$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: 4Jp8dNzUQ1MiAX2kSht/bBaeG6m+fyr2AikLps9JYkg= Subject key identifier: 20:09:0D:FD:6B:A7:2C:1A:67:5C:F8:B7:67:D8:C9:B0:3F:46:CD:1A Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 2B2F6A4382713AAA8EA62A99EA50791102198BCF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: EB Signing time: Tue 14 Jul 2026 14:31:29 +0000 Manifest this update: Tue 14 Jul 2026 14:26:29 +0000 Manifest next update: Wed 15 Jul 2026 17:07:29 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: qzNKQ/Hn3AGWYHEbXyFZLP9Fc3nnqdtdc6nPkoFH9os=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2f:6a:43:82:71:3a:aa:8e:a6:2a:99:ea:50:79:11:02:19:8b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jul 14 14:26:29 2026 GMT Not After : Jul 15 17:07:29 2026 GMT Subject: CN=20090DFD6BA72C1A675CF8B767D8C9B03F46CD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:54:20:13:9e:51:23:bf:44:4f:82:4f:70: b1:3d:82:72:32:08:a9:85:6d:a7:d4:24:77:7f:a0: 27:62:4e:8e:ba:fc:aa:95:2d:16:c1:62:f3:70:4d: 21:ef:8f:f9:82:06:46:3b:1f:47:2d:54:5a:68:12: 2f:c5:45:ae:51:e9:0c:58:0e:08:2d:9f:f4:2e:8a: 34:7b:e2:b8:ac:8c:a5:46:37:39:76:c1:10:61:5d: 6a:54:a1:76:7d:e1:92:d1:80:53:ff:27:92:90:23: 5c:b6:a4:0f:e9:3d:5c:a7:38:f1:1a:b0:af:08:d5: 72:12:7f:de:1a:65:4c:72:d0:7d:16:22:8b:90:72: af:f4:a4:6c:74:ff:e7:4f:ac:bd:bc:b0:47:94:2e: d5:da:de:e9:bb:94:52:64:18:ac:52:b0:54:35:06: ac:ad:62:a8:2f:1f:a2:1b:f3:ed:86:fe:18:03:da: 9c:70:10:8c:33:66:61:cb:14:6c:f5:59:d5:e8:e9: 27:e8:2b:e2:5f:66:07:68:23:9b:83:e4:ab:31:5b: 51:e7:98:bb:fb:c7:05:b9:ab:a5:08:72:a6:7e:a8: b1:9b:18:2d:e7:d0:00:ec:de:a7:63:5f:e0:a4:a6: 66:6f:fd:4d:d3:c5:56:f3:ad:2f:bc:12:43:e7:87: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:0D:FD:6B:A7:2C:1A:67:5C:F8:B7:67:D8:C9:B0:3F:46:CD:1A X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:67:ca:87:b9:a2:91:34:52:92:e4:98:93:65:48:41:71: 0b:21:fb:de:04:a5:78:06:d5:e1:d7:0b:ae:bf:7a:97:0f:ea: 61:31:54:b8:41:f5:27:27:ec:88:5d:59:b1:f1:61:ff:1b:7b: c2:b1:0f:b9:d9:0f:a9:1d:ef:a5:ff:0c:f2:e3:6f:20:0f:f7: ef:67:dc:4a:55:af:1a:6a:0c:24:5c:8f:53:a8:4d:7f:83:90: 3b:cb:c7:83:d2:01:a2:bf:93:ee:d4:6f:7a:8d:9e:0f:a2:9c: 7e:e4:41:b7:91:62:ad:ac:ab:ad:cb:90:88:59:36:a2:c8:21: 37:d1:44:0f:f0:bd:fd:ba:e8:7a:5b:82:2d:47:f0:0b:fb:35: f3:64:1b:5d:fa:c7:2a:82:13:f2:71:6c:75:d0:d1:68:87:60: 0a:7d:cb:33:f4:c0:65:11:09:c7:a9:c2:63:69:0d:39:83:9e: 2f:b7:01:ab:d9:fb:1c:b1:ca:19:32:5f:2a:09:18:21:37:69: 67:f3:f0:b5:51:94:71:7d:4b:b6:46:dd:dd:3b:7f:86:42:98: 8a:42:1a:cf:d3:fd:ae:1b:7b:17:96:00:04:b7:64:9d:80:31: 96:0c:5a:26:c5:93:b6:a3:23:af:77:38:39:49:fd:99:db:18: 64:d0:80:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKy9qQ4JxOqqOpiqZ6lB5EQIZi88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA3MTQxNDI2MjlaFw0yNjA3MTUxNzA3MjlaMDMxMTAvBgNV BAMTKDIwMDkwREZENkJBNzJDMUE2NzVDRjhCNzY3RDhDOUIwM0Y0NkNEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bVQgE55RI79ET4JPcLE9gnIy CKmFbafUJHd/oCdiTo66/KqVLRbBYvNwTSHvj/mCBkY7H0ctVFpoEi/FRa5R6QxY Dggtn/QuijR74risjKVGNzl2wRBhXWpUoXZ94ZLRgFP/J5KQI1y2pA/pPVynOPEa sK8I1XISf94aZUxy0H0WIouQcq/0pGx0/+dPrL28sEeULtXa3um7lFJkGKxSsFQ1 BqytYqgvH6Ib8+2G/hgD2pxwEIwzZmHLFGz1WdXo6SfoK+JfZgdoI5uD5KsxW1Hn mLv7xwW5q6UIcqZ+qLGbGC3n0ADs3qdjX+CkpmZv/U3TxVbzrS+8EkPnh3fLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIAkN/WunLBpnXPi3Z9jJsD9GzRowHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmNnyoe5opE0 UpLkmJNlSEFxCyH73gSleAbV4dcLrr96lw/qYTFUuEH1JyfsiF1ZsfFh/xt7wrEP udkPqR3vpf8M8uNvIA/372fcSlWvGmoMJFyPU6hNf4OQO8vHg9IBor+T7tRveo2e D6KcfuRBt5FirayrrcuQiFk2osghN9FED/C9/broeluCLUfwC/s182QbXfrHKoIT 8nFsddDRaIdgCn3LM/TAZREJx6nCY2kNOYOeL7cBq9n7HLHKGTJfKgkYITdpZ/Pw tVGUcX1Ltkbd3Tt/hkKYikIaz9P9rht7F5YABLdknYAxlgxaJsWTtqMjr3c4OUn9 mdsYZNCAAQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:33 2026 by rpki-client