$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json) Hash identifier: DmEsHXTD2g+LwcmEYIUEmq5MEZjMvfqjmYtfEB0uSM0= Subject key identifier: 87:5D:23:09:80:21:C4:75:32:DA:A2:B5:75:B4:92:BC:CC:76:11:86 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 4DB2F0FB64416C710FD0876FF97CE8EE0E657DF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft Manifest number: A3 Signing time: Tue 14 Jul 2026 08:20:49 +0000 Manifest this update: Tue 14 Jul 2026 08:15:49 +0000 Manifest next update: Wed 15 Jul 2026 10:59:49 +0000 Files and hashes: 1: 34352e3235332e36382e302f32322d3232203d3e2030.roa (hash: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM=) 2: 3231392e3233322e33322e302f32302d3230203d3e2034383437.roa (hash: ahFzTowcg8RurCXrOIyB3W96Jwlje6M6e87CUFLxMk0=) 3: 3231392e3233322e33322e302f32312d3231203d3e2034383437.roa (hash: 19OWcoaieBtLmTSPQYB3Qb8dIYvVSsw5E2tnoiH7Kx0=) 4: 3231392e3233322e35362e302f32312d3231203d3e2034383437.roa (hash: lw/R3INf1/Of5Zr58lokdX06wXsULy/mmXgkyhpRaBw=) 5: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: uN26Epc8k3GUSvvkbnygxiFNvF6bpt3R/wALUqsskuI=) 6: 3231392e3233322e34342e302f32322d3232203d3e2034383437.roa (hash: 5nVAN8TukMmhCfRksOm2Om3KwxeVxz5mu4z2JJ0Wqo4=) 7: 35392e3130382e33322e302f31392d3139203d3e2034383437.roa (hash: dxgLrIfF64T7S4w49qMJsSs0eRb10ZprN7ZucyGPm+M=) 8: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (hash: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk=) 9: 3231392e3233322e33322e302f31392d3139203d3e2034383437.roa (hash: XnvWHCHXJJHlF0VPu6jLiAqdmQ9yX8bDWf+QnfAsvcU=) 10: 323430303a353430303a3a2f33322d3332203d3e2030.roa (hash: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU=) 11: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (hash: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE=) 12: 35392e3130382e3232342e302f32302d3230203d3e2034383437.roa (hash: RXfkLYOn1avjUMDreVTOH1SQP55YSQigEG0a9ocHRoI=) 13: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (hash: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA=) 14: 3231392e3233322e33362e302f32322d3232203d3e2034383437.roa (hash: bmOU5gtClm+CxO3KqtpunOqLSiUQw3h4LJIR2hU/7uc=) 15: 35392e3130382e36342e302f31382d3138203d3e2034383437.roa (hash: UZg0Pagp0Gw27BW9AwJK8jAPOGF7fxdA7nHKJO5oxaM=) 16: 35392e3130382e302e302f31362d3136203d3e2034383437.roa (hash: +MVFENXiTS5qu1cGyUwlG21oFkjrekCQs7zCw/wtnVk=) 17: 35392e3130382e39312e302f32342d3234203d3e203138323435.roa (hash: t3Rtro7rqy01zijDzj7kZjiqLfqCkrk5i7GAf6LIfoI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b2:f0:fb:64:41:6c:71:0f:d0:87:6f:f9:7c:e8:ee:0e:65:7d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Jul 14 08:15:49 2026 GMT Not After : Jul 15 10:59:49 2026 GMT Subject: CN=875D23098021C47532DAA2B575B492BCCC761186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:b3:61:de:c5:5b:4b:66:0f:0f:82:6f:87: 