$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json) Hash identifier: f/HyKdBlS33P45xPsFgUGEeBoVJ5tjdE5iZzjTIZllY= Subject key identifier: 36:94:93:99:DB:87:6A:2D:F7:A2:DD:13:07:8C:89:96:E3:84:85:6C Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60 Certificate serial: 66D2B999EA8A3DB94DD43EE037E0F1814232B7D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft Manifest number: 1F Signing time: Wed 29 Jul 2026 21:15:15 +0000 Manifest this update: Wed 29 Jul 2026 21:10:15 +0000 Manifest next update: Thu 30 Jul 2026 21:59:15 +0000 Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: tpFGANRJx63zVFJCUl+BFzNh8vGEsQ1Kwvs58o6KG08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 21:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d2:b9:99:ea:8a:3d:b9:4d:d4:3e:e0:37:e0:f1:81:42:32:b7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60 Validity Not Before: Jul 29 21:10:15 2026 GMT Not After : Jul 30 21:59:15 2026 GMT Subject: CN=36949399DB876A2DF7A2DD13078C8996E384856C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:89:45:eb:14:c4:05:4a:7f:6f:b8:04:40: 24:85:a9:1d:d8:cf:49:98:fe:60:67:f4:46:e9:22: ba:01:ab:54:b4:b8:b8:46:57:58:02:07:8e:d0:f9: 47:a7:38:39:aa:25:87:fb:fa:db:ac:fc:39:6d:06: c3:a4:b1:b0:9b:12:5d:37:22:4f:32:27:5b:d4:d8: fa:5e:1c:88:af:d9:7f:b9:98:c3:23:c6:e4:d6:02: 6a:ec:c8:10:08:01:3f:91:7d:5e:be:ac:38:e1:b7: 8d:79:5e:0d:94:0d:39:38:07:8e:41:ed:93:f6:44: f8:d4:6c:51:97:7b:39:ec:16:fe:a2:97:bb:22:3c: 31:b8:28:95:a6:79:60:30:43:b0:6e:72:66:20:88: 1d:88:33:ce:03:eb:45:3c:53:e9:1d:3f:56:3e:21: 94:87:68:f3:2e:e4:f4:b0:31:9e:59:6c:65:6c:95: f0:07:ef:c2:42:c1:9d:8f:47:ea:98:b9:29:70:ba: 22:9a:92:0d:60:4e:9e:5a:e1:f6:48:24:c7:b2:be: d7:ae:e2:a5:bb:ab:2d:9d:23:86:35:1e:71:76:66: e1:13:ff:67:b5:23:e3:6c:79:2f:87:43:4f:c4:0f: 11:58:39:a8:59:d6:1d:7a:a0:5d:87:8f:1c:a4:8c: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:93:99:DB:87:6A:2D:F7:A2:DD:13:07:8C:89:96:E3:84:85:6C X509v3 Authority Key Identifier: keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:fc:34:be:cd:b4:19:5b:e2:c4:23:dd:9f:c1:29:a6:42: 0d:11:08:a7:cd:da:02:20:23:4c:b9:99:f1:8b:e1:f5:ec:df: f9:12:f4:5a:c5:be:31:58:b7:69:24:8e:69:1f:df:12:4d:95: 40:2c:19:ef:26:be:62:6e:5f:36:9f:4e:ba:a8:e1:c8:d0:d2: f8:fd:b2:52:0a:e1:57:6f:e7:db:c2:1d:1b:08:38:94:7d:b7: 4c:b9:c7:98:6a:ff:5c:ba:1e:30:08:4b:bb:2a:dc:5f:2d:3a: b0:c3:8c:da:d2:03:82:dd:7f:00:1f:ef:17:e7:bb:c1:68:a3: 4f:14:d5:4e:60:ba:62:25:a4:07:81:12:a9:33:43:59:21:55: 5d:62:04:5f:91:e3:38:e7:80:fa:29:5a:ad:43:ef:22:80:95: 42:f4:08:a0:e0:3e:78:81:3f:8e:3d:82:56:48:b3:09:79:f8: d3:f3:32:6a:1b:e6:9a:47:33:fb:fc:85:2b:0c:f6:eb:d9:7d: 62:03:c1:78:83:75:2b:25:2c:75:db:6a:53:ee:41:7b:42:ab: a6:19:01:dc:08:a5:0c:2f:31:b2:bc:16:3a:11:6d:f9:8a:85: a9:f0:97:f6:a6:f7:2f:96:48:1e:7b:51:fb:a8:b7:2a:75:f1: 12:d2:3d:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZtK5meqKPblN1D7gN+DxgUIyt9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdD QjY5MkY2MDAeFw0yNjA3MjkyMTEwMTVaFw0yNjA3MzAyMTU5MTVaMDMxMTAvBgNV BAMTKDM2OTQ5Mzk5REI4NzZBMkRGN0EyREQxMzA3OEM4OTk2RTM4NDg1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpg4lF6xTEBUp/b7gEQCSFqR3Y z0mY/mBn9EbpIroBq1S0uLhGV1gCB47Q+UenODmqJYf7+tus/DltBsOksbCbEl03 Ik8yJ1vU2PpeHIiv2X+5mMMjxuTWAmrsyBAIAT+RfV6+rDjht415Xg2UDTk4B45B 7ZP2RPjUbFGXeznsFv6il7siPDG4KJWmeWAwQ7BucmYgiB2IM84D60U8U+kdP1Y+ IZSHaPMu5PSwMZ5ZbGVslfAH78JCwZ2PR+qYuSlwuiKakg1gTp5a4fZIJMeyvteu 4qW7qy2dI4Y1HnF2ZuET/2e1I+NseS+HQ0/EDxFYOahZ1h16oF2HjxykjHpdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNpSTmduHai33ot0TB4yJluOEhWwwHwYDVR0j BBgwFoAUkdOxicZ/ChCEork5lhGCN8tpL2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NzA0NTcxMDg0ODQ1ODc4OS8wLzkxRDNCMTg5QzY3RjBBMTA4NEEyQjkzOTk2MTE4 MjM3Q0I2OTJGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdDQjY5MkY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjcwNDU3MTA4NDg0NTg3ODkvMC85MUQzQjE4OUM2N0Yw QTEwODRBMkI5Mzk5NjExODIzN0NCNjkyRjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfH8NL7NtBlb 4sQj3Z/BKaZCDREIp83aAiAjTLmZ8Yvh9ezf+RL0WsW+MVi3aSSOaR/fEk2VQCwZ 7ya+Ym5fNp9OuqjhyNDS+P2yUgrhV2/n28IdGwg4lH23TLnHmGr/XLoeMAhLuyrc Xy06sMOM2tIDgt1/AB/vF+e7wWijTxTVTmC6YiWkB4ESqTNDWSFVXWIEX5HjOOeA +ilarUPvIoCVQvQIoOA+eIE/jj2CVkizCXn40/Myahvmmkcz+/yFKwz269l9YgPB eIN1KyUsddtqU+5Be0KrphkB3AilDC8xsrwWOhFt+YqFqfCX9qb3L5ZIHntR+6i3 KnXxEtI9+Q== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:39 2026 by rpki-client