$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: cTwjq7IwMubSC8AmbMwgSN9y7AXkQFe1CKB9Ud+W0fY= Subject key identifier: 0C:50:68:1E:91:E4:96:41:A0:9D:CB:30:99:76:09:E9:71:61:B2:73 Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 43791F1BD5A542DF541FD0907A7156E43DF8EB74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: 8D Signing time: Sun 26 Jul 2026 23:42:49 +0000 Manifest this update: Sun 26 Jul 2026 23:37:49 +0000 Manifest next update: Tue 28 Jul 2026 00:02:49 +0000 Files and hashes: 1: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 2: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 3: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 4: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 5: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: yU9zXyUd2Zo3Jg3YFm+VVtxV0RIJtrioiydhFOFZhHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:79:1f:1b:d5:a5:42:df:54:1f:d0:90:7a:71:56:e4:3d:f8:eb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Jul 26 23:37:49 2026 GMT Not After : Jul 28 00:02:49 2026 GMT Subject: CN=0C50681E91E49641A09DCB30997609E97161B273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:cb:1a:2f:f3:c1:70:13:93:05:a5:f1:fc: ff:38:4b:3d:06:66:8b:9a:83:c6:ec:9c:10:d0:1f: 37:82:f9:2e:f9:0d:11:e4:1b:a5:a2:13:9d:8f:6d: 63:9f:5c:00:84:72:2f:eb:26:5b:f9:4f:f4:2e:95: ce:eb:e2:63:68:0a:6c:1a:9d:9b:e1:7f:71:c7:01: 7a:1e:17:64:33:dd:9b:f0:7f:ab:b7:cf:5b:9c:4e: 4e:40:6c:f1:d9:1d:51:95:28:6d:8d:e6:0a:13:aa: 5d:a6:32:37:3a:95:1c:67:87:4d:d7:31:50:06:2c: 55:04:ae:72:e8:aa:ba:a8:f0:50:ec:ef:92:68:09: 6f:cc:cd:b6:2a:9b:bc:68:11:c4:7e:7e:e9:6e:2d: c5:b9:90:22:33:df:18:32:93:29:e3:91:5b:a2:c0: b6:93:2e:c7:56:43:d8:3e:1b:02:18:91:ee:8b:56: 0e:e9:1b:08:dc:6a:6e:41:7d:d4:1c:6f:14:b3:a1: 88:7d:db:42:ec:a8:cd:4e:60:96:10:46:8b:21:b8: ec:e9:59:e3:4b:ba:22:dd:b5:c1:06:46:85:70:53: 52:94:d4:41:d8:82:ab:b8:b4:ca:47:11:56:cb:83: 1b:21:1a:51:58:9f:a2:59:3d:84:5e:ad:34:cb:d2: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:50:68:1E:91:E4:96:41:A0:9D:CB:30:99:76:09:E9:71:61:B2:73 X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6c:0f:6f:53:11:a9:52:5a:60:f8:08:fd:10:2e:d8:d2:3f: 42:c9:cb:c0:61:0a:6d:4e:3f:19:5b:55:8b:87:c7:2e:30:42: 4b:82:36:6e:64:e8:a2:f1:86:3b:8f:ae:66:7a:f1:23:42:2d: 28:ab:5b:e3:7e:35:26:44:e1:71:31:85:43:b1:07:45:8c:d2: 45:94:d3:43:c0:46:33:00:41:86:fc:aa:c8:b5:e9:47:bb:cd: 7c:bc:68:04:90:a9:82:ca:61:47:3c:6e:83:0b:0f:03:3e:6a: 27:0a:ec:6f:4f:08:40:12:78:ea:84:1e:94:f5:9a:af:76:6b: 9d:cd:da:e1:3d:56:fe:e6:f9:f4:fc:fe:bc:6f:c4:d9:21:60: 06:51:fc:ca:aa:60:97:a5:eb:74:ec:cd:07:1c:42:dc:60:f6: f8:ff:3a:83:09:65:97:90:50:21:8e:7a:e0:58:70:ad:24:b1: ad:0d:19:18:c4:18:98:0e:8b:2a:8c:e2:b1:75:df:d2:de:0c: dc:8b:e0:b0:69:8f:ce:b3:25:84:06:44:f4:b2:50:25:e6:6e: 35:f6:0e:a9:cb:27:10:40:54:f2:b6:d9:b4:30:d0:d9:d4:58: 6a:71:7d:45:20:86:1e:d9:d7:54:4a:cc:8d:bf:f5:36:84:95: 65:1d:2d:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ3kfG9WlQt9UH9CQenFW5D3463QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA3MjYyMzM3NDlaFw0yNjA3MjgwMDAyNDlaMDMxMTAvBgNV BAMTKDBDNTA2ODFFOTFFNDk2NDFBMDlEQ0IzMDk5NzYwOUU5NzE2MUIyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1icsaL/PBcBOTBaXx/P84Sz0G Zouag8bsnBDQHzeC+S75DRHkG6WiE52PbWOfXACEci/rJlv5T/Qulc7r4mNoCmwa nZvhf3HHAXoeF2Qz3Zvwf6u3z1ucTk5AbPHZHVGVKG2N5goTql2mMjc6lRxnh03X MVAGLFUErnLoqrqo8FDs75JoCW/MzbYqm7xoEcR+fuluLcW5kCIz3xgykynjkVui wLaTLsdWQ9g+GwIYke6LVg7pGwjcam5BfdQcbxSzoYh920LsqM1OYJYQRoshuOzp WeNLuiLdtcEGRoVwU1KU1EHYgqu4tMpHEVbLgxshGlFYn6JZPYRerTTL0n+TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDFBoHpHklkGgncswmXYJ6XFhsnMwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2wPb1MRqVJa YPgI/RAu2NI/QsnLwGEKbU4/GVtVi4fHLjBCS4I2bmToovGGO4+uZnrxI0ItKKtb 4341JkThcTGFQ7EHRYzSRZTTQ8BGMwBBhvyqyLXpR7vNfLxoBJCpgsphRzxugwsP Az5qJwrsb08IQBJ46oQelPWar3Zrnc3a4T1W/ub59Pz+vG/E2SFgBlH8yqpgl6Xr dOzNBxxC3GD2+P86gwlll5BQIY564FhwrSSxrQ0ZGMQYmA6LKozisXXf0t4M3Ivg sGmPzrMlhAZE9LJQJeZuNfYOqcsnEEBU8rbZtDDQ2dRYanF9RSCGHtnXVErMjb/1 NoSVZR0tLw== -----END CERTIFICATE-----Generated at Mon Jul 27 16:05:35 2026 by rpki-client