$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: ERFiKuiqXsWiTXWrdSCFYzHfM4bKDqIjTZEVqLDN1hI= Subject key identifier: 33:A3:44:6E:4F:DD:67:28:33:C3:3B:B9:D7:12:36:45:52:E6:B5:F1 Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 2BE8DD4F172726122FA990BC4C558BD631A146B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: 86 Signing time: Mon 27 Jul 2026 06:58:38 +0000 Manifest this update: Mon 27 Jul 2026 06:53:38 +0000 Manifest next update: Tue 28 Jul 2026 09:07:38 +0000 Files and hashes: 1: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=) 2: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: p1F8zILGSaqa8xfmDosikbBmURjogLogTR2QQ5vezY0=) 3: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=) 4: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e8:dd:4f:17:27:26:12:2f:a9:90:bc:4c:55:8b:d6:31:a1:46:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Jul 27 06:53:38 2026 GMT Not After : Jul 28 09:07:38 2026 GMT Subject: CN=33A3446E4FDD672833C33BB9D712364552E6B5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:cf:15:22:9b:bd:93:f7:20:0c:e2:87:a4: 19:75:65:d7:4c:e1:54:4b:16:18:43:cb:71:6e:2e: e6:e3:4e:02:15:38:e5:5e:ab:57:40:82:ac:df:6d: 54:1a:ba:90:bd:ac:db:c8:70:08:b0:17:4e:f8:ad: 9e:18:bd:31:78:33:08:cc:fb:16:db:ba:1f:3a:a0: 9f:64:2f:c8:fe:ab:cf:ac:9f:5c:e1:11:90:15:e0: 3a:52:12:81:ce:f7:b7:87:e3:55:98:23:6e:1f:56: 9c:2c:ae:ae:06:4f:6c:1a:14:5b:63:92:68:57:03: 4b:9c:8a:a4:d3:86:14:fd:f9:68:5d:45:aa:57:15: 82:1a:31:e7:4a:1a:ee:fb:c3:f8:fe:c2:8e:a0:01: 11:52:17:00:61:3a:42:ba:1b:1c:cf:48:23:84:d6: 03:a7:67:9f:dc:21:f7:f0:af:52:fb:2c:0d:64:d1: 16:cd:04:b5:18:30:c3:6f:b4:e2:ed:fb:79:a9:c3: 0b:b5:4e:1e:3b:48:6b:18:97:74:77:96:df:fa:6d: fe:da:6d:c5:83:02:9a:da:cb:78:17:1f:79:30:f9: b7:63:6b:3c:b8:ab:b6:e6:5f:b2:3b:bf:60:a7:02: 66:a4:35:8d:af:5c:1b:61:0d:e6:69:de:be:79:d3: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A3:44:6E:4F:DD:67:28:33:C3:3B:B9:D7:12:36:45:52:E6:B5:F1 X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a9:9f:ea:90:9f:23:64:7c:c6:bf:98:b0:e0:69:f5:e1:ef: 30:4b:15:62:b3:0e:0d:d0:42:46:bb:22:2e:a1:f1:ef:7d:1d: 18:e9:54:6f:4a:7d:ae:89:c4:95:48:23:97:d9:f2:a5:9e:6b: 42:7d:09:d7:e0:31:f1:89:91:10:b1:e5:c0:e5:25:d8:3f:06: ee:25:17:87:89:73:0e:ac:af:60:7b:ba:2b:8a:7c:75:c6:8a: 89:92:54:1c:a6:4c:9d:d0:84:a2:9d:ed:d8:89:9c:e8:ad:c3: ae:02:e6:79:6b:07:69:48:6a:83:85:f1:4f:46:4a:fe:23:02: b1:e9:d4:60:58:a1:30:8b:10:19:ef:23:f7:c8:e3:f8:5f:9a: 1f:f4:08:61:8d:85:32:8c:8b:dc:0c:23:15:92:2c:d2:b2:91: 40:9d:17:5f:44:e9:7f:de:69:da:ad:82:c8:81:f2:e5:95:67: 6e:f7:83:35:0a:cc:ae:0f:48:4d:cc:11:2f:0d:7b:7f:71:1c: be:c4:b5:4d:42:8d:b3:6e:a3:dd:54:34:d2:df:e2:fe:54:0c: 47:13:3b:a0:df:6f:00:61:f4:bc:eb:b4:56:08:b6:c8:5e:59: c3:c2:85:14:40:45:cd:c5:77:d1:59:8c:f5:85:d5:e0:07:c3: af:57:3f:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK+jdTxcnJhIvqZC8TFWL1jGhRrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjA3MjcwNjUzMzhaFw0yNjA3MjgwOTA3MzhaMDMxMTAvBgNV BAMTKDMzQTM0NDZFNEZERDY3MjgzM0MzM0JCOUQ3MTIzNjQ1NTJFNkI1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCir88VIpu9k/cgDOKHpBl1ZddM 4VRLFhhDy3FuLubjTgIVOOVeq1dAgqzfbVQaupC9rNvIcAiwF074rZ4YvTF4MwjM +xbbuh86oJ9kL8j+q8+sn1zhEZAV4DpSEoHO97eH41WYI24fVpwsrq4GT2waFFtj kmhXA0uciqTThhT9+WhdRapXFYIaMedKGu77w/j+wo6gARFSFwBhOkK6GxzPSCOE 1gOnZ5/cIffwr1L7LA1k0RbNBLUYMMNvtOLt+3mpwwu1Th47SGsYl3R3lt/6bf7a bcWDApray3gXH3kw+bdjazy4q7bmX7I7v2CnAmakNY2vXBthDeZp3r5501QHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM6NEbk/dZygzwzu51xI2RVLmtfEwHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqmf6pCfI2R8 xr+YsOBp9eHvMEsVYrMODdBCRrsiLqHx730dGOlUb0p9ronElUgjl9nypZ5rQn0J 1+Ax8YmRELHlwOUl2D8G7iUXh4lzDqyvYHu6K4p8dcaKiZJUHKZMndCEop3t2Imc 6K3DrgLmeWsHaUhqg4XxT0ZK/iMCsenUYFihMIsQGe8j98jj+F+aH/QIYY2FMoyL 3AwjFZIs0rKRQJ0XX0Tpf95p2q2CyIHy5ZVnbveDNQrMrg9ITcwRLw17f3EcvsS1 TUKNs26j3VQ00t/i/lQMRxM7oN9vAGH0vOu0Vgi2yF5Zw8KFFEBFzcV30VmM9YXV 4AfDr1c/Jw== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:21 2026 by rpki-client