$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: fxc+9wBwITqY+24tMRdcgZnjzKzq/5ZjV8fA0ZvWKmg= Subject key identifier: 20:25:BD:70:2C:49:70:6A:76:A4:F6:8C:27:7C:B8:2E:74:A8:BA:F2 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 6F9B922515FC843B5314C155087904ABA6742FE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 86 Signing time: Tue 21 Jul 2026 06:08:08 +0000 Manifest this update: Tue 21 Jul 2026 06:03:08 +0000 Manifest next update: Wed 22 Jul 2026 09:28:08 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: Bnm/PVr2kvLmIbxYbuOYwUE+BWsQV+Zh+l6yoKDpWqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 09:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9b:92:25:15:fc:84:3b:53:14:c1:55:08:79:04:ab:a6:74:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Jul 21 06:03:08 2026 GMT Not After : Jul 22 09:28:08 2026 GMT Subject: CN=2025BD702C49706A76A4F68C277CB82E74A8BAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:41:d7:84:dd:80:34:65:8d:3e:b8:06:a7: 97:84:4f:4b:4a:4a:89:ee:9b:7c:12:17:54:0d:59: 8a:17:ff:1f:9f:9f:df:d7:85:a2:72:14:2b:b5:ea: f0:6e:80:7f:f6:95:97:e7:d0:a7:44:93:ea:3d:72: a2:70:0f:0f:40:93:83:0f:64:5e:95:c8:91:f7:ad: 33:b3:65:4e:cb:89:ce:84:6c:94:b8:9d:f7:d2:19: 73:44:b3:13:f6:5e:69:d4:b5:78:7a:b8:8a:64:24: 14:d3:da:28:cf:cb:60:d3:72:34:14:01:07:08:fb: 09:f5:1c:9f:a9:2f:0e:51:cf:e9:50:7e:19:89:d8: 9d:9f:78:4b:c5:08:06:bd:36:4a:b3:10:f5:83:ef: 31:f6:b6:16:fc:0e:ec:36:3d:73:db:f4:db:e8:72: 20:dc:96:2a:f1:26:81:55:85:ac:6b:5f:fb:e4:b5: 4d:36:dd:f5:e3:29:3c:19:6d:4a:cb:56:fb:61:68: 39:d6:8f:ce:39:fa:66:60:c2:db:49:e9:02:e2:43: cf:7d:db:30:64:89:a5:4c:cf:3e:7a:13:52:ca:aa: 79:90:26:d9:a4:66:cd:f4:d8:b4:ac:b7:ff:b4:68: 8f:c5:55:6d:83:13:a6:14:9c:f3:1d:45:a9:1e:19: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:25:BD:70:2C:49:70:6A:76:A4:F6:8C:27:7C:B8:2E:74:A8:BA:F2 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:08:b6:55:89:66:0c:27:8e:cc:fd:c9:40:49:15:2d:43: 6c:eb:b7:1b:d0:bc:d7:0b:50:0b:ff:d5:fa:93:8c:5e:9f:8b: eb:bd:f0:fb:37:15:0a:ef:7d:ba:e4:ba:4f:5e:43:92:38:38: 59:be:8e:8e:f0:64:d2:d5:cc:c0:b3:dc:e7:ca:b2:65:87:68: 70:57:9c:71:aa:35:5d:45:f1:6e:40:74:6b:2f:51:38:42:b4: 7e:11:e0:00:6b:59:79:89:8e:1f:e6:70:83:a0:fc:33:ff:50: 4a:97:6a:ac:29:a1:18:09:67:cf:f4:b6:1b:18:a7:a1:aa:50: a2:a1:52:d5:2b:b1:68:f5:c5:a0:4d:8a:ea:9a:f0:8b:43:13: 34:5a:45:94:f6:30:05:5b:d9:73:63:7a:ac:b2:cc:0f:ab:f8: 68:d8:b6:79:2a:0c:01:1f:80:67:52:e6:82:d5:48:83:72:ab: cb:fb:04:21:d6:bc:49:5c:e8:61:18:42:f0:77:44:0e:68:c8: 53:eb:2b:b9:32:f7:22:6a:80:f2:56:a2:6a:84:33:65:57:20: ce:62:35:5f:1a:3b:d2:03:92:0a:05:ae:37:f8:66:8f:4b:e2: 1f:66:6c:59:46:7f:0a:c0:9c:83:b3:b9:95:4f:87:7e:1b:84: 77:8f:4f:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb5uSJRX8hDtTFMFVCHkEq6Z0L+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA3MjEwNjAzMDhaFw0yNjA3MjIwOTI4MDhaMDMxMTAvBgNV BAMTKDIwMjVCRDcwMkM0OTcwNkE3NkE0RjY4QzI3N0NCODJFNzRBOEJBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLUHXhN2ANGWNPrgGp5eET0tK Sonum3wSF1QNWYoX/x+fn9/XhaJyFCu16vBugH/2lZfn0KdEk+o9cqJwDw9Ak4MP ZF6VyJH3rTOzZU7Lic6EbJS4nffSGXNEsxP2XmnUtXh6uIpkJBTT2ijPy2DTcjQU AQcI+wn1HJ+pLw5Rz+lQfhmJ2J2feEvFCAa9NkqzEPWD7zH2thb8Duw2PXPb9Nvo ciDclirxJoFVhaxrX/vktU023fXjKTwZbUrLVvthaDnWj845+mZgwttJ6QLiQ899 2zBkiaVMzz56E1LKqnmQJtmkZs302LSst/+0aI/FVW2DE6YUnPMdRakeGRvbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUICW9cCxJcGp2pPaMJ3y4LnSouvIwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8AItlWJZgwn jsz9yUBJFS1DbOu3G9C81wtQC//V+pOMXp+L673w+zcVCu99uuS6T15Dkjg4Wb6O jvBk0tXMwLPc58qyZYdocFeccao1XUXxbkB0ay9ROEK0fhHgAGtZeYmOH+Zwg6D8 M/9QSpdqrCmhGAlnz/S2GxinoapQoqFS1SuxaPXFoE2K6prwi0MTNFpFlPYwBVvZ c2N6rLLMD6v4aNi2eSoMAR+AZ1LmgtVIg3Kry/sEIda8SVzoYRhC8HdEDmjIU+sr uTL3ImqA8laiaoQzZVcgzmI1Xxo70gOSCgWuN/hmj0viH2ZsWUZ/CsCcg7O5lU+H fhuEd49P5Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:47:00 2026 by rpki-client