$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: SegE3bvZtLVuihaBVb6blvePGY9Y8ILRvdSMs3QJbTM= Subject key identifier: 0B:01:35:6E:49:B2:E8:82:0F:44:8D:50:CD:E4:72:99:7B:00:85:2E Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 1AEDCEF25F3EC570890C212238736A6E4C6DC608 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 5F Signing time: Tue 28 Jul 2026 18:32:31 +0000 Manifest this update: Tue 28 Jul 2026 18:27:31 +0000 Manifest next update: Wed 29 Jul 2026 20:28:31 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: IooQ9Md+dpHJxp9w9PNNXpGu6LB82RN30E0RSijs7i8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ed:ce:f2:5f:3e:c5:70:89:0c:21:22:38:73:6a:6e:4c:6d:c6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Jul 28 18:27:31 2026 GMT Not After : Jul 29 20:28:31 2026 GMT Subject: CN=0B01356E49B2E8820F448D50CDE472997B00852E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:f5:be:cf:19:0f:7b:19:95:c4:30:d8:87: bd:34:3b:46:1b:22:d5:e6:74:d4:db:31:18:92:76: 0d:9f:1c:51:9a:1e:f9:cf:e0:e8:82:a3:e5:78:79: 56:35:ca:13:e5:bd:3c:aa:97:c8:ed:40:81:fb:72: f2:8b:09:7c:85:97:4e:ae:5e:cc:02:11:75:f5:df: db:5f:3f:10:dd:9a:c1:cf:34:80:7f:99:47:35:b0: 7a:5c:e8:4f:78:a4:63:cd:88:69:ed:3f:0e:58:56: c1:68:a4:3b:e6:ff:49:b9:87:17:63:34:82:2b:d4: c3:bc:a0:9f:90:b8:fb:0c:58:b1:04:38:f2:0d:24: e4:e6:ec:02:1a:09:d8:92:a9:ce:fd:94:17:86:ce: a1:11:15:4a:5d:a4:3e:64:9f:83:fa:70:34:24:89: c1:16:9e:6c:0b:bf:3f:ce:8c:db:16:3b:92:ce:c3: 0f:17:d4:4b:c1:54:30:7a:9d:70:0a:ac:e9:c2:31: d0:be:57:44:de:aa:e1:4d:88:fb:2f:a7:51:75:87: be:e4:50:18:8a:fe:9f:c4:d4:b1:32:d7:3b:2d:48: 4f:fc:87:eb:12:a9:28:17:10:d3:1f:78:74:b0:22: 97:a9:0a:3b:3e:68:2d:67:67:58:26:af:95:f6:80: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:35:6E:49:B2:E8:82:0F:44:8D:50:CD:E4:72:99:7B:00:85:2E X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:a8:ee:64:8e:a0:2e:0a:29:c9:80:4a:a2:dc:22:86:b1: 9d:20:63:2f:25:cb:ec:d1:64:90:10:8c:d9:9c:8d:98:b0:eb: 99:59:be:f3:a5:94:e8:e2:19:19:d7:e7:74:ca:a0:a4:19:3e: f4:24:7e:c8:37:49:3f:de:13:8d:c2:da:9e:4c:e0:4e:5e:cd: e7:3a:fa:5a:67:1c:6e:81:0a:b9:80:3f:8b:e8:5b:26:e3:9f: 8b:45:30:35:9e:49:f2:f8:18:64:16:3e:13:93:08:9f:8c:bb: 27:86:4e:a4:6e:1d:18:0e:f4:fc:e8:92:52:8c:f7:83:72:d2: 43:27:f4:23:05:07:02:a0:22:4a:aa:4e:9e:d8:f2:d0:b5:87: 35:f3:c9:bc:5f:65:a9:cf:f1:d5:14:75:74:03:a4:9e:e2:2d: 15:a3:4e:1c:a2:9c:1b:e6:5d:55:83:70:f2:b6:eb:41:60:ba: af:e2:50:1a:a7:33:c2:46:6c:1b:9d:a9:7c:71:e7:cd:a6:74: f8:24:a4:7c:20:f6:a7:49:57:51:bc:e1:4c:4d:98:c1:15:93: c1:04:6e:09:c1:14:3b:66:42:88:4b:28:93:f8:94:fd:83:63: d8:58:2a:8d:a8:31:95:82:48:56:11:dc:6a:69:86:8b:2c:37: a2:5e:0a:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGu3O8l8+xXCJDCEiOHNqbkxtxggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA3MjgxODI3MzFaFw0yNjA3MjkyMDI4MzFaMDMxMTAvBgNV BAMTKDBCMDEzNTZFNDlCMkU4ODIwRjQ0OEQ1MENERTQ3Mjk5N0IwMDg1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNPW+zxkPexmVxDDYh700O0Yb ItXmdNTbMRiSdg2fHFGaHvnP4OiCo+V4eVY1yhPlvTyql8jtQIH7cvKLCXyFl06u XswCEXX139tfPxDdmsHPNIB/mUc1sHpc6E94pGPNiGntPw5YVsFopDvm/0m5hxdj NIIr1MO8oJ+QuPsMWLEEOPINJOTm7AIaCdiSqc79lBeGzqERFUpdpD5kn4P6cDQk icEWnmwLvz/OjNsWO5LOww8X1EvBVDB6nXAKrOnCMdC+V0TequFNiPsvp1F1h77k UBiK/p/E1LEy1zstSE/8h+sSqSgXENMfeHSwIpepCjs+aC1nZ1gmr5X2gCI1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCwE1bkmy6IIPRI1QzeRymXsAhS4wHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxGo7mSOoC4K KcmASqLcIoaxnSBjLyXL7NFkkBCM2ZyNmLDrmVm+86WU6OIZGdfndMqgpBk+9CR+ yDdJP94TjcLankzgTl7N5zr6WmccboEKuYA/i+hbJuOfi0UwNZ5J8vgYZBY+E5MI n4y7J4ZOpG4dGA70/OiSUoz3g3LSQyf0IwUHAqAiSqpOntjy0LWHNfPJvF9lqc/x 1RR1dAOknuItFaNOHKKcG+ZdVYNw8rbrQWC6r+JQGqczwkZsG52pfHHnzaZ0+CSk fCD2p0lXUbzhTE2YwRWTwQRuCcEUO2ZCiEsok/iU/YNj2FgqjagxlYJIVhHcammG iyw3ol4KWA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:42:47 2026 by rpki-client