$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: YVRJyfPLEZTblKdNkiZY2H2O2KLL+F4cV/SmJUfLKQ0= Subject key identifier: 5A:27:15:DC:C1:B2:07:93:32:99:12:10:E5:65:4A:45:F3:C1:54:E5 Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 34B92484B25D7C85F499848443CB1EB80C0EFD6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 5C Signing time: Wed 29 Jul 2026 03:23:17 +0000 Manifest this update: Wed 29 Jul 2026 03:18:17 +0000 Manifest next update: Thu 30 Jul 2026 06:44:17 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: NCoujmASwGkWgspiy7QUt/Z5yR4KBDRXoqecuOaXAn8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b9:24:84:b2:5d:7c:85:f4:99:84:84:43:cb:1e:b8:0c:0e:fd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Jul 29 03:18:17 2026 GMT Not After : Jul 30 06:44:17 2026 GMT Subject: CN=5A2715DCC1B2079332991210E5654A45F3C154E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:35:b6:53:3e:ab:0f:9e:58:07:13:af:ce: b0:a0:34:67:80:3d:03:2d:d7:47:02:b8:80:4b:92: 97:77:2e:81:88:a4:cb:e7:a7:4b:86:e9:26:9d:da: 2a:f6:81:7f:ee:e3:2c:6d:bc:7e:5a:b6:9b:d0:ba: 67:24:3f:da:77:11:34:bc:fc:a7:00:0b:b1:66:8f: 5e:b3:cd:cf:18:6f:3c:fe:18:d7:13:c6:5b:47:07: b7:fe:67:d7:d6:01:70:f6:03:19:41:9d:45:0a:42: 2b:0a:d4:3c:78:19:96:6e:79:93:b2:46:ae:b4:5c: 76:03:76:9e:e7:f4:9f:24:04:53:60:d0:fb:df:e2: 44:4d:b9:b0:93:93:5a:9f:ec:c5:3c:0f:09:5f:02: 51:fa:ea:87:c0:e8:a5:72:be:06:71:84:1e:b9:29: 0c:39:21:17:7e:d8:f1:28:1d:a9:85:c6:b2:03:8e: ec:f7:94:f3:ca:dc:86:44:51:89:f6:b6:29:74:4d: b6:17:5a:9b:60:54:7d:67:a4:a8:a6:4e:6f:38:c1: d3:dc:93:a4:d2:52:af:06:96:c4:10:ee:69:88:14: d5:ec:27:fb:61:2f:e2:20:fc:f3:cd:08:49:a3:08: 4c:bf:85:76:39:49:0b:4f:b0:19:57:1b:fd:cf:e9: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:15:DC:C1:B2:07:93:32:99:12:10:E5:65:4A:45:F3:C1:54:E5 X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fd:a6:5a:dd:c1:3e:75:64:8e:60:59:ba:2d:bd:66:37:77: 02:b5:0f:42:be:aa:25:69:84:5c:55:f0:2e:81:fa:09:42:e1: db:d3:14:31:4f:de:04:b7:8f:b6:e6:31:0d:03:41:6c:10:7d: ac:a4:63:9a:86:75:81:2a:86:d1:ed:0b:43:37:e6:cc:ac:1f: 5a:4a:97:39:12:7f:0a:51:a8:c1:90:69:2d:6b:bb:7b:7f:b5: 37:f8:7f:e9:36:cb:91:a9:48:30:7d:0a:db:17:27:ed:c7:4e: cd:44:71:c9:c2:6d:87:8f:76:52:5e:da:32:5b:55:4b:f7:a3: 2e:de:e0:89:1c:31:d9:94:e7:35:31:09:b6:12:36:74:f9:49: 42:42:58:9d:a6:25:0c:17:1f:1d:d4:50:60:0e:f7:1d:84:57: 3f:29:3c:11:06:27:d9:98:d6:0c:14:b3:6f:a6:f0:d0:f5:22: cc:75:27:b9:ad:5f:d1:6c:c9:04:b3:63:71:81:25:19:30:39: e4:dd:89:79:9c:30:9c:7f:23:b8:8b:35:e7:51:ee:85:2e:8e: 20:c2:44:a1:c5:74:5f:b1:f2:36:66:e1:0a:a6:f4:2b:ab:7f: b4:c8:63:d4:98:8c:97:d6:27:05:1b:59:98:ef:c4:f3:93:eb: 22:23:b9:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNLkkhLJdfIX0mYSEQ8seuAwO/W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA3MjkwMzE4MTdaFw0yNjA3MzAwNjQ0MTdaMDMxMTAvBgNV BAMTKDVBMjcxNURDQzFCMjA3OTMzMjk5MTIxMEU1NjU0QTQ1RjNDMTU0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguDW2Uz6rD55YBxOvzrCgNGeA PQMt10cCuIBLkpd3LoGIpMvnp0uG6Sad2ir2gX/u4yxtvH5atpvQumckP9p3ETS8 /KcAC7Fmj16zzc8Ybzz+GNcTxltHB7f+Z9fWAXD2AxlBnUUKQisK1Dx4GZZueZOy Rq60XHYDdp7n9J8kBFNg0Pvf4kRNubCTk1qf7MU8DwlfAlH66ofA6KVyvgZxhB65 KQw5IRd+2PEoHamFxrIDjuz3lPPK3IZEUYn2til0TbYXWptgVH1npKimTm84wdPc k6TSUq8GlsQQ7mmIFNXsJ/thL+Ig/PPNCEmjCEy/hXY5SQtPsBlXG/3P6WBBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWicV3MGyB5MymRIQ5WVKRfPBVOUwHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/2mWt3BPnVk jmBZui29Zjd3ArUPQr6qJWmEXFXwLoH6CULh29MUMU/eBLePtuYxDQNBbBB9rKRj moZ1gSqG0e0LQzfmzKwfWkqXORJ/ClGowZBpLWu7e3+1N/h/6TbLkalIMH0K2xcn 7cdOzURxycJth492Ul7aMltVS/ejLt7giRwx2ZTnNTEJthI2dPlJQkJYnaYlDBcf HdRQYA73HYRXPyk8EQYn2ZjWDBSzb6bw0PUizHUnua1f0WzJBLNjcYElGTA55N2J eZwwnH8juIs151HuhS6OIMJEocV0X7HyNmbhCqb0K6t/tMhj1JiMl9YnBRtZmO/E 85PrIiO56Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client