$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json) Hash identifier: SJzgRR2cPuTcWmyATqGIVRMQZ8BOGYDirn61ijG+X+k= Subject key identifier: DD:56:81:52:23:0D:4E:6E:B3:E9:DB:29:2C:93:8F:20:5A:58:20:BA Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 41881343FEB1B3374CE229F2884385F888AF4A6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft Manifest number: 57 Signing time: Wed 29 Jul 2026 05:28:33 +0000 Manifest this update: Wed 29 Jul 2026 05:23:33 +0000 Manifest next update: Thu 30 Jul 2026 07:13:33 +0000 Files and hashes: 1: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=) 2: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=) 3: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: GtBswWZIlbK+sC0ZE9QZOzoC4s0LXzKf1S06JUC0xjk=) 4: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=) 5: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:88:13:43:fe:b1:b3:37:4c:e2:29:f2:88:43:85:f8:88:af:4a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: Jul 29 05:23:33 2026 GMT Not After : Jul 30 07:13:33 2026 GMT Subject: CN=DD568152230D4E6EB3E9DB292C938F205A5820BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:c8:88:67:6b:41:19:b8:e4:3f:64:c7:c1: 47:9c:50:1e:f9:6c:08:55:5c:05:97:3f:4f:a4:27: 50:18:89:60:d3:db:5d:ce:99:65:dc:55:ec:40:cb: 06:f0:03:24:7c:ed:ca:1e:ec:18:ba:75:e8:94:aa: ff:00:40:b5:68:f6:77:7f:69:8f:42:bd:9c:78:39: 1a:99:ee:4f:59:d2:24:c0:75:67:bc:a0:b0:ef:15: df:c4:ed:f5:a0:22:7d:69:ee:61:ca:da:7b:7b:eb: a6:18:e1:19:b8:cb:cc:9c:7a:af:e7:b8:17:a9:26: c6:75:17:91:c6:c7:d2:91:e2:fa:b7:e1:b7:68:03: 19:40:eb:5f:05:4d:2c:e8:11:c6:ec:20:1f:c8:7c: 4f:0d:e9:8d:a7:cd:ec:fb:e0:ec:ef:1a:9b:6b:28: 15:dc:b2:72:b0:4e:5c:c4:06:7e:59:1a:f1:f6:82: 21:6c:bb:5d:72:f8:ca:c1:2d:c6:2f:e3:37:ea:fd: 07:b7:f0:ff:54:79:1c:65:0a:4b:be:1a:33:99:27: c2:76:39:ba:94:4c:fe:6d:e7:14:1e:ff:8d:6a:11: ae:9e:dc:f2:ad:d3:ed:df:27:df:eb:2f:e2:cb:72: df:9a:0c:22:72:d5:fc:4f:d8:28:c5:c5:c0:e5:47: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:81:52:23:0D:4E:6E:B3:E9:DB:29:2C:93:8F:20:5A:58:20:BA X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3e:8a:53:b3:0c:1d:d7:82:9f:8f:c4:dd:c6:f6:25:4b:17: e1:67:7a:54:40:97:cb:fc:45:18:a9:3e:03:a9:b6:87:af:63: 7d:e0:cc:fc:42:52:5a:fc:53:c3:65:97:aa:fa:07:f7:5e:37: 88:8c:cb:eb:6e:c2:12:dc:1b:b8:80:fe:e4:f7:e5:9b:99:3e: 41:79:21:09:cd:47:28:82:78:68:3d:d1:51:a9:70:35:d4:e1: 51:96:ec:59:c6:e8:54:dc:58:37:43:cc:85:c4:1b:00:dc:31: 37:33:ce:c9:c1:82:f4:a1:f2:e4:5c:3f:51:59:2d:23:ab:d9: 92:63:a4:00:c8:5f:ce:7d:79:f9:20:3f:a5:5a:5e:2a:7a:a6: fe:31:77:8b:5b:94:42:22:fd:c6:9a:18:55:2c:5e:f2:49:c7: b3:02:01:35:ed:ce:4e:47:f5:cb:e6:89:22:ac:ea:2f:c3:e7: 81:ba:71:83:ae:d1:b9:2d:c3:87:19:3f:dd:85:0b:0e:c3:00: bf:77:17:70:94:0c:bd:46:aa:1a:87:5a:c7:d2:e5:9c:3c:0b: b9:4f:0a:d6:ca:d9:80:c3:4e:bf:46:73:cb:0a:4f:3b:03:ad: db:7a:03:0d:8a:87:4a:8c:4d:90:ed:eb:f0:62:67:d3:b3:d0: c0:89:a8:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQYgTQ/6xszdM4inyiEOF+IivSmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjA3MjkwNTIzMzNaFw0yNjA3MzAwNzEzMzNaMDMxMTAvBgNV BAMTKERENTY4MTUyMjMwRDRFNkVCM0U5REIyOTJDOTM4RjIwNUE1ODIwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuMiIZ2tBGbjkP2THwUecUB75 bAhVXAWXP0+kJ1AYiWDT213OmWXcVexAywbwAyR87coe7Bi6deiUqv8AQLVo9nd/ aY9CvZx4ORqZ7k9Z0iTAdWe8oLDvFd/E7fWgIn1p7mHK2nt766YY4Rm4y8yceq/n uBepJsZ1F5HGx9KR4vq34bdoAxlA618FTSzoEcbsIB/IfE8N6Y2nzez74OzvGptr KBXcsnKwTlzEBn5ZGvH2giFsu11y+MrBLcYv4zfq/Qe38P9UeRxlCku+GjOZJ8J2 ObqUTP5t5xQe/41qEa6e3PKt0+3fJ9/rL+LLct+aDCJy1fxP2CjFxcDlR2hNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3VaBUiMNTm6z6dspLJOPIFpYILowHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE1NTI0MzMyMjM0MzQyNTkvMC9BNjg3RUEzMEZEOUU5 NUIwQkI0NjZEQURGMEUyN0FGOThGMjE3Q0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj6KU7MMHdeC n4/E3cb2JUsX4Wd6VECXy/xFGKk+A6m2h69jfeDM/EJSWvxTw2WXqvoH9143iIzL 627CEtwbuID+5Pflm5k+QXkhCc1HKIJ4aD3RUalwNdThUZbsWcboVNxYN0PMhcQb ANwxNzPOycGC9KHy5Fw/UVktI6vZkmOkAMhfzn15+SA/pVpeKnqm/jF3i1uUQiL9 xpoYVSxe8knHswIBNe3OTkf1y+aJIqzqL8Pngbpxg67RuS3Dhxk/3YULDsMAv3cX cJQMvUaqGodax9LlnDwLuU8K1srZgMNOv0ZzywpPOwOt23oDDYqHSoxNkO3r8GJn 07PQwImo3A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:47 2026 by rpki-client