$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: Ija5gulFwnslx9GACOV9o39mWTBftx7iFodNqCxWTMc= Subject key identifier: D2:61:71:A2:4C:44:7D:C2:CA:89:96:A1:F0:CE:48:D9:A5:D8:B0:8D Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 694837C421C5EBF4A0A5E0C01DFED474C095BF1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 01AB Signing time: Tue 21 Jul 2026 16:14:02 +0000 Manifest this update: Tue 21 Jul 2026 16:09:02 +0000 Manifest next update: Wed 22 Jul 2026 19:17:02 +0000 Files and hashes: 1: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: 4T3sU1p10RL0SyljPG28/ziHXNeyIavvNeDXmT/KS1A=) 2: AS132203.roa (hash: MGh7geS9q7/6iNL2Np6bgBq+89E2Xke7QjRB3yPNdgk=) 3: AS45090.roa (hash: Av2ZX7t33Xg0taWsYCm0lcTG3scBZ1h+SzWX8W5uoPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:48:37:c4:21:c5:eb:f4:a0:a5:e0:c0:1d:fe:d4:74:c0:95:bf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Jul 21 16:09:02 2026 GMT Not After : Jul 22 19:17:02 2026 GMT Subject: CN=D26171A24C447DC2CA8996A1F0CE48D9A5D8B08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:97:1d:c4:0c:58:71:24:9e:cd:9a:7a:96: eb:ef:a2:1c:c4:bb:f5:f3:95:e6:da:23:dc:84:fe: 59:50:36:98:a7:fe:93:4d:41:51:7f:a0:fe:93:57: 1d:aa:03:c8:49:46:81:8e:b6:1a:57:a9:35:57:d9: 70:28:23:98:46:e9:dc:48:e7:5d:c6:04:2e:a6:ed: 10:96:14:90:86:64:fc:ef:73:b3:e4:df:51:22:9d: 4a:ac:cd:8e:01:1f:cf:20:72:39:f1:d3:8e:de:80: 52:9f:23:c9:0c:9f:ed:a8:03:21:d5:ba:9c:eb:63: a0:27:ec:93:57:db:e3:7a:12:9a:42:4d:aa:f6:b7: f3:2b:04:8c:a5:bd:77:74:87:22:e0:ea:67:de:35: 27:f0:2d:fb:c6:5c:b0:b6:2b:39:ec:e0:ac:2f:8a: 7a:31:07:fe:b1:01:0e:95:4f:69:93:4b:cc:0c:5d: b8:db:bd:ad:0b:99:a8:01:f6:b8:6e:11:35:c9:b7: 7f:ae:42:e5:33:23:4b:03:c4:cb:c0:f6:8e:1a:05: 63:0e:c0:ef:26:3f:33:2b:85:f8:0c:d4:9a:4c:29: 8d:37:df:15:0e:aa:69:7b:35:6e:a8:a1:77:25:99: ae:e6:ac:12:b6:58:c3:bb:34:e4:d5:02:0d:b6:f7: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:61:71:A2:4C:44:7D:C2:CA:89:96:A1:F0:CE:48:D9:A5:D8:B0:8D X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1b:8d:cf:de:38:9f:1c:4b:1d:c7:d5:1a:0d:1f:a0:9f:9e: 37:cb:15:fb:b6:f4:9e:49:d4:61:8c:e7:2f:d3:be:c6:18:f4: 13:3b:f7:f5:dc:85:db:ef:3c:9f:59:72:fe:8a:d0:66:49:a5: 2a:59:d2:85:f6:40:27:0f:97:f1:95:6d:c1:ee:22:97:12:9f: b1:80:9e:a4:05:06:7d:6d:9f:e9:c6:34:32:e4:86:15:d0:2a: 18:c0:9d:47:39:2d:1b:ad:83:39:a1:bd:f0:a6:91:cb:11:e9: d3:78:b5:92:a9:77:12:ec:0b:a1:5a:62:7a:cc:ef:c1:ce:30: 31:f5:37:10:5e:32:4c:19:09:81:d9:03:5e:a4:b3:95:0d:4b: 79:8b:61:a5:d4:d6:df:eb:7d:60:73:21:c7:c1:4b:94:3c:04: d9:1a:e3:0e:47:bf:21:96:62:2e:aa:0b:ac:25:4e:a1:65:f3: c9:ed:39:7c:d8:ae:2e:89:d5:35:e4:5d:6b:f1:26:f0:b9:ce: 7a:c2:27:82:6d:63:08:44:06:ef:08:cb:e0:34:eb:98:2c:76: 5a:b3:7b:f1:23:89:3e:80:a5:7c:73:71:67:7e:f8:05:c2:aa: 64:94:78:b2:a9:a3:f2:62:88:1f:af:12:f5:ff:83:e3:c9:dc: a4:e7:e7:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaUg3xCHF6/SgpeDAHf7UdMCVvxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjA3MjExNjA5MDJaFw0yNjA3MjIxOTE3MDJaMDMxMTAvBgNV BAMTKEQyNjE3MUEyNEM0NDdEQzJDQTg5OTZBMUYwQ0U0OEQ5QTVEOEIwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBpcdxAxYcSSezZp6luvvohzE u/XzlebaI9yE/llQNpin/pNNQVF/oP6TVx2qA8hJRoGOthpXqTVX2XAoI5hG6dxI 513GBC6m7RCWFJCGZPzvc7Pk31EinUqszY4BH88gcjnx047egFKfI8kMn+2oAyHV upzrY6An7JNX2+N6EppCTar2t/MrBIylvXd0hyLg6mfeNSfwLfvGXLC2Kzns4Kwv inoxB/6xAQ6VT2mTS8wMXbjbva0LmagB9rhuETXJt3+uQuUzI0sDxMvA9o4aBWMO wO8mPzMrhfgM1JpMKY033xUOqml7NW6ooXclma7mrBK2WMO7NOTVAg2299exAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0mFxokxEfcLKiZah8M5I2aXYsI0wHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhuNz944nxxL HcfVGg0foJ+eN8sV+7b0nknUYYznL9O+xhj0Ezv39dyF2+88n1ly/orQZkmlKlnS hfZAJw+X8ZVtwe4ilxKfsYCepAUGfW2f6cY0MuSGFdAqGMCdRzktG62DOaG98KaR yxHp03i1kql3EuwLoVpieszvwc4wMfU3EF4yTBkJgdkDXqSzlQ1LeYthpdTW3+t9 YHMhx8FLlDwE2RrjDke/IZZiLqoLrCVOoWXzye05fNiuLonVNeRda/Em8LnOesIn gm1jCEQG7wjL4DTrmCx2WrN78SOJPoClfHNxZ374BcKqZJR4sqmj8mKIH68S9f+D 48ncpOfn6g== -----END CERTIFICATE-----Generated at Wed Jul 22 01:16:07 2026 by rpki-client