$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: DD2w7jUEVGu55NESeeCZB8TUWZAzwwOfMy4pXYf6SeE= Subject key identifier: FA:3D:09:59:4A:0C:38:23:2B:E9:C8:A4:29:6B:25:7D:0E:59:E4:3A Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 2F62F68FEA1C5448D4365C3ECEBB3635A7D69B74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 87 Signing time: Mon 27 Jul 2026 14:14:14 +0000 Manifest this update: Mon 27 Jul 2026 14:09:14 +0000 Manifest next update: Tue 28 Jul 2026 18:00:14 +0000 Files and hashes: 1: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) 2: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) 3: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: Xo54EfKfr7krwO+BqTTahKKt54capAW1p3XGahEjqoQ=) 4: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) 5: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) 6: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:62:f6:8f:ea:1c:54:48:d4:36:5c:3e:ce:bb:36:35:a7:d6:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Jul 27 14:09:14 2026 GMT Not After : Jul 28 18:00:14 2026 GMT Subject: CN=FA3D09594A0C38232BE9C8A4296B257D0E59E43A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:71:57:29:c5:97:f9:13:f2:91:3e:81:54:f3: 50:cc:83:f1:47:7a:f8:f9:77:6e:89:97:be:f0:3d: 3f:64:08:02:16:1f:df:fc:63:a1:bb:76:91:37:8b: 33:43:2e:3a:e0:59:15:08:a2:ef:80:09:33:57:70: ff:5d:1b:5c:0b:5c:d1:56:4a:f8:86:b7:89:33:fc: f0:13:00:14:49:16:76:77:1a:bc:a1:18:b7:8a:a9: a7:67:3a:14:a2:a2:64:48:85:15:36:b6:f0:d9:6c: 71:92:69:8d:4a:34:83:78:7d:d9:c4:6b:0a:d3:b4: d9:33:1d:4b:d7:5a:90:38:ad:29:cd:10:e3:56:d4: 1f:b3:de:dc:49:87:6c:ec:9b:c4:36:ba:c7:31:e4: 2e:71:bf:cc:da:6d:fe:2d:9e:11:09:f7:66:d6:83: 53:a8:52:e8:62:ed:bf:bf:ef:5a:83:3f:56:38:12: 2c:c5:b0:55:00:78:b2:18:66:b9:e9:2c:8f:25:b5: 30:59:6d:c8:d3:a9:92:ba:60:e8:cd:89:07:32:06: 56:bb:32:17:82:dd:1d:a5:e8:ce:fa:a7:d6:94:1a: 46:09:0b:8c:24:53:de:8d:0b:e3:0d:f2:48:fb:29: 3f:4d:e1:57:15:e0:f9:5b:70:c4:81:f6:a1:3a:52: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:09:59:4A:0C:38:23:2B:E9:C8:A4:29:6B:25:7D:0E:59:E4:3A X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5d:c9:bf:a6:8e:14:d4:5d:25:dd:d9:d2:b5:a4:0d:05:fb: 52:cf:97:b5:43:fc:58:8c:42:77:9a:33:ef:f9:32:1a:f4:c5: 0c:14:7e:6e:06:89:3b:ef:c5:e8:e4:6f:c6:41:48:f9:56:d3: ec:01:4e:36:4b:c4:e4:1b:12:29:b4:6e:f2:34:9d:1f:53:88: bf:9c:29:48:5d:2b:2a:30:46:e1:3c:a4:9d:76:05:c1:69:ae: 2f:81:d1:39:97:54:39:ca:2b:96:8c:e0:cf:84:2c:58:4b:54: cf:3c:c3:74:02:fe:4f:52:07:ab:1b:20:d8:be:06:b0:6d:5e: de:05:32:68:40:db:1e:d9:53:ad:52:80:18:ec:0a:c3:84:89: a3:6c:e8:ae:f9:e4:f4:b7:b0:3c:2f:7c:31:03:a4:d4:fa:8b: 57:f8:c8:f0:2a:5c:3a:09:da:62:cb:8e:a1:16:4b:cc:34:80: bc:00:e4:05:9c:d1:35:5e:a6:58:c1:33:c4:93:16:f3:d7:e8: be:c6:ef:c4:a9:25:78:fe:ea:60:8e:b6:f0:e7:d1:5d:07:ce: 29:d2:af:00:52:3d:b0:46:22:36:71:63:ee:ed:45:09:a1:6e: 39:1f:6d:d8:f3:04:6c:ab:98:12:2c:d1:9d:c9:b9:5d:8b:a7: 30:e3:7f:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL2L2j+ocVEjUNlw+zrs2NafWm3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA3MjcxNDA5MTRaFw0yNjA3MjgxODAwMTRaMDMxMTAvBgNV BAMTKEZBM0QwOTU5NEEwQzM4MjMyQkU5QzhBNDI5NkIyNTdEMEU1OUU0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4cVcpxZf5E/KRPoFU81DMg/FH evj5d26Jl77wPT9kCAIWH9/8Y6G7dpE3izNDLjrgWRUIou+ACTNXcP9dG1wLXNFW SviGt4kz/PATABRJFnZ3GryhGLeKqadnOhSiomRIhRU2tvDZbHGSaY1KNIN4fdnE awrTtNkzHUvXWpA4rSnNEONW1B+z3txJh2zsm8Q2uscx5C5xv8zabf4tnhEJ92bW g1OoUuhi7b+/71qDP1Y4EizFsFUAeLIYZrnpLI8ltTBZbcjTqZK6YOjNiQcyBla7 MheC3R2l6M76p9aUGkYJC4wkU96NC+MN8kj7KT9N4VcV4PlbcMSB9qE6Uq2JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+j0JWUoMOCMr6cikKWslfQ5Z5DowHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF3Jv6aOFNRd Jd3Z0rWkDQX7Us+XtUP8WIxCd5oz7/kyGvTFDBR+bgaJO+/F6ORvxkFI+VbT7AFO NkvE5BsSKbRu8jSdH1OIv5wpSF0rKjBG4TyknXYFwWmuL4HROZdUOcorlozgz4Qs WEtUzzzDdAL+T1IHqxsg2L4GsG1e3gUyaEDbHtlTrVKAGOwKw4SJo2zorvnk9Lew PC98MQOk1PqLV/jI8CpcOgnaYsuOoRZLzDSAvADkBZzRNV6mWMEzxJMW89fovsbv xKkleP7qYI628OfRXQfOKdKvAFI9sEYiNnFj7u1FCaFuOR9t2PMEbKuYEizRncm5 XYunMON/sw== -----END CERTIFICATE-----Generated at Mon Jul 27 16:05:36 2026 by rpki-client