:cc:1a:6b:a5:4c:de:ae:53: b3:0e:48:41:f9:0b:0a:fb:57:af:96:42:a8:d3:81: 97:2c:68:c4:ce:b9:05:7d:e1:96:ae:5c:e8:ba:a0: c0:59:e8:73:61:18:22:43:84:21:8a:d8:ac:84:0a: 94:1a:29:cc:c6:74:e7:26:95:bd:0a:e7:f6:34:0d: 5b:09:2b:ea:0a:f4:51:0c:96:87:f7:ef:fa:57:b7: 42:5f:19:4f:8a:6b:bf:06:d7:fe:cd:3f:33:20:68: 9a:3f:b1:f0:3f:7c:3b:c8:a9:7b:24:a6:cf:51:30: 88:da:07:b3:9b:54:e8:82:42:c7:00:b7:f9:73:61: a0:97:cf:57:c2:c8:76:0a:fd:b5:07:c5:6e:1f:dd: a1:3f:c4:78:c9:9d:c5:b0:58:90:74:c1:27:ca:ad: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:21:21:F6:7F:78:64:20:9F:EC:DD:2F:71:DD:2A:F5:26:A5:73:FE X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:43:78:9c:d0:e5:82:d2:fe:81:99:e1:2c:c6:7f:79:4e:c9: 60:a5:9d:79:f4:2c:c6:77:a1:97:89:a9:ef:41:12:0d:85:fe: 73:ec:1b:b7:52:5a:56:b8:ed:4a:3a:55:f2:bd:6b:e4:17:50: f0:13:1a:ce:31:fa:cf:d9:d4:90:09:e7:a5:e3:d4:e1:7e:de: f1:cb:39:91:64:88:56:75:d5:d2:25:2c:36:e3:77:f0:94:b1: 85:5e:46:e3:34:4f:3f:a3:59:ee:5f:a4:b9:d1:e8:f4:8d:00: c2:13:45:85:4c:dc:d1:46:c4:8f:a7:4f:2e:a3:5b:cb:58:14: c6:94:d7:05:97:fb:22:2a:86:dd:34:f2:e3:2e:5e:71:7c:1d: df:49:a8:c6:9e:ea:c1:7e:a2:53:fa:48:8d:ff:99:59:dc:b2: bc:72:db:d5:64:9a:dc:40:4a:58:23:34:22:e8:dd:ad:c4:af: 6e:b5:5a:84:08:17:d7:e4:b1:cb:3b:14:e8:6d:7f:1b:ee:be: a8:15:1b:48:1d:e7:36:c4:0a:3a:84:80:c4:79:31:7f:a4:9e: 93:6f:55:49:6a:a2:27:f6:c7:85:41:39:df:52:ab:f6:19:e6: ae:51:89:4c:bb:7c:e4:f0:c3:72:c5:a1:4a:7f:57:38:58:41: cc:25:7f:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGlryv8uS582mJbcjvXlTnbjqg/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA3MjkwNjQ4NDRaFw0yNjA3MzAwODExNDRaMDMxMTAvBgNV BAMTKDY0MjEyMUY2N0Y3ODY0MjA5RkVDREQyRjcxREQyQUY1MjZBNTczRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIk7KcT+3PpxBadb0FQsBuIcQp aKL5iWpL+9ALyzqA2Suir5beiJvMIatWfRAy43Eljkeg7Cf4RcKZ7uHWW4vBEoxW 6czTTIvrmEZbc6d8We9Bh03S0lUJhdjrTfNfptjMGmulTN6uU7MOSEH5Cwr7V6+W QqjTgZcsaMTOuQV94ZauXOi6oMBZ6HNhGCJDhCGK2KyECpQaKczGdOcmlb0K5/Y0 DVsJK+oK9FEMlof37/pXt0JfGU+Ka78G1/7NPzMgaJo/sfA/fDvIqXskps9RMIja B7ObVOiCQscAt/lzYaCXz1fCyHYK/bUHxW4f3aE/xHjJncWwWJB0wSfKrWHLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZCEh9n94ZCCf7N0vcd0q9Salc/4wHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0N4nNDlgtL+ gZnhLMZ/eU7JYKWdefQsxnehl4mp70ESDYX+c+wbt1JaVrjtSjpV8r1r5BdQ8BMa zjH6z9nUkAnnpePU4X7e8cs5kWSIVnXV0iUsNuN38JSxhV5G4zRPP6NZ7l+kudHo 9I0AwhNFhUzc0UbEj6dPLqNby1gUxpTXBZf7IiqG3TTy4y5ecXwd30moxp7qwX6i U/pIjf+ZWdyyvHLb1WSa3EBKWCM0IujdrcSvbrVahAgX1+SxyzsU6G1/G+6+qBUb SB3nNsQKOoSAxHkxf6Sek29VSWqiJ/bHhUE531Kr9hnmrlGJTLt85PDDcsWhSn9X OFhBzCV/hw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:02:31 2026 by rpki-client