$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: uawv4/m46ehj9VOMENRCau+HuWNelzaBPuw/t5HYUOM= Subject key identifier: 36:F1:33:B6:E1:B9:9C:7C:3D:58:B6:4E:5D:C8:5E:A8:F8:8D:79:38 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 49058A442C048C64B3608DCE85C00FE63DDD018A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: 7E Signing time: Tue 14 Jul 2026 04:50:29 +0000 Manifest this update: Tue 14 Jul 2026 04:45:29 +0000 Manifest next update: Wed 15 Jul 2026 04:52:29 +0000 Files and hashes: 1: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) 2: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: ic1x8a6qQ8KVJ9S9AI2CUowA7Hf7i8PXF26QKKCABFE=) 3: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:8a:44:2c:04:8c:64:b3:60:8d:ce:85:c0:0f:e6:3d:dd:01:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Jul 14 04:45:29 2026 GMT Not After : Jul 15 04:52:29 2026 GMT Subject: CN=36F133B6E1B99C7C3D58B64E5DC85EA8F88D7938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:4e:8d:16:ad:3b:27:dd:8c:a4:c9:6f:c9: ae:14:20:2a:7f:19:e2:16:be:12:1c:89:fb:a8:fe: 1c:4d:2b:6d:88:16:b4:3a:6d:e6:fd:67:38:c0:95: 22:c2:cd:f1:f4:f1:d1:c7:b6:e9:be:7a:eb:d4:4f: 68:48:13:9c:66:c3:3f:b3:54:39:eb:22:73:0b:41: 32:a6:6d:85:6e:77:d0:4c:d2:76:51:0f:c5:5e:dd: aa:47:10:20:f6:43:25:f1:80:7d:b9:96:d3:13:fc: 36:3e:ac:d8:e6:81:f7:80:be:30:2f:1c:df:60:2d: c3:39:ac:59:ff:a7:7c:b0:0f:0a:03:39:ee:99:8a: 36:6f:99:90:ed:8d:80:08:7f:6e:bb:ad:df:37:90: 25:cd:a4:c7:1b:8b:a7:24:d3:90:e2:ff:72:c8:cb: c3:8c:39:80:cb:f7:70:b2:d1:b8:58:6d:45:52:e3: f2:de:b7:8f:3b:70:5f:8d:d8:22:ac:cb:84:04:7b: 02:79:ae:7b:f1:8c:80:f9:6b:9d:2f:eb:60:05:a1: 87:a2:73:7c:41:4e:06:00:98:8c:f0:4a:b7:6c:ff: e1:9a:4e:ce:6f:2f:30:ee:50:4a:87:76:8e:e0:f8: 91:bd:00:63:55:58:f7:e5:3c:1d:d8:60:a0:88:27: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:33:B6:E1:B9:9C:7C:3D:58:B6:4E:5D:C8:5E:A8:F8:8D:79:38 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:36:7c:cc:1c:1a:17:6d:d3:cf:20:21:42:56:fa:31:98:7c: b9:c9:80:a7:3f:05:2d:77:14:e9:22:8b:1c:19:7b:c4:3c:d4: b8:a9:e4:79:61:7a:b1:7c:16:02:b1:8f:da:b8:5b:5f:54:3c: a9:67:ac:b1:29:da:8b:65:7c:39:d7:00:af:1d:36:e9:1b:c7: 81:dc:af:17:c8:08:26:52:72:d7:38:78:25:0b:38:99:af:5d: 9b:6f:cc:83:e5:ef:f3:e2:c7:ff:1f:88:e0:85:ba:f9:56:a8: 63:d6:35:4a:8d:b3:2d:2e:7f:51:8e:28:f1:75:b5:e9:64:1e: 2a:d4:4f:01:b9:b0:b6:86:f0:94:f0:61:f1:fe:97:67:55:1e: 46:69:fe:90:16:37:56:15:10:0b:ca:82:60:8d:83:02:7b:a7: c2:4d:68:b2:e6:e7:41:29:8d:c8:e7:f1:5a:c2:ca:a2:7b:19: c3:46:75:6a:ae:ca:bf:d5:c8:d1:47:f0:d6:26:86:96:b2:4a: 38:be:ff:73:e7:5f:1f:26:ff:b9:7e:57:84:52:0b:4e:15:e7: 9c:ee:0b:9a:01:25:61:86:e3:e5:b5:ac:fc:b7:6d:f5:7a:ed: 16:3f:c6:85:44:84:4f:35:44:7b:4f:c7:10:a3:c2:75:c5:20: eb:c4:d8:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSQWKRCwEjGSzYI3OhcAP5j3dAYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA3MTQwNDQ1MjlaFw0yNjA3MTUwNDUyMjlaMDMxMTAvBgNV BAMTKDM2RjEzM0I2RTFCOTlDN0MzRDU4QjY0RTVEQzg1RUE4Rjg4RDc5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7E6NFq07J92MpMlvya4UICp/ GeIWvhIcifuo/hxNK22IFrQ6beb9ZzjAlSLCzfH08dHHtum+euvUT2hIE5xmwz+z VDnrInMLQTKmbYVud9BM0nZRD8Ve3apHECD2QyXxgH25ltMT/DY+rNjmgfeAvjAv HN9gLcM5rFn/p3ywDwoDOe6ZijZvmZDtjYAIf267rd83kCXNpMcbi6ck05Di/3LI y8OMOYDL93Cy0bhYbUVS4/Let487cF+N2CKsy4QEewJ5rnvxjID5a50v62AFoYei c3xBTgYAmIzwSrds/+GaTs5vLzDuUEqHdo7g+JG9AGNVWPflPB3YYKCIJ011AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNvEztuG5nHw9WLZOXcheqPiNeTgwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDZ8zBwaF23T zyAhQlb6MZh8ucmApz8FLXcU6SKLHBl7xDzUuKnkeWF6sXwWArGP2rhbX1Q8qWes sSnai2V8OdcArx026RvHgdyvF8gIJlJy1zh4JQs4ma9dm2/Mg+Xv8+LH/x+I4IW6 +VaoY9Y1So2zLS5/UY4o8XW16WQeKtRPAbmwtobwlPBh8f6XZ1UeRmn+kBY3VhUQ C8qCYI2DAnunwk1osubnQSmNyOfxWsLKonsZw0Z1aq7Kv9XI0Ufw1iaGlrJKOL7/ c+dfHyb/uX5XhFILThXnnO4LmgElYYbj5bWs/Ldt9XrtFj/GhUSETzVEe0/HEKPC dcUg68TYSA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:13:32 2026 by rpki-client