20:fe:15:9d:bf:0f:7a:68:35:57:ca:c8:2d:5f:a0: a8:2b:ef:96:56:91:d5:eb:fb:01:2f:fa:1f:67:ba: 08:f9:bb:02:ec:30:44:00:08:ed:2b:f1:c8:2c:fa: 62:07:40:a4:ff:59:68:ac:9f:82:9f:01:db:fa:fe: 68:85:8c:52:f4:62:69:1a:1d:87:a7:85:94:b2:55: d6:f6:4f:95:df:87:70:92:f5:04:0b:18:ed:c3:72: 99:61:3d:48:91:02:85:85:b0:e3:3d:a6:c8:93:85: 20:92:9f:87:80:5d:ed:72:7b:cf:ac:71:5d:cc:db: c8:33:8b:19:cc:ff:80:3c:ab:f9:4b:7b:fa:30:38: 25:1f:46:fc:22:4b:e1:01:e7:7b:11:3a:e5:e1:3b: bc:98:4d:58:1a:1e:1f:60:60:63:cc:41:f9:b8:4b: 92:51:d0:ec:fe:4f:22:c9:86:24:96:03:8b:9e:87: 8f:26:a7:86:d2:85:93:fb:c9:3a:a2:c0:cb:4f:41: 28:fb:62:7d:c3:c1:7b:47:83:3f:f0:6b:4e:6d:2b: 61:e8:39:7d:8a:8e:a8:57:d4:76:d0:81:98:4f:08: 33:2e:6e:79:fa:31:43:7f:92:f3:43:03:c2:c0:c1: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:23:09:80:21:C4:75:32:DA:A2:B5:75:B4:92:BC:CC:76:11:86 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:1c:fa:55:2d:50:de:10:0e:a5:40:fb:28:5b:6b:ff:1c: 30:53:c2:74:9a:af:4d:70:2a:f6:f1:d4:26:b9:31:33:5a:b1: 8a:2d:48:b5:78:15:2b:70:aa:ae:e5:a0:80:94:df:4f:7c:b4: bd:da:8d:08:c4:1a:2b:e2:bf:ff:3c:63:90:eb:1c:56:ad:02: 24:d3:2e:12:b3:45:50:7e:45:73:d4:d3:38:9b:ee:99:6b:0a: 34:4d:d8:19:0b:0c:0e:27:60:0c:30:31:e3:71:7b:a8:cd:46: 50:ae:14:30:d4:aa:2a:7f:e1:28:e8:77:99:dd:ee:41:86:8e: 49:16:0e:1c:ff:80:9c:c0:e4:22:96:d4:6e:a2:ca:e6:a8:19: b9:66:15:89:57:8f:42:24:a2:d0:b5:65:07:4d:70:86:f1:bd: 08:c5:97:f4:0e:e2:b2:2d:03:88:58:24:a8:a7:0d:89:b1:66: 16:46:e7:d5:88:07:61:d5:5a:1e:67:2b:a4:36:99:ac:2b:ce: ab:02:e4:d8:32:62:44:ba:17:6e:b5:74:18:6a:96:a4:d7:a9: 2f:56:9a:19:c5:00:2c:5c:7a:bb:ae:a3:fc:04:00:cd:9a:6b: d0:af:47:c6:dd:6f:f6:ce:7b:10:e3:ca:31:ac:03:37:b7:f2: 49:ea:e4:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTbLw+2RBbHEP0Idv+Xzo7g5lffMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA3MTQwODE1NDlaFw0yNjA3MTUxMDU5NDlaMDMxMTAvBgNV BAMTKDg3NUQyMzA5ODAyMUM0NzUzMkRBQTJCNTc1QjQ5MkJDQ0M3NjExODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIbNh3sVbS2YPD4JvhyD+FZ2/ D3poNVfKyC1foKgr75ZWkdXr+wEv+h9nugj5uwLsMEQACO0r8cgs+mIHQKT/WWis n4KfAdv6/miFjFL0YmkaHYenhZSyVdb2T5Xfh3CS9QQLGO3DcplhPUiRAoWFsOM9 psiThSCSn4eAXe1ye8+scV3M28gzixnM/4A8q/lLe/owOCUfRvwiS+EB53sROuXh O7yYTVgaHh9gYGPMQfm4S5JR0Oz+TyLJhiSWA4ueh48mp4bShZP7yTqiwMtPQSj7 Yn3DwXtHgz/wa05tK2HoOX2KjqhX1HbQgZhPCDMubnn6MUN/kvNDA8LAwXxXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh10jCYAhxHUy2qK1dbSSvMx2EYYwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDIc+lUtUN4Q DqVA+yhba/8cMFPCdJqvTXAq9vHUJrkxM1qxii1ItXgVK3CqruWggJTfT3y0vdqN CMQaK+K//zxjkOscVq0CJNMuErNFUH5Fc9TTOJvumWsKNE3YGQsMDidgDDAx43F7 qM1GUK4UMNSqKn/hKOh3md3uQYaOSRYOHP+AnMDkIpbUbqLK5qgZuWYViVePQiSi 0LVlB01whvG9CMWX9A7isi0DiFgkqKcNibFmFkbn1YgHYdVaHmcrpDaZrCvOqwLk 2DJiRLoXbrV0GGqWpNepL1aaGcUALFx6u66j/AQAzZpr0K9Hxt1v9s57EOPKMawD N7fySerkcA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:16 2026 by rpki-client