$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: lfvU4mNq6y0bv8IQg+Ure9i3JBb+6Zrdh38L0gqBTaY= Subject key identifier: F9:48:2C:A7:F1:E4:C9:B3:00:CD:7F:8B:41:28:E5:88:1C:08:F9:4B Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 7BAB6B9D762366935275FE4D372C5249B60EFC85 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 88 Signing time: Mon 27 Jul 2026 01:02:58 +0000 Manifest this update: Mon 27 Jul 2026 00:57:58 +0000 Manifest next update: Tue 28 Jul 2026 03:23:58 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: GwvOLfIM8pkx7vfj0OmnnvEN6a38ZLG3unCoft1BdI4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ab:6b:9d:76:23:66:93:52:75:fe:4d:37:2c:52:49:b6:0e:fc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Jul 27 00:57:58 2026 GMT Not After : Jul 28 03:23:58 2026 GMT Subject: CN=F9482CA7F1E4C9B300CD7F8B4128E5881C08F94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:45:33:54:7c:1b:cb:0e:05:7a:88:7f:07: c6:6a:f8:cd:4e:51:fd:dd:cb:99:d4:82:39:48:fb: 2d:01:8d:ea:f1:59:ec:34:43:1d:68:26:c8:5b:5e: ee:d8:66:fb:13:b7:24:ec:f9:02:7f:81:a2:ef:ac: f2:f8:d9:3e:72:03:45:f4:0a:ee:92:61:7e:84:95: 17:23:f4:33:5f:1d:52:a2:01:9b:d7:e2:2b:b3:67: e4:b7:aa:50:f8:34:7d:3f:35:66:07:7e:fc:59:63: 27:69:9f:fa:43:56:03:20:b1:b1:af:0d:9a:62:73: 76:02:c4:e1:b9:cc:5f:e8:ca:4b:7b:0b:c1:24:4a: 05:08:67:d6:a4:91:8e:4d:80:64:fe:98:0c:95:44: 1a:53:fa:65:3d:b0:a0:28:a8:5e:10:49:1e:68:5d: 57:f8:a0:89:4f:8d:9d:f0:75:3b:12:7e:b0:c3:76: 1b:e6:55:b2:57:cf:cb:8c:e1:e9:dd:56:27:a8:19: 30:87:c7:d9:20:b0:11:58:71:54:bb:b4:f1:50:a1: 09:b9:1e:cb:80:7e:a9:f0:b9:38:47:e6:2c:16:21: e1:b7:fc:c6:d7:e1:55:14:1d:92:bc:c9:00:37:22: b2:a9:fb:e4:ac:46:03:02:03:8b:c9:70:20:3e:63: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:2C:A7:F1:E4:C9:B3:00:CD:7F:8B:41:28:E5:88:1C:08:F9:4B X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7a:a4:ea:b7:91:17:4d:21:d3:7b:a8:cb:b2:1b:27:4e:6b: 9d:01:86:94:26:41:2c:f9:01:87:8d:d5:c1:73:08:b8:d0:3f: 84:10:4d:ab:40:fd:fb:42:05:20:ab:93:c1:45:7c:35:1d:ad: 0c:e4:8f:fd:57:e9:bd:3d:6d:f2:71:05:6e:02:67:21:1d:92: 42:d7:01:2b:7a:16:a2:6d:6d:b2:22:7a:3d:e8:fc:58:09:a0: 6e:a0:03:e1:5d:41:33:c6:8c:56:10:44:c0:10:6c:ae:b5:a8: 78:de:f0:ef:e1:65:30:a0:8a:42:4a:65:6b:0d:1d:ff:7f:e5: 84:fc:a9:30:e1:73:0b:3f:de:a4:cd:74:d0:e0:cf:ea:76:6f: ac:8d:21:2a:f0:82:2b:7c:6d:76:4c:7b:ae:65:d1:32:41:e9: b6:40:ac:11:66:a7:4d:cf:58:a3:7d:66:3d:67:b1:62:1f:b4: ab:47:42:4e:4b:95:89:e6:9e:b8:40:4c:b5:3e:83:02:c4:aa: 6e:c8:44:66:3c:a5:3f:64:da:78:7f:02:9c:67:06:72:90:08: a8:83:5e:f9:3d:9a:a3:67:d7:ac:00:36:ea:51:03:77:a6:04: cd:b9:38:5c:5a:3b:bc:e0:2e:3b:16:57:be:c0:d1:cc:f8:4b: 4a:9f:ca:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe6trnXYjZpNSdf5NNyxSSbYO/IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA3MjcwMDU3NThaFw0yNjA3MjgwMzIzNThaMDMxMTAvBgNV BAMTKEY5NDgyQ0E3RjFFNEM5QjMwMENEN0Y4QjQxMjhFNTg4MUMwOEY5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJUUzVHwbyw4Feoh/B8Zq+M1O Uf3dy5nUgjlI+y0BjerxWew0Qx1oJshbXu7YZvsTtyTs+QJ/gaLvrPL42T5yA0X0 Cu6SYX6ElRcj9DNfHVKiAZvX4iuzZ+S3qlD4NH0/NWYHfvxZYydpn/pDVgMgsbGv DZpic3YCxOG5zF/oykt7C8EkSgUIZ9akkY5NgGT+mAyVRBpT+mU9sKAoqF4QSR5o XVf4oIlPjZ3wdTsSfrDDdhvmVbJXz8uM4endVieoGTCHx9kgsBFYcVS7tPFQoQm5 HsuAfqnwuThH5iwWIeG3/MbX4VUUHZK8yQA3IrKp++SsRgMCA4vJcCA+Y8QrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+Ugsp/HkybMAzX+LQSjliBwI+UswHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHqk6reRF00h 03uoy7IbJ05rnQGGlCZBLPkBh43VwXMIuNA/hBBNq0D9+0IFIKuTwUV8NR2tDOSP /VfpvT1t8nEFbgJnIR2SQtcBK3oWom1tsiJ6Pej8WAmgbqAD4V1BM8aMVhBEwBBs rrWoeN7w7+FlMKCKQkplaw0d/3/lhPypMOFzCz/epM100ODP6nZvrI0hKvCCK3xt dkx7rmXRMkHptkCsEWanTc9Yo31mPWexYh+0q0dCTkuVieaeuEBMtT6DAsSqbshE ZjylP2TaeH8CnGcGcpAIqINe+T2ao2fXrAA26lEDd6YEzbk4XFo7vOAuOxZXvsDR zPhLSp/KNQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:16 2026 by rpki-client