$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json) Hash identifier: bRGq9cN9NM1zbmwkgBBCYiJxPBiCOvvth0VginAd3JQ= Subject key identifier: A1:8C:8E:46:81:88:03:EF:0D:40:6B:09:D4:C3:98:47:CE:AB:EB:95 Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 4A0B3B5E3A1104716D7E9A826C76B304120B4238 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft Manifest number: 87 Signing time: Mon 27 Jul 2026 06:18:34 +0000 Manifest this update: Mon 27 Jul 2026 06:13:34 +0000 Manifest next update: Tue 28 Jul 2026 07:32:34 +0000 Files and hashes: 1: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: WU0HBgyWi37/EP+aiynWdmBzjkZL/vpu/jeVIVymnts=) 2: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0b:3b:5e:3a:11:04:71:6d:7e:9a:82:6c:76:b3:04:12:0b:42:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: Jul 27 06:13:34 2026 GMT Not After : Jul 28 07:32:34 2026 GMT Subject: CN=A18C8E46818803EF0D406B09D4C39847CEABEB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:33:a6:68:7f:29:00:d1:70:28:f6:7d:1a: 1f:17:61:2d:4d:80:6a:26:71:de:2c:8d:da:56:97: 29:b5:0a:2d:d7:3c:39:75:ad:0f:f4:4f:2b:67:87: 17:b4:6e:f4:be:72:7e:88:2f:69:75:fb:90:e5:c7: e1:c6:8a:db:27:53:51:f8:46:3a:90:0a:d1:7c:bf: 1a:6e:88:9e:ab:0f:b3:ae:3e:4b:5c:3c:c1:c5:33: ab:3a:96:15:a3:8a:10:f3:61:ad:2a:8b:0a:13:ea: b1:a2:cd:5d:ce:69:7f:35:60:ff:66:8b:d1:84:2f: 10:ca:29:cf:81:83:40:5b:1d:13:d8:57:34:50:c1: fa:76:b5:39:e2:c0:19:c8:d3:f5:2c:e5:20:d7:50: 96:cd:f1:99:21:70:bb:8c:48:56:17:d5:05:68:bb: 0c:cf:e8:62:ba:0d:10:6f:9c:92:33:f8:f9:0d:70: b9:59:05:1a:f5:1d:bd:bb:59:cf:86:cd:5b:bd:0c: 5d:91:41:c1:5d:38:b0:c2:9c:e9:42:39:11:db:88: b1:10:1e:a6:9b:cb:91:07:9d:1f:9f:d8:93:c6:bb: 49:26:28:63:10:22:32:3c:5f:2d:fd:8e:d4:52:93: 90:46:a3:b1:59:3e:30:52:56:a2:27:53:f1:de:94: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8C:8E:46:81:88:03:EF:0D:40:6B:09:D4:C3:98:47:CE:AB:EB:95 X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:55:d1:cb:10:e5:8e:77:87:16:a8:d3:c8:8d:e9:ad:d6:25: e4:e7:36:9b:3e:4e:21:e1:7a:6b:bc:e5:c1:c2:6e:af:e0:7c: 2e:fd:2c:d7:2d:f8:09:19:c6:12:19:82:92:0f:c0:c8:10:e6: fe:1e:c5:9e:fa:9e:09:1d:eb:3c:9c:ad:4b:32:72:4b:1b:6c: b5:3d:e4:f2:18:73:cf:26:60:fa:e7:3b:b1:73:2e:03:50:30: f0:db:01:08:e4:e7:c7:a0:f6:99:91:f2:21:27:69:bf:77:35: 1b:28:c0:05:e4:52:a0:80:87:db:92:03:4c:a3:39:ef:d0:07: c6:36:14:2e:33:15:da:2e:40:ae:73:86:d2:de:2f:3a:d2:31: cd:a0:6d:de:60:a8:bb:e0:ea:5a:56:e2:38:80:cd:f9:1b:a1: 13:ed:4f:9f:06:79:f0:50:bd:f1:41:18:ef:f7:d2:2e:28:20: a1:91:9c:da:b2:a5:b4:a9:64:71:24:71:3c:16:23:1a:b6:d4: 8c:f5:23:42:4d:80:a7:f9:72:b0:08:13:57:e6:41:31:0b:8d: 05:44:86:d2:06:38:8f:e0:e3:34:71:9f:8f:ed:72:57:1b:94: b6:3b:8d:7f:e7:23:35:d3:bc:60:7c:ad:7c:f6:8b:60:35:0d: 80:98:bc:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSgs7XjoRBHFtfpqCbHazBBILQjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjA3MjcwNjEzMzRaFw0yNjA3MjgwNzMyMzRaMDMxMTAvBgNV BAMTKEExOEM4RTQ2ODE4ODAzRUYwRDQwNkIwOUQ0QzM5ODQ3Q0VBQkVCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLTOmaH8pANFwKPZ9Gh8XYS1N gGomcd4sjdpWlym1Ci3XPDl1rQ/0Tytnhxe0bvS+cn6IL2l1+5Dlx+HGitsnU1H4 RjqQCtF8vxpuiJ6rD7OuPktcPMHFM6s6lhWjihDzYa0qiwoT6rGizV3OaX81YP9m i9GELxDKKc+Bg0BbHRPYVzRQwfp2tTniwBnI0/Us5SDXUJbN8ZkhcLuMSFYX1QVo uwzP6GK6DRBvnJIz+PkNcLlZBRr1Hb27Wc+GzVu9DF2RQcFdOLDCnOlCORHbiLEQ Hqaby5EHnR+f2JPGu0kmKGMQIjI8Xy39jtRSk5BGo7FZPjBSVqInU/HelG2PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoYyORoGIA+8NQGsJ1MOYR86r65UwHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVXRyxDljneH FqjTyI3prdYl5Oc2mz5OIeF6a7zlwcJur+B8Lv0s1y34CRnGEhmCkg/AyBDm/h7F nvqeCR3rPJytSzJySxtstT3k8hhzzyZg+uc7sXMuA1Aw8NsBCOTnx6D2mZHyISdp v3c1GyjABeRSoICH25IDTKM579AHxjYULjMV2i5ArnOG0t4vOtIxzaBt3mCou+Dq WlbiOIDN+RuhE+1PnwZ58FC98UEY7/fSLiggoZGc2rKltKlkcSRxPBYjGrbUjPUj Qk2Ap/lysAgTV+ZBMQuNBUSG0gY4j+DjNHGfj+1yVxuUtjuNf+cjNdO8YHytfPaL YDUNgJi88A== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:14 2026 by rpki-client