$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: aUCTHnebhn8zCJG2+wr/OGozs9ssa8/KZ+0VT8vumBA= Subject key identifier: B7:DB:8C:40:41:8C:AF:EB:A1:43:4F:B3:35:1B:FF:64:44:5F:81:C4 Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 74D57C1D9279AA7A1CFFBA803C83946CCC994214 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: 7E Signing time: Mon 27 Jul 2026 08:38:44 +0000 Manifest this update: Mon 27 Jul 2026 08:33:44 +0000 Manifest next update: Tue 28 Jul 2026 12:26:44 +0000 Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) 2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: AjPNvvYddgxoGVAK4vpBL3vA3CkYmQAz4gql+Q3M+VM=) 3: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d5:7c:1d:92:79:aa:7a:1c:ff:ba:80:3c:83:94:6c:cc:99:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Jul 27 08:33:44 2026 GMT Not After : Jul 28 12:26:44 2026 GMT Subject: CN=B7DB8C40418CAFEBA1434FB3351BFF64445F81C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:6f:94:07:65:a7:15:cb:b7:2a:35:15:3b: 5d:3f:bf:99:13:4b:1c:be:ab:a0:fc:34:4f:2f:8f: cf:d9:93:06:15:09:c0:ee:01:63:9b:8d:1f:37:a4: 21:32:fb:46:88:f5:83:bc:ed:5b:57:4e:d8:0a:83: 98:08:fb:69:5e:18:f5:12:d3:a1:9b:e9:88:a1:70: e3:18:54:a1:f4:a3:98:d2:55:25:c7:4f:af:34:98: 80:3a:4a:dd:81:61:61:52:50:42:25:4a:0f:a4:20: e9:b1:5b:70:01:00:7d:90:74:84:16:ad:2d:e8:ba: e7:70:5b:d6:5f:b3:0a:ae:03:91:ee:7f:8a:64:61: ec:aa:44:e1:a6:91:2a:6a:d6:3e:43:b5:28:46:16: 8b:cf:88:57:04:65:98:43:f4:8f:93:0f:c3:46:26: 57:fb:c9:8c:63:5a:6e:91:38:af:4a:57:69:26:08: b4:0c:17:be:94:10:71:8f:36:d9:b3:07:4d:00:18: e9:d9:d1:1f:88:80:49:18:2a:83:e1:6a:ba:44:1b: 66:ed:00:54:54:ed:d4:65:94:d8:09:2f:88:7f:e6: 6e:cd:bf:09:a6:13:80:06:08:b7:00:d5:4a:97:4d: d5:90:b8:8e:63:ae:47:1d:06:90:d6:b5:79:cc:66: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:8C:40:41:8C:AF:EB:A1:43:4F:B3:35:1B:FF:64:44:5F:81:C4 X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:88:7a:47:7d:57:a8:76:6f:60:bb:eb:60:10:42:60:b8: f4:b1:1a:6b:dd:ae:36:5a:e3:f1:5f:a7:1e:30:21:98:b9:ea: de:55:4e:45:41:dd:63:69:16:ec:55:96:8e:c7:01:b9:33:08: 12:20:55:f1:19:ec:eb:32:8d:e8:1d:b1:f1:8b:5c:75:16:59: 2e:f9:2f:4b:72:b0:4e:e6:6d:68:bb:c9:ff:4e:6c:8c:18:5a: 39:9e:68:28:88:57:0c:9c:bd:ce:73:45:08:59:bc:9c:29:ac: f1:e9:3d:92:db:64:7b:d1:4a:e7:31:8f:80:25:73:cc:d2:30: 6e:76:3c:e9:0c:b1:7a:01:26:53:fa:71:a8:d3:fa:2d:b9:f0: cb:cb:52:b7:2d:2c:d4:56:10:a6:eb:eb:54:f1:87:2e:a8:73: 9f:7b:d4:13:c1:ff:c5:d2:ec:9f:ec:0c:c2:66:03:e8:6f:1b: a5:e8:81:59:fc:04:bd:50:f1:9d:66:fb:c6:cf:f1:81:9b:b9: 0a:35:05:5f:e7:5c:86:0c:5b:86:e5:ac:fe:7d:93:32:b2:2d: dd:79:f1:e9:17:c8:c8:fc:33:92:0e:d5:95:1e:93:77:69:e4: ef:b9:c2:48:53:38:2c:86:70:e9:1e:6c:b7:dc:61:2a:0d:0a: c3:01:20:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdNV8HZJ5qnoc/7qAPIOUbMyZQhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjA3MjcwODMzNDRaFw0yNjA3MjgxMjI2NDRaMDMxMTAvBgNV BAMTKEI3REI4QzQwNDE4Q0FGRUJBMTQzNEZCMzM1MUJGRjY0NDQ1RjgxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgG2+UB2WnFcu3KjUVO10/v5kT Sxy+q6D8NE8vj8/ZkwYVCcDuAWObjR83pCEy+0aI9YO87VtXTtgKg5gI+2leGPUS 06Gb6YihcOMYVKH0o5jSVSXHT680mIA6St2BYWFSUEIlSg+kIOmxW3ABAH2QdIQW rS3ouudwW9ZfswquA5Huf4pkYeyqROGmkSpq1j5DtShGFovPiFcEZZhD9I+TD8NG Jlf7yYxjWm6ROK9KV2kmCLQMF76UEHGPNtmzB00AGOnZ0R+IgEkYKoPharpEG2bt AFRU7dRllNgJL4h/5m7NvwmmE4AGCLcA1UqXTdWQuI5jrkcdBpDWtXnMZsBzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt9uMQEGMr+uhQ0+zNRv/ZERfgcQwHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYGIekd9V6h2 b2C762AQQmC49LEaa92uNlrj8V+nHjAhmLnq3lVORUHdY2kW7FWWjscBuTMIEiBV 8Rns6zKN6B2x8YtcdRZZLvkvS3KwTuZtaLvJ/05sjBhaOZ5oKIhXDJy9znNFCFm8 nCms8ek9kttke9FK5zGPgCVzzNIwbnY86QyxegEmU/pxqNP6Lbnwy8tSty0s1FYQ puvrVPGHLqhzn3vUE8H/xdLsn+wMwmYD6G8bpeiBWfwEvVDxnWb7xs/xgZu5CjUF X+dchgxbhuWs/n2TMrIt3Xnx6RfIyPwzkg7VlR6Td2nk77nCSFM4LIZw6R5st9xh Kg0KwwEgWg== -----END CERTIFICATE-----Generated at Mon Jul 27 12:48:50 2026 by rpki-client