$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json) Hash identifier: ycZuJtpNxKR/0LLhXLCDAhxjz3VHJcqOCEBGBD37qPA= Subject key identifier: 56:AD:2B:B0:B1:ED:6C:DE:B2:04:85:2F:4D:C2:2A:40:99:6B:97:8B Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 632BA9FD1F1508B6DE8A1F4FAD23C65C31CB8589 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft Manifest number: 96 Signing time: Tue 21 Jul 2026 02:57:40 +0000 Manifest this update: Tue 21 Jul 2026 02:52:40 +0000 Manifest next update: Wed 22 Jul 2026 05:58:40 +0000 Files and hashes: 1: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=) 2: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=) 3: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: 2/8oqKsoq2w2d3nC+k2KWeS26RGbBYwMwYT1oVQxQls=) 4: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=) 5: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=) 6: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=) 7: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=) 8: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=) 9: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=) 10: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 05:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2b:a9:fd:1f:15:08:b6:de:8a:1f:4f:ad:23:c6:5c:31:cb:85:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Jul 21 02:52:40 2026 GMT Not After : Jul 22 05:58:40 2026 GMT Subject: CN=56AD2BB0B1ED6CDEB204852F4DC22A40996B978B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:f5:9f:28:0f:13:39:b1:af:f0:4b:50:ca: 09:9f:49:c8:4a:9f:14:18:39:7e:fc:f5:eb:cf:32: 4b:9c:21:9f:0a:b0:b1:03:5c:ec:4b:58:9a:25:c5: f6:94:81:98:a2:87:5c:75:71:4b:3f:25:c2:b5:67: 00:25:65:2b:85:90:c2:f5:24:43:44:85:ec:fa:7d: 91:99:95:64:84:17:09:48:c7:a7:0f:56:d6:37:cc: 73:14:cf:a2:cd:15:ab:3b:34:78:e2:50:b8:f9:44: 48:35:7c:10:3b:c7:1d:fd:0e:00:85:89:9b:19:b6: 2b:ad:d8:fd:2e:6a:01:94:bb:1e:2f:02:60:14:2c: 26:77:cb:db:0a:b8:84:f9:7d:ea:29:82:76:ad:58: 9b:6d:67:fe:be:46:a8:f6:8b:5f:b3:2e:d6:16:74: 13:a2:45:f1:95:f8:2c:c2:33:e6:62:24:f5:3a:c3: f4:69:cd:cc:1d:95:a4:3d:f1:2f:7a:25:46:08:e0: 32:27:20:a8:c2:d6:2a:43:01:4b:77:9f:f4:c9:ab: 97:86:93:03:08:e9:01:63:6e:86:22:f7:21:47:94: 45:44:e0:e6:be:fb:9c:88:66:84:cc:ef:b1:c9:71: 04:bb:97:3f:d8:72:ab:e6:29:9d:1e:4d:94:cd:de: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AD:2B:B0:B1:ED:6C:DE:B2:04:85:2F:4D:C2:2A:40:99:6B:97:8B X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4f:00:dd:7e:a3:b3:b1:1e:80:2e:93:77:bb:c2:1e:6a:54: eb:94:de:1a:c5:fc:72:d5:d8:b5:c4:ee:50:cb:2d:a5:07:fb: b6:e6:1b:06:a0:7e:2a:40:a7:b1:98:06:3e:96:27:3c:7d:7c: e2:1b:3f:5e:7c:be:84:a1:f5:cd:24:20:c7:1c:20:53:dc:03: 19:ee:5d:c2:b8:87:2f:74:aa:bc:6a:e0:76:55:d4:74:ef:81: 07:65:e0:b0:38:1c:84:f9:80:1c:1a:6a:62:02:cf:72:90:85: 91:75:cd:33:d7:20:46:a8:22:0c:8a:80:91:92:0a:19:c0:25: 75:2e:cc:80:37:be:c5:9d:3f:0a:55:e9:2e:6e:67:9f:bf:08: 38:5c:97:f6:46:fc:94:66:28:3a:cf:e6:db:6d:af:12:b8:16: e4:c9:79:e1:97:6f:c5:83:29:59:99:eb:03:c6:6a:39:03:94: 9a:6b:90:77:ee:d2:e9:ad:5c:e4:5d:be:cf:04:bd:b8:63:1f: 37:f2:1f:4b:76:12:85:26:7d:f6:9f:ee:25:79:c9:8d:cd:4a: 82:98:f0:b5:9b:34:bd:df:89:07:e4:b0:93:87:8e:c1:b7:03: 1e:ad:85:68:ae:bc:73:4c:42:70:6c:41:14:0d:9b:de:04:12: f4:e1:a9:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYyup/R8VCLbeih9PrSPGXDHLhYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA3MjEwMjUyNDBaFw0yNjA3MjIwNTU4NDBaMDMxMTAvBgNV BAMTKDU2QUQyQkIwQjFFRDZDREVCMjA0ODUyRjREQzIyQTQwOTk2Qjk3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqS/WfKA8TObGv8EtQygmfSchK nxQYOX789evPMkucIZ8KsLEDXOxLWJolxfaUgZiih1x1cUs/JcK1ZwAlZSuFkML1 JENEhez6fZGZlWSEFwlIx6cPVtY3zHMUz6LNFas7NHjiULj5REg1fBA7xx39DgCF iZsZtiut2P0uagGUux4vAmAULCZ3y9sKuIT5feopgnatWJttZ/6+Rqj2i1+zLtYW dBOiRfGV+CzCM+ZiJPU6w/RpzcwdlaQ98S96JUYI4DInIKjC1ipDAUt3n/TJq5eG kwMI6QFjboYi9yFHlEVE4Oa++5yIZoTM77HJcQS7lz/YcqvmKZ0eTZTN3rN3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVq0rsLHtbN6yBIUvTcIqQJlrl4swHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk8A3X6js7Ee gC6Td7vCHmpU65TeGsX8ctXYtcTuUMstpQf7tuYbBqB+KkCnsZgGPpYnPH184hs/ Xny+hKH1zSQgxxwgU9wDGe5dwriHL3SqvGrgdlXUdO+BB2XgsDgchPmAHBpqYgLP cpCFkXXNM9cgRqgiDIqAkZIKGcAldS7MgDe+xZ0/ClXpLm5nn78IOFyX9kb8lGYo Os/m222vErgW5Ml54ZdvxYMpWZnrA8ZqOQOUmmuQd+7S6a1c5F2+zwS9uGMfN/If S3YShSZ99p/uJXnJjc1KgpjwtZs0vd+JB+Swk4eOwbcDHq2FaK68c0xCcGxBFA2b 3gQS9OGp9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:03 2026 by rpki-client