$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft File: 92BE3D6E46236FC37D6006D602F1002225EABE46.mft (raw, json) Hash identifier: 2iYKo7DPQ6Wqz97wu7x0sjOQqHUZHVRFSv3q/09e14w= Subject key identifier: CA:AE:F9:CC:61:CB:99:16:75:1A:37:26:2B:BF:5F:B3:74:13:A5:E1 Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46 Certificate issuer: /CN=92BE3D6E46236FC37D6006D602F1002225EABE46 Certificate serial: 1D93AFF81CFDCA276EFAECCD369925264A9529F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft Manifest number: 8B Signing time: Tue 28 Jul 2026 19:12:35 +0000 Manifest this update: Tue 28 Jul 2026 19:07:35 +0000 Manifest next update: Wed 29 Jul 2026 21:38:35 +0000 Files and hashes: 1: 3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (hash: +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=) 2: 92BE3D6E46236FC37D6006D602F1002225EABE46.crl (hash: 5pK4GFOWCOqp4PJ+nUxuOOJmcdvtEmQvnbArUg9Swhc=) 3: 3130332e3136342e33332e302f32342d3234203d3e2030.roa (hash: 5/G9aQdoU9G0ysVYae+vwOznLyG3KHsIuIIEyt2t9ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:93:af:f8:1c:fd:ca:27:6e:fa:ec:cd:36:99:25:26:4a:95:29:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46 Validity Not Before: Jul 28 19:07:35 2026 GMT Not After : Jul 29 21:38:35 2026 GMT Subject: CN=CAAEF9CC61CB9916751A37262BBF5FB37413A5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:36:b4:0c:1d:40:d6:4a:e9:b9:2e:5b:1c: 0b:b2:cb:10:05:b2:d5:68:dc:3e:41:b5:6f:fc:92: e5:27:2e:2b:61:49:23:da:23:ba:3a:78:78:f4:e0: ca:6d:5e:e7:6c:99:cd:4c:7d:9f:07:35:87:be:ac: 18:92:87:c5:4f:7e:7c:83:25:9b:53:31:62:8a:a7: 71:a6:c1:52:16:3c:48:9c:b1:4d:72:f2:fd:aa:47: 9d:ba:89:23:42:92:2b:cf:95:09:99:78:d4:12:d0: 71:9d:06:ff:a2:6f:e0:4f:39:34:82:4b:21:5d:3a: ae:3d:6b:8c:72:34:30:4b:f2:7d:10:ad:fb:27:b0: fb:73:b8:23:58:61:68:19:65:64:68:13:d7:9f:de: e1:9f:ba:36:4d:c5:98:10:6e:10:a7:e6:a8:66:0f: fd:0c:1d:12:75:c4:7e:d0:f5:02:6a:b4:57:32:6c: 29:65:e3:09:74:50:2d:38:41:ce:84:ed:28:89:25: 25:e0:16:d3:f9:2c:ea:17:26:65:97:93:af:2a:14: 2c:be:ef:a3:9d:4a:9c:bc:d6:58:98:1a:18:3e:dd: 0b:4d:70:da:97:9d:2c:19:61:cf:3f:50:0c:56:8b: 6a:7e:d6:2d:09:af:25:d7:3d:df:1e:d3:49:fd:4a: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:F9:CC:61:CB:99:16:75:1A:37:26:2B:BF:5F:B3:74:13:A5:E1 X509v3 Authority Key Identifier: keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:10:bd:20:7a:87:cc:27:bd:c8:23:a6:3e:9b:2b:11:e4:fc: 