$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft (raw, json) Hash identifier: /ILfVhCKViaEn5vMMmV74V8odNMD9Hs9ACUKeT+istk= Subject key identifier: F1:6A:38:4D:BE:25:22:5E:2D:35:FC:44:25:79:44:A7:D9:64:D7:66 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 323FB60D152CEA583C542569B3447EE4BB3F1682 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft Manifest number: A1 Signing time: Wed 29 Jul 2026 01:38:06 +0000 Manifest this update: Wed 29 Jul 2026 01:33:06 +0000 Manifest next update: Thu 30 Jul 2026 04:40:06 +0000 Files and hashes: 1: AS151302.roa (hash: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo=) 2: AS131483.roa (hash: wricmOxr6vSrRQNd1vocTKW3nC/2pcVrm0VvZPVplfs=) 3: AS4837.roa (hash: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY=) 4: AS151300.roa (hash: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE=) 5: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl (hash: FQrfwcgndJ/LhE+Ala8uPjneEhSGtjaevg0JNrT0xLM=) 6: AS153911.roa (hash: k4d0lln+WCz9yCQ8SJx1RZQW5mhDozOELFG2+G2vBiY=) 7: AS23650.roa (hash: ZrXwoi3Yc5wEkiCFcSV0YRLu2did5FGgulcpf2h2DTs=) 8: AS56046.roa (hash: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3f:b6:0d:15:2c:ea:58:3c:54:25:69:b3:44:7e:e4:bb:3f:16:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 29 01:33:06 2026 GMT Not After : Jul 30 04:40:06 2026 GMT Subject: CN=F16A384DBE25225E2D35FC44257944A7D964D766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:e9:d6:41:d9:99:a4:1a:a7:e4:12:e0:63: 42:cb:be:d1:e3:68:71:1c:25:fe:ff:79:14:9f:e3: fe:f3:72:ce:9d:2e:ac:42:97:f5:cb:08:0e:e8:67: 7b:e7:6c:09:f6:ae:21:42:2e:51:f2:dc:51:78:fa: 22:f7:8c:68:b5:1f:ae:c3:63:d1:a6:29:71:16:fc: 6e:6d:d6:d2:83:33:5e:ea:09:43:ce:3b:b8:11:78: 2a:54:06:2c:c1:b5:b8:03:76:f3:4f:9e:ab:18:39: a9:bf:b5:4e:da:c4:58:e6:10:e9:7d:b9:20:7a:ce: c1:1d:21:1e:08:5c:d5:cc:d8:2b:d9:e9:c3:bd:d7: 33:1f:02:41:a5:86:6a:98:f1:10:96:8e:37:54:d9: ce:9b:4d:c7:b1:ac:f1:9a:e7:7d:c7:c9:ed:a5:eb: d8:09:e6:2c:53:64:18:37:53:39:c5:6c:af:b9:96: ec:a9:c4:34:81:b8:7b:57:69:b4:8b:b7:49:dd:52: 74:d4:87:6e:7f:69:e6:61:72:11:a4:f7:99:ae:1f: 48:09:28:55:c5:20:6a:53:2d:0a:fa:d7:fd:3d:8c: 5a:5c:1c:53:bc:93:36:ec:56:f7:a5:15:66:53:bd: 28:34:f1:d5:2b:9f:38:29:22:fa:ee:1d:de:d1:70: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6A:38:4D:BE:25:22:5E:2D:35:FC:44:25:79:44:A7:D9:64:D7:66 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:f1:e4:3f:86:da:f1:d6:52:b3:a3:a8:38:e0:09:be:ee: 65:36:0c:83:88:cc:76:bc:1f:2a:c7:66:13:45:0a:c3:a4:97: b8:79:99:60:f7:2a:89:6f:f7:5c:2b:46:fd:f3:01:0e:75:27: 25:10:09:8b:c9:1a:bb:b7:1c:27:2e:6d:6e:05:8f:30:57:c5: 69:39:07:0d:61:bf:2e:1c:de:6c:5c:3a:e3:46:1d:ce:6b:02: 60:bd:f4:0f:ea:b7:a4:ca:9c:62:5a:4f:2f:ae:05:bf:fc:38: d5:48:07:bc:15:c1:c3:e7:38:98:ca:bd:b6:3e:8a:fc:47:ad: 88:dd:82:45:60:2d:d6:2c:a3:02:00:d6:76:8b:0c:38:02:54: 75:84:a7:63:ad:0f:5d:4b:80:99:20:f0:a2:9b:2c:b7:c5:9d: 08:10:b5:b2:f8:c7:1a:a4:03:74:93:33:b9:c0:bf:5e:6a:d8: 22:57:d2:bc:cb:e4:81:b4:e6:2d:f2:a2:d0:be:fc:be:e5:e4: fe:7b:c5:9b:1c:3e:55:44:71:9a:63:a7:0e:2a:d2:74:3b:83: 69:c1:41:30:66:c3:48:26:e6:2f:1c:5b:96:db:16:04:2e:60: ee:31:a6:09:55:3a:e4:a5:46:0a:74:90:58:53:a3:d7:f8:5e: 3e:c8:75:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMj+2DRUs6lg8VCVps0R+5Ls/FoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MjkwMTMzMDZaFw0yNjA3MzAwNDQwMDZaMDMxMTAvBgNV BAMTKEYxNkEzODREQkUyNTIyNUUyRDM1RkM0NDI1Nzk0NEE3RDk2NEQ3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcenWQdmZpBqn5BLgY0LLvtHj aHEcJf7/eRSf4/7zcs6dLqxCl/XLCA7oZ3vnbAn2riFCLlHy3FF4+iL3jGi1H67D Y9GmKXEW/G5t1tKDM17qCUPOO7gReCpUBizBtbgDdvNPnqsYOam/tU7axFjmEOl9 uSB6zsEdIR4IXNXM2CvZ6cO91zMfAkGlhmqY8RCWjjdU2c6bTcexrPGa533Hye2l 69gJ5ixTZBg3UznFbK+5luypxDSBuHtXabSLt0ndUnTUh25/aeZhchGk95muH0gJ KFXFIGpTLQr61/09jFpcHFO8kzbsVvelFWZTvSg08dUrnzgpIvruHd7RcAzjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8Wo4Tb4lIl4tNfxEJXlEp9lk12YwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC81MzJFQzk1RDlFRTI3 NkQ5NjU2MjBCN0U0MENBNTBCNEFCOEZDQjBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIzx5D+G2vHW UrOjqDjgCb7uZTYMg4jMdrwfKsdmE0UKw6SXuHmZYPcqiW/3XCtG/fMBDnUnJRAJ i8kau7ccJy5tbgWPMFfFaTkHDWG/LhzebFw640YdzmsCYL30D+q3pMqcYlpPL64F v/w41UgHvBXBw+c4mMq9tj6K/EetiN2CRWAt1iyjAgDWdosMOAJUdYSnY60PXUuA mSDwopsst8WdCBC1svjHGqQDdJMzucC/XmrYIlfSvMvkgbTmLfKi0L78vuXk/nvF mxw+VURxmmOnDirSdDuDacFBMGbDSCbmLxxbltsWBC5g7jGmCVU65KVGCnSQWFOj 1/hePsh12Q== -----END CERTIFICATE-----Generated at Wed Jul 29 08:49:51 2026 by rpki-client