$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: pVwEO8OvwYgWjfxJDD58xLNrpgV1T0Dj9FxcVAdSRIs= Subject key identifier: 12:4E:E1:D6:FA:CF:67:A0:E4:AA:F8:75:9B:4E:8E:43:B9:41:32:F3 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 747CC3060556996D01BE5EB8A688FE75048C8F44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: EB Signing time: Tue 14 Jul 2026 02:35:12 +0000 Manifest this update: Tue 14 Jul 2026 02:30:12 +0000 Manifest next update: Wed 15 Jul 2026 03:48:12 +0000 Files and hashes: 1: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) 2: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: vtESxZNgxMKAcI16OJXodLHA/edHXY8cfRtFkKd1yY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7c:c3:06:05:56:99:6d:01:be:5e:b8:a6:88:fe:75:04:8c:8f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jul 14 02:30:12 2026 GMT Not After : Jul 15 03:48:12 2026 GMT Subject: CN=124EE1D6FACF67A0E4AAF8759B4E8E43B94132F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:c4:f7:95:cd:54:86:0b:09:df:80:f9:22: d6:e3:d4:bf:95:0d:e4:a9:d1:a8:10:fb:ab:82:37: 82:6f:dd:20:47:02:e3:aa:1d:69:02:34:71:5c:f5: 2b:b1:04:a1:d3:fd:b3:c2:1b:76:1d:df:81:85:5c: 08:86:a8:d7:6c:65:85:a1:57:c4:e7:0a:6a:3d:72: c8:5a:f7:05:3c:ac:1d:60:53:18:d2:aa:cf:67:be: 8b:aa:88:19:54:6e:71:a5:f3:fb:6f:04:74:15:8e: 63:b6:4f:21:d6:a5:db:6f:cc:cb:e8:51:73:51:6d: 71:24:f6:11:d8:61:9d:e3:b6:17:65:17:28:36:84: 34:c6:ef:e5:2c:cc:83:08:c1:20:78:0b:11:7e:33: be:5c:c3:3b:73:04:5d:bd:20:bd:cb:fd:5c:af:36: e3:0b:d6:69:9a:e7:48:75:70:68:c6:56:58:d1:99: f5:c3:a2:c3:e4:2f:0d:1c:0e:66:10:29:0d:f0:2b: 7c:c1:bf:d7:1a:29:70:d3:03:f7:f7:d2:6b:ae:c0: dc:46:65:26:27:98:54:9b:07:77:ae:7b:d4:ba:e0: d8:b3:8e:3e:b1:b3:96:ba:6c:b2:91:31:be:e7:43: 8f:00:2a:3c:90:8b:31:32:e9:e9:44:40:e8:8d:00: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:E1:D6:FA:CF:67:A0:E4:AA:F8:75:9B:4E:8E:43:B9:41:32:F3 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e2:ab:a2:31:5a:db:b9:45:d9:de:35:1a:91:70:ff:37:3e: 77:e0:c0:90:99:ba:9a:ff:e2:4c:0e:4a:f0:e3:ac:d5:ac:e0: cc:d5:69:60:62:69:2c:19:eb:58:1e:40:67:ff:e1:ac:b7:90: 7d:a5:96:58:e4:df:c9:8f:19:99:6e:15:cb:54:e5:df:e8:6d: 8b:2d:88:c8:c6:28:6c:8f:f5:18:0b:b3:a3:50:81:32:0b:87: d1:35:ba:08:25:95:93:2c:d2:5d:a8:13:6f:3f:36:c8:73:2c: 2f:95:82:10:34:d7:20:b2:58:e6:0f:c6:94:81:af:f5:ca:52: 96:b2:47:1a:38:a2:25:2b:75:3c:4c:c4:d3:97:39:8f:de:e9: f3:ac:6d:37:42:6a:7e:46:d4:cd:b7:db:a4:ff:2a:9c:99:3d: 5e:22:43:38:93:91:90:ee:de:1c:21:78:a8:fb:7e:9f:59:be: 43:41:80:76:f4:d9:95:1a:c5:71:07:8c:3c:8f:e2:f1:ad:d8: d2:ce:81:cc:7e:17:72:8b:ef:2c:7c:0e:55:80:e0:89:3b:39: dc:b8:da:b7:57:33:b0:9b:56:b6:0b:d0:ca:e2:20:d0:43:45: e0:e5:f8:fc:50:e7:25:83:44:21:9b:76:84:b9:d2:9c:89:dd: 4b:1e:30:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdHzDBgVWmW0Bvl64poj+dQSMj0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA3MTQwMjMwMTJaFw0yNjA3MTUwMzQ4MTJaMDMxMTAvBgNV BAMTKDEyNEVFMUQ2RkFDRjY3QTBFNEFBRjg3NTlCNEU4RTQzQjk0MTMyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkcT3lc1UhgsJ34D5Itbj1L+V DeSp0agQ+6uCN4Jv3SBHAuOqHWkCNHFc9SuxBKHT/bPCG3Yd34GFXAiGqNdsZYWh V8TnCmo9csha9wU8rB1gUxjSqs9nvouqiBlUbnGl8/tvBHQVjmO2TyHWpdtvzMvo UXNRbXEk9hHYYZ3jthdlFyg2hDTG7+UszIMIwSB4CxF+M75cwztzBF29IL3L/Vyv NuML1mma50h1cGjGVljRmfXDosPkLw0cDmYQKQ3wK3zBv9caKXDTA/f30muuwNxG ZSYnmFSbB3eue9S64Nizjj6xs5a6bLKRMb7nQ48AKjyQizEy6elEQOiNADU5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEk7h1vrPZ6Dkqvh1m06OQ7lBMvMwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOKrojFa27lF 2d41GpFw/zc+d+DAkJm6mv/iTA5K8OOs1azgzNVpYGJpLBnrWB5AZ//hrLeQfaWW WOTfyY8ZmW4Vy1Tl3+htiy2IyMYobI/1GAuzo1CBMguH0TW6CCWVkyzSXagTbz82 yHMsL5WCEDTXILJY5g/GlIGv9cpSlrJHGjiiJSt1PEzE05c5j97p86xtN0JqfkbU zbfbpP8qnJk9XiJDOJORkO7eHCF4qPt+n1m+Q0GAdvTZlRrFcQeMPI/i8a3Y0s6B zH4XcovvLHwOVYDgiTs53Ljat1czsJtWtgvQyuIg0ENF4OX4/FDnJYNEIZt2hLnS nIndSx4wjw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:40 2026 by rpki-client