43:8b:ea:7b:52:bf:6b:b3:60:a4:c8:7b:ce:26:0b:ee:c7:b5: 0f:40:d8:16:ea:9d:8f:08:2d:03:24:53:eb:c9:a1:df:eb:43: 9b:ab:14:16:c5:be:e3:d2:90:bf:19:13:0f:ca:4d:94:e2:47: d2:98:f7:4d:b0:f0:a6:b4:c4:68:92:16:38:6d:bf:12:26:4b: 6c:bc:26:06:7e:53:69:04:7e:2a:a2:25:7b:ab:9c:0e:cf:10: 0f:52:ef:7b:31:d2:e9:37:bb:32:33:bf:7e:6e:9f:c7:8d:17: 68:fd:74:9f:9a:76:4f:f8:87:81:35:f3:3d:61:bb:b8:25:f5: a0:fe:48:5a:a9:b1:50:cd:ff:63:6f:78:4b:8e:24:93:82:71: bb:2d:4f:4f:6a:62:60:9d:3f:b7:95:db:46:05:2d:53:7c:fe: ff:5f:65:54:f9:7f:a5:4c:09:2f:98:5c:03:21:26:9b:f8:e3: cd:5f:cf:5d:d4:b9:7c:c9:95:c3:61:dc:37:3c:1b:38:4f:7f: be:da:3f:ac:2f:43:43:c5:8e:6f:71:4c:d9:11:6d:5e:21:09: 30:d1:7b:c1:09:0c:b7:14:d1:4a:b8:ac:e1:9c:4c:05:8b:98: e2:4e:76:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHZOv+Bz9yidu+uzNNpklJkqVKfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIy NUVBQkU0NjAeFw0yNjA3MjgxOTA3MzVaFw0yNjA3MjkyMTM4MzVaMDMxMTAvBgNV BAMTKENBQUVGOUNDNjFDQjk5MTY3NTFBMzcyNjJCQkY1RkIzNzQxM0E1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlDa0DB1A1krpuS5bHAuyyxAF stVo3D5BtW/8kuUnLithSSPaI7o6eHj04MptXudsmc1MfZ8HNYe+rBiSh8VPfnyD JZtTMWKKp3GmwVIWPEicsU1y8v2qR526iSNCkivPlQmZeNQS0HGdBv+ib+BPOTSC SyFdOq49a4xyNDBL8n0QrfsnsPtzuCNYYWgZZWRoE9ef3uGfujZNxZgQbhCn5qhm D/0MHRJ1xH7Q9QJqtFcybCll4wl0UC04Qc6E7SiJJSXgFtP5LOoXJmWXk68qFCy+ 76OdSpy81liYGhg+3QtNcNqXnSwZYc8/UAxWi2p+1i0JryXXPd8e00n9Sq+XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyq75zGHLmRZ1GjcmK79fs3QTpeEwHwYDVR0j BBgwFoAUkr49bkYjb8N9YAbWAvEAIiXqvkYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM0NzIzNjIzMDA3MDI3NC8wLzkyQkUzRDZFNDYyMzZGQzM3RDYwMDZENjAyRjEw MDIyMjVFQUJFNDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIyNUVBQkU0Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNDcyMzYyMzAwNzAyNzQvMC85MkJFM0Q2RTQ2MjM2 RkMzN0Q2MDA2RDYwMkYxMDAyMjI1RUFCRTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhC9IHqHzCe9 yCOmPpsrEeT8Q4vqe1K/a7NgpMh7ziYL7se1D0DYFuqdjwgtAyRT68mh3+tDm6sU FsW+49KQvxkTD8pNlOJH0pj3TbDwprTEaJIWOG2/EiZLbLwmBn5TaQR+KqIle6uc Ds8QD1LvezHS6Te7MjO/fm6fx40XaP10n5p2T/iHgTXzPWG7uCX1oP5IWqmxUM3/ Y294S44kk4Jxuy1PT2piYJ0/t5XbRgUtU3z+/19lVPl/pUwJL5hcAyEmm/jjzV/P XdS5fMmVw2HcNzwbOE9/vto/rC9DQ8WOb3FM2RFtXiEJMNF7wQkMtxTRSris4ZxM BYuY4k52lg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:01 2026 by rpki-client