$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: EgGy4cpKVMTcipGbhzKnqp5120kogBD09ZgNwmsgQTk= Subject key identifier: D2:63:1C:C9:EC:42:3F:43:33:58:A8:1A:36:32:48:B3:F1:0B:08:DC Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 223A6C863178D0189C99D4AE0C66B1F35EF72A46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: 7E Signing time: Tue 14 Jul 2026 12:06:14 +0000 Manifest this update: Tue 14 Jul 2026 12:01:13 +0000 Manifest next update: Wed 15 Jul 2026 15:01:13 +0000 Files and hashes: 1: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 2: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) 3: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 4: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 5: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 6: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: XLCoHY46XlS4QEpQzevzRGOQc9YMLp42auBOYzuusLc=) 7: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 8: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 9: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) 10: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 11: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) 12: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 13: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) 14: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 15: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:6c:86:31:78:d0:18:9c:99:d4:ae:0c:66:b1:f3:5e:f7:2a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: Jul 14 12:01:13 2026 GMT Not After : Jul 15 15:01:13 2026 GMT Subject: CN=D2631CC9EC423F433358A81A363248B3F10B08DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:69:e4:23:a0:4c:f8:32:26:72:da:6a:29: d1:48:46:80:b8:f4:5e:0f:1f:3a:31:aa:69:c8:b5: 9c:73:32:b9:ac:56:20:12:5a:96:ca:5e:78:3c:35: 37:78:93:2e:16:c1:0c:c4:6c:dc:ba:d4:b0:3a:f1: 8b:7e:c3:fb:38:73:df:0e:6e:d8:e0:1d:e8:bd:34: 5d:93:e0:96:f9:50:27:af:74:91:56:05:d5:f3:3d: ea:3c:5c:1f:8f:9a:d5:89:23:d4:bf:57:cc:f9:1a: 8d:3f:61:57:1e:13:b7:e4:4a:86:91:c1:3d:5d:a7: 77:2a:a9:4c:ab:e0:7d:a8:6d:4d:77:ae:ae:38:87: f5:fc:47:b1:e8:62:fc:e2:7e:27:e6:3f:69:84:ab: 06:2b:f0:87:c3:45:c1:2e:2c:d0:3a:41:f3:8f:5e: 45:2c:93:8c:d2:f5:ee:08:26:32:39:50:4a:e4:44: 6e:0d:04:23:74:03:2e:0b:5e:76:f8:99:07:3c:e1: 02:d4:45:fd:55:58:d1:6f:07:b7:a9:38:5e:c9:f1: fc:0c:da:4b:10:29:0c:6c:9e:f8:89:cd:7f:e8:2c: a3:5b:67:21:0c:54:8c:01:8e:18:c9:48:29:c8:eb: 35:4c:59:15:bf:0a:ef:a8:b4:ba:95:b6:f5:0a:6d: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:63:1C:C9:EC:42:3F:43:33:58:A8:1A:36:32:48:B3:F1:0B:08:DC X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:89:fa:e9:41:7a:64:70:ae:0b:22:e4:d5:64:4a:b2:be:f9: a2:3e:d3:4a:6e:bc:c6:bf:e1:8c:90:cc:98:7c:5b:02:e9:b4: df:a3:ff:11:0b:4c:6f:ed:7f:81:55:5f:18:7f:be:71:97:ac: 31:1c:61:6d:4f:90:86:de:bb:e5:aa:38:35:09:13:03:94:69: 8a:0f:e0:a6:e2:6a:05:e0:c5:20:7b:7d:98:fc:59:96:e2:aa: e5:1c:ce:ff:54:ad:ac:96:69:67:d5:74:bd:ca:8e:b6:cd:ec: bc:e1:0b:d3:f6:d4:b5:0c:c3:7f:62:9c:61:4f:dc:ab:3d:e3: fd:df:98:fb:0e:69:42:56:33:3c:c4:76:3d:df:54:3d:e6:80: cc:1e:58:47:ca:59:59:d7:fc:fe:1b:de:20:9b:76:fa:aa:89: 47:4e:21:a6:74:d7:13:cb:b9:0c:d9:cb:d8:02:ef:28:7e:32: 96:6f:67:54:88:82:0e:34:c2:30:ee:78:2e:0a:d3:71:a6:ed: d9:e8:b9:19:bd:25:5e:e8:43:c1:88:e4:3e:ab:54:8a:44:68: a7:07:0f:e4:09:1f:0c:28:c5:a5:5e:5b:be:17:5b:ee:50:c8: af:08:22:a0:a0:80:61:33:26:08:07:44:f8:52:de:25:6a:ca: b2:80:31:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIjpshjF40BicmdSuDGax8173KkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA3MTQxMjAxMTNaFw0yNjA3MTUxNTAxMTNaMDMxMTAvBgNV BAMTKEQyNjMxQ0M5RUM0MjNGNDMzMzU4QTgxQTM2MzI0OEIzRjEwQjA4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRGnkI6BM+DImctpqKdFIRoC4 9F4PHzoxqmnItZxzMrmsViASWpbKXng8NTd4ky4WwQzEbNy61LA68Yt+w/s4c98O btjgHei9NF2T4Jb5UCevdJFWBdXzPeo8XB+PmtWJI9S/V8z5Go0/YVceE7fkSoaR wT1dp3cqqUyr4H2obU13rq44h/X8R7HoYvzififmP2mEqwYr8IfDRcEuLNA6QfOP XkUsk4zS9e4IJjI5UErkRG4NBCN0Ay4LXnb4mQc84QLURf1VWNFvB7epOF7J8fwM 2ksQKQxsnviJzX/oLKNbZyEMVIwBjhjJSCnI6zVMWRW/Cu+otLqVtvUKbb19AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0mMcyexCP0MzWKgaNjJIs/ELCNwwHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4n66UF6ZHCu CyLk1WRKsr75oj7TSm68xr/hjJDMmHxbAum036P/EQtMb+1/gVVfGH++cZesMRxh bU+Qht675ao4NQkTA5Rpig/gpuJqBeDFIHt9mPxZluKq5RzO/1StrJZpZ9V0vcqO ts3svOEL0/bUtQzDf2KcYU/cqz3j/d+Y+w5pQlYzPMR2Pd9UPeaAzB5YR8pZWdf8 /hveIJt2+qqJR04hpnTXE8u5DNnL2ALvKH4ylm9nVIiCDjTCMO54LgrTcabt2ei5 Gb0lXuhDwYjkPqtUikRopwcP5AkfDCjFpV5bvhdb7lDIrwgioKCAYTMmCAdE+FLe JWrKsoAxAQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:05 2026 by rpki-client