$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: IUGhiWblJTgOluJluqZ1KPsNljz6QhtdIh6SCvrQPnQ= Subject key identifier: D1:CF:89:08:A9:0F:93:81:A9:D4:59:5D:25:45:DC:CF:97:84:A5:ED Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 0D13C1B36400661C93F2A0833F0710B8B43A3977 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 83 Signing time: Tue 21 Jul 2026 23:59:59 +0000 Manifest this update: Tue 21 Jul 2026 23:54:59 +0000 Manifest next update: Thu 23 Jul 2026 03:39:59 +0000 Files and hashes: 1: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 2: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: uLktKIg556kEZCO72qEpjLpdJXfTFJTq+QrepGAKpMk=) 3: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 4: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 5: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:13:c1:b3:64:00:66:1c:93:f2:a0:83:3f:07:10:b8:b4:3a:39:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Jul 21 23:54:59 2026 GMT Not After : Jul 23 03:39:59 2026 GMT Subject: CN=D1CF8908A90F9381A9D4595D2545DCCF9784A5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:16:19:8b:b1:93:67:87:86:db:be:40:ef:86: 24:7d:38:de:38:e3:77:14:35:63:20:27:09:a7:2a: d2:d0:4e:a3:6e:bb:51:67:94:10:70:de:a8:f6:c6: 16:f1:55:9c:f7:8a:da:55:f6:01:9d:98:87:96:7a: e1:c3:dc:95:ac:49:d8:80:19:14:9b:f1:3f:13:5b: 39:7f:94:e3:2a:12:d1:36:6f:00:e4:75:8c:c1:99: f7:0b:43:62:95:08:8d:35:08:a3:9a:71:51:32:72: bc:8d:5a:d2:b4:92:57:1a:03:4b:b8:11:75:0a:32: 09:4c:fb:60:30:78:d2:b7:a7:be:dd:a9:26:a2:32: f3:90:78:6d:6d:08:18:dd:ea:62:12:d7:8a:b3:b3: 83:29:76:ee:98:68:c1:6c:c5:a2:f5:c4:f4:a7:42: 49:14:a2:ae:6a:d4:ff:82:de:19:83:72:e3:a9:9e: f6:ef:e8:27:f2:bb:11:e4:04:ec:ba:cd:28:27:6e: 31:fe:2d:5a:56:d1:65:42:22:bc:4b:50:72:ab:5c: 4e:87:26:a0:f9:58:59:e9:bb:ee:40:20:f9:42:75: 93:4a:a3:cf:a9:c4:e0:49:21:24:44:0d:74:b5:ff: a4:a7:ab:77:47:f2:b0:71:70:ff:9c:77:ce:3a:d7: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:89:08:A9:0F:93:81:A9:D4:59:5D:25:45:DC:CF:97:84:A5:ED X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:3f:82:ff:9e:1b:c8:96:b0:65:d2:34:d2:b9:1b:28:58:37: d9:54:01:26:d6:1e:01:66:a8:6e:65:89:ec:11:b0:03:5c:97: b2:f8:5a:29:70:7a:2f:49:8f:73:17:95:5d:03:a2:5d:2e:bc: dc:a5:1e:a5:94:2b:ee:22:29:5a:c5:58:fa:28:39:64:f7:93: c3:f6:2e:91:57:00:ef:24:07:a7:f2:bb:c8:ae:08:5f:27:a0: 36:da:47:c9:04:92:b2:fa:b8:e0:ec:c4:49:5b:8d:79:53:ec: 16:fa:7f:8b:2d:49:87:f2:b6:60:d8:71:c4:8e:40:2e:90:94: 4a:ed:a6:4a:46:51:53:84:59:38:f7:53:19:90:75:9b:0e:9a: 38:18:08:1b:a9:5e:de:2a:5d:97:da:cc:a3:63:b8:9c:48:f2: d4:18:89:5e:85:b8:7d:3e:f2:e1:85:83:ff:25:40:b5:e1:ed: 44:bf:e5:46:1f:cb:ac:5f:f4:1f:0d:42:2d:ce:a1:b4:c2:62: 16:8f:d6:08:5a:ca:73:a2:ff:f1:bf:e4:53:61:b2:1d:6e:31: 16:11:64:b5:3e:4b:01:f0:af:73:2a:28:0b:76:80:c0:a8:29: 7b:91:8b:b0:1f:df:91:48:29:9f:dc:59:67:76:ba:9f:69:c4: 93:84:34:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDRPBs2QAZhyT8qCDPwcQuLQ6OXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA3MjEyMzU0NTlaFw0yNjA3MjMwMzM5NTlaMDMxMTAvBgNV BAMTKEQxQ0Y4OTA4QTkwRjkzODFBOUQ0NTk1RDI1NDVEQ0NGOTc4NEE1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3FhmLsZNnh4bbvkDvhiR9ON44 43cUNWMgJwmnKtLQTqNuu1FnlBBw3qj2xhbxVZz3itpV9gGdmIeWeuHD3JWsSdiA GRSb8T8TWzl/lOMqEtE2bwDkdYzBmfcLQ2KVCI01CKOacVEycryNWtK0klcaA0u4 EXUKMglM+2AweNK3p77dqSaiMvOQeG1tCBjd6mIS14qzs4Mpdu6YaMFsxaL1xPSn QkkUoq5q1P+C3hmDcuOpnvbv6CfyuxHkBOy6zSgnbjH+LVpW0WVCIrxLUHKrXE6H JqD5WFnpu+5AIPlCdZNKo8+pxOBJISREDXS1/6Snq3dH8rBxcP+cd8461xcdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0c+JCKkPk4Gp1FldJUXcz5eEpe0wHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5j+C/54byJaw ZdI00rkbKFg32VQBJtYeAWaobmWJ7BGwA1yXsvhaKXB6L0mPcxeVXQOiXS683KUe pZQr7iIpWsVY+ig5ZPeTw/YukVcA7yQHp/K7yK4IXyegNtpHyQSSsvq44OzESVuN eVPsFvp/iy1Jh/K2YNhxxI5ALpCUSu2mSkZRU4RZOPdTGZB1mw6aOBgIG6le3ipd l9rMo2O4nEjy1BiJXoW4fT7y4YWD/yVAteHtRL/lRh/LrF/0Hw1CLc6htMJiFo/W CFrKc6L/8b/kU2GyHW4xFhFktT5LAfCvcyooC3aAwKgpe5GLsB/fkUgpn9xZZ3a6 n2nEk4Q00w== -----END CERTIFICATE-----Generated at Wed Jul 22 02:43:44 2026 by rpki-client