$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json) Hash identifier: y7qeENDK5Wolon4Xkx3voKAEYGyqMowgnZrHPff9HY8= Subject key identifier: 29:B2:61:FE:8B:FE:3D:C7:AB:10:FA:86:4E:34:E3:A4:5B:B1:00:A1 Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Certificate serial: 5CAAD4F4B17778DE0AFD10785C06FD6CAFAD7294 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft Manifest number: 55 Signing time: Wed 29 Jul 2026 14:59:38 +0000 Manifest this update: Wed 29 Jul 2026 14:54:38 +0000 Manifest next update: Thu 30 Jul 2026 17:29:38 +0000 Files and hashes: 1: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=) 2: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: J7n/SJ31qZkCa1txD60MEjTfVV5F5BycmUnMJ6NkTXI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:aa:d4:f4:b1:77:78:de:0a:fd:10:78:5c:06:fd:6c:af:ad:72:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Validity Not Before: Jul 29 14:54:38 2026 GMT Not After : Jul 30 17:29:38 2026 GMT Subject: CN=29B261FE8BFE3DC7AB10FA864E34E3A45BB100A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:3d:8d:98:20:c4:cb:c8:22:4b:e1:5a:7c: 0c:c6:4d:33:67:c4:4f:cc:58:86:20:c5:4d:b0:e4: bc:b8:02:3c:f1:ce:4e:d7:f1:f3:66:61:69:09:2f: 5b:ab:4d:75:24:80:43:46:55:db:dc:82:f3:bc:8f: 45:92:cf:1a:0d:8e:5a:bb:da:e7:ee:e6:f7:48:e2: dc:88:d9:d6:f5:89:99:01:ca:15:52:66:e4:8c:1a: d6:bc:c0:5b:8b:94:86:71:12:40:85:e6:f9:47:e6: 87:95:92:59:54:44:fa:69:dd:95:c7:9d:0f:c9:d9: 75:f1:27:dc:55:f4:e1:c6:80:43:3d:a6:47:71:58: fb:0b:c2:da:5f:01:0b:1f:35:aa:e7:7a:5a:53:2d: 79:ba:ed:6d:09:1a:0c:1e:21:4a:a1:6c:0c:d1:fd: 13:2a:5c:cd:7c:24:81:44:28:7c:56:f7:03:98:57: 06:46:d9:99:d5:1d:77:6c:da:de:45:4b:91:6d:c4: ae:7f:fc:9b:61:b1:f5:4d:69:15:ea:1b:0c:2f:66: 1c:42:0f:39:2f:4a:11:f2:cf:88:ff:ab:35:41:9f: 23:79:bb:66:ec:56:35:5e:91:c3:44:37:04:23:49: b9:bf:3f:e1:7d:0a:0c:de:7e:57:dc:72:4d:6c:90: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:61:FE:8B:FE:3D:C7:AB:10:FA:86:4E:34:E3:A4:5B:B1:00:A1 X509v3 Authority Key Identifier: keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ab:c6:26:42:03:76:fd:63:56:29:47:e5:a0:be:10:71:ea: 0d:ca:de:75:12:c6:83:26:ee:cd:d5:3a:57:fa:73:57:14:70: 5b:63:90:56:25:7b:40:f3:90:96:4a:71:3b:4f:cf:12:d5:a9: 01:44:97:72:92:37:cf:70:16:de:12:5a:61:ec:77:27:d2:06: 64:b3:21:86:59:4a:93:07:59:39:e6:e3:94:a8:94:a2:a3:cc: e7:66:3d:74:58:25:ed:9a:43:ac:e5:20:6f:cf:83:2f:34:9c: 29:62:93:d6:7d:3c:06:fd:66:d6:87:63:48:38:9e:87:ec:65: 27:a4:d1:34:ee:73:18:29:0e:96:e8:95:43:28:ee:7f:50:88: 52:3c:99:a3:a3:6a:df:12:04:ee:c9:ad:01:fa:92:2f:42:07: 6e:e0:69:e2:5a:8a:1a:7f:96:c8:53:23:05:5c:fc:45:26:af: 10:40:d7:a9:a9:70:f6:3d:1a:f9:54:f1:f7:ab:ef:b4:51:40: 66:c6:99:70:47:e9:2d:90:71:e2:58:a5:66:46:02:d3:d9:f6: a3:a1:ae:8c:17:1b:af:0f:d7:46:29:45:79:ec:66:af:6c:dc: 1c:aa:3f:2d:bc:60:e5:4f:fc:d1:ed:f7:b9:1c:dd:38:f1:e6: b1:b5:e6:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXKrU9LF3eN4K/RB4XAb9bK+tcpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3 RDU2QjM4ODAeFw0yNjA3MjkxNDU0MzhaFw0yNjA3MzAxNzI5MzhaMDMxMTAvBgNV BAMTKDI5QjI2MUZFOEJGRTNEQzdBQjEwRkE4NjRFMzRFM0E0NUJCMTAwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWD2NmCDEy8giS+FafAzGTTNn xE/MWIYgxU2w5Ly4Ajzxzk7X8fNmYWkJL1urTXUkgENGVdvcgvO8j0WSzxoNjlq7 2ufu5vdI4tyI2db1iZkByhVSZuSMGta8wFuLlIZxEkCF5vlH5oeVkllURPpp3ZXH nQ/J2XXxJ9xV9OHGgEM9pkdxWPsLwtpfAQsfNarnelpTLXm67W0JGgweIUqhbAzR /RMqXM18JIFEKHxW9wOYVwZG2ZnVHXds2t5FS5FtxK5//JthsfVNaRXqGwwvZhxC DzkvShHyz4j/qzVBnyN5u2bsVjVekcNENwQjSbm/P+F9Cgzeflfcck1skDexAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKbJh/ov+PcerEPqGTjTjpFuxAKEwHwYDVR0j BBgwFoAU5dV+SiR2Q5SYoC7BGEjI4X1Ws4gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI5MTUyMzM4ODU3MTY2OS8wL0U1RDU3RTRBMjQ3NjQzOTQ5OEEwMkVDMTE4NDhD OEUxN0Q1NkIzODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3RDU2QjM4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyOTE1MjMzODg1NzE2NjkvMC9FNUQ1N0U0QTI0NzY0 Mzk0OThBMDJFQzExODQ4QzhFMTdENTZCMzg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqvGJkIDdv1j VilH5aC+EHHqDcredRLGgybuzdU6V/pzVxRwW2OQViV7QPOQlkpxO0/PEtWpAUSX cpI3z3AW3hJaYex3J9IGZLMhhllKkwdZOebjlKiUoqPM52Y9dFgl7ZpDrOUgb8+D LzScKWKT1n08Bv1m1odjSDieh+xlJ6TRNO5zGCkOluiVQyjuf1CIUjyZo6Nq3xIE 7smtAfqSL0IHbuBp4lqKGn+WyFMjBVz8RSavEEDXqalw9j0a+VTx96vvtFFAZsaZ cEfpLZBx4lilZkYC09n2o6GujBcbrw/XRilFeexmr2zcHKo/Lbxg5U/80e33uRzd OPHmsbXmVA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:14:22 2026 by rpki-client