$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft File: CA269469647823B4286B5E34CC0E3D54FD201592.mft (raw, json) Hash identifier: +3QIrX87YRsAunolLxOxLJqg8XUOI7DZP1xSs0yUeJo= Subject key identifier: D4:DD:6B:44:A0:D5:97:C9:6D:D9:E5:D0:DC:E4:0E:EC:6A:F5:83:06 Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 Certificate issuer: /CN=CA269469647823B4286B5E34CC0E3D54FD201592 Certificate serial: 2B08A9EC734D8F10603FDC3AFFE2D044454DAB6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft Manifest number: 72 Signing time: Wed 29 Jul 2026 06:23:41 +0000 Manifest this update: Wed 29 Jul 2026 06:18:41 +0000 Manifest next update: Thu 30 Jul 2026 07:34:41 +0000 Files and hashes: 1: 3130332e3231322e34392e302f32342d3234203d3e203538353433.roa (hash: aTYf9AOnLR4L+m/8HQCj4yM2GzM0NG41z2CqUQXNMRY=) 2: 3130332e3231322e35312e302f32342d3234203d3e203538353433.roa (hash: B9aDkTKHMGvRXsX22b7vWHUXzf2hOERSdesDrjN6KIw=) 3: 3130332e3231322e34382e302f32342d3234203d3e203538353433.roa (hash: 5/39JD8QAhr2k0Nnag8g+qBgUlArx+iKMhC27wBai7U=) 4: 3130332e3231322e35302e302f32342d3234203d3e203538353433.roa (hash: xaN0L6MIhYTiVT+4KdxJh2bu0A3f3Mf9iKQ9KbjS3CQ=) 5: CA269469647823B4286B5E34CC0E3D54FD201592.crl (hash: Z1bLfwmlFKF0piMpMzivlpPfuVhYQYKHEUgZVa+fx8I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:a9:ec:73:4d:8f:10:60:3f:dc:3a:ff:e2:d0:44:45:4d:ab:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592 Validity Not Before: Jul 29 06:18:41 2026 GMT Not After : Jul 30 07:34:41 2026 GMT Subject: CN=D4DD6B44A0D597C96DD9E5D0DCE40EEC6AF58306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:d8:bd:7a:6a:29:c5:20:8a:46:90:52:69: f8:9a:8c:aa:85:64:bf:8d:54:2c:ce:45:3a:54:ad: 88:2a:05:8b:a3:24:f0:c6:92:ef:36:1c:4e:2b:b1: 83:a8:35:50:25:82:9b:66:ee:fd:ba:c6:98:14:98: 15:c6:14:d1:83:ad:ad:25:08:56:6c:26:e0:1e:b6: a4:db:68:a1:b8:09:d1:12:34:bc:20:e0:d2:a5:ee: 5d:a8:07:58:00:18:d4:2c:ef:a3:9e:c2:c7:2a:a6: 50:0b:91:ea:04:8f:61:ac:0d:ca:bf:f6:b8:77:79: f2:35:7e:7f:fb:a6:26:20:7b:32:5c:a1:2d:4e:1a: 3a:68:83:35:49:1d:35:7b:8d:8b:b5:92:dd:9e:d6: d8:3e:35:db:e0:0f:a6:66:ff:4d:0f:8c:e2:d2:f7: 3f:fc:6d:9a:f3:71:4f:d1:70:27:8f:41:3c:12:60: d9:76:ca:d1:03:25:62:7a:5b:b5:77:9f:7c:df:d1: 12:ba:67:44:f1:49:cd:46:ef:98:2a:59:26:1d:9e: 23:96:50:66:0d:e1:7e:aa:6b:13:d8:9a:5f:7a:c1: d0:f8:19:6e:c0:be:40:42:a4:de:3a:08:65:ad:4f: a9:94:47:cd:d7:be:bf:e6:2a:4e:20:98:a7:2c:ea: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DD:6B:44:A0:D5:97:C9:6D:D9:E5:D0:DC:E4:0E:EC:6A:F5:83:06 