$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: nZ8zU25uZ9TR6T31zzNRgUDz3TzFPidGc4KEAivAvWQ= Subject key identifier: B5:E0:B4:65:64:D8:C5:DF:3A:39:49:72:73:5B:F8:88:FE:48:92:AD Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 736B56CDC097F10BF4EAE20C343A4B635819A9E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: 88 Signing time: Tue 28 Jul 2026 20:07:40 +0000 Manifest this update: Tue 28 Jul 2026 20:02:40 +0000 Manifest next update: Wed 29 Jul 2026 20:52:40 +0000 Files and hashes: 1: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: UDh1G2S2gn82RcFzUYb6AT/MoVwIZz+Fe8v9Q3F8kOw=) 2: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=) 3: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) 4: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6b:56:cd:c0:97:f1:0b:f4:ea:e2:0c:34:3a:4b:63:58:19:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Jul 28 20:02:40 2026 GMT Not After : Jul 29 20:52:40 2026 GMT Subject: CN=B5E0B46564D8C5DF3A394972735BF888FE4892AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:53:06:ef:9f:17:2f:ce:cf:8d:b4:04:6e: c9:07:d5:d9:24:7f:2e:18:b4:85:13:f6:0f:c3:eb: d1:79:de:62:ac:a2:c9:d4:af:54:1e:81:e6:7e:29: 34:0f:e7:d2:6f:91:c6:f4:17:d3:0d:96:63:9d:62: 42:a9:24:0a:8a:b5:6e:d2:80:7c:03:14:9d:b0:a1: 18:85:ab:08:bb:ae:c9:37:33:2f:d3:7d:38:6e:cd: 11:de:78:13:c4:c6:d9:8b:98:32:85:11:ba:5d:4e: 87:c6:7c:51:c9:86:9d:44:08:9e:f0:35:bd:8c:5d: cb:e7:a9:b5:6c:7b:6e:28:a1:37:db:06:17:97:ba: fb:72:ac:db:d3:1b:66:a6:43:f0:87:e7:e3:a1:d9: ac:c5:c2:d6:9a:41:88:2d:5f:f9:a8:a9:a0:07:71: 14:34:a2:78:00:14:48:14:37:3b:fd:76:6b:52:80: 97:6a:9c:55:ff:42:97:71:14:77:4b:d4:d9:fc:31: d5:e3:1c:2f:ac:8c:d6:9a:b0:82:30:3c:59:70:86: 09:bb:5e:d5:40:a6:80:d2:1a:8c:b9:a6:3a:7a:b0: bb:f0:db:23:d3:07:c7:d8:b0:18:19:a1:aa:99:5e: a2:9a:b0:09:94:58:62:09:54:56:89:14:5e:f9:e0: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:B4:65:64:D8:C5:DF:3A:39:49:72:73:5B:F8:88:FE:48:92:AD X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:74:03:b6:9b:50:f3:bb:30:b6:07:43:f0:d7:fc:a0:93: 8a:a3:bb:09:93:57:17:be:d8:f0:d8:d5:30:aa:43:d3:d8:a8: 3c:73:40:ab:c2:1d:8c:02:3a:ce:fd:a7:34:e3:87:b9:44:45: a0:e6:c5:28:11:47:9e:bb:ca:0c:a9:c9:c5:fb:94:14:0a:9c: dc:49:4b:2c:92:9c:b4:88:75:2e:84:ef:6c:0d:14:5f:c0:f5: c0:fb:ec:7f:d5:6f:41:59:d7:e9:64:fa:db:c2:df:73:30:18: 7f:c4:23:a5:09:73:4c:7e:40:6c:22:f4:de:1d:33:ae:6b:a1: 78:f6:47:d0:fc:e4:85:59:f1:08:fe:e4:95:f8:f0:5f:a1:cc: 65:83:18:05:93:ae:e1:f6:44:27:c3:5c:22:2e:8c:75:76:b6: 27:b8:a3:78:be:ca:aa:25:00:67:37:1f:cc:33:cd:01:8e:ad: d3:01:92:cc:c3:13:04:d7:65:4e:6e:dd:d6:ac:08:e9:ba:30: e2:1f:e8:b0:6a:9b:c3:32:67:ea:31:f3:aa:09:6a:cf:0e:45: e5:e1:70:ab:a7:67:96:20:7b:9f:d7:db:3e:3d:86:ea:f0:93: eb:27:1f:75:cd:98:e8:94:dc:05:16:05:d6:32:34:e4:9f:8a: c9:c0:58:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc2tWzcCX8Qv06uIMNDpLY1gZqeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjA3MjgyMDAyNDBaFw0yNjA3MjkyMDUyNDBaMDMxMTAvBgNV BAMTKEI1RTBCNDY1NjREOEM1REYzQTM5NDk3MjczNUJGODg4RkU0ODkyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigFMG758XL87PjbQEbskH1dkk fy4YtIUT9g/D69F53mKsosnUr1QegeZ+KTQP59Jvkcb0F9MNlmOdYkKpJAqKtW7S gHwDFJ2woRiFqwi7rsk3My/TfThuzRHeeBPExtmLmDKFEbpdTofGfFHJhp1ECJ7w Nb2MXcvnqbVse24ooTfbBheXuvtyrNvTG2amQ/CH5+Oh2azFwtaaQYgtX/moqaAH cRQ0ongAFEgUNzv9dmtSgJdqnFX/QpdxFHdL1Nn8MdXjHC+sjNaasIIwPFlwhgm7 XtVApoDSGoy5pjp6sLvw2yPTB8fYsBgZoaqZXqKasAmUWGIJVFaJFF754LyJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUteC0ZWTYxd86OUlyc1v4iP5Ikq0wHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVV0A7abUPO7 MLYHQ/DX/KCTiqO7CZNXF77Y8NjVMKpD09ioPHNAq8IdjAI6zv2nNOOHuURFoObF KBFHnrvKDKnJxfuUFAqc3ElLLJKctIh1LoTvbA0UX8D1wPvsf9VvQVnX6WT628Lf czAYf8QjpQlzTH5AbCL03h0zrmuhePZH0PzkhVnxCP7klfjwX6HMZYMYBZOu4fZE J8NcIi6MdXa2J7ijeL7KqiUAZzcfzDPNAY6t0wGSzMMTBNdlTm7d1qwI6bow4h/o sGqbwzJn6jHzqglqzw5F5eFwq6dnliB7n9fbPj2G6vCT6ycfdc2Y6JTcBRYF1jI0 5J+KycBYSg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:26:48 2026 by rpki-client