$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: IUC2NxeJdx/L+JVxDgrH2v5TfMe6Jh8q4aQmyasfaxM= Subject key identifier: 6C:9F:9A:A6:1F:68:7E:82:8D:5F:86:3D:9F:D4:F6:5F:E3:05:E6:9A Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 449F5979FEC5C7C08B0D982380EC8B84BF5E9A4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: 80 Signing time: Tue 28 Jul 2026 22:02:51 +0000 Manifest this update: Tue 28 Jul 2026 21:57:51 +0000 Manifest next update: Thu 30 Jul 2026 00:26:51 +0000 Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) 2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: q9FTVV0dEwQqs3YaNq5gMVS9LYpgCOZOIeCXzAtWDiA=) 3: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9f:59:79:fe:c5:c7:c0:8b:0d:98:23:80:ec:8b:84:bf:5e:9a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Jul 28 21:57:51 2026 GMT Not After : Jul 30 00:26:51 2026 GMT Subject: CN=6C9F9AA61F687E828D5F863D9FD4F65FE305E69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:9a:ee:68:dd:40:4e:7f:5b:9d:62:69:3f: 30:e8:39:7f:a5:10:47:f5:b0:d6:c3:3a:89:e5:2a: 44:f9:03:86:c1:2e:5a:c1:8d:d9:09:6b:11:7c:f1: a4:2d:de:2c:a0:2f:ca:68:6a:4d:a9:06:30:85:14: fc:0f:61:c7:0c:b4:c3:97:50:2b:ab:da:10:98:4b: 12:11:4f:a7:23:fd:48:c5:fa:fb:0d:ae:a0:8d:ae: 28:b9:12:58:12:d2:0a:be:06:a5:d0:a7:47:40:9c: b0:df:cf:2c:7a:24:05:c5:4f:7a:b2:c0:74:a0:d8: aa:00:e1:25:d9:6d:e7:3c:d8:4e:d7:87:ac:04:95: bc:1b:a8:36:3e:e6:d0:f4:d1:91:c8:2d:63:5d:59: e5:4e:d7:7e:e6:6f:39:b6:82:45:ae:7f:72:30:d8: 08:f2:30:ae:55:64:b3:62:57:37:8b:38:3d:0f:8c: 6f:14:de:06:ee:ad:f6:8b:0d:01:15:0c:f1:c7:5e: 3e:17:6d:52:76:e3:0f:07:83:1b:b6:2d:7e:db:3b: cb:fb:8b:55:57:24:60:30:dd:4a:75:9e:f2:99:fa: 3a:18:b5:bc:0c:61:06:45:d1:9a:26:72:4f:cb:d4: e7:d0:fa:a9:de:ce:13:bd:32:56:bf:d0:68:f1:67: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9F:9A:A6:1F:68:7E:82:8D:5F:86:3D:9F:D4:F6:5F:E3:05:E6:9A X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:57:d4:9a:b3:cf:06:b3:1c:12:24:b3:96:c2:0a:ec:91:31: a7:f2:de:90:f3:0b:a9:cc:87:43:cb:b3:5b:ac:4d:96:2e:26: b3:d2:63:14:31:e8:1f:59:39:5d:1c:22:c7:7e:d7:55:d5:df: 41:98:0e:d8:10:5f:a6:50:a1:f1:c9:7f:ce:35:35:30:09:43: 6d:b6:8f:1d:12:36:7f:f7:e4:36:7e:8a:c0:77:a6:c4:ac:40: fe:3e:95:dc:6b:60:f3:7f:dd:8c:59:93:53:7c:ea:b1:77:6d: e4:57:74:98:95:f4:a4:bd:34:ba:25:43:32:b5:e2:13:ba:0f: b1:43:c7:30:93:5b:55:a5:24:ce:50:36:89:14:ae:c0:0c:5f: 43:43:0b:74:47:89:bc:95:7d:e9:7f:00:a5:3d:b5:43:17:f8: 66:32:6e:5c:e5:69:2c:b6:ac:89:97:b0:78:9e:30:92:0d:81: 70:be:4b:0e:df:3d:e3:d9:cb:98:78:72:cc:5e:16:2a:b4:48: da:9f:a4:ad:32:bc:17:15:d6:c4:b9:60:98:e7:a0:2c:e9:20: 58:7e:08:ad:d5:1f:50:9e:cf:9e:8f:02:92:43:82:01:c0:0c: 2e:d7:3c:16:f6:c2:9b:95:d4:f7:16:b5:e3:2a:a5:14:e8:94: d6:05:1b:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURJ9Zef7Fx8CLDZgjgOyLhL9emk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjA3MjgyMTU3NTFaFw0yNjA3MzAwMDI2NTFaMDMxMTAvBgNV BAMTKDZDOUY5QUE2MUY2ODdFODI4RDVGODYzRDlGRDRGNjVGRTMwNUU2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2JruaN1ATn9bnWJpPzDoOX+l EEf1sNbDOonlKkT5A4bBLlrBjdkJaxF88aQt3iygL8poak2pBjCFFPwPYccMtMOX UCur2hCYSxIRT6cj/UjF+vsNrqCNrii5ElgS0gq+BqXQp0dAnLDfzyx6JAXFT3qy wHSg2KoA4SXZbec82E7Xh6wElbwbqDY+5tD00ZHILWNdWeVO137mbzm2gkWuf3Iw 2AjyMK5VZLNiVzeLOD0PjG8U3gburfaLDQEVDPHHXj4XbVJ24w8Hgxu2LX7bO8v7 i1VXJGAw3Up1nvKZ+joYtbwMYQZF0Zomck/L1OfQ+qnezhO9Mla/0GjxZ9aBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbJ+aph9ofoKNX4Y9n9T2X+MF5powHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlfUmrPPBrMc EiSzlsIK7JExp/LekPMLqcyHQ8uzW6xNli4ms9JjFDHoH1k5XRwix37XVdXfQZgO 2BBfplCh8cl/zjU1MAlDbbaPHRI2f/fkNn6KwHemxKxA/j6V3Gtg83/djFmTU3zq sXdt5Fd0mJX0pL00uiVDMrXiE7oPsUPHMJNbVaUkzlA2iRSuwAxfQ0MLdEeJvJV9 6X8ApT21Qxf4ZjJuXOVpLLasiZeweJ4wkg2BcL5LDt8949nLmHhyzF4WKrRI2p+k rTK8FxXWxLlgmOegLOkgWH4IrdUfUJ7Pno8CkkOCAcAMLtc8FvbCm5XU9xa14yql FOiU1gUbFA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:44:21 2026 by rpki-client