$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: aty480fbtcPm+ma7vLse9qEzToG6jIklI9yEM/D3vNM= Subject key identifier: D4:59:E8:B1:BC:E7:81:D0:5F:66:17:52:9B:37:0D:DC:0E:75:A5:1B Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 3E8FB11F68696A0DDC18D57698A4BEECB1F511F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 8B Signing time: Wed 29 Jul 2026 06:48:43 +0000 Manifest this update: Wed 29 Jul 2026 06:43:43 +0000 Manifest next update: Thu 30 Jul 2026 10:00:43 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: p34/NFwWWGbApElZSu5120FluQSU4DoawTt8dN66v/c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8f:b1:1f:68:69:6a:0d:dc:18:d5:76:98:a4:be:ec:b1:f5:11:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Jul 29 06:43:43 2026 GMT Not After : Jul 30 10:00:43 2026 GMT Subject: CN=D459E8B1BCE781D05F6617529B370DDC0E75A51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:5d:9d:ec:4e:e5:71:64:b8:3b:f6:80:78: ff:28:51:82:7c:35:3a:cb:91:46:8a:85:b5:dd:96: c4:e4:c9:d7:90:52:52:1b:97:cc:7f:7f:1d:3f:03: 80:c3:4d:99:90:f9:62:c4:b8:ef:0a:8c:5d:56:74: 61:4f:8a:f0:00:21:32:fb:cd:08:35:f2:50:ab:7e: da:dc:04:a1:c0:97:ae:da:f6:fb:0d:07:a1:76:73: e9:c6:47:02:e3:b7:43:3d:56:c7:dc:6f:89:84:26: fa:ef:3d:c5:31:bb:a5:6c:fa:90:2b:b4:d3:a8:56: 17:03:ef:60:b6:93:86:a6:9f:db:5d:e7:de:89:21: 03:ba:9a:d7:41:1d:3f:64:99:54:c9:6c:83:50:d8: b0:d3:b5:50:2a:cd:78:5d:08:ab:25:37:49:54:12: 67:3c:24:81:a1:d2:66:73:76:ca:fd:35:48:15:7f: f2:40:ae:70:ff:46:d7:2c:8a:3e:e8:ac:19:18:be: 97:25:39:b1:82:3d:43:5d:1e:13:34:f8:ff:cb:19: 89:6f:20:d6:8f:9e:9b:e5:bd:25:ab:93:fa:ab:76: 8a:c4:0a:da:3a:b5:68:24:42:1b:ad:56:48:80:0e: 0d:74:bf:34:f2:44:a4:6e:9c:99:ab:cf:75:7e:e3: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:E8:B1:BC:E7:81:D0:5F:66:17:52:9B:37:0D:DC:0E:75:A5:1B X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:18:6e:4e:a1:a3:20:9a:60:ef:3e:80:2f:4f:0a:70:d0: 52:da:3e:04:65:06:3c:fd:26:08:d9:38:4d:9b:8e:f1:3d:ee: c8:31:28:25:9b:35:ee:bd:c9:7d:56:96:99:b2:cc:92:e4:67: b6:0e:ec:6d:5c:18:73:9f:02:4c:f3:94:49:76:49:3f:e8:e2: 0a:62:79:f7:e0:a4:45:c0:c3:39:88:5f:0e:a5:7a:6d:87:a8: 09:85:5e:8f:04:05:a0:64:f3:6c:5f:5c:de:32:61:79:a7:f4: ee:b4:f0:9e:1c:a9:ed:16:df:15:6b:c3:e9:fb:0d:58:57:91: d2:79:d5:ae:fb:e3:5a:ea:d3:c0:c2:cd:5e:07:af:15:f9:d2: b5:57:2f:ee:9b:19:b6:e5:bc:7f:09:ed:7e:7d:43:e0:43:55: 7d:3f:e6:99:70:d8:14:78:f2:5e:c8:06:2c:d7:a3:84:99:e3: 31:c1:ec:d6:f1:0d:8f:03:07:ee:9f:c2:ff:02:ac:08:a1:14: 67:b4:e8:0a:82:dc:bb:18:f9:c4:74:a2:65:31:8c:cc:ba:94: 32:c6:b1:2b:e9:cd:b3:38:df:82:5b:71:a9:99:39:ab:f1:5f: 2d:80:dd:d2:93:e2:9d:60:e2:4e:1f:7b:ba:8e:94:2e:91:e7: dd:a4:10:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPo+xH2hpag3cGNV2mKS+7LH1EfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA3MjkwNjQzNDNaFw0yNjA3MzAxMDAwNDNaMDMxMTAvBgNV BAMTKEQ0NTlFOEIxQkNFNzgxRDA1RjY2MTc1MjlCMzcwRERDMEU3NUE1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtl2d7E7lcWS4O/aAeP8oUYJ8 NTrLkUaKhbXdlsTkydeQUlIbl8x/fx0/A4DDTZmQ+WLEuO8KjF1WdGFPivAAITL7 zQg18lCrftrcBKHAl67a9vsNB6F2c+nGRwLjt0M9Vsfcb4mEJvrvPcUxu6Vs+pAr tNOoVhcD72C2k4amn9td596JIQO6mtdBHT9kmVTJbINQ2LDTtVAqzXhdCKslN0lU Emc8JIGh0mZzdsr9NUgVf/JArnD/Rtcsij7orBkYvpclObGCPUNdHhM0+P/LGYlv INaPnpvlvSWrk/qrdorECto6tWgkQhutVkiADg10vzTyRKRunJmrz3V+41ynAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1FnosbzngdBfZhdSmzcN3A51pRswHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDQYbk6hoyCa YO8+gC9PCnDQUto+BGUGPP0mCNk4TZuO8T3uyDEoJZs17r3JfVaWmbLMkuRntg7s bVwYc58CTPOUSXZJP+jiCmJ59+CkRcDDOYhfDqV6bYeoCYVejwQFoGTzbF9c3jJh eaf07rTwnhyp7RbfFWvD6fsNWFeR0nnVrvvjWurTwMLNXgevFfnStVcv7psZtuW8 fwntfn1D4ENVfT/mmXDYFHjyXsgGLNejhJnjMcHs1vENjwMH7p/C/wKsCKEUZ7To CoLcuxj5xHSiZTGMzLqUMsaxK+nNszjfgltxqZk5q/FfLYDd0pPinWDiTh97uo6U LpHn3aQQ8A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:24 2026 by rpki-client