$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft (raw, json) Hash identifier: usexbtF+bSt3hm8cvZUfxjdJJaISxJyKUPxEBNZy4is= Subject key identifier: 81:DD:84:52:C4:65:CD:A1:53:6F:7E:57:9A:D2:06:72:A3:9F:F4:58 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 26A1C92E66DE1E2A96BB26A4157E3BE5337E8722 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft Manifest number: 97 Signing time: Tue 21 Jul 2026 12:33:47 +0000 Manifest this update: Tue 21 Jul 2026 12:28:47 +0000 Manifest next update: Wed 22 Jul 2026 14:16:47 +0000 Files and hashes: 1: AS151300.roa (hash: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE=) 2: AS23650.roa (hash: ZrXwoi3Yc5wEkiCFcSV0YRLu2did5FGgulcpf2h2DTs=) 3: AS151302.roa (hash: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo=) 4: AS4837.roa (hash: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY=) 5: AS131483.roa (hash: wricmOxr6vSrRQNd1vocTKW3nC/2pcVrm0VvZPVplfs=) 6: AS56046.roa (hash: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog=) 7: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl (hash: o4nshCYD/RwvOGI3G9fIsz0l5JhN+Rj0G0IJQtcNUT8=) 8: AS153911.roa (hash: k4d0lln+WCz9yCQ8SJx1RZQW5mhDozOELFG2+G2vBiY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a1:c9:2e:66:de:1e:2a:96:bb:26:a4:15:7e:3b:e5:33:7e:87:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 21 12:28:47 2026 GMT Not After : Jul 22 14:16:47 2026 GMT Subject: CN=81DD8452C465CDA1536F7E579AD20672A39FF458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:b7:19:e1:c2:86:07:72:51:07:02:bd:ad: 56:7e:13:1d:85:15:d1:89:1d:ca:a5:d2:cc:a2:ff: 60:97:f9:f1:a4:19:2b:6c:50:51:cc:5e:49:d5:c0: 86:72:81:70:18:50:fe:78:8c:0d:ce:2f:73:58:ba: eb:e7:53:f3:3c:3e:91:bf:73:a4:53:07:3d:4f:79: c2:78:c3:0c:a1:8b:84:a8:22:9f:e7:84:65:85:d0: 18:b7:c1:01:96:bb:57:ba:b1:fc:d6:be:dd:f2:29: ac:23:55:1f:6b:c3:d3:8b:b1:43:f5:2e:fe:d0:27: 93:0b:35:ff:7e:5c:83:71:a2:72:9b:da:e2:f8:e5: 02:85:70:03:14:8d:83:cb:03:ec:d5:ca:60:10:82: 4b:aa:e5:79:7a:d6:ff:0a:9c:d9:30:22:2e:0f:85: 3a:7f:bc:ef:8f:ae:81:25:19:13:25:dd:d5:cf:34: 7f:ab:56:2f:24:d9:68:2a:27:93:94:af:9b:85:87: 34:dd:63:3a:b3:c0:69:5a:3a:69:e9:85:03:09:8b: 6d:a2:33:69:38:11:b2:61:25:aa:af:9b:f0:71:51: a9:f0:53:23:a0:e7:a6:6c:f4:1a:60:78:e0:79:ee: b8:4d:3b:c3:ec:46:7f:14:98:84:4c:c4:5e:26:e3: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DD:84:52:C4:65:CD:A1:53:6F:7E:57:9A:D2:06:72:A3:9F:F4:58 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:ca:73:6a:8f:49:84:7f:af:af:f6:85:15:39:14:53:15: 73:e0:3f:a2:6a:93:40:79:ee:54:06:78:97:4a:7e:a8:ca:0b: 9c:71:62:55:d0:63:7f:00:8d:6c:93:85:1a:ae:ae:88:7b:7a: f4:cf:c3:b5:30:24:fe:2b:9b:4a:c9:d1:3a:c7:7a:93:d2:7b: 44:69:98:c8:43:5b:b1:53:60:4e:3d:bd:36:b0:87:7d:9c:9c: 1d:6c:fa:40:aa:8d:75:df:02:45:70:dd:2f:59:37:69:ad:c7: 4b:77:71:10:3b:2c:5e:60:3e:8d:63:f0:cb:bb:e3:94:a7:6d: 0f:df:cc:f2:0f:8a:f0:3a:b5:5d:8c:66:bc:86:21:52:51:da: 3a:dd:7d:31:e2:44:2c:bc:92:e7:53:e5:b9:ed:1b:4b:59:52: 6c:4b:da:b4:04:c9:ae:6e:6a:d3:b2:c9:8b:fa:7c:4a:9a:9c: 9e:c1:12:dd:c8:81:3e:48:fe:2f:36:98:f2:42:a7:d7:2a:18: b4:bc:85:62:c8:b5:a4:6d:f2:84:eb:80:49:49:5a:86:02:e4: f5:1b:38:45:dd:db:64:eb:c6:cb:cf:c7:40:95:9b:c4:1c:e4: 65:79:b6:a9:c4:47:25:ed:51:5c:54:fa:0b:d1:57:ac:df:f0: a5:0e:78:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJqHJLmbeHiqWuyakFX475TN+hyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MjExMjI4NDdaFw0yNjA3MjIxNDE2NDdaMDMxMTAvBgNV BAMTKDgxREQ4NDUyQzQ2NUNEQTE1MzZGN0U1NzlBRDIwNjcyQTM5RkY0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT17cZ4cKGB3JRBwK9rVZ+Ex2F FdGJHcql0syi/2CX+fGkGStsUFHMXknVwIZygXAYUP54jA3OL3NYuuvnU/M8PpG/ c6RTBz1PecJ4wwyhi4SoIp/nhGWF0Bi3wQGWu1e6sfzWvt3yKawjVR9rw9OLsUP1 Lv7QJ5MLNf9+XINxonKb2uL45QKFcAMUjYPLA+zVymAQgkuq5Xl61v8KnNkwIi4P hTp/vO+ProElGRMl3dXPNH+rVi8k2WgqJ5OUr5uFhzTdYzqzwGlaOmnphQMJi22i M2k4EbJhJaqvm/BxUanwUyOg56Zs9BpgeOB57rhNO8PsRn8UmIRMxF4m4xsjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgd2EUsRlzaFTb35XmtIGcqOf9FgwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC81MzJFQzk1RDlFRTI3 NkQ5NjU2MjBCN0U0MENBNTBCNEFCOEZDQjBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKLKc2qPSYR/ r6/2hRU5FFMVc+A/omqTQHnuVAZ4l0p+qMoLnHFiVdBjfwCNbJOFGq6uiHt69M/D tTAk/iubSsnROsd6k9J7RGmYyENbsVNgTj29NrCHfZycHWz6QKqNdd8CRXDdL1k3 aa3HS3dxEDssXmA+jWPwy7vjlKdtD9/M8g+K8Dq1XYxmvIYhUlHaOt19MeJELLyS 51Plue0bS1lSbEvatATJrm5q07LJi/p8SpqcnsES3ciBPkj+LzaY8kKn1yoYtLyF Ysi1pG3yhOuASUlahgLk9Rs4Rd3bZOvGy8/HQJWbxBzkZXm2qcRHJe1RXFT6C9FX rN/wpQ54MA== -----END CERTIFICATE-----Generated at Wed Jul 22 02:39:35 2026 by rpki-client