$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: 2xueRuW+InWCVoN6s9HxMjKCBUMREwf3RvV/sMVpNO4= Subject key identifier: B2:EE:59:95:23:19:DA:E4:34:07:66:F5:F0:36:F7:9C:2A:03:3E:5E Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 1A88241B65CE7700539BBDEEF75A09E8F5DB824C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: EB Signing time: Tue 14 Jul 2026 01:05:03 +0000 Manifest this update: Tue 14 Jul 2026 01:00:03 +0000 Manifest next update: Wed 15 Jul 2026 04:06:03 +0000 Files and hashes: 1: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) 2: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: iRP8mZIAHzqmrgqehLvCj8HgN6v/HZb1l1ca0AAJkhY=) 3: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 4: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:24:1b:65:ce:77:00:53:9b:bd:ee:f7:5a:09:e8:f5:db:82:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Jul 14 01:00:03 2026 GMT Not After : Jul 15 04:06:03 2026 GMT Subject: CN=B2EE59952319DAE4340766F5F036F79C2A033E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:70:a0:c2:d3:86:6f:d3:21:6e:cb:a9:73: 27:e0:05:23:6c:76:b9:dc:6c:b5:06:f7:e7:3c:6a: d9:e2:e5:22:18:b2:9c:9a:70:9a:49:0d:98:23:8c: f1:48:25:27:6b:20:48:30:04:d7:f3:de:02:5b:5f: 28:57:23:5f:41:9d:05:48:47:58:88:16:73:5d:0c: 9f:b3:1f:11:d4:78:61:c0:23:80:8a:9b:6a:e4:0e: ac:1f:86:f4:f6:91:36:78:28:fb:0c:9a:16:ee:72: 7e:98:19:c0:46:63:ca:3a:55:2a:66:34:c0:90:3c: 07:f2:a8:79:83:2b:6d:5d:d4:fa:3c:77:5a:79:84: e9:18:8c:26:a8:7f:f9:05:0d:93:27:49:1f:19:b6: 1a:c7:83:ab:02:2c:b3:49:b2:66:f6:6f:18:a1:a4: 93:c1:b8:29:0b:a9:19:4f:cd:bb:a3:c7:7a:22:d3: 30:e6:4c:29:ac:ff:16:39:88:74:84:2a:95:16:7f: 5c:e9:14:20:a0:f9:fc:05:98:e3:45:57:23:a8:c1: a3:1e:20:30:e7:b5:32:98:b3:c2:2b:f9:5d:98:96: ec:be:db:4a:f7:11:6b:28:78:f2:d1:a0:31:10:8d: 01:53:3c:d9:dc:0b:80:89:eb:12:dd:d9:4b:79:63: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EE:59:95:23:19:DA:E4:34:07:66:F5:F0:36:F7:9C:2A:03:3E:5E X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:69:ee:29:1a:45:46:c4:93:d5:d6:af:75:2f:a9:20:ca:09: d3:66:23:dd:95:a2:6a:eb:2d:f7:55:ac:bf:dc:a2:4f:77:de: 58:37:2d:1d:cf:6b:7a:4e:fe:43:91:07:a9:e4:eb:32:2b:8a: 3a:6b:55:57:9b:18:54:b1:a9:78:55:3b:56:56:0a:27:bd:ec: c7:ec:2c:0d:40:e7:70:a9:60:89:89:83:13:f2:48:2c:80:7e: 23:d5:49:8b:ec:98:f9:9e:28:54:b8:0f:72:d4:4f:c0:f0:2e: f6:56:50:74:b8:fa:d1:76:43:3a:21:26:2b:fc:aa:ec:48:ba: 1b:ab:54:b8:e7:6a:aa:7a:b2:00:b0:2d:95:ac:ed:39:08:0e: e1:d2:34:a3:93:11:1f:06:b3:5f:a6:e0:3b:5b:81:46:e1:b8: 65:6d:77:86:cd:20:e1:95:69:ea:3e:25:40:60:1d:51:3c:8e: db:0b:47:ec:eb:0c:e8:fb:13:69:c1:ae:26:04:ad:7f:f5:4c: e9:0d:a2:1b:fc:81:c5:a7:76:53:e7:d0:ad:be:14:ef:d3:df: a8:8f:52:38:d5:69:bd:b5:95:d5:40:1d:80:0e:cc:17:73:41: 00:63:dd:20:98:46:24:cb:2f:29:6a:87:28:eb:89:fc:b4:1c: e5:9c:3e:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGogkG2XOdwBTm73u91oJ6PXbgkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjA3MTQwMTAwMDNaFw0yNjA3MTUwNDA2MDNaMDMxMTAvBgNV BAMTKEIyRUU1OTk1MjMxOURBRTQzNDA3NjZGNUYwMzZGNzlDMkEwMzNFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MXCgwtOGb9MhbsupcyfgBSNs drncbLUG9+c8atni5SIYspyacJpJDZgjjPFIJSdrIEgwBNfz3gJbXyhXI19BnQVI R1iIFnNdDJ+zHxHUeGHAI4CKm2rkDqwfhvT2kTZ4KPsMmhbucn6YGcBGY8o6VSpm NMCQPAfyqHmDK21d1Po8d1p5hOkYjCaof/kFDZMnSR8ZthrHg6sCLLNJsmb2bxih pJPBuCkLqRlPzbujx3oi0zDmTCms/xY5iHSEKpUWf1zpFCCg+fwFmONFVyOowaMe IDDntTKYs8Ir+V2Yluy+20r3EWsoePLRoDEQjQFTPNncC4CJ6xLd2Ut5Y329AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsu5ZlSMZ2uQ0B2b18Db3nCoDPl4wHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2nuKRpFRsST 1davdS+pIMoJ02Yj3ZWiaust91Wsv9yiT3feWDctHc9rek7+Q5EHqeTrMiuKOmtV V5sYVLGpeFU7VlYKJ73sx+wsDUDncKlgiYmDE/JILIB+I9VJi+yY+Z4oVLgPctRP wPAu9lZQdLj60XZDOiEmK/yq7Ei6G6tUuOdqqnqyALAtlaztOQgO4dI0o5MRHwaz X6bgO1uBRuG4ZW13hs0g4ZVp6j4lQGAdUTyO2wtH7OsM6PsTacGuJgStf/VM6Q2i G/yBxad2U+fQrb4U79PfqI9SONVpvbWV1UAdgA7MF3NBAGPdIJhGJMsvKWqHKOuJ /LQc5Zw+vA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:40 2026 by rpki-client