$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: oe1nWTb47bYZoROfa2vo2QxKjDtiwV1N0P8v1XXE55k= Subject key identifier: 9C:C9:1E:3A:30:21:DE:8C:D8:76:83:D1:8C:E6:A7:1B:50:F2:2A:0C Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 27759B3D28100F9827A1AA129FACFB27B352AFC4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: EB Signing time: Tue 14 Jul 2026 07:35:42 +0000 Manifest this update: Tue 14 Jul 2026 07:30:42 +0000 Manifest next update: Wed 15 Jul 2026 10:53:42 +0000 Files and hashes: 1: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 2: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: cAk60XPY+SR9W+ajblhSI3rfdlxl4blYCSemILavbfk=) 3: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:9b:3d:28:10:0f:98:27:a1:aa:12:9f:ac:fb:27:b3:52:af:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jul 14 07:30:42 2026 GMT Not After : Jul 15 10:53:42 2026 GMT Subject: CN=9CC91E3A3021DE8CD87683D18CE6A71B50F22A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:b1:6e:68:b7:81:0d:7c:b4:9c:0d:8a:16: d0:0e:60:00:96:ce:29:00:fc:bc:ef:60:ff:19:59: a2:fc:d1:cf:66:fc:05:65:6c:73:2b:72:39:11:87: 6d:14:8f:05:33:35:4a:d9:0e:6e:62:78:fb:63:cc: e0:4b:46:0f:2c:6a:ef:cd:0e:28:fb:5a:c8:a9:9d: 77:75:b2:37:38:64:47:cd:da:e1:1b:cf:88:03:ea: df:fe:da:f6:ef:6e:80:ed:90:a2:63:70:ff:17:d9: f7:94:6e:d0:fc:db:12:7c:3f:4a:7c:c2:12:60:ae: e2:38:95:11:92:7f:27:0a:17:89:72:75:f3:13:12: 27:19:96:b6:aa:c9:bd:45:45:1c:26:1a:7e:0b:9d: 2d:a3:e2:7a:55:b2:af:15:fe:27:5f:42:79:a2:b6: 19:60:7e:fd:e1:74:f1:9e:2c:dd:c4:c7:96:fc:02: 34:27:f3:f1:b5:ce:15:0c:d6:f0:8a:9e:32:69:0b: 75:16:46:c0:a8:92:0f:67:24:d6:6f:63:96:54:56: 7d:8d:17:f6:1e:f3:cc:6f:37:fd:d6:01:27:f0:5f: 14:80:01:5e:78:a4:fb:b0:3e:31:b0:77:0f:e8:45: 1c:5a:93:10:36:96:b9:73:b7:7f:d5:c1:2e:33:85: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:1E:3A:30:21:DE:8C:D8:76:83:D1:8C:E6:A7:1B:50:F2:2A:0C X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3f:cd:f5:1d:35:12:c0:24:68:bb:12:49:5f:63:00:05:14: 5d:35:bf:96:8c:38:66:5d:43:33:7f:da:33:89:e3:af:11:0d: 59:3c:83:bf:00:6e:ec:3f:ec:46:3c:38:93:d6:b1:f3:12:35: a0:83:88:34:51:37:58:39:3b:b8:40:52:80:fc:52:b9:13:aa: 3b:63:fa:e1:bd:0a:34:1a:60:5f:28:cc:bd:37:2f:99:6f:fb: bd:2b:25:8e:b0:a5:8b:7a:46:58:41:1b:c0:eb:65:0d:93:78: 78:fd:92:a7:25:41:80:06:50:29:0d:31:ad:2c:2c:ea:7b:04: d1:31:88:cb:52:19:80:96:85:06:50:d4:e8:ae:3d:a4:01:ca: d1:5f:cf:4b:7d:d3:a0:79:b3:f7:3c:ad:a7:df:e4:ad:bd:63: 07:a5:a0:db:af:6b:4c:c3:94:6f:7d:db:55:e5:ec:54:e1:0c: b1:74:49:81:d3:2e:7a:f7:e0:ef:97:19:81:1a:2c:f9:fc:03: cc:e1:87:3c:7a:f3:c8:c6:d8:a8:fa:2b:2a:22:7d:97:69:01: e8:43:10:40:4e:34:37:c4:56:4b:12:2e:f0:c6:4d:58:72:2a: cc:78:c5:14:a5:2c:fc:22:fa:bf:09:67:9a:61:30:1a:9c:ca: b7:85:b2:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ3WbPSgQD5gnoaoSn6z7J7NSr8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA3MTQwNzMwNDJaFw0yNjA3MTUxMDUzNDJaMDMxMTAvBgNV BAMTKDlDQzkxRTNBMzAyMURFOENEODc2ODNEMThDRTZBNzFCNTBGMjJBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gbFuaLeBDXy0nA2KFtAOYACW zikA/LzvYP8ZWaL80c9m/AVlbHMrcjkRh20UjwUzNUrZDm5iePtjzOBLRg8sau/N Dij7WsipnXd1sjc4ZEfN2uEbz4gD6t/+2vbvboDtkKJjcP8X2feUbtD82xJ8P0p8 whJgruI4lRGSfycKF4lydfMTEicZlraqyb1FRRwmGn4LnS2j4npVsq8V/idfQnmi thlgfv3hdPGeLN3Ex5b8AjQn8/G1zhUM1vCKnjJpC3UWRsCokg9nJNZvY5ZUVn2N F/Ye88xvN/3WASfwXxSAAV54pPuwPjGwdw/oRRxakxA2lrlzt3/VwS4zheSZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnMkeOjAh3ozYdoPRjOanG1DyKgwwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoD/N9R01EsAk aLsSSV9jAAUUXTW/low4Zl1DM3/aM4njrxENWTyDvwBu7D/sRjw4k9ax8xI1oIOI NFE3WDk7uEBSgPxSuROqO2P64b0KNBpgXyjMvTcvmW/7vSsljrCli3pGWEEbwOtl DZN4eP2SpyVBgAZQKQ0xrSws6nsE0TGIy1IZgJaFBlDU6K49pAHK0V/PS33ToHmz 9zytp9/krb1jB6Wg269rTMOUb33bVeXsVOEMsXRJgdMuevfg75cZgRos+fwDzOGH PHrzyMbYqPorKiJ9l2kB6EMQQE40N8RWSxIu8MZNWHIqzHjFFKUs/CL6vwlnmmEw GpzKt4WylQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:10:17 2026 by rpki-client