$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: KwpF/6Ny1RWyWENwVI6hp17BeFtWFxVcnB+uyeryfH4= Subject key identifier: 2E:96:15:86:51:93:51:37:BD:46:DD:A8:01:38:FA:35:98:A1:C6:DE Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 1C95F8DE39FA631BDB36FFF6F290B895BD531766 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: 84 Signing time: Tue 28 Jul 2026 12:36:48 +0000 Manifest this update: Tue 28 Jul 2026 12:31:48 +0000 Manifest next update: Wed 29 Jul 2026 14:41:48 +0000 Files and hashes: 1: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 2: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: o6d017kaQlL6ShDKWHrZk6zXTEVuIOR43rylMWyZ5pw=) 3: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:95:f8:de:39:fa:63:1b:db:36:ff:f6:f2:90:b8:95:bd:53:17:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Jul 28 12:31:48 2026 GMT Not After : Jul 29 14:41:48 2026 GMT Subject: CN=2E96158651935137BD46DDA80138FA3598A1C6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:d0:a0:6c:56:53:49:8e:cd:1d:48:2b:db: f8:e5:77:90:f6:36:7a:6e:ec:bf:19:9d:95:dc:a3: cc:91:b2:23:73:15:a9:05:50:c5:18:fc:66:d0:99: f9:b3:11:a0:a3:4b:e6:df:ab:fc:eb:10:8d:78:f9: ef:d4:b2:c0:46:a6:4a:52:ab:9b:d3:e7:ec:dd:ff: de:12:9e:91:d4:f6:8b:de:6d:dd:44:83:9a:83:00: 7d:94:aa:d8:59:eb:38:b8:ca:bc:48:5a:ee:35:7c: 7d:80:55:bc:5a:c1:9b:7c:9a:65:2c:20:c0:b6:0d: 42:b4:bd:2c:0c:96:0d:d9:26:a5:22:1c:88:07:1d: 95:a5:9f:da:52:94:70:76:db:6a:ab:73:73:95:88: 37:95:64:10:2d:43:43:3c:36:53:b5:14:c8:32:cb: aa:a1:42:bb:68:86:a0:69:f0:d0:e1:94:49:d9:2e: 25:e7:dc:6a:90:d7:9f:30:6d:8a:f1:d1:ef:b2:e8: 0d:bc:fa:42:90:fd:d9:af:4f:96:5c:f7:c1:1d:a4: d5:bf:e4:51:a3:c0:f1:08:93:44:6a:38:ad:75:c9: 82:a9:9b:ff:e6:eb:f3:8f:43:d2:60:70:7d:3f:e4: 33:f5:a1:b4:3e:4f:b0:8e:a0:fa:4c:af:09:ef:8c: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:15:86:51:93:51:37:BD:46:DD:A8:01:38:FA:35:98:A1:C6:DE X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d4:96:ff:13:fe:1a:46:68:10:fb:cb:cc:8b:b6:a7:7b:61: e5:64:c5:93:d6:42:00:34:88:dc:cf:b9:93:fb:4d:79:54:dc: 22:63:3a:f0:2c:a6:38:72:f5:ab:1f:80:a2:c3:8e:42:95:62: 5a:a3:fe:ab:4f:2d:6d:50:05:1f:00:ee:80:48:f4:3d:82:55: 9b:f5:2a:35:5d:b7:1c:ee:0c:59:22:aa:8c:4e:54:51:30:b0: ae:3f:47:a1:1b:08:2a:e8:8f:58:6c:99:a5:27:26:b8:a9:46: 5e:81:c2:59:89:1f:49:e8:58:63:0f:2e:c7:ca:a0:64:6a:35: 4f:19:55:5b:60:a2:1c:d4:5d:b4:86:02:52:15:8f:83:dc:bd: 02:96:c9:37:9a:17:6b:f4:ea:c2:7d:90:9c:f7:e4:2a:36:c9: f4:a9:c0:c3:b0:90:64:4e:4f:30:87:7a:51:ef:56:e6:12:f2: 2c:aa:c3:d7:c9:9f:f4:fc:92:70:2e:fd:0e:34:d6:a4:ba:8a: 83:79:8f:17:a4:47:61:f3:05:59:08:71:86:8c:28:c6:63:be: 85:04:1b:5c:00:7f:2c:de:52:17:69:cc:c1:ef:2d:4f:16:d9: 8b:45:ce:fa:0c:37:21:bc:66:b5:8f:52:4a:6a:96:c8:f6:b5: 0c:3e:a5:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHJX43jn6YxvbNv/28pC4lb1TF2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA3MjgxMjMxNDhaFw0yNjA3MjkxNDQxNDhaMDMxMTAvBgNV BAMTKDJFOTYxNTg2NTE5MzUxMzdCRDQ2RERBODAxMzhGQTM1OThBMUM2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTNCgbFZTSY7NHUgr2/jld5D2 Nnpu7L8ZnZXco8yRsiNzFakFUMUY/GbQmfmzEaCjS+bfq/zrEI14+e/UssBGpkpS q5vT5+zd/94SnpHU9ovebd1Eg5qDAH2UqthZ6zi4yrxIWu41fH2AVbxawZt8mmUs IMC2DUK0vSwMlg3ZJqUiHIgHHZWln9pSlHB222qrc3OViDeVZBAtQ0M8NlO1FMgy y6qhQrtohqBp8NDhlEnZLiXn3GqQ158wbYrx0e+y6A28+kKQ/dmvT5Zc98EdpNW/ 5FGjwPEIk0RqOK11yYKpm//m6/OPQ9JgcH0/5DP1obQ+T7COoPpMrwnvjO7bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULpYVhlGTUTe9Rt2oATj6NZihxt4wHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedSW/xP+GkZo EPvLzIu2p3th5WTFk9ZCADSI3M+5k/tNeVTcImM68CymOHL1qx+AosOOQpViWqP+ q08tbVAFHwDugEj0PYJVm/UqNV23HO4MWSKqjE5UUTCwrj9HoRsIKuiPWGyZpScm uKlGXoHCWYkfSehYYw8ux8qgZGo1TxlVW2CiHNRdtIYCUhWPg9y9ApbJN5oXa/Tq wn2QnPfkKjbJ9KnAw7CQZE5PMId6Ue9W5hLyLKrD18mf9PyScC79DjTWpLqKg3mP F6RHYfMFWQhxhowoxmO+hQQbXAB/LN5SF2nMwe8tTxbZi0XO+gw3IbxmtY9SSmqW yPa1DD6laA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:19:22 2026 by rpki-client