$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: 6cxXCSgcA1XckIVRGTvA1UuFCbe25VZXJ+ZoZdP/S7c= Subject key identifier: 15:34:6A:3B:6B:27:D7:34:91:EE:74:A4:E0:D0:07:3A:21:87:E8:59 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 7AE2641C1DF36F7693A57185AEC612411287ACC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: EB Signing time: Tue 14 Jul 2026 01:55:08 +0000 Manifest this update: Tue 14 Jul 2026 01:50:08 +0000 Manifest next update: Wed 15 Jul 2026 03:31:08 +0000 Files and hashes: 1: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 2: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 3: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 4: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 5: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 6: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: cO+Gzac/XZwpbaFgLLLB+1DEBbp7dbkYyePlEqwW7kQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e2:64:1c:1d:f3:6f:76:93:a5:71:85:ae:c6:12:41:12:87:ac:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Jul 14 01:50:08 2026 GMT Not After : Jul 15 03:31:08 2026 GMT Subject: CN=15346A3B6B27D73491EE74A4E0D0073A2187E859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:ee:73:a3:03:41:4d:72:71:da:3a:e3:ba: 6c:84:a1:67:62:5b:28:9b:47:19:c9:e4:a4:88:fd: 59:76:5b:fb:2a:55:7d:29:37:fe:be:cf:8b:d7:d7: 50:cb:e7:97:c9:59:30:d9:5b:6b:23:5d:c0:97:ce: 87:1a:2c:6b:37:18:5a:17:11:ce:39:b0:cb:8b:18: a2:91:fd:57:06:0e:9d:88:0d:c8:98:6e:ff:ce:9d: 43:3f:d4:25:79:3f:16:c4:19:9c:5a:af:22:f3:13: 59:e6:56:76:cc:88:a3:4d:ef:c8:89:24:a3:08:82: 54:f2:21:a0:63:b7:57:19:de:7a:e6:a4:90:b6:8f: a1:ac:0e:8c:41:38:8a:a7:48:1d:8b:8c:f2:b3:be: bb:b5:d3:dd:81:dd:90:9f:65:04:07:ef:e7:00:12: 59:b0:6c:05:ec:34:1d:54:23:b5:9a:b3:8b:41:73: 29:51:5f:a1:74:f1:f6:35:00:35:ba:f2:90:9f:01: ba:7c:57:ac:8b:39:c8:e5:3c:e2:30:28:c9:ed:32: a6:8f:91:b0:f4:d5:3a:b3:7a:24:ce:83:a3:35:1a: e8:89:c3:6c:e4:ee:c4:f2:4e:2d:a7:49:43:73:dc: 10:dc:6c:d2:7b:41:b9:ae:bf:bb:81:4f:7d:c1:92: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:34:6A:3B:6B:27:D7:34:91:EE:74:A4:E0:D0:07:3A:21:87:E8:59 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:20:da:e5:6c:e9:36:62:21:7c:ee:d4:e2:e9:b0:ad:d5:25: a7:ec:b9:be:16:dd:37:b1:7c:52:6b:e8:a8:6d:70:d0:37:b7: 55:7f:bb:47:3a:56:32:4e:26:88:52:ef:db:17:0a:a9:78:d9: 14:b6:84:83:83:26:2c:d2:7a:bd:04:bd:1a:0c:4b:75:ed:7b: 22:a6:20:34:6f:47:09:c4:18:56:c8:ab:6e:da:1d:fd:95:7d: 39:67:be:02:c6:24:1d:c8:56:6c:e6:ee:ac:9e:ef:c0:03:c6: 04:7d:47:e2:27:56:62:e8:30:f5:be:47:0e:22:be:77:1c:0f: 11:ea:af:14:50:5c:74:6a:70:a4:9a:af:c7:ae:76:5d:44:94: 55:f1:a9:70:6f:56:05:72:08:3f:90:69:e8:87:05:68:4f:6b: f0:28:32:51:c2:7c:11:4a:ad:c4:26:37:18:c5:16:88:73:66: 97:7c:2f:b8:b9:b8:59:fa:17:56:a4:f7:b9:2d:92:37:d5:88: ff:65:10:68:58:05:a9:8d:8a:07:5b:da:75:0b:c1:e7:3b:f4: d0:85:6e:e9:92:0f:f9:2f:dd:fa:62:35:f0:16:79:03:46:bc: 78:e7:e5:f6:a6:bc:e8:cb:49:02:be:5c:79:d9:14:dd:12:67: 95:3b:c0:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeuJkHB3zb3aTpXGFrsYSQRKHrMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA3MTQwMTUwMDhaFw0yNjA3MTUwMzMxMDhaMDMxMTAvBgNV BAMTKDE1MzQ2QTNCNkIyN0Q3MzQ5MUVFNzRBNEUwRDAwNzNBMjE4N0U4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCP+5zowNBTXJx2jrjumyEoWdi WyibRxnJ5KSI/Vl2W/sqVX0pN/6+z4vX11DL55fJWTDZW2sjXcCXzocaLGs3GFoX Ec45sMuLGKKR/VcGDp2IDciYbv/OnUM/1CV5PxbEGZxaryLzE1nmVnbMiKNN78iJ JKMIglTyIaBjt1cZ3nrmpJC2j6GsDoxBOIqnSB2LjPKzvru1092B3ZCfZQQH7+cA ElmwbAXsNB1UI7Was4tBcylRX6F08fY1ADW68pCfAbp8V6yLOcjlPOIwKMntMqaP kbD01TqzeiTOg6M1GuiJw2zk7sTyTi2nSUNz3BDcbNJ7Qbmuv7uBT33BksftAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFTRqO2sn1zSR7nSk4NAHOiGH6FkwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASDa5WzpNmIh fO7U4umwrdUlp+y5vhbdN7F8UmvoqG1w0De3VX+7RzpWMk4miFLv2xcKqXjZFLaE g4MmLNJ6vQS9GgxLde17IqYgNG9HCcQYVsirbtod/ZV9OWe+AsYkHchWbOburJ7v wAPGBH1H4idWYugw9b5HDiK+dxwPEeqvFFBcdGpwpJqvx652XUSUVfGpcG9WBXII P5Bp6IcFaE9r8CgyUcJ8EUqtxCY3GMUWiHNml3wvuLm4WfoXVqT3uS2SN9WI/2UQ aFgFqY2KB1vadQvB5zv00IVu6ZIP+S/d+mI18BZ5A0a8eOfl9qa86MtJAr5cedkU 3RJnlTvAkg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:06 2026 by rpki-client