$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: YyZubSTt5Ifl45LNIjJGo4FfzKsmnU5Wd6AejZbTkao= Subject key identifier: A1:E5:82:17:37:42:CF:7B:28:2B:1D:97:47:AA:2D:1A:33:6B:C5:12 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 4E3ADC2827DFFFA2DBC740EDD0397D6598442354 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: 84 Signing time: Wed 29 Jul 2026 12:19:21 +0000 Manifest this update: Wed 29 Jul 2026 12:14:21 +0000 Manifest next update: Thu 30 Jul 2026 14:09:21 +0000 Files and hashes: 1: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: Z1HJLSPZDmYyaj2jWF3ZLGMIta2Up1tci5PKCecv6Es=) 2: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 3: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 4: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) 5: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 6: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 7: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 8: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 9: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3a:dc:28:27:df:ff:a2:db:c7:40:ed:d0:39:7d:65:98:44:23:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Jul 29 12:14:21 2026 GMT Not After : Jul 30 14:09:21 2026 GMT Subject: CN=A1E582173742CF7B282B1D9747AA2D1A336BC512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:2f:6a:25:11:3b:e2:b4:96:cc:04:36:fa: 5c:56:27:cc:d1:42:3d:9f:a7:7c:8b:c5:e1:59:67: 04:06:53:b1:23:a7:0e:06:c4:69:a6:32:71:bf:40: 94:d3:d7:9f:54:dd:c8:4a:82:57:2e:3e:2d:ca:5d: 72:b5:16:35:90:7a:9a:8c:fc:6e:fa:9f:bc:89:54: 2f:ff:6f:8f:7d:06:1d:ce:fa:c7:91:04:3e:ca:80: 12:20:21:6c:25:29:47:05:a2:10:ba:e0:93:85:46: 20:6c:ea:c3:ab:0a:19:71:8b:9d:57:3b:00:89:18: 80:06:78:82:e2:4e:39:6d:c4:0e:72:cf:76:b8:1d: 14:80:c8:30:1d:75:34:c2:73:cb:fc:7d:75:24:36: 63:3b:c6:61:68:92:ce:57:23:dc:8e:04:ef:c5:45: 0f:e9:e3:0d:15:79:cc:39:5a:ea:22:6d:10:c6:56: a5:b2:8b:b0:e1:ac:47:59:c6:26:7a:8e:ab:00:94: 82:35:ac:8e:65:cc:3a:8f:3b:17:0b:18:9a:3b:32: a4:76:bd:4d:dc:6e:ca:50:da:bb:96:52:b9:a0:97: 3a:06:99:75:dd:62:9f:88:cc:f3:d9:56:da:12:57: 95:08:44:0d:63:42:b9:b0:af:e2:89:04:ad:fc:68: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E5:82:17:37:42:CF:7B:28:2B:1D:97:47:AA:2D:1A:33:6B:C5:12 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:75:87:7f:5a:b8:90:b5:11:1d:c9:30:cc:fb:29:e9:98:eb: 43:6e:5b:3b:ae:00:d4:c5:b3:13:d4:0f:57:e4:ec:b2:4d:87: 4e:ca:9b:b9:90:e9:4b:6f:ec:3d:c8:bf:ec:0b:34:99:78:f2: bf:c8:45:49:03:ca:68:42:fb:08:db:57:61:94:2e:27:fc:2c: eb:1d:2f:22:2f:96:8d:44:76:a8:ee:61:c2:fa:5e:f2:00:fc: 2a:1b:5e:3d:6c:16:28:45:a9:4c:fb:f1:46:7f:12:d9:1a:a7: 0a:df:85:37:4b:56:d8:10:cb:a5:b8:05:0f:91:d9:fa:93:71: 1c:c9:67:04:f3:3b:9f:6f:4c:4f:1d:6e:f5:f8:3d:b4:84:22: 5d:8c:00:3a:c9:f3:81:ea:15:a6:88:69:b0:d6:bc:4c:5d:96: 32:32:a2:a9:89:37:78:e4:f8:23:94:63:5a:50:7e:17:68:31: 35:a3:b8:71:d9:b3:61:72:16:bb:f2:d3:7e:34:a6:60:0d:a0: b0:5c:75:de:77:78:44:c5:15:8d:e9:7c:ef:15:4a:57:bc:52: 81:06:d6:f1:12:d3:86:30:b5:b4:01:dd:c3:64:9c:7f:43:1d: 64:24:05:81:8f:f4:c5:a9:bd:cb:5e:04:e0:4e:d4:99:88:79: cd:ce:da:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTjrcKCff/6Lbx0Dt0Dl9ZZhEI1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA3MjkxMjE0MjFaFw0yNjA3MzAxNDA5MjFaMDMxMTAvBgNV BAMTKEExRTU4MjE3Mzc0MkNGN0IyODJCMUQ5NzQ3QUEyRDFBMzM2QkM1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksi9qJRE74rSWzAQ2+lxWJ8zR Qj2fp3yLxeFZZwQGU7Ejpw4GxGmmMnG/QJTT159U3chKglcuPi3KXXK1FjWQepqM /G76n7yJVC//b499Bh3O+seRBD7KgBIgIWwlKUcFohC64JOFRiBs6sOrChlxi51X OwCJGIAGeILiTjltxA5yz3a4HRSAyDAddTTCc8v8fXUkNmM7xmFoks5XI9yOBO/F RQ/p4w0Vecw5WuoibRDGVqWyi7DhrEdZxiZ6jqsAlII1rI5lzDqPOxcLGJo7MqR2 vU3cbspQ2ruWUrmglzoGmXXdYp+IzPPZVtoSV5UIRA1jQrmwr+KJBK38aJrxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoeWCFzdCz3soKx2XR6otGjNrxRIwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHWHf1q4kLUR HckwzPsp6ZjrQ25bO64A1MWzE9QPV+Tssk2HTsqbuZDpS2/sPci/7As0mXjyv8hF SQPKaEL7CNtXYZQuJ/ws6x0vIi+WjUR2qO5hwvpe8gD8KhtePWwWKEWpTPvxRn8S 2RqnCt+FN0tW2BDLpbgFD5HZ+pNxHMlnBPM7n29MTx1u9fg9tIQiXYwAOsnzgeoV pohpsNa8TF2WMjKiqYk3eOT4I5RjWlB+F2gxNaO4cdmzYXIWu/LTfjSmYA2gsFx1 3nd4RMUVjel87xVKV7xSgQbW8RLThjC1tAHdw2Scf0MdZCQFgY/0xam9y14E4E7U mYh5zc7aPg== -----END CERTIFICATE-----Generated at Wed Jul 29 18:47:16 2026 by rpki-client