$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: ZmHj+iZx/6v/6/SrPVdkp+CnItEnEbP+d4gcxtiDHiA= Subject key identifier: C7:53:EA:97:1B:1E:12:AC:BA:4A:EF:24:02:96:57:71:75:30:FD:16 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 28A3E4EE9482B8E29978209085E20F33AFBCC880 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 0133 Signing time: Tue 21 Jul 2026 11:03:37 +0000 Manifest this update: Tue 21 Jul 2026 10:58:37 +0000 Manifest next update: Wed 22 Jul 2026 13:57:37 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 2: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 3: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 4: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 5: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 6: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: DsqHeWq30iE6G70BMAPlLULG3iqBqRhDR/d/EXB1URo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 13:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a3:e4:ee:94:82:b8:e2:99:78:20:90:85:e2:0f:33:af:bc:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Jul 21 10:58:37 2026 GMT Not After : Jul 22 13:57:37 2026 GMT Subject: CN=C753EA971B1E12ACBA4AEF24029657717530FD16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:5c:10:2a:c4:86:70:e5:24:fb:9f:47:af: 53:c4:99:78:1f:e4:eb:83:a3:22:b5:94:3e:9c:a0: 46:55:aa:de:ce:80:d6:e3:5f:0e:d9:a3:e8:8f:0e: 60:a8:ad:3e:2f:f6:69:9f:af:89:52:77:e5:f9:6d: c0:3f:0e:a8:bd:d7:e7:da:9f:ab:da:75:a2:5c:41: d8:a7:21:2a:5a:45:1a:90:e7:d7:a4:42:57:0b:71: e3:29:35:05:a7:03:d3:ae:b6:b0:08:ed:83:7f:b6: 1c:fd:cc:36:1e:a2:4b:23:15:12:d4:bc:7e:cd:75: ed:89:69:2b:73:26:c6:37:a0:b5:d1:50:62:3e:50: 08:5c:1f:22:22:ce:55:98:9d:1b:be:a5:94:7d:41: 9f:61:95:99:99:c9:92:cc:2b:9a:1d:cf:86:3c:eb: a2:44:e0:7c:37:fa:70:55:5c:2e:f2:23:a4:3c:61: f2:61:5d:1a:9a:63:43:f6:5d:fb:53:ce:67:3f:d3: a4:82:eb:8b:37:be:5b:a8:fe:c4:fd:6b:38:1c:f3: c5:08:fb:1f:63:73:04:c8:62:a1:57:4c:95:44:be: e8:2e:ce:4f:bf:c3:6d:33:e8:7e:28:88:47:c5:4b: 32:26:73:88:71:7e:c7:fa:a6:a4:ca:c2:89:ce:45: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:53:EA:97:1B:1E:12:AC:BA:4A:EF:24:02:96:57:71:75:30:FD:16 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5f:70:70:7d:32:68:54:6b:2b:d6:81:68:b6:16:d9:81:da: e2:f6:bc:81:a5:04:4d:04:5c:c3:56:f2:dd:7a:28:98:3e:e5: c1:1e:84:69:b7:64:2b:5a:b2:31:84:d8:96:cb:c6:85:76:71: bb:fc:2b:7e:fe:f2:45:4f:ec:fe:f0:f1:89:28:b5:85:9a:a4: 65:95:a3:ad:c0:92:01:60:f8:84:34:ce:f6:d7:f1:18:7b:73: 2f:24:17:c6:a6:ca:d9:ae:ce:bc:22:fe:d0:89:1c:53:30:9c: eb:c1:d4:92:13:df:df:c2:59:6e:54:89:a4:72:e9:a8:10:6c: 8e:09:e7:25:55:f1:f3:db:0d:ab:f5:16:9c:39:92:d8:dd:12: 85:40:c0:08:9e:dc:55:ab:54:6d:50:ef:62:71:a7:74:7d:07: 48:4e:72:67:11:7a:c7:eb:02:e1:2f:12:74:60:48:2d:26:3a: 2d:f3:31:71:cb:70:6a:13:5c:db:42:8c:98:c8:ea:fa:4b:f3: c2:10:b1:79:ad:cd:34:75:5e:e0:df:fb:04:fb:85:05:38:8a: b6:be:a0:94:5a:93:45:8c:17:7d:b1:c0:d1:aa:42:b1:2c:8b: 87:8b:5d:8b:19:09:3e:34:61:5d:c6:2a:f8:99:e1:25:5a:ad: d9:f9:7e:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKPk7pSCuOKZeCCQheIPM6+8yIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA3MjExMDU4MzdaFw0yNjA3MjIxMzU3MzdaMDMxMTAvBgNV BAMTKEM3NTNFQTk3MUIxRTEyQUNCQTRBRUYyNDAyOTY1NzcxNzUzMEZEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxFwQKsSGcOUk+59Hr1PEmXgf 5OuDoyK1lD6coEZVqt7OgNbjXw7Zo+iPDmCorT4v9mmfr4lSd+X5bcA/Dqi91+fa n6vadaJcQdinISpaRRqQ59ekQlcLceMpNQWnA9OutrAI7YN/thz9zDYeoksjFRLU vH7Nde2JaStzJsY3oLXRUGI+UAhcHyIizlWYnRu+pZR9QZ9hlZmZyZLMK5odz4Y8 66JE4Hw3+nBVXC7yI6Q8YfJhXRqaY0P2XftTzmc/06SC64s3vluo/sT9azgc88UI +x9jcwTIYqFXTJVEvuguzk+/w20z6H4oiEfFSzImc4hxfsf6pqTKwonORawlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx1PqlxseEqy6Su8kApZXcXUw/RYwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel9wcH0yaFRr K9aBaLYW2YHa4va8gaUETQRcw1by3XoomD7lwR6EabdkK1qyMYTYlsvGhXZxu/wr fv7yRU/s/vDxiSi1hZqkZZWjrcCSAWD4hDTO9tfxGHtzLyQXxqbK2a7OvCL+0Ikc UzCc68HUkhPf38JZblSJpHLpqBBsjgnnJVXx89sNq/UWnDmS2N0ShUDACJ7cVatU bVDvYnGndH0HSE5yZxF6x+sC4S8SdGBILSY6LfMxcctwahNc20KMmMjq+kvzwhCx ea3NNHVe4N/7BPuFBTiKtr6glFqTRYwXfbHA0apCsSyLh4tdixkJPjRhXcYq+Jnh JVqt2fl+zg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:47:01 2026 by rpki-client