$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: S88/I1bQgixb3Z8hWdNeqoCEmwX5DNYUng2F/ime7JI= Subject key identifier: B0:B3:62:3C:C1:08:4B:44:45:4D:B3:21:A5:3D:49:4A:8C:72:5E:0B Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 1AAEA8B16ACB0134F27B323092FF46EB409027E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: 88 Signing time: Tue 28 Jul 2026 21:42:47 +0000 Manifest this update: Tue 28 Jul 2026 21:37:47 +0000 Manifest next update: Thu 30 Jul 2026 00:30:47 +0000 Files and hashes: 1: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: NU1118TX1dWHMXi3qaaAsynZJgVgMpCnSgjabs+Wjck=) 2: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ae:a8:b1:6a:cb:01:34:f2:7b:32:30:92:ff:46:eb:40:90:27:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Jul 28 21:37:47 2026 GMT Not After : Jul 30 00:30:47 2026 GMT Subject: CN=B0B3623CC1084B44454DB321A53D494A8C725E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:7c:ec:17:59:65:b7:d2:dc:eb:2c:9b:33: 8d:35:0a:eb:56:66:73:e9:03:bc:04:1b:7e:74:99: 3d:1f:ae:eb:21:c3:91:60:b9:8b:44:98:e3:f3:38: 2c:6b:0a:71:d0:c8:a7:9a:4b:f1:75:e4:2a:6f:35: b4:92:32:fe:c1:de:d4:b9:a7:55:94:e4:9d:f6:61: 93:bc:9f:53:30:93:a3:e2:5d:95:eb:8f:9d:99:e3: 51:10:22:2d:c4:1d:e3:3c:19:d4:be:9e:f1:10:03: 75:34:f7:1c:d3:cf:d2:be:f4:bc:bd:b9:0c:53:74: 80:17:86:c4:4c:41:60:ba:01:95:f1:87:b8:c7:de: ed:64:4c:91:b2:c6:13:ab:86:fc:1e:74:91:e2:cb: 1d:26:c8:5c:6c:93:26:1f:c9:d8:e2:67:98:07:23: 49:a8:1e:99:63:7f:27:40:ca:75:0f:59:7e:92:65: 26:7e:eb:fe:b2:ac:f9:c5:28:01:8b:2d:d8:39:b2: 55:94:f2:35:58:c5:59:f5:1e:9f:dc:fa:fb:30:3b: 0c:06:78:3b:5d:c1:89:d3:fa:a0:ae:48:e4:72:9f: 70:47:e7:fb:12:6a:3b:de:1e:29:8f:29:21:ba:c2: 88:0b:7f:a8:77:cf:b5:5c:c0:77:b2:5f:5a:30:90: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B3:62:3C:C1:08:4B:44:45:4D:B3:21:A5:3D:49:4A:8C:72:5E:0B X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:77:eb:5e:f7:75:0a:c8:df:e7:b7:64:6d:b1:41:7b:22:24: 84:59:49:e4:7b:01:5b:95:50:ac:05:cb:f2:d4:bc:ed:19:17: 74:ab:d3:fc:27:7a:41:3b:76:c9:ca:9f:97:a2:22:b9:7c:ed: 88:94:43:53:5e:7b:37:ba:ad:14:ce:69:2d:92:42:a1:3a:68: 5d:5f:aa:60:b7:c8:0a:08:7f:0c:2d:01:21:78:6c:db:6e:2c: d1:94:78:dc:77:f2:59:44:47:1e:b0:09:e7:b0:08:5c:b7:86: 56:b6:9d:6e:a5:56:1b:2c:91:ab:07:34:32:43:ab:f3:ca:12: 16:ba:0b:d6:09:b8:05:4c:79:2b:aa:94:e6:41:3c:1b:df:c0: 48:cd:89:96:78:33:c2:7a:c1:b7:24:ad:2e:71:ec:f8:36:69: 22:40:1a:74:f7:66:d2:cb:9d:9d:d7:21:df:73:88:d4:f6:63: a1:73:cd:0b:bf:1a:61:2f:7c:e2:ee:bc:8a:5b:c7:e8:08:11: 66:b5:7b:04:8f:81:31:c8:5f:3b:63:a7:0d:38:82:e9:56:72: d3:23:28:53:60:f7:6f:8b:4f:33:cc:f9:cd:b2:bb:67:a6:38: 45:6a:eb:8f:eb:76:9d:eb:39:b6:e8:99:9e:f6:84:75:56:2b: 36:bc:81:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGq6osWrLATTyezIwkv9G60CQJ+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA3MjgyMTM3NDdaFw0yNjA3MzAwMDMwNDdaMDMxMTAvBgNV BAMTKEIwQjM2MjNDQzEwODRCNDQ0NTREQjMyMUE1M0Q0OTRBOEM3MjVFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaTHzsF1llt9Lc6yybM401CutW ZnPpA7wEG350mT0frushw5FguYtEmOPzOCxrCnHQyKeaS/F15CpvNbSSMv7B3tS5 p1WU5J32YZO8n1Mwk6PiXZXrj52Z41EQIi3EHeM8GdS+nvEQA3U09xzTz9K+9Ly9 uQxTdIAXhsRMQWC6AZXxh7jH3u1kTJGyxhOrhvwedJHiyx0myFxskyYfydjiZ5gH I0moHpljfydAynUPWX6SZSZ+6/6yrPnFKAGLLdg5slWU8jVYxVn1Hp/c+vswOwwG eDtdwYnT+qCuSORyn3BH5/sSajveHimPKSG6wogLf6h3z7VcwHeyX1owkJ5ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsLNiPMEIS0RFTbMhpT1JSoxyXgswHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3frXvd1Csjf 57dkbbFBeyIkhFlJ5HsBW5VQrAXL8tS87RkXdKvT/Cd6QTt2ycqfl6IiuXztiJRD U157N7qtFM5pLZJCoTpoXV+qYLfICgh/DC0BIXhs224s0ZR43HfyWURHHrAJ57AI XLeGVradbqVWGyyRqwc0MkOr88oSFroL1gm4BUx5K6qU5kE8G9/ASM2JlngzwnrB tyStLnHs+DZpIkAadPdm0sudndch33OI1PZjoXPNC78aYS984u68ilvH6AgRZrV7 BI+BMchfO2OnDTiC6VZy0yMoU2D3b4tPM8z5zbK7Z6Y4RWrrj+t2nes5tuiZnvaE dVYrNryBGw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:32:27 2026 by rpki-client