$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: O5m3fz5EFA5S3NwyoeEq9F4wFVQcynuwinLdvb/nfpo= Subject key identifier: 10:21:5A:18:B0:7C:D3:C9:32:32:88:4F:96:60:D8:A8:86:E8:E7:BF Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 0D7CC076FC510C76ED8EE4936226FFF80FAFE047 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: 89 Signing time: Wed 29 Jul 2026 11:54:17 +0000 Manifest this update: Wed 29 Jul 2026 11:49:17 +0000 Manifest next update: Thu 30 Jul 2026 15:23:17 +0000 Files and hashes: 1: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 2: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 3: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 4: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: U0jfvWRx9Yi0Nnp0kUpHSZUbKgdkygda4Gk0GGeI83Q=) 5: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 6: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 7: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7c:c0:76:fc:51:0c:76:ed:8e:e4:93:62:26:ff:f8:0f:af:e0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Jul 29 11:49:17 2026 GMT Not After : Jul 30 15:23:17 2026 GMT Subject: CN=10215A18B07CD3C93232884F9660D8A886E8E7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:87:89:a7:ee:8c:fa:1b:a2:8c:6b:90:c5:c6: 1b:17:23:57:b1:27:72:25:99:97:a9:83:e6:de:2d: 3c:47:ab:39:22:63:7e:26:dd:79:23:bf:85:00:5d: 17:c0:8b:9f:44:09:8c:09:e6:d4:a8:bf:9b:64:4e: f2:ca:23:cf:0b:a1:8e:6a:18:b0:b3:da:0f:3b:bd: 10:19:6e:da:41:7b:2a:ac:df:5f:9f:a8:48:1b:30: 6e:3b:42:9b:86:ad:e0:30:f4:87:8a:1f:5a:30:f6: c4:6f:65:db:a7:7a:fa:14:bf:42:18:0f:45:bb:24: 97:8e:03:e9:c6:fc:c2:9d:bf:3e:d3:f3:6c:af:75: 8a:79:1b:4d:ca:3e:63:00:ea:c5:d6:e3:5d:46:7a: e9:fe:5c:f7:9b:39:ab:47:a3:0b:65:8c:57:41:ae: 9a:0f:7b:84:17:0d:77:ec:cc:47:ac:a6:35:2e:6a: 09:3e:18:e2:80:d0:34:02:76:c2:42:50:a4:ad:3c: dd:c0:d9:46:f0:ea:c7:1c:5b:45:3e:6d:c5:90:4e: e1:aa:97:76:f2:df:90:86:a6:3a:3d:31:ad:37:f5: c4:09:42:a5:8b:95:fc:cb:d0:2b:02:22:fe:fe:1e: 13:0e:17:b8:23:8c:1a:b8:cb:96:6f:cf:30:70:77: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:21:5A:18:B0:7C:D3:C9:32:32:88:4F:96:60:D8:A8:86:E8:E7:BF X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:5e:f6:71:6a:0a:c5:1c:98:29:37:70:4b:c3:3f:8e:41: 53:20:ba:a1:08:43:b3:da:10:b1:a0:2f:76:7d:3d:28:9c:6f: c2:62:31:f6:2d:2f:32:62:06:fd:cb:cc:c7:ee:bd:e4:04:7e: 75:5c:15:af:35:75:02:56:a7:2b:c6:c2:af:d4:f5:33:6e:86: 21:ad:2b:25:07:cc:8f:7d:d7:85:6c:ac:a2:c2:8f:c7:a3:7d: d9:29:18:1d:e1:17:ef:1c:d3:86:9a:77:c3:4c:74:3b:1e:9a: d0:97:34:18:c9:97:bd:72:0e:dc:1c:c1:e0:7b:2a:97:86:ff: 30:3b:f2:9b:ea:9d:57:38:2e:ce:7c:2c:ac:b4:64:7f:94:cf: 5e:2e:b8:23:43:7c:32:c6:fc:ae:60:03:98:29:04:b3:77:e4: 55:7d:90:0c:9d:1d:2c:35:3e:5b:47:6f:c6:fb:54:c5:ba:38: fe:7d:d6:6a:c9:c4:5a:17:a6:8d:90:bb:00:ba:8d:42:92:64: 46:0a:43:67:d9:da:7e:5d:61:84:10:38:6c:9c:25:3a:70:4d: d9:e5:05:0e:70:ac:30:f9:ea:ee:83:c9:1c:1b:b6:35:04:a2: f4:44:77:c8:67:85:53:b0:20:8d:43:8e:53:85:5b:5f:97:f7: 78:34:50:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDXzAdvxRDHbtjuSTYib/+A+v4EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA3MjkxMTQ5MTdaFw0yNjA3MzAxNTIzMTdaMDMxMTAvBgNV BAMTKDEwMjE1QTE4QjA3Q0QzQzkzMjMyODg0Rjk2NjBEOEE4ODZFOEU3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQh4mn7oz6G6KMa5DFxhsXI1ex J3IlmZepg+beLTxHqzkiY34m3Xkjv4UAXRfAi59ECYwJ5tSov5tkTvLKI88LoY5q GLCz2g87vRAZbtpBeyqs31+fqEgbMG47QpuGreAw9IeKH1ow9sRvZdunevoUv0IY D0W7JJeOA+nG/MKdvz7T82yvdYp5G03KPmMA6sXW411Geun+XPebOatHowtljFdB rpoPe4QXDXfszEespjUuagk+GOKA0DQCdsJCUKStPN3A2Ubw6sccW0U+bcWQTuGq l3by35CGpjo9Ma039cQJQqWLlfzL0CsCIv7+HhMOF7gjjBq4y5ZvzzBwdwzBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUECFaGLB808kyMohPlmDYqIbo578wHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlH5e9nFqCsUc mCk3cEvDP45BUyC6oQhDs9oQsaAvdn09KJxvwmIx9i0vMmIG/cvMx+695AR+dVwV rzV1AlanK8bCr9T1M26GIa0rJQfMj33XhWysosKPx6N92SkYHeEX7xzThpp3w0x0 Ox6a0Jc0GMmXvXIO3BzB4Hsql4b/MDvym+qdVzguznwsrLRkf5TPXi64I0N8Msb8 rmADmCkEs3fkVX2QDJ0dLDU+W0dvxvtUxbo4/n3WasnEWhemjZC7ALqNQpJkRgpD Z9nafl1hhBA4bJwlOnBN2eUFDnCsMPnq7oPJHBu2NQSi9ER3yGeFU7AgjUOOU4Vb X5f3eDRQnA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:55 2026 by rpki-client