$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: BDK2AmTvc4jXzQgS8fjzxL9MtGYNyvGc7RLBEGA+IYY= Subject key identifier: AB:29:AE:FB:8D:7F:4F:2E:32:BC:9D:C1:4D:44:0A:54:92:11:51:BB Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 033131FA1C5326456FE6463239922EAAC313D11C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 06:10:35 +0000 Manifest this update: Tue 14 Jul 2026 06:05:35 +0000 Manifest next update: Wed 15 Jul 2026 09:29:35 +0000 Files and hashes: 1: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) 2: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: TMquUOf3h7Z8inS3IJ3rgr3882gOW4hlGJF3mBYBBS4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:31:fa:1c:53:26:45:6f:e6:46:32:39:92:2e:aa:c3:13:d1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Jul 14 06:05:35 2026 GMT Not After : Jul 15 09:29:35 2026 GMT Subject: CN=AB29AEFB8D7F4F2E32BC9DC14D440A54921151BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:97:b8:93:bb:83:e6:00:60:97:81:01:34: 49:d9:c7:a9:71:2a:d6:7f:c0:30:81:53:4b:81:8b: 3e:51:35:36:84:89:dc:b9:f3:30:dc:9a:1c:79:b7: a1:f2:d1:10:f8:76:48:80:2e:14:2d:69:f6:02:1b: 5d:dd:09:22:7f:8c:94:53:12:a3:76:e2:63:71:4e: 3b:2a:14:25:1b:b9:75:5e:15:49:c0:9a:b7:80:bb: 43:92:28:9d:5d:73:81:f6:58:75:6a:b5:f8:ee:ce: 98:00:f3:5a:e5:54:eb:c4:0a:04:81:7f:67:ea:63: 39:30:8c:1f:28:e8:4c:e4:3a:70:7f:c5:03:c0:16: 2b:9f:c5:b0:8b:d6:cd:6e:67:dd:35:2d:37:44:be: 36:ad:86:33:58:a6:4e:a5:10:75:01:28:8e:c5:5d: d1:28:7d:1e:8e:80:d0:18:09:22:36:74:8c:49:51: 78:4d:56:67:5e:1f:69:d0:b9:57:92:5c:d7:62:1c: f4:31:74:06:ea:f8:1a:9b:9c:3d:02:1f:d3:88:f3: 1d:61:e9:b0:75:5c:d5:43:db:60:42:5b:29:54:60: 09:5c:a2:36:f0:0a:05:a5:c8:1d:65:ae:87:5d:86: 2c:2f:24:56:05:67:70:10:34:03:a8:97:17:4c:43: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:29:AE:FB:8D:7F:4F:2E:32:BC:9D:C1:4D:44:0A:54:92:11:51:BB X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4b:7f:a0:5f:dd:f9:ad:d7:bf:3d:13:04:04:23:ae:da:24: 70:34:bd:a3:cb:14:b7:08:d6:fc:e3:86:0e:09:0b:ac:ea:94: 2a:64:0f:bd:5b:c9:b5:fd:e4:2f:ed:c7:a8:79:f6:58:53:7d: d4:c6:3c:21:93:84:d9:fb:c8:57:4b:1c:f6:1c:5e:55:7a:48: a2:7f:f1:63:6c:8e:7a:5d:8c:8d:9a:2e:cc:7a:bd:82:fc:3d: d1:be:f2:c2:fb:66:81:da:14:93:ca:94:2e:55:d8:4f:04:3b: 2e:ca:e0:46:87:39:7d:df:58:10:4b:cf:27:09:af:fc:cd:51: fb:8a:7c:c0:d4:9e:7f:31:28:94:c6:bf:81:90:28:a4:24:a0: 3d:3e:ad:6c:9e:8e:51:50:48:2a:22:92:8c:a8:e6:0d:54:98: dc:3c:ca:73:c5:e7:a7:67:37:6a:de:6d:d1:f2:70:be:26:04: ec:c9:4d:11:d1:0c:c8:80:03:06:06:33:18:5f:e5:c2:00:05: 85:9e:62:b2:b8:e4:b3:af:54:6d:dd:fc:38:fd:d7:9e:92:9a: 2f:42:d8:60:cb:74:85:54:83:5e:7f:1f:2b:55:dd:68:60:3c: 7e:da:71:81:83:f0:b9:94:4c:ce:77:34:b3:12:62:59:32:a2: 89:94:28:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAzEx+hxTJkVv5kYyOZIuqsMT0RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA3MTQwNjA1MzVaFw0yNjA3MTUwOTI5MzVaMDMxMTAvBgNV BAMTKEFCMjlBRUZCOEQ3RjRGMkUzMkJDOURDMTRENDQwQTU0OTIxMTUxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1P5e4k7uD5gBgl4EBNEnZx6lx KtZ/wDCBU0uBiz5RNTaEidy58zDcmhx5t6Hy0RD4dkiALhQtafYCG13dCSJ/jJRT EqN24mNxTjsqFCUbuXVeFUnAmreAu0OSKJ1dc4H2WHVqtfjuzpgA81rlVOvECgSB f2fqYzkwjB8o6EzkOnB/xQPAFiufxbCL1s1uZ901LTdEvjathjNYpk6lEHUBKI7F XdEofR6OgNAYCSI2dIxJUXhNVmdeH2nQuVeSXNdiHPQxdAbq+BqbnD0CH9OI8x1h 6bB1XNVD22BCWylUYAlcojbwCgWlyB1lroddhiwvJFYFZ3AQNAOolxdMQ5KJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqymu+41/Ty4yvJ3BTUQKVJIRUbswHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEt/oF/d+a3X vz0TBAQjrtokcDS9o8sUtwjW/OOGDgkLrOqUKmQPvVvJtf3kL+3HqHn2WFN91MY8 IZOE2fvIV0sc9hxeVXpIon/xY2yOel2MjZouzHq9gvw90b7ywvtmgdoUk8qULlXY TwQ7LsrgRoc5fd9YEEvPJwmv/M1R+4p8wNSefzEolMa/gZAopCSgPT6tbJ6OUVBI KiKSjKjmDVSY3DzKc8Xnp2c3at5t0fJwviYE7MlNEdEMyIADBgYzGF/lwgAFhZ5i srjks69Ubd38OP3XnpKaL0LYYMt0hVSDXn8fK1XdaGA8ftpxgYPwuZRMznc0sxJi WTKiiZQo7g== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:32 2026 by rpki-client