$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: UiTd5fFH4oqK/86xoOmMuc5IycVYB+K/1L8Fec4d44Q= Subject key identifier: BB:35:38:EC:E0:BB:BE:9C:A5:ED:A1:EF:8A:95:01:AE:AF:54:5B:B0 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 0A0915F36CDA912D34F795EDF2EFE1F68193EBEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 89 Signing time: Wed 29 Jul 2026 21:35:17 +0000 Manifest this update: Wed 29 Jul 2026 21:30:17 +0000 Manifest next update: Fri 31 Jul 2026 00:29:17 +0000 Files and hashes: 1: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 2: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 3: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 4: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: FPUl6Q6o4IZcPU/CUz7P2fBnXAkelS6c4L6Sf0D2RFI=) 5: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 6: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:15:f3:6c:da:91:2d:34:f7:95:ed:f2:ef:e1:f6:81:93:eb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Jul 29 21:30:17 2026 GMT Not After : Jul 31 00:29:17 2026 GMT Subject: CN=BB3538ECE0BBBE9CA5EDA1EF8A9501AEAF545BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:df:83:78:b6:eb:50:35:77:20:12:b9:f3: fc:a1:49:8f:f9:a3:e7:0b:03:58:f4:81:23:50:2c: eb:05:43:e7:82:9b:49:3d:fe:82:c2:52:08:06:38: d8:9e:89:57:0e:2d:a2:97:ec:28:07:b3:4b:3a:73: 97:79:66:5b:bb:96:e3:d7:30:85:0b:71:1f:6c:0c: b6:9e:8a:83:84:59:bf:3a:e0:97:d1:ac:4d:c3:a1: 38:c6:44:23:11:fd:52:61:5a:3b:c3:77:42:98:3b: b8:6c:03:fb:55:33:94:9f:8b:d2:bf:f6:6e:26:5a: e1:37:07:3f:7f:31:47:68:d2:00:af:bf:d3:12:9c: 63:a7:bb:e0:ef:b4:a4:54:cc:29:49:67:03:43:3c: 38:8f:3a:03:56:ec:ca:0a:ec:19:01:f8:de:f7:68: 73:b3:91:00:67:b5:a3:ad:c8:36:9b:3a:99:bf:17: da:3d:f0:35:06:85:09:a0:94:e9:7b:ae:36:6a:27: 4d:04:07:10:43:0b:05:71:2d:e9:99:cc:4c:a5:ea: 54:7a:fb:d7:04:cc:5b:b4:f9:2f:8d:bf:78:e3:9a: 87:7b:f0:b1:e8:9c:7c:55:0d:ca:8b:47:fe:26:ee: b1:9c:ae:ad:42:cf:78:0f:b7:80:0a:9f:cc:b9:81: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:35:38:EC:E0:BB:BE:9C:A5:ED:A1:EF:8A:95:01:AE:AF:54:5B:B0 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2d:a0:2a:f0:51:43:47:07:3d:b1:65:3f:34:8f:ed:97:d4: e0:da:3e:ed:02:d1:e9:41:c9:a1:7c:df:81:93:8b:82:3e:9f: ba:60:eb:60:63:18:c0:e6:aa:f1:63:37:f4:56:3b:41:b9:9f: 4c:8a:a8:34:30:7e:14:44:2d:b1:c5:78:1a:95:e4:bf:5e:0c: 03:a6:64:f0:7b:12:2a:2d:12:b7:e3:45:85:6e:2c:17:85:95: 9b:91:c9:0b:f2:2d:60:58:52:ad:44:24:00:38:0a:09:8b:10: 3c:43:47:6e:fb:6b:da:61:5c:09:84:d8:d1:68:be:49:00:30: 9f:61:ab:dd:a1:7f:57:28:36:ac:d6:ea:cb:89:ec:f5:1e:d8: b0:2e:9f:b3:b4:91:2a:cb:78:ef:e6:df:3d:47:61:e0:75:c8: 0f:b2:34:2a:0e:04:9d:ad:fd:17:4d:f1:bb:86:df:4f:ab:57: b9:4e:7c:16:4a:58:43:cd:55:f4:07:06:3c:41:28:1a:48:16: d5:9e:2c:5c:8a:fe:88:5b:c5:17:63:e0:c0:13:aa:44:99:1b: ec:63:59:65:cb:3e:1f:d5:08:39:f2:0d:ac:17:8c:a0:f6:fd: 39:99:0e:9a:c7:da:4f:c9:1c:aa:fb:ce:6d:cf:f7:eb:3c:94: ba:c1:81:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCgkV82zakS0095Xt8u/h9oGT6+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA3MjkyMTMwMTdaFw0yNjA3MzEwMDI5MTdaMDMxMTAvBgNV BAMTKEJCMzUzOEVDRTBCQkJFOUNBNUVEQTFFRjhBOTUwMUFFQUY1NDVCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSN+DeLbrUDV3IBK58/yhSY/5 o+cLA1j0gSNQLOsFQ+eCm0k9/oLCUggGONieiVcOLaKX7CgHs0s6c5d5Zlu7luPX MIULcR9sDLaeioOEWb864JfRrE3DoTjGRCMR/VJhWjvDd0KYO7hsA/tVM5Sfi9K/ 9m4mWuE3Bz9/MUdo0gCvv9MSnGOnu+DvtKRUzClJZwNDPDiPOgNW7MoK7BkB+N73 aHOzkQBntaOtyDabOpm/F9o98DUGhQmglOl7rjZqJ00EBxBDCwVxLemZzEyl6lR6 +9cEzFu0+S+Nv3jjmod78LHonHxVDcqLR/4m7rGcrq1Cz3gPt4AKn8y5gZyXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuzU47OC7vpyl7aHvipUBrq9UW7AwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC2gKvBRQ0cH PbFlPzSP7ZfU4No+7QLR6UHJoXzfgZOLgj6fumDrYGMYwOaq8WM39FY7QbmfTIqo NDB+FEQtscV4GpXkv14MA6Zk8HsSKi0St+NFhW4sF4WVm5HJC/ItYFhSrUQkADgK CYsQPENHbvtr2mFcCYTY0Wi+SQAwn2Gr3aF/Vyg2rNbqy4ns9R7YsC6fs7SRKst4 7+bfPUdh4HXID7I0Kg4Ena39F03xu4bfT6tXuU58FkpYQ81V9AcGPEEoGkgW1Z4s XIr+iFvFF2PgwBOqRJkb7GNZZcs+H9UIOfINrBeMoPb9OZkOmsfaT8kcqvvObc/3 6zyUusGBaQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:58 2026 by rpki-client