$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: Xo2NkKvUYMPx4kVkXpNv6z5/W/v/HjLn0k5PYO7oUgE= Subject key identifier: 0E:A7:D8:68:2E:47:0A:CB:7C:07:57:27:FE:CA:1F:71:2D:EB:32:5B Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 28A7EEC4B71390E523BC07BDCC73609C0233EEDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 90 Signing time: Mon 27 Jul 2026 00:02:50 +0000 Manifest this update: Sun 26 Jul 2026 23:57:50 +0000 Manifest next update: Tue 28 Jul 2026 02:01:50 +0000 Files and hashes: 1: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 2: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 3: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 4: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 5: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 6: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 7: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 8: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 9: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 10: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 11: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 12: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 13: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 14: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 15: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 16: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 17: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 18: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 19: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 20: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 21: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: 5GVi3ZKlujHdBWUiR2ejxgDthUHNH1PA7AW+6o4amZk=) 22: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 23: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 24: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 25: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 26: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 27: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 28: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 29: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 30: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 31: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 32: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 33: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 34: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 35: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 36: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 37: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 38: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 39: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 40: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 41: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a7:ee:c4:b7:13:90:e5:23:bc:07:bd:cc:73:60:9c:02:33:ee:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Jul 26 23:57:50 2026 GMT Not After : Jul 28 02:01:50 2026 GMT Subject: CN=0EA7D8682E470ACB7C075727FECA1F712DEB325B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:36:28:23:69:66:aa:6a:e3:31:00:6a:ab: 62:cc:1c:f7:6a:79:29:93:75:dd:e1:ba:e7:d4:c5: e9:0c:37:a1:65:93:d0:da:8d:49:81:35:98:45:a5: dc:08:e8:a0:45:aa:e3:bd:a7:8a:67:52:ce:7f:93: a6:82:0d:96:0f:17:ec:5b:48:b8:2a:09:0c:5d:9a: 4e:21:19:39:07:2d:6b:eb:7c:87:52:d6:81:71:1c: dc:71:cb:c9:28:08:3f:c9:1b:a3:6c:d1:9f:4b:c5: 34:97:ee:03:19:a7:69:9f:a7:ad:21:b1:5a:6d:dd: 75:c5:c5:de:8c:84:f1:5d:f1:01:72:6e:71:7a:bf: c2:57:f1:48:58:24:c4:94:ed:0c:1a:3c:26:d2:85: 9f:be:c5:ae:b3:87:6e:ea:74:47:71:0a:7e:c4:06: cf:aa:8c:3a:35:ce:6d:af:71:d5:30:43:19:bc:fc: 0b:cb:f5:8c:eb:2d:9f:66:a3:c2:3a:27:29:44:19: 67:91:be:9d:3e:43:93:73:20:7c:d1:d1:e4:39:aa: a5:d7:fa:98:71:ba:11:5e:43:11:f6:d6:78:44:75: 3c:15:57:d6:9e:73:a1:9b:a1:a9:ff:6d:8a:1f:70: d3:ff:f1:0f:7c:e5:d3:4c:9e:25:41:ac:5c:08:cf: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A7:D8:68:2E:47:0A:CB:7C:07:57:27:FE:CA:1F:71:2D:EB:32:5B X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:db:a1:d2:2e:a2:9d:d3:bb:fd:d0:fb:e7:e9:17:20:89:b9: b1:6b:c1:e4:ac:03:af:64:ca:a8:5c:65:97:b9:f6:bd:08:16: f7:e4:10:06:76:9d:cd:da:60:86:37:54:7f:b4:f0:5a:00:77: 40:0e:a2:47:9d:6f:88:7e:97:fb:d8:10:ae:c0:09:02:2a:0d: 1c:d6:af:11:d7:fb:99:19:5a:53:0a:e8:62:80:e1:d2:82:59: e0:91:eb:eb:83:1f:e0:02:1d:8b:38:c8:a8:cb:b2:f0:00:ad: 32:1c:b6:3f:e2:71:23:16:a5:a0:42:43:e6:37:ff:66:9b:ef: 0b:ba:48:b8:5e:b5:e2:77:5e:af:45:6c:ec:f2:8f:1b:29:33: 10:c7:68:ef:98:0e:79:c9:c9:39:b0:9e:01:b5:8a:51:e7:c3: 0d:fe:e5:5b:2a:33:2d:97:71:1a:e7:88:c1:56:e1:e5:4f:48: 3d:a2:a2:92:fd:ca:ee:49:95:25:df:3e:3f:5a:80:53:d9:ce: d7:53:2b:75:c9:fb:bc:0f:d2:6c:bb:64:96:36:25:7a:ce:0d: 41:3e:1d:9f:0f:1c:8b:21:af:b6:9a:4d:0a:6a:5d:a0:8b:9b: a5:bf:98:73:2b:e9:89:42:30:64:b4:d7:b1:45:47:c8:cf:9f: b8:fb:24:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKfuxLcTkOUjvAe9zHNgnAIz7twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA3MjYyMzU3NTBaFw0yNjA3MjgwMjAxNTBaMDMxMTAvBgNV BAMTKDBFQTdEODY4MkU0NzBBQ0I3QzA3NTcyN0ZFQ0ExRjcxMkRFQjMyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQDYoI2lmqmrjMQBqq2LMHPdq eSmTdd3huufUxekMN6Flk9DajUmBNZhFpdwI6KBFquO9p4pnUs5/k6aCDZYPF+xb SLgqCQxdmk4hGTkHLWvrfIdS1oFxHNxxy8koCD/JG6Ns0Z9LxTSX7gMZp2mfp60h sVpt3XXFxd6MhPFd8QFybnF6v8JX8UhYJMSU7QwaPCbShZ++xa6zh27qdEdxCn7E Bs+qjDo1zm2vcdUwQxm8/AvL9YzrLZ9mo8I6JylEGWeRvp0+Q5NzIHzR0eQ5qqXX +phxuhFeQxH21nhEdTwVV9aec6Gboan/bYofcNP/8Q985dNMniVBrFwIz8JRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDqfYaC5HCst8B1cn/sofcS3rMlswHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNuh0i6indO7 /dD75+kXIIm5sWvB5KwDr2TKqFxll7n2vQgW9+QQBnadzdpghjdUf7TwWgB3QA6i R51viH6X+9gQrsAJAioNHNavEdf7mRlaUwroYoDh0oJZ4JHr64Mf4AIdizjIqMuy 8ACtMhy2P+JxIxaloEJD5jf/ZpvvC7pIuF614nder0Vs7PKPGykzEMdo75gOecnJ ObCeAbWKUefDDf7lWyozLZdxGueIwVbh5U9IPaKikv3K7kmVJd8+P1qAU9nO11Mr dcn7vA/SbLtkljYles4NQT4dnw8ciyGvtppNCmpdoIubpb+YcyvpiUIwZLTXsUVH yM+fuPskjw== -----END CERTIFICATE-----Generated at Mon Jul 27 11:15:27 2026 by rpki-client