$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json) Hash identifier: 9kLjPCHC1sajlYrODD7kGobArKuRNwr0BmFo7UeuICo= Subject key identifier: 3A:03:5F:19:30:13:D9:F1:A1:92:06:A8:FD:36:7F:08:92:61:17:AB Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA Certificate serial: 08471CA77D2EF4A210AE10E08E8DC98FC12ACB35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft Manifest number: 32 Signing time: Wed 29 Jul 2026 10:24:07 +0000 Manifest this update: Wed 29 Jul 2026 10:19:07 +0000 Manifest next update: Thu 30 Jul 2026 11:44:07 +0000 Files and hashes: 1: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=) 2: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=) 3: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=) 4: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=) 5: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: egartfrO7/PDnGracbHXLCXVjEK4R9hR8PklfQOWXvc=) 6: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=) 7: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=) 8: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=) 9: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:47:1c:a7:7d:2e:f4:a2:10:ae:10:e0:8e:8d:c9:8f:c1:2a:cb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA Validity Not Before: Jul 29 10:19:07 2026 GMT Not After : Jul 30 11:44:07 2026 GMT Subject: CN=3A035F193013D9F1A19206A8FD367F08926117AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9d:97:ff:0b:96:b6:b1:ea:25:db:57:36:bb: da:bf:c7:b0:26:b4:28:6a:84:fd:92:67:67:e7:04: db:39:36:e4:fa:25:d7:fa:94:34:0a:ab:39:01:04: e1:1f:91:25:3b:d0:9d:fa:3a:3a:a9:cb:da:cc:ea: 0e:05:7e:b5:b7:f5:e6:3f:93:b4:04:db:5e:c9:16: dc:3c:d0:ab:6b:01:cc:8e:23:91:08:e2:ff:54:f3: d7:49:a0:ad:dd:6e:a7:67:68:b4:67:e6:cc:3e:8a: 83:f6:ff:e9:42:04:c8:d6:89:46:f8:5e:a4:39:16: 42:ba:26:6f:b9:df:1b:2c:eb:56:d5:0a:91:e2:86: f7:94:46:e5:4c:8d:25:7b:c3:eb:9e:d6:de:24:91: 6e:d7:73:7c:af:0e:34:b4:64:93:f2:ba:6f:b8:86: e1:f4:23:68:78:8e:46:9c:80:8d:8c:86:15:55:47: d0:87:65:cf:72:b9:c6:5d:9c:23:98:9d:ab:b3:be: 6c:44:08:ef:fa:ae:ba:45:8d:e0:c8:ea:27:41:c4: 6a:1d:01:e7:65:47:44:d9:44:b9:21:45:c3:f0:71: 17:72:5a:13:04:f5:62:99:e2:bd:7c:4c:35:4d:fd: 37:4b:78:31:49:1f:a3:f9:e7:6a:b7:af:3f:af:64: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:03:5F:19:30:13:D9:F1:A1:92:06:A8:FD:36:7F:08:92:61:17:AB X509v3 Authority Key Identifier: keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:62:2e:30:f4:30:a9:4e:4e:fd:8d:61:6a:e4:40:2b:1a: 38:0b:7a:60:9b:09:8e:dd:18:17:81:72:af:d0:7b:fb:c9:9a: 77:b9:55:a0:cf:56:99:a5:5e:4a:51:51:6e:e8:78:20:14:0c: e3:8c:ae:dc:87:7f:6c:3d:c2:9d:8a:55:de:cd:ee:7b:7a:15: 67:e9:99:56:44:04:22:e1:2d:2c:45:40:bf:d1:90:5e:7e:cc: ca:4e:23:f5:8e:1d:08:00:91:50:62:14:60:e0:00:bd:ca:fc: fd:7b:27:29:14:7f:1f:3f:ac:e4:96:ca:3d:21:11:d4:e8:6d: 75:5b:25:f7:27:4f:e0:86:b8:d8:3b:74:da:73:22:76:8c:c2: 62:ed:e6:79:49:55:86:28:25:24:0b:8a:0c:48:8a:fd:83:82: e8:3c:08:c5:53:09:ee:54:45:49:5b:40:ad:14:1d:15:4c:51: 82:c7:47:5a:0e:92:e4:b2:e8:cb:18:19:9d:9d:dc:7b:af:79: c5:b1:b5:6e:07:03:42:9a:d4:ff:57:49:eb:39:6a:77:4c:c4: 39:43:9b:ac:9e:01:a6:2a:21:85:79:9e:48:25:d2:c5:de:da: 18:08:14:53:be:12:56:29:3d:e9:a3:35:de:b4:79:6f:b3:df: fe:a0:15:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCEccp30u9KIQrhDgjo3Jj8EqyzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz QjE5MTZGQTAeFw0yNjA3MjkxMDE5MDdaFw0yNjA3MzAxMTQ0MDdaMDMxMTAvBgNV BAMTKDNBMDM1RjE5MzAxM0Q5RjFBMTkyMDZBOEZEMzY3RjA4OTI2MTE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1nZf/C5a2seol21c2u9q/x7Am tChqhP2SZ2fnBNs5NuT6Jdf6lDQKqzkBBOEfkSU70J36Ojqpy9rM6g4FfrW39eY/ k7QE217JFtw80KtrAcyOI5EI4v9U89dJoK3dbqdnaLRn5sw+ioP2/+lCBMjWiUb4 XqQ5FkK6Jm+53xss61bVCpHihveURuVMjSV7w+ue1t4kkW7Xc3yvDjS0ZJPyum+4 huH0I2h4jkacgI2MhhVVR9CHZc9yucZdnCOYnauzvmxECO/6rrpFjeDI6idBxGod AedlR0TZRLkhRcPwcRdyWhME9WKZ4r18TDVN/TdLeDFJH6P552q3rz+vZF5XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOgNfGTAT2fGhkgao/TZ/CJJhF6swHwYDVR0j BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2 MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2BiLjD0MKlO Tv2NYWrkQCsaOAt6YJsJjt0YF4Fyr9B7+8mad7lVoM9WmaVeSlFRbuh4IBQM44yu 3Id/bD3CnYpV3s3ue3oVZ+mZVkQEIuEtLEVAv9GQXn7Myk4j9Y4dCACRUGIUYOAA vcr8/XsnKRR/Hz+s5JbKPSER1OhtdVsl9ydP4Ia42Dt02nMidozCYu3meUlVhigl JAuKDEiK/YOC6DwIxVMJ7lRFSVtArRQdFUxRgsdHWg6S5LLoyxgZnZ3ce695xbG1 bgcDQprU/1dJ6zlqd0zEOUObrJ4BpiohhXmeSCXSxd7aGAgUU74SVik96aM13rR5 b7Pf/qAV+Q== -----END CERTIFICATE-----Generated at Wed Jul 29 16:29:42 2026 by rpki-client