$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json) Hash identifier: RIkPB0dA7sHgJ1tm7O2RS+Zd+sVpQ8Z+p5n2vlbNaqs= Subject key identifier: 1D:75:40:FA:86:99:AB:D9:86:4C:E8:6C:04:F2:54:52:9B:99:EC:85 Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Certificate serial: 40D82E9685F76EA8C43C7F263B844220EC1359AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft Manifest number: 4B Signing time: Wed 29 Jul 2026 15:29:41 +0000 Manifest this update: Wed 29 Jul 2026 15:24:41 +0000 Manifest next update: Thu 30 Jul 2026 16:18:41 +0000 Files and hashes: 1: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: EP5+ab5saF2U160PaZBWrp9nT8Fo5OK5P+Qpc/m7MD8=) 2: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=) 3: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d8:2e:96:85:f7:6e:a8:c4:3c:7f:26:3b:84:42:20:ec:13:59:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Validity Not Before: Jul 29 15:24:41 2026 GMT Not After : Jul 30 16:18:41 2026 GMT Subject: CN=1D7540FA8699ABD9864CE86C04F254529B99EC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:8a:52:fd:2f:5d:5e:28:90:55:3c:49:98: 19:6f:fb:b6:0c:7c:81:ac:31:eb:e9:f9:8c:d3:ff: 6a:87:17:98:34:34:f7:67:01:c9:95:9c:14:62:c5: 87:f2:7c:af:6f:27:c5:7e:17:67:ca:3f:e3:e1:8b: ff:e4:e4:df:75:ba:66:29:33:0e:26:e7:fa:f1:db: 4a:35:a3:1f:52:10:4f:a3:c6:b9:a3:1f:39:93:a0: 35:b4:62:bf:3d:ae:04:33:dd:37:a8:c0:eb:ba:3d: aa:d5:24:8b:77:5e:0a:64:c5:4b:e3:92:29:81:41: a7:35:7d:6b:ea:13:c9:6f:37:d9:ad:5d:c9:cf:4f: 10:12:2e:c0:b9:09:77:6e:5d:e0:8e:a9:c3:a7:3b: 60:30:a7:0e:7e:a8:a3:d7:75:dc:7a:85:76:44:1a: b5:b2:00:b1:d0:e0:9b:cb:05:4a:99:75:a2:48:87: 4c:47:fa:62:0c:2d:f0:a8:53:23:df:3f:32:33:c8: 53:51:cc:28:c7:43:a8:9d:84:ec:eb:75:ca:cd:b5: 3e:b1:7d:cb:5c:ca:1f:c7:aa:de:a6:e4:38:98:75: 57:68:74:61:b1:7d:07:a3:9b:12:6e:a5:aa:93:c4: b8:61:84:a7:30:e2:b3:f2:e7:c8:04:37:db:42:ef: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:75:40:FA:86:99:AB:D9:86:4C:E8:6C:04:F2:54:52:9B:99:EC:85 X509v3 Authority Key Identifier: keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:06:a3:3f:23:0f:64:96:42:c3:0e:29:9e:66:c9:da:f7:14: b4:a6:c4:da:5e:52:94:bf:54:78:3f:d5:a9:e9:c2:c1:8c:93: 88:6d:0e:13:81:fb:f3:14:7e:74:13:54:65:e6:50:5e:f5:8b: ec:e9:df:19:63:83:ea:bb:b7:71:10:e4:36:b0:52:b6:05:a8: af:d4:a3:4b:d8:55:6b:85:6a:f5:3f:0f:33:e9:c9:26:1b:8c: 06:e6:6d:02:35:c3:db:32:7b:39:21:0d:a5:e4:07:fa:23:05: b5:30:13:a2:44:b6:6f:66:f7:64:2c:e7:89:5f:89:6a:ae:75: c4:6f:12:cc:60:28:14:15:e9:7a:f2:f9:6b:fe:b2:0d:23:cf: f8:5d:98:2e:24:dd:d4:d8:d3:a1:ea:f5:13:df:f3:94:06:44: d2:ed:36:86:91:db:d2:84:b5:f5:7f:9b:58:7e:e9:2b:5e:6b: 52:b1:43:d3:0e:e3:99:f0:a6:36:b7:1d:46:a9:bb:3f:a5:cf: 97:5b:27:62:48:75:25:18:36:aa:7d:7e:a6:e6:34:09:69:10: e9:a5:a0:78:59:57:77:9a:f9:0d:8e:c8:fb:63:60:c1:72:11: 07:02:46:f6:2a:b3:99:65:08:55:b2:b7:83:c0:e9:39:70:34: 2c:10:92:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQNguloX3bqjEPH8mO4RCIOwTWaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB MTlBODE4QzAeFw0yNjA3MjkxNTI0NDFaFw0yNjA3MzAxNjE4NDFaMDMxMTAvBgNV BAMTKDFENzU0MEZBODY5OUFCRDk4NjRDRTg2QzA0RjI1NDUyOUI5OUVDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1opS/S9dXiiQVTxJmBlv+7YM fIGsMevp+YzT/2qHF5g0NPdnAcmVnBRixYfyfK9vJ8V+F2fKP+Phi//k5N91umYp Mw4m5/rx20o1ox9SEE+jxrmjHzmToDW0Yr89rgQz3TeowOu6ParVJIt3XgpkxUvj kimBQac1fWvqE8lvN9mtXcnPTxASLsC5CXduXeCOqcOnO2Awpw5+qKPXddx6hXZE GrWyALHQ4JvLBUqZdaJIh0xH+mIMLfCoUyPfPzIzyFNRzCjHQ6idhOzrdcrNtT6x fctcyh/Hqt6m5DiYdVdodGGxfQejmxJupaqTxLhhhKcw4rPy58gEN9tC76gVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHXVA+oaZq9mGTOhsBPJUUpuZ7IUwHwYDVR0j BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3 MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTkzMTA5MDg3NjgyODEvMC9BMEM5OThCRkNDQUU4 OTQ2MzUzRUE3MzkxMkNCNzE1NkExOUE4MThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgajPyMPZJZC ww4pnmbJ2vcUtKbE2l5SlL9UeD/VqenCwYyTiG0OE4H78xR+dBNUZeZQXvWL7Onf GWOD6ru3cRDkNrBStgWor9SjS9hVa4Vq9T8PM+nJJhuMBuZtAjXD2zJ7OSENpeQH +iMFtTATokS2b2b3ZCzniV+Jaq51xG8SzGAoFBXpevL5a/6yDSPP+F2YLiTd1NjT oer1E9/zlAZE0u02hpHb0oS19X+bWH7pK15rUrFD0w7jmfCmNrcdRqm7P6XPl1sn Ykh1JRg2qn1+puY0CWkQ6aWgeFlXd5r5DY7I+2NgwXIRBwJG9iqzmWUIVbK3g8Dp OXA0LBCSTg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:12:59 2026 by rpki-client