$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: fGcehgdGQ77t/6dSBLArsYZDLNqtM9pxqmF+PnKgYf0= Subject key identifier: 4E:D6:5C:9C:2F:67:AF:D1:AC:AC:9B:88:CB:79:3C:84:3D:11:46:0F Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 2D53C50B53FB7AD3347699B396B30640014156AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: 67 Signing time: Tue 28 Jul 2026 22:17:52 +0000 Manifest this update: Tue 28 Jul 2026 22:12:52 +0000 Manifest next update: Wed 29 Jul 2026 22:34:52 +0000 Files and hashes: 1: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: wfRUkDa4ufKHU1bn3M0jS/RAu36baSF8XIhzs++l8tk=) 2: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 3: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:53:c5:0b:53:fb:7a:d3:34:76:99:b3:96:b3:06:40:01:41:56:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Jul 28 22:12:52 2026 GMT Not After : Jul 29 22:34:52 2026 GMT Subject: CN=4ED65C9C2F67AFD1ACAC9B88CB793C843D11460F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:11:e3:fe:e1:bf:65:63:5d:b0:08:07:f7: 06:a7:a2:78:dc:44:03:56:f8:ca:3a:4c:4f:a5:a1: ee:fd:37:7e:b7:88:d2:56:3b:05:9e:cb:fb:7c:3c: a2:f7:2d:3b:ed:2e:8c:27:ef:68:f9:8d:a0:5d:80: 6e:1b:79:e1:99:46:0c:f7:a5:b3:fe:90:b3:35:3c: f5:8d:34:d3:9b:29:6c:42:de:43:36:79:f8:fc:38: 8c:73:e6:11:e4:f7:11:b1:4f:eb:d8:65:e9:de:3e: b9:b1:ae:26:d7:36:55:b5:67:e2:15:36:bb:ca:1c: 79:78:c0:67:5f:3e:68:52:8a:7f:dc:14:a6:b1:6e: 38:3b:cd:00:c6:e6:ba:64:c5:e2:fb:b0:c9:0f:ac: ec:7e:eb:ea:ad:e7:47:c6:5a:d1:a5:3b:f8:62:9a: ab:10:1a:46:22:a1:3d:53:87:00:17:34:fe:35:10: 8c:18:58:e6:bb:21:a4:19:be:c6:c0:d7:0f:24:9d: 25:4b:85:85:5b:6d:99:7f:0b:14:bd:5d:41:72:8b: 58:5b:0c:ce:ea:85:a9:31:c6:d4:ae:29:58:14:02: 1b:6c:3f:e2:8c:91:25:3d:09:f9:c6:b2:21:54:c4: 5c:03:57:a6:45:6b:aa:8a:fb:ca:97:ae:64:65:24: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:5C:9C:2F:67:AF:D1:AC:AC:9B:88:CB:79:3C:84:3D:11:46:0F X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e1:8d:0f:87:b3:c4:cc:8f:23:cb:01:f0:4e:9e:2d:cb:69: 4c:66:b4:73:2c:7c:47:d5:9c:fa:04:e8:fe:73:20:10:c9:76: 5f:96:a0:c6:b7:71:ca:0c:94:eb:b5:5d:69:bc:1c:88:ab:57: 36:52:21:1c:72:b1:74:0c:39:5e:67:90:e8:d0:39:38:b0:85: bb:9e:e4:a2:ea:ef:f7:37:69:aa:da:e8:10:a5:60:f0:f0:ef: f2:52:a5:f1:9c:10:2b:70:81:a7:9b:a6:2d:d7:c9:96:9d:02: af:3a:48:56:3b:49:06:07:51:60:0f:84:48:5f:10:49:13:be: e4:3c:a2:a8:77:0b:e4:7d:fe:ed:c2:c1:7c:59:3a:f1:aa:fa: 51:f4:a5:2e:8d:23:47:0c:99:5b:f2:96:4f:67:eb:7d:8f:4c: a2:60:ed:5b:fc:e4:29:8a:45:d6:7b:b5:97:12:04:36:a0:8b: f5:d8:9f:d7:23:34:3a:1c:1e:36:ab:c7:f1:5b:ed:63:88:10: ae:b4:c8:28:98:cd:83:c4:10:57:44:55:3d:d6:2e:a1:6b:a5: 8a:a3:8c:72:92:cd:f7:fc:2e:56:fd:ca:8b:c0:29:bd:8f:4c: 35:ce:24:52:91:19:fb:ae:d6:eb:4d:c4:75:99:59:16:01:25: 49:86:cf:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULVPFC1P7etM0dpmzlrMGQAFBVqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjA3MjgyMjEyNTJaFw0yNjA3MjkyMjM0NTJaMDMxMTAvBgNV BAMTKDRFRDY1QzlDMkY2N0FGRDFBQ0FDOUI4OENCNzkzQzg0M0QxMTQ2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6RHj/uG/ZWNdsAgH9wanonjc RANW+Mo6TE+loe79N363iNJWOwWey/t8PKL3LTvtLown72j5jaBdgG4beeGZRgz3 pbP+kLM1PPWNNNObKWxC3kM2efj8OIxz5hHk9xGxT+vYZenePrmxribXNlW1Z+IV NrvKHHl4wGdfPmhSin/cFKaxbjg7zQDG5rpkxeL7sMkPrOx+6+qt50fGWtGlO/hi mqsQGkYioT1ThwAXNP41EIwYWOa7IaQZvsbA1w8knSVLhYVbbZl/CxS9XUFyi1hb DM7qhakxxtSuKVgUAhtsP+KMkSU9CfnGsiFUxFwDV6ZFa6qK+8qXrmRlJNzNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTtZcnC9nr9GsrJuIy3k8hD0RRg8wHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeGND4ezxMyP I8sB8E6eLctpTGa0cyx8R9Wc+gTo/nMgEMl2X5agxrdxygyU67VdabwciKtXNlIh HHKxdAw5XmeQ6NA5OLCFu57kourv9zdpqtroEKVg8PDv8lKl8ZwQK3CBp5umLdfJ lp0CrzpIVjtJBgdRYA+ESF8QSRO+5DyiqHcL5H3+7cLBfFk68ar6UfSlLo0jRwyZ W/KWT2frfY9MomDtW/zkKYpF1nu1lxIENqCL9dif1yM0OhweNqvH8VvtY4gQrrTI KJjNg8QQV0RVPdYuoWuliqOMcpLN9/wuVv3Ki8ApvY9MNc4kUpEZ+67W603EdZlZ FgElSYbPqA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:34:09 2026 by rpki-client