X509v3 Authority Key Identifier: keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:33:4f:c1:6a:70:1d:7f:b9:4d:38:84:ed:83:83:db:5b:6d: d2:2e:df:49:4e:7a:d5:5c:be:f1:fd:63:5d:00:38:3e:5f:61: 4e:12:fe:cc:d9:7e:83:4b:cc:7c:c4:2a:bc:25:14:be:38:f3: 4e:d5:e0:11:4b:54:b5:a0:28:11:df:40:b0:dd:76:56:bb:74: 59:ad:47:0e:ac:1f:fd:7b:59:8e:9c:fb:03:e2:80:d7:83:fe: 44:25:75:8e:a4:d8:21:e4:bf:64:e9:4b:dc:fe:8a:46:3a:97: ff:82:d8:84:ce:02:cd:69:97:6b:c1:e3:66:b3:11:d9:bd:7e: d6:6f:d7:9b:60:e1:fb:2e:04:2f:47:cf:48:34:79:95:fc:6b: e3:9c:b1:54:e3:bc:4a:72:01:89:9d:fb:61:2f:96:d8:ef:bd: f4:f6:4f:1a:e3:ff:ce:29:4f:15:9a:18:36:5b:5a:03:74:b9: e7:79:e6:ff:2a:ca:e9:f4:82:49:26:41:da:25:23:7d:bf:65: 87:54:5f:21:6a:50:2b:48:8d:75:dd:96:ed:d0:0a:01:35:5e: 74:ff:fc:51:b3:05:a3:17:0c:fb:52:71:9b:20:b7:8a:86:65: 87:b1:d9:73:11:48:30:0b:61:9a:ba:00:66:a1:32:c1:13:d2: 39:2a:0a:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKwip7HNNjxBgP9w6/+LQREVNq2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRG RDIwMTU5MjAeFw0yNjA3MjkwNjE4NDFaFw0yNjA3MzAwNzM0NDFaMDMxMTAvBgNV BAMTKEQ0REQ2QjQ0QTBENTk3Qzk2REQ5RTVEMERDRTQwRUVDNkFGNTgzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYti9emopxSCKRpBSafiajKqF ZL+NVCzORTpUrYgqBYujJPDGku82HE4rsYOoNVAlgptm7v26xpgUmBXGFNGDra0l CFZsJuAetqTbaKG4CdESNLwg4NKl7l2oB1gAGNQs76OewscqplALkeoEj2GsDcq/ 9rh3efI1fn/7piYgezJcoS1OGjpogzVJHTV7jYu1kt2e1tg+NdvgD6Zm/00PjOLS 9z/8bZrzcU/RcCePQTwSYNl2ytEDJWJ6W7V3n3zf0RK6Z0TxSc1G75gqWSYdniOW UGYN4X6qaxPYml96wdD4GW7AvkBCpN46CGWtT6mUR83Xvr/mKk4gmKcs6ppxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1N1rRKDVl8lt2eXQ3OQO7Gr1gwYwHwYDVR0j BBgwFoAUyiaUaWR4I7Qoa140zA49VP0gFZIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDY5MjI3MzUxMTEzNzI4NS8wL0NBMjY5NDY5NjQ3ODIzQjQyODZCNUUzNENDMEUz RDU0RkQyMDE1OTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRGRDIwMTU5Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2OTIyNzM1MTExMzcyODUvMC9DQTI2OTQ2OTY0Nzgy M0I0Mjg2QjVFMzRDQzBFM0Q1NEZEMjAxNTkyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzNPwWpwHX+5 TTiE7YOD21tt0i7fSU561Vy+8f1jXQA4Pl9hThL+zNl+g0vMfMQqvCUUvjjzTtXg EUtUtaAoEd9AsN12Vrt0Wa1HDqwf/XtZjpz7A+KA14P+RCV1jqTYIeS/ZOlL3P6K RjqX/4LYhM4CzWmXa8HjZrMR2b1+1m/Xm2Dh+y4EL0fPSDR5lfxr45yxVOO8SnIB iZ37YS+W2O+99PZPGuP/zilPFZoYNltaA3S553nm/yrK6fSCSSZB2iUjfb9lh1Rf IWpQK0iNdd2W7dAKATVedP/8UbMFoxcM+1JxmyC3ioZlh7HZcxFIMAthmroAZqEy wRPSOSoKWA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:54:50 2026 by rpki-client