$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: uANay7z7R0CbVOUM5TJz87x/KNkg+IgR/uBeXInR7yg= Subject key identifier: 82:4D:D2:9F:DE:4E:10:98:74:66:97:D8:40:43:CB:70:65:69:84:1C Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 048BD292922B1E60F58CBC32124AB1DFBDE88E53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: 89 Signing time: Mon 27 Jul 2026 09:58:51 +0000 Manifest this update: Mon 27 Jul 2026 09:53:51 +0000 Manifest next update: Tue 28 Jul 2026 13:44:51 +0000 Files and hashes: 1: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: RY5YZKHHMK+n7MQU3PA5AscMV6rhf8ABPclRhjXbgIc=) 2: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8b:d2:92:92:2b:1e:60:f5:8c:bc:32:12:4a:b1:df:bd:e8:8e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Jul 27 09:53:51 2026 GMT Not After : Jul 28 13:44:51 2026 GMT Subject: CN=824DD29FDE4E1098746697D84043CB706569841C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:0b:d1:96:2e:dc:8d:36:92:b8:9c:d3:2c: 29:5d:f6:c8:ec:b6:62:35:82:03:bb:16:a9:53:93: af:38:28:c5:54:63:88:00:91:55:98:d1:da:0e:1b: e7:80:36:02:d5:1d:ba:01:51:00:e3:c5:e7:01:08: 55:d8:36:3d:88:87:5d:55:af:b6:e2:09:60:cf:7b: 2b:cb:d1:67:35:01:05:23:b5:55:6b:82:85:5d:b2: 44:d2:06:91:60:80:9e:64:3e:a4:38:24:d4:06:e5: 1e:f6:59:b2:c4:2e:5a:9a:60:e7:8c:e3:dd:62:a4: 82:1a:b7:40:cb:77:96:7d:43:e6:29:ad:28:1b:f3: cb:88:50:50:81:84:b6:60:b5:48:7a:77:bc:47:7f: a0:85:bd:de:f7:5a:79:01:e9:ce:68:ea:6c:5c:bd: c7:70:d4:41:df:7a:b7:e8:1b:dd:f9:72:78:5f:79: 46:18:a7:ca:1c:6b:d6:eb:b7:33:b6:09:3c:26:8c: 15:6d:be:45:dc:2e:89:28:03:ca:22:3f:89:9f:d4: 4a:e0:4b:33:82:ab:a2:a0:52:4f:f9:03:3f:4c:ea: 09:13:2e:79:d0:6a:27:4b:2c:cc:70:3a:0e:0f:08: 19:6b:03:ab:4a:91:1a:88:2a:ba:ed:4c:22:e9:1e: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4D:D2:9F:DE:4E:10:98:74:66:97:D8:40:43:CB:70:65:69:84:1C X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:2f:54:e7:32:86:68:3f:d7:d0:fa:05:13:d9:3d:3f:b2: 41:4e:da:cc:86:2f:90:d5:15:94:de:d3:ee:3a:e1:5e:e1:a2: 3f:0d:76:13:d4:49:fb:4f:dd:ae:3c:ae:da:f7:90:8d:e8:c0: 25:03:18:30:1b:49:ea:de:27:49:04:fe:fd:af:85:70:61:a0: d9:8b:c7:0d:5b:be:61:e4:b7:0f:18:df:df:6a:33:14:c0:5f: 72:39:73:32:0a:9d:22:88:52:45:8c:57:24:7d:da:62:4b:30: b1:15:82:d2:c6:00:b1:e6:e1:78:c5:f0:02:d4:cf:33:bd:3e: c8:ff:71:e1:f2:27:ae:0d:55:9c:b7:c8:f0:8f:c5:14:dc:32: 71:15:cc:05:ff:c3:82:10:19:a7:27:ba:21:f9:d7:c5:7b:51: 5c:71:ed:92:65:84:0a:2a:e8:95:0e:89:9d:3d:1d:9b:25:bd: 11:93:11:18:07:b7:25:a1:90:c0:6f:e0:01:2d:fc:78:41:b7: 56:f7:b7:9f:d9:ee:3f:02:26:c7:47:81:1b:b0:46:0a:d7:16: ee:79:ae:76:02:5a:88:40:75:c9:25:35:c4:03:17:22:c1:2f: a2:d4:47:f1:8b:47:1b:e0:a6:67:6b:0e:1d:9b:72:0d:9f:7f: 12:9e:0a:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBIvSkpIrHmD1jLwyEkqx373ojlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA3MjcwOTUzNTFaFw0yNjA3MjgxMzQ0NTFaMDMxMTAvBgNV BAMTKDgyNEREMjlGREU0RTEwOTg3NDY2OTdEODQwNDNDQjcwNjU2OTg0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrwvRli7cjTaSuJzTLCld9sjs tmI1ggO7FqlTk684KMVUY4gAkVWY0doOG+eANgLVHboBUQDjxecBCFXYNj2Ih11V r7biCWDPeyvL0Wc1AQUjtVVrgoVdskTSBpFggJ5kPqQ4JNQG5R72WbLELlqaYOeM 491ipIIat0DLd5Z9Q+YprSgb88uIUFCBhLZgtUh6d7xHf6CFvd73WnkB6c5o6mxc vcdw1EHferfoG935cnhfeUYYp8oca9brtzO2CTwmjBVtvkXcLokoA8oiP4mf1Erg SzOCq6KgUk/5Az9M6gkTLnnQaidLLMxwOg4PCBlrA6tKkRqIKrrtTCLpHkc1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgk3Sn95OEJh0ZpfYQEPLcGVphBwwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQkvVOcyhmg/ 19D6BRPZPT+yQU7azIYvkNUVlN7T7jrhXuGiPw12E9RJ+0/drjyu2veQjejAJQMY MBtJ6t4nSQT+/a+FcGGg2YvHDVu+YeS3Dxjf32ozFMBfcjlzMgqdIohSRYxXJH3a YkswsRWC0sYAsebheMXwAtTPM70+yP9x4fInrg1VnLfI8I/FFNwycRXMBf/DghAZ pye6IfnXxXtRXHHtkmWECirolQ6JnT0dmyW9EZMRGAe3JaGQwG/gAS38eEG3Vve3 n9nuPwImx0eBG7BGCtcW7nmudgJaiEB1ySU1xAMXIsEvotRH8YtHG+CmZ2sOHZty DZ9/Ep4KiQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:12 2026 by rpki-client