$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: Oq7B7ECRfSrhuLC4PWHW6w3o5mGqiZIsF2ucuZfxViI= Subject key identifier: 61:88:F0:92:16:02:7B:E6:88:3F:59:21:15:62:44:8C:8E:CA:6E:A0 Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 5AB34E3749A46D5621E087172D8529F11947A956 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: 8C Signing time: Wed 29 Jul 2026 15:54:44 +0000 Manifest this update: Wed 29 Jul 2026 15:49:44 +0000 Manifest next update: Thu 30 Jul 2026 16:15:44 +0000 Files and hashes: 1: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) 2: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: MEsShAlunlZxqVSa6GbKos2v886RRwHHudnYbPpM40Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b3:4e:37:49:a4:6d:56:21:e0:87:17:2d:85:29:f1:19:47:a9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Jul 29 15:49:44 2026 GMT Not After : Jul 30 16:15:44 2026 GMT Subject: CN=6188F09216027BE6883F59211562448C8ECA6EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:e5:86:c6:e6:55:44:1d:bd:ca:db:a9:69: c5:74:ba:12:09:c6:c4:a7:0b:7f:b6:ea:b3:bf:07: 01:08:f4:b9:14:75:5f:09:9a:60:8a:b9:ec:43:1e: 57:8d:df:97:3d:af:75:4e:40:86:20:e0:ae:24:17: 38:97:a4:6a:22:66:61:e8:db:29:e4:dc:86:2e:2a: 53:73:60:a7:ed:cb:cd:2e:d2:1d:3d:a5:2f:6e:a3: 52:f3:77:06:b6:17:ca:c6:35:68:d4:88:fa:d8:77: cb:2b:da:ad:9d:ab:7c:c8:70:ba:86:6e:89:00:d0: 89:3d:32:14:87:b9:0b:18:cd:4f:51:77:2a:79:58: 38:46:13:48:89:1c:f3:a6:2e:2b:cf:f3:f2:7a:d3: 41:4b:62:a1:ff:10:4e:a4:1d:82:e1:a7:fc:10:00: 4a:97:3d:8f:17:0e:33:42:43:62:c5:ab:2a:4e:80: 35:c9:98:d5:05:6b:8d:26:cf:c4:75:13:af:13:da: f2:24:ba:95:8b:f0:1b:85:0a:f0:c0:65:b2:92:61: a1:29:82:67:b1:06:a3:bb:41:3d:0b:4d:17:03:58: 86:ef:b2:5c:29:af:bd:6a:0e:1a:11:b3:d1:8a:8a: 43:c1:de:c5:30:e0:4b:c8:64:75:f9:a5:9f:21:55: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:88:F0:92:16:02:7B:E6:88:3F:59:21:15:62:44:8C:8E:CA:6E:A0 X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:39:9f:02:fe:70:62:b3:3a:8c:a3:0a:21:11:a8:82:b5:42: f2:8e:e5:8c:0d:e6:05:4e:17:43:15:f5:43:72:1f:bf:b3:cc: 1f:18:2c:d1:da:ac:50:ca:61:f8:eb:ec:8f:28:27:e3:a8:75: 91:dc:49:8a:ac:57:f8:84:a8:5e:f9:b1:f6:dd:0b:4c:97:b3: 34:93:3a:71:92:17:f2:f4:d8:83:e8:ce:e6:95:be:b0:92:1d: b6:16:18:89:e1:89:05:e8:d6:d8:40:bd:bc:ee:7e:2e:d5:de: 5b:ba:d7:8e:f2:b3:5b:e2:6b:0e:2d:1b:be:8e:7c:b2:05:51: 86:ae:c3:d1:1f:52:35:bd:24:02:4e:1a:0e:68:b4:1f:94:cd: c7:26:9b:19:70:f3:a9:d3:b6:b6:4a:5f:e4:cb:a5:13:de:5d: 51:db:81:ae:19:5e:53:b8:65:49:39:47:e9:1e:62:57:40:19: 6d:d0:5a:9b:5c:9a:ee:ea:de:fa:4e:5d:5e:4f:62:90:b8:e4: 67:e4:0f:b8:9e:ff:84:9d:e3:4b:7e:3e:e6:a6:3e:4d:aa:9d: 20:cb:aa:9b:9b:de:b0:41:93:e5:2c:ea:dd:25:19:7e:5d:00: 1e:c3:f5:b2:5b:49:74:4e:9e:b8:d0:b5:bb:48:94:5d:29:df: 55:e8:9c:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWrNON0mkbVYh4IcXLYUp8RlHqVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA3MjkxNTQ5NDRaFw0yNjA3MzAxNjE1NDRaMDMxMTAvBgNV BAMTKDYxODhGMDkyMTYwMjdCRTY4ODNGNTkyMTE1NjI0NDhDOEVDQTZFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7+WGxuZVRB29ytupacV0uhIJ xsSnC3+26rO/BwEI9LkUdV8JmmCKuexDHleN35c9r3VOQIYg4K4kFziXpGoiZmHo 2ynk3IYuKlNzYKfty80u0h09pS9uo1Lzdwa2F8rGNWjUiPrYd8sr2q2dq3zIcLqG bokA0Ik9MhSHuQsYzU9Rdyp5WDhGE0iJHPOmLivP8/J600FLYqH/EE6kHYLhp/wQ AEqXPY8XDjNCQ2LFqypOgDXJmNUFa40mz8R1E68T2vIkupWL8BuFCvDAZbKSYaEp gmexBqO7QT0LTRcDWIbvslwpr71qDhoRs9GKikPB3sUw4EvIZHX5pZ8hVYhtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYYjwkhYCe+aIP1khFWJEjI7KbqAwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjmfAv5wYrM6 jKMKIRGogrVC8o7ljA3mBU4XQxX1Q3Ifv7PMHxgs0dqsUMph+Ovsjygn46h1kdxJ iqxX+ISoXvmx9t0LTJezNJM6cZIX8vTYg+jO5pW+sJIdthYYieGJBejW2EC9vO5+ LtXeW7rXjvKzW+JrDi0bvo58sgVRhq7D0R9SNb0kAk4aDmi0H5TNxyabGXDzqdO2 tkpf5MulE95dUduBrhleU7hlSTlH6R5iV0AZbdBam1ya7ure+k5dXk9ikLjkZ+QP uJ7/hJ3jS34+5qY+TaqdIMuqm5vesEGT5Szq3SUZfl0AHsP1sltJdE6euNC1u0iU XSnfVeicqw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:08:19 2026 by rpki-client