$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: EAGqiMRQTwUtgxb5hMGnkSrxt2Z9a8HDHx37k/+XNmU= Subject key identifier: 3D:BB:9C:88:83:AA:FB:2D:2E:92:A3:66:43:2F:BA:78:14:92:81:97 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 35761E836F1FC20353EC432FCBA9CD68E36FDE7E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 0123 Signing time: Tue 21 Jul 2026 04:12:52 +0000 Manifest this update: Tue 21 Jul 2026 04:07:52 +0000 Manifest next update: Wed 22 Jul 2026 07:02:52 +0000 Files and hashes: 1: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=) 2: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=) 3: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: GI1MNa85LwcsiPUPAtyOQr8SdUKtP3g6J26sXVMzrJo=) 4: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=) 5: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=) 6: AS54994.roa (hash: 9DefOK5XxXnJzTec5kqRFcozhtzg8e+5NjI/KjSCGRo=) 7: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=) 8: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=) 9: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 07:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:76:1e:83:6f:1f:c2:03:53:ec:43:2f:cb:a9:cd:68:e3:6f:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Jul 21 04:07:52 2026 GMT Not After : Jul 22 07:02:52 2026 GMT Subject: CN=3DBB9C8883AAFB2D2E92A366432FBA7814928197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:c8:5d:2d:a1:bb:c0:8f:f0:4a:5d:56:89: c2:e2:53:d4:82:98:40:5e:6d:d9:eb:a8:69:9f:3f: 2c:e8:8e:6d:05:56:c2:77:c6:27:e8:e4:f2:a3:94: 4a:ce:5f:38:d7:69:c1:c6:02:09:21:b8:b7:47:89: 72:ab:59:56:19:96:44:7e:70:7c:e2:39:de:ea:21: f6:68:94:26:ef:f3:f6:53:60:3b:9b:96:4b:76:34: c0:de:0c:a8:d0:31:1b:fe:e1:b3:c5:bd:b4:52:17: 62:92:c6:c8:c3:88:0d:ed:04:a1:28:8b:bf:06:c2: 28:65:26:0a:a5:58:a3:9c:75:e3:4f:18:e4:69:81: e5:48:7b:c7:aa:6c:51:ba:96:06:71:eb:96:47:25: 59:ac:07:da:e8:8e:e5:7a:a2:89:ee:70:b9:8a:87: 86:1d:38:eb:63:f9:32:06:3c:23:38:b8:49:cd:6a: ac:f0:0d:67:e8:47:f3:ff:1d:9e:6b:c9:64:a2:20: 8e:0c:e5:38:da:57:36:69:cc:d8:c3:87:e5:c0:2f: 88:4b:fc:af:65:50:c7:35:74:24:67:d0:db:ca:71: 7a:68:ce:22:0b:9b:b6:be:3f:28:47:33:e9:22:c3: 80:54:d5:41:3c:f3:70:5b:cb:6d:c0:ea:59:53:2b: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:9C:88:83:AA:FB:2D:2E:92:A3:66:43:2F:BA:78:14:92:81:97 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e1:02:f1:35:9a:2b:79:25:4f:1d:46:62:a1:e9:da:bb:48: 50:9e:31:97:28:dd:09:b7:6a:31:98:71:d8:09:3c:7b:d0:a6: a0:f0:a3:87:61:53:a5:3b:ba:7f:40:34:c7:a2:be:41:40:3e: ed:56:d4:32:66:44:3e:63:99:0e:85:f2:c3:be:5c:0f:3e:14: 01:2b:05:4c:db:a8:d9:45:45:75:ce:02:b6:0e:d1:bd:16:cf: a5:4e:85:ee:2d:22:f1:b6:c8:08:ef:07:57:93:39:5a:75:57: d6:d2:92:25:91:e4:28:47:25:1c:ca:f3:9f:c2:0f:38:3c:e3: aa:78:6a:78:dd:10:a5:c0:8b:cf:cb:1e:c9:69:64:4b:98:24: 30:48:f1:cb:8e:fe:5f:f9:fb:5b:d1:3a:e2:e0:72:41:b5:9c: ff:6c:8d:41:3b:a9:93:3a:c0:f0:f8:0a:68:e8:72:6e:b0:f1: d4:f2:52:60:b0:f2:e0:7e:5e:e1:d6:9e:60:d8:36:1d:6c:4a: 9d:70:f7:25:fe:af:9b:12:83:94:b2:57:b9:a9:91:ae:3e:c8: 20:45:6f:bb:70:52:f0:a5:c4:7d:4b:e9:ed:91:83:f0:80:7a: 3f:2b:dd:5c:dc:57:6c:a4:62:27:44:61:c0:a1:b6:eb:67:c2: d1:b7:8b:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNXYeg28fwgNT7EMvy6nNaONv3n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA3MjEwNDA3NTJaFw0yNjA3MjIwNzAyNTJaMDMxMTAvBgNV BAMTKDNEQkI5Qzg4ODNBQUZCMkQyRTkyQTM2NjQzMkZCQTc4MTQ5MjgxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkchdLaG7wI/wSl1WicLiU9SC mEBebdnrqGmfPyzojm0FVsJ3xifo5PKjlErOXzjXacHGAgkhuLdHiXKrWVYZlkR+ cHziOd7qIfZolCbv8/ZTYDublkt2NMDeDKjQMRv+4bPFvbRSF2KSxsjDiA3tBKEo i78GwihlJgqlWKOcdeNPGORpgeVIe8eqbFG6lgZx65ZHJVmsB9rojuV6oonucLmK h4YdOOtj+TIGPCM4uEnNaqzwDWfoR/P/HZ5ryWSiII4M5TjaVzZpzNjDh+XAL4hL /K9lUMc1dCRn0NvKcXpoziILm7a+PyhHM+kiw4BU1UE883Bby23A6llTK2PlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPbuciIOq+y0ukqNmQy+6eBSSgZcwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeEC8TWaK3kl Tx1GYqHp2rtIUJ4xlyjdCbdqMZhx2Ak8e9CmoPCjh2FTpTu6f0A0x6K+QUA+7VbU MmZEPmOZDoXyw75cDz4UASsFTNuo2UVFdc4Ctg7RvRbPpU6F7i0i8bbICO8HV5M5 WnVX1tKSJZHkKEclHMrzn8IPODzjqnhqeN0QpcCLz8seyWlkS5gkMEjxy47+X/n7 W9E64uByQbWc/2yNQTupkzrA8PgKaOhybrDx1PJSYLDy4H5e4daeYNg2HWxKnXD3 Jf6vmxKDlLJXuamRrj7IIEVvu3BS8KXEfUvp7ZGD8IB6PyvdXNxXbKRiJ0RhwKG2 62fC0beL8w== -----END CERTIFICATE-----Generated at Tue Jul 21 22:02:18 2026 by rpki-client