$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json) Hash identifier: 1g6QXveTsV6PISjCIP90VTOrd3XFJyYsJiy8qB78Qko= Subject key identifier: 48:27:9C:63:2C:CD:D1:53:1C:3D:E9:AF:BE:6C:3C:D7:36:F2:43:CD Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 160D14EFABEA77C17530FF5877F90E47E8181211 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft Manifest number: 85 Signing time: Wed 29 Jul 2026 21:10:15 +0000 Manifest this update: Wed 29 Jul 2026 21:05:15 +0000 Manifest next update: Thu 30 Jul 2026 22:05:15 +0000 Files and hashes: 1: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=) 2: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=) 3: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: xo9Fk0MGyYj70FKGgtGF4rK6GZ0elK/uDgsZHwO5gjw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0d:14:ef:ab:ea:77:c1:75:30:ff:58:77:f9:0e:47:e8:18:12:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Jul 29 21:05:15 2026 GMT Not After : Jul 30 22:05:15 2026 GMT Subject: CN=48279C632CCDD1531C3DE9AFBE6C3CD736F243CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:51:ec:ff:ff:06:a9:24:4f:aa:a5:ab:43: 25:c0:25:15:aa:5c:46:c9:ed:10:e7:a3:cf:0f:e3: 5f:57:8c:81:a8:f1:cb:04:34:df:ce:c8:20:73:df: d5:cc:62:56:e8:8c:c3:f6:db:fe:24:3b:1b:94:d0: a6:0c:e6:88:57:37:a5:c1:b8:68:4a:62:e7:1b:2d: 41:70:3a:e6:68:41:fd:54:d2:ee:0a:7c:4a:84:89: 13:3c:5c:d9:09:22:dd:7f:89:16:8c:1a:e6:c3:cc: 49:de:50:14:cc:8a:0b:5b:87:65:c8:ff:34:7c:41: 51:cc:d7:ec:1e:3a:d1:9b:fc:ac:61:32:e6:38:37: e5:da:16:a5:97:f7:79:5e:b8:70:93:5f:ee:43:7d: 20:01:74:e5:fc:7b:e3:92:18:41:a9:d5:eb:64:40: ba:0f:85:ef:00:d1:69:dc:e0:6d:b3:24:f6:1e:30: 4b:e3:9a:8c:62:76:f2:92:2f:77:d6:f6:b3:89:fd: 30:92:b3:3c:b3:7f:71:14:70:43:56:f8:e2:37:aa: 8d:0a:27:5f:55:0a:7b:48:2c:a0:6c:12:60:34:51: 2b:5a:3b:9b:46:33:48:e4:bd:42:12:e2:00:00:b0: df:47:85:07:84:4b:2d:c8:43:42:6a:cb:1e:f4:dd: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:27:9C:63:2C:CD:D1:53:1C:3D:E9:AF:BE:6C:3C:D7:36:F2:43:CD X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7e:bc:01:b5:dc:ee:28:d3:f5:67:aa:62:18:98:3e:3a:a0: c0:8c:16:7d:5f:f0:62:b1:58:d0:13:dd:a5:a9:56:00:9e:fe: 9f:d7:4c:ce:9a:e8:fa:44:81:52:ec:71:27:70:bc:dd:c9:67: 82:3e:21:e8:bb:67:7d:7c:a7:ef:cb:3e:de:d4:ce:53:d5:54: d3:ac:7a:78:58:96:c3:17:de:48:43:08:b9:fc:c7:d1:eb:e9: 2b:06:8a:8f:4b:d0:3c:02:41:c7:5a:78:61:d4:36:77:7c:37: 3c:49:fc:27:65:93:52:40:72:4a:ae:cc:72:5c:02:c7:63:ea: d3:42:8f:45:ea:9d:81:63:be:fe:09:b5:05:62:8d:7f:28:b7: c5:13:95:76:f8:24:5d:a2:8f:4e:ca:fe:85:d7:0b:79:a4:1f: 4a:3c:2c:09:8d:1c:f2:6c:35:e5:21:dd:90:d5:af:87:8f:09: 08:67:71:a2:aa:aa:73:4d:c6:dc:dc:11:cc:3c:b0:e8:ed:e2: 80:2e:e1:d8:e1:8c:5b:a9:09:c0:1b:04:a0:5c:75:7e:01:a6: a0:73:d2:16:6a:0f:56:62:bb:57:8c:84:fc:44:29:d9:db:3b: 73:ab:d8:5e:0f:7a:1a:ba:bb:cc:d9:a7:3c:1a:b7:f9:75:7f: d1:63:cb:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFg0U76vqd8F1MP9Yd/kOR+gYEhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA3MjkyMTA1MTVaFw0yNjA3MzAyMjA1MTVaMDMxMTAvBgNV BAMTKDQ4Mjc5QzYzMkNDREQxNTMxQzNERTlBRkJFNkMzQ0Q3MzZGMjQzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlFHs//8GqSRPqqWrQyXAJRWq XEbJ7RDno88P419XjIGo8csENN/OyCBz39XMYlbojMP22/4kOxuU0KYM5ohXN6XB uGhKYucbLUFwOuZoQf1U0u4KfEqEiRM8XNkJIt1/iRaMGubDzEneUBTMigtbh2XI /zR8QVHM1+weOtGb/KxhMuY4N+XaFqWX93leuHCTX+5DfSABdOX8e+OSGEGp1etk QLoPhe8A0Wnc4G2zJPYeMEvjmoxidvKSL3fW9rOJ/TCSszyzf3EUcENW+OI3qo0K J19VCntILKBsEmA0UStaO5tGM0jkvUIS4gAAsN9HhQeESy3IQ0Jqyx703ZbPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSCecYyzN0VMcPemvvmw81zbyQ80wHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn68AbXc7ijT 9WeqYhiYPjqgwIwWfV/wYrFY0BPdpalWAJ7+n9dMzpro+kSBUuxxJ3C83clngj4h 6LtnfXyn78s+3tTOU9VU06x6eFiWwxfeSEMIufzH0evpKwaKj0vQPAJBx1p4YdQ2 d3w3PEn8J2WTUkBySq7MclwCx2Pq00KPReqdgWO+/gm1BWKNfyi3xROVdvgkXaKP Tsr+hdcLeaQfSjwsCY0c8mw15SHdkNWvh48JCGdxoqqqc03G3NwRzDyw6O3igC7h 2OGMW6kJwBsEoFx1fgGmoHPSFmoPVmK7V4yE/EQp2ds7c6vYXg96Grq7zNmnPBq3 +XV/0WPL5A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:14:46 2026 by rpki-client