$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: iE2jT6xt5zS3/BWy9ID3MiU3GQ/G7hJI5PNB8WYEnf8= Subject key identifier: 84:F9:48:F2:CE:D9:A9:25:0C:D2:D2:5D:BA:29:AA:60:CE:D4:7B:7A Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 7C0E9580AE17CC25FC1FAA7980E8CE454ED42422 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 06:40:36 +0000 Manifest this update: Tue 14 Jul 2026 06:35:36 +0000 Manifest next update: Wed 15 Jul 2026 08:19:36 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: wvpQXznTgnDxgg4Z1spieHvK/PHEPLBpwDH/zJuWcD4=) 2: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 3: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) 4: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0e:95:80:ae:17:cc:25:fc:1f:aa:79:80:e8:ce:45:4e:d4:24:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Jul 14 06:35:36 2026 GMT Not After : Jul 15 08:19:36 2026 GMT Subject: CN=84F948F2CED9A9250CD2D25DBA29AA60CED47B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:9e:af:e1:4c:db:98:0c:0d:1c:36:29:9a: 5b:7b:81:5f:5a:94:8e:7b:7e:15:9d:56:2d:7d:2f: 44:9a:38:17:ff:28:ca:60:b1:8f:d2:c0:30:f1:a0: f3:0b:68:dc:9d:b1:39:77:e3:db:b7:78:f8:26:af: cd:e8:de:8b:43:7d:4e:83:81:cd:b6:e2:81:4c:8f: 7b:e7:bb:68:b6:a3:af:3c:44:75:95:e9:a7:28:4c: 29:69:4e:2c:0d:1a:92:a1:09:9b:03:b8:e7:7e:65: f6:6a:aa:89:4d:f0:6d:8a:8d:dc:5e:a1:8d:36:17: ba:d4:9e:8e:14:b3:9b:f9:18:b0:24:7e:0e:5c:94: 1c:46:88:3c:08:2d:74:43:39:2d:d9:71:52:08:77: 68:ad:85:86:00:98:3f:18:ba:fa:d6:5d:78:57:ab: 9a:47:8e:1a:f3:ba:98:66:de:a5:ef:8a:82:98:d5: 72:e5:8f:6e:86:3d:d8:cc:d5:a8:9c:d4:54:b6:4a: fa:4e:96:da:27:5e:4f:77:f2:33:98:2e:6a:03:a5: 26:99:61:94:94:e4:ef:c3:7c:bc:09:5d:39:79:f6: f7:ea:f4:84:f5:20:34:a8:c5:48:44:06:7f:23:44: 33:36:db:8c:07:9e:04:63:a1:1d:06:68:c0:38:d7: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F9:48:F2:CE:D9:A9:25:0C:D2:D2:5D:BA:29:AA:60:CE:D4:7B:7A X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5b:62:3a:9e:20:fb:bc:be:cb:5f:21:b3:34:fe:ab:94:1d: 4e:ca:91:44:54:07:94:5a:f6:a1:ce:80:6a:d9:80:3c:0d:75: c0:42:6d:56:a1:62:bc:27:1c:96:be:d1:6a:2f:62:ca:74:f2: 92:d1:98:55:fe:7b:ea:39:34:b5:9d:8d:e4:d1:2b:12:f5:c8: 84:d7:c6:ab:0f:9a:84:e3:a7:65:57:11:57:2e:e1:97:0c:93: 24:f8:56:d5:20:cd:2a:56:89:82:d8:63:17:33:d2:df:3e:99: 91:f1:0b:a5:43:1a:73:0d:64:81:cf:8e:f2:ae:18:44:97:9d: ca:e4:d8:07:b9:d6:00:56:cf:1f:50:29:45:c6:9d:72:85:42: 6e:54:7a:f5:56:71:5a:cb:de:41:a4:32:af:b7:49:1c:93:68: 45:72:57:90:9c:71:0c:e7:2c:2f:b8:97:d1:69:b8:c8:e4:c1: a0:47:e0:a8:08:ee:b8:5f:28:34:38:47:6f:b4:a6:e5:2d:77: d2:06:7a:75:61:6d:92:51:2e:d3:b1:dd:68:1c:97:29:0a:d8: 40:08:b6:8a:03:07:de:7d:a8:84:85:48:72:68:6c:a6:0e:b9: f6:0d:9b:70:34:51:bd:eb:37:36:53:55:c7:1f:13:14:00:09: e4:02:86:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfA6VgK4XzCX8H6p5gOjORU7UJCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA3MTQwNjM1MzZaFw0yNjA3MTUwODE5MzZaMDMxMTAvBgNV BAMTKDg0Rjk0OEYyQ0VEOUE5MjUwQ0QyRDI1REJBMjlBQTYwQ0VENDdCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdp6v4UzbmAwNHDYpmlt7gV9a lI57fhWdVi19L0SaOBf/KMpgsY/SwDDxoPMLaNydsTl349u3ePgmr83o3otDfU6D gc224oFMj3vnu2i2o688RHWV6acoTClpTiwNGpKhCZsDuOd+ZfZqqolN8G2Kjdxe oY02F7rUno4Us5v5GLAkfg5clBxGiDwILXRDOS3ZcVIId2ithYYAmD8YuvrWXXhX q5pHjhrzuphm3qXvioKY1XLlj26GPdjM1aic1FS2SvpOltonXk938jOYLmoDpSaZ YZSU5O/DfLwJXTl59vfq9IT1IDSoxUhEBn8jRDM224wHngRjoR0GaMA417XFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhPlI8s7ZqSUM0tJduimqYM7Ue3owHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1tiOp4g+7y+ y18hszT+q5QdTsqRRFQHlFr2oc6AatmAPA11wEJtVqFivCcclr7Rai9iynTyktGY Vf576jk0tZ2N5NErEvXIhNfGqw+ahOOnZVcRVy7hlwyTJPhW1SDNKlaJgthjFzPS 3z6ZkfELpUMacw1kgc+O8q4YRJedyuTYB7nWAFbPH1ApRcadcoVCblR69VZxWsve QaQyr7dJHJNoRXJXkJxxDOcsL7iX0Wm4yOTBoEfgqAjuuF8oNDhHb7Sm5S130gZ6 dWFtklEu07HdaByXKQrYQAi2igMH3n2ohIVIcmhspg659g2bcDRRves3NlNVxx8T FAAJ5AKGYg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:17 2026 by rpki-client