$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: 7aloDbBPUcvqYKunojEj9bHjy19vK0UdJCFggxWjohs= Subject key identifier: 39:07:BB:70:3F:F6:88:CB:5B:AB:A2:E7:07:2F:5E:05:41:C1:9D:1F Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 11DDDD786AE3D35EDAF942C440B91E1200444C9C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 89 Signing time: Wed 29 Jul 2026 04:53:28 +0000 Manifest this update: Wed 29 Jul 2026 04:48:28 +0000 Manifest next update: Thu 30 Jul 2026 05:04:28 +0000 Files and hashes: 1: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) 2: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: oUtpM1kkCm1C4w0/iHQDfmgckqTY41yml1EWiikiHjA=) 3: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) 4: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) 5: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) 6: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dd:dd:78:6a:e3:d3:5e:da:f9:42:c4:40:b9:1e:12:00:44:4c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Jul 29 04:48:28 2026 GMT Not After : Jul 30 05:04:28 2026 GMT Subject: CN=3907BB703FF688CB5BABA2E7072F5E0541C19D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:91:9e:6a:88:d3:d2:49:54:3f:34:3c:a6: e5:56:f0:ce:67:c0:5a:c6:d7:32:9d:77:a3:a2:43: 44:bd:4f:65:cd:86:37:6a:d1:34:39:db:bb:b9:56: 21:8f:a9:5d:9f:28:a0:fd:f5:a9:2b:b9:9a:9c:73: e4:57:dd:12:7b:f6:87:98:6b:95:03:8c:1a:f7:01: 57:66:dd:bc:53:85:0e:f1:89:ef:8d:11:91:05:c1: 2a:e1:ba:6a:04:23:b7:36:c2:ce:a1:2c:40:b9:fc: d9:aa:e0:2b:9a:93:62:73:3d:a0:dd:d4:8a:64:f5: c3:d7:27:4f:ce:55:ab:d1:48:11:e9:90:96:6e:04: e0:79:e4:0c:88:a1:ef:ea:d5:12:d0:51:6f:99:52: 7d:d9:e4:24:13:94:da:e0:f7:64:ce:c2:e2:bd:b0: 98:7d:29:e4:00:4e:b5:02:ef:77:5a:9c:c3:a0:5b: 26:b2:0b:bc:9b:59:5a:e2:08:08:ae:07:f3:48:be: f2:49:66:24:ba:ac:bd:0f:a8:6d:9c:60:de:d4:c9: 19:90:49:e1:17:08:94:29:89:48:51:9c:5d:3a:92: 95:96:89:8e:90:ee:36:1d:b6:58:44:5d:85:86:c0: 54:e2:24:02:2f:c9:17:d9:19:50:f9:f0:6c:d2:7d: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:07:BB:70:3F:F6:88:CB:5B:AB:A2:E7:07:2F:5E:05:41:C1:9D:1F X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:6d:98:7c:a8:42:5c:99:32:d1:69:cb:e8:fd:b0:38:87: 2d:5d:4a:32:ff:a8:40:02:9e:5d:ca:34:51:75:b2:65:2b:26: d0:dd:5a:c6:f9:d6:89:36:49:62:b4:9b:74:c6:cb:62:c4:99: 44:f1:1b:cd:53:0e:55:6f:a8:ba:ca:1a:76:3f:88:88:47:97: a8:65:b2:bd:0c:fd:7c:40:c4:5f:ce:da:eb:7c:2d:c6:c5:a1: 22:8f:c1:7a:f3:9b:4c:2e:f7:cc:5d:aa:46:81:b9:20:b4:72: be:c5:d7:21:3c:6a:04:ce:11:7e:e5:5d:c7:f9:6b:46:6c:4b: 64:d1:8b:df:d7:dd:0e:7c:f7:5e:4e:3d:4b:60:60:ed:bf:62: c2:95:0e:e0:ba:33:7b:e2:e9:cb:cc:13:1e:49:1c:13:56:6d: 54:76:a5:7b:92:c5:19:96:72:8c:30:7b:02:f9:ff:52:5a:f9: 12:33:94:77:43:de:a3:cb:e3:33:26:94:ff:6a:12:40:60:54: f3:e5:09:2d:ee:58:d2:de:0d:ec:47:63:8e:3b:2b:6c:91:3a: fa:39:09:ef:da:6b:2b:30:17:e9:db:22:32:88:b9:88:eb:35: 10:98:5e:8d:6c:d7:73:6b:db:06:2b:a1:f0:85:47:18:42:1e: c9:06:9a:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEd3deGrj017a+ULEQLkeEgBETJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA3MjkwNDQ4MjhaFw0yNjA3MzAwNTA0MjhaMDMxMTAvBgNV BAMTKDM5MDdCQjcwM0ZGNjg4Q0I1QkFCQTJFNzA3MkY1RTA1NDFDMTlEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0ZGeaojT0klUPzQ8puVW8M5n wFrG1zKdd6OiQ0S9T2XNhjdq0TQ527u5ViGPqV2fKKD99akruZqcc+RX3RJ79oeY a5UDjBr3AVdm3bxThQ7xie+NEZEFwSrhumoEI7c2ws6hLEC5/Nmq4Cuak2JzPaDd 1Ipk9cPXJ0/OVavRSBHpkJZuBOB55AyIoe/q1RLQUW+ZUn3Z5CQTlNrg92TOwuK9 sJh9KeQATrUC73danMOgWyayC7ybWVriCAiuB/NIvvJJZiS6rL0PqG2cYN7UyRmQ SeEXCJQpiUhRnF06kpWWiY6Q7jYdtlhEXYWGwFTiJAIvyRfZGVD58GzSfShlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOQe7cD/2iMtbq6LnBy9eBUHBnR8wHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjNtmHyoQlyZ MtFpy+j9sDiHLV1KMv+oQAKeXco0UXWyZSsm0N1axvnWiTZJYrSbdMbLYsSZRPEb zVMOVW+ousoadj+IiEeXqGWyvQz9fEDEX87a63wtxsWhIo/BevObTC73zF2qRoG5 ILRyvsXXITxqBM4RfuVdx/lrRmxLZNGL39fdDnz3Xk49S2Bg7b9iwpUO4Loze+Lp y8wTHkkcE1ZtVHale5LFGZZyjDB7Avn/Ulr5EjOUd0Peo8vjMyaU/2oSQGBU8+UJ Le5Y0t4N7EdjjjsrbJE6+jkJ79prKzAX6dsiMoi5iOs1EJhejWzXc2vbBiuh8IVH GEIeyQaaUA== -----END CERTIFICATE-----Generated at Wed Jul 29 13:00:36 2026 by rpki-client