$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: G+3+PWEp43Xkh1E8BsPNNxtU6wV+BmzH6RBWaSqjzlw= Subject key identifier: BB:BC:55:F4:2C:55:0B:93:04:EC:4F:AC:A1:10:BB:68:50:DF:1E:54 Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 5DCAA3018B7B16DEA3B149E90E901495502020ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: 66 Signing time: Tue 07 Jul 2026 12:19:13 +0000 Manifest this update: Tue 07 Jul 2026 12:14:13 +0000 Manifest next update: Wed 08 Jul 2026 13:55:13 +0000 Files and hashes: 1: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 2: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 3: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 4: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 5: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: X0Ghc8k/0bjK8Cj7bwvngLs536pmy4l1caPMPUMMrbA=) 6: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 7: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 8: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 9: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ca:a3:01:8b:7b:16:de:a3:b1:49:e9:0e:90:14:95:50:20:20:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Jul 7 12:14:13 2026 GMT Not After : Jul 8 13:55:13 2026 GMT Subject: CN=BBBC55F42C550B9304EC4FACA110BB6850DF1E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:be:b5:72:38:a2:32:28:76:6d:dd:04:7b: 6e:54:c1:0f:84:65:ab:ee:60:12:c9:8e:65:d7:79: 1a:07:72:11:f2:bb:0e:b8:27:6d:68:f3:c0:50:20: 15:9a:92:53:8d:f8:c8:8a:b1:b5:c5:95:bd:c3:3d: 86:fd:53:56:ed:ff:c9:a1:b6:56:56:e8:c5:3f:eb: b8:e1:e0:34:a5:2a:0b:db:c2:86:ab:9a:11:31:17: 48:d4:0f:8b:a7:8d:34:a5:f0:61:d3:89:a1:64:2f: b4:ad:0b:b2:cd:8b:35:b5:99:39:49:56:22:65:71: be:27:ed:af:90:5e:96:70:36:4c:fd:7a:62:4c:55: 4e:0d:c8:58:79:c7:05:4b:e6:b5:0b:23:93:ea:82: 17:22:20:b3:eb:31:55:cb:04:db:0d:b7:0a:80:46: e1:0d:3e:df:b2:18:ad:a9:f9:e5:ae:36:38:60:40: 07:3d:fa:46:71:9c:88:c1:a0:59:e6:b4:18:70:82: c4:22:c1:e2:8b:63:11:5c:7e:06:f8:65:fc:86:ed: d1:99:ec:b8:61:ba:9e:5c:1f:34:26:59:af:b6:a6: 69:28:91:5c:b8:7a:6e:a4:e2:bf:93:81:5c:2a:03: 45:80:d2:98:ef:8b:fb:08:d6:52:94:a4:e5:91:6d: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BC:55:F4:2C:55:0B:93:04:EC:4F:AC:A1:10:BB:68:50:DF:1E:54 X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:47:d4:77:c4:b5:ab:47:74:21:66:cf:b2:16:0a:fb:e9:fd: dd:cb:cf:02:dd:be:7c:fc:1e:3b:4f:bf:ab:3d:a5:c4:94:68: ec:bc:d5:25:c4:ab:89:5f:d6:fe:db:ab:c0:71:05:ef:98:97: 48:58:88:e6:d3:91:e7:04:6d:62:f6:43:33:ad:d3:56:73:c6: 72:db:04:f9:4d:26:09:01:89:f2:b8:8b:f6:de:1d:5a:f6:48: 89:8f:8e:4e:b0:3e:6e:7b:09:a9:69:38:ae:b7:ab:e7:2e:f4: a7:d4:65:10:4a:f1:47:fc:62:8a:1e:75:83:13:d2:10:11:1b: ab:06:8b:25:37:33:b4:e5:73:69:af:43:ea:c7:b7:28:33:a4: 53:65:34:b2:50:f0:8c:82:57:e2:27:c1:d7:97:80:8b:fb:72: fc:0a:f3:1f:b3:5c:5d:8d:cb:08:de:34:89:d1:45:c9:78:dc: 9a:70:67:ee:66:72:db:9d:1f:7b:39:e1:85:43:d0:dd:d8:f1: 95:89:89:a9:6d:0f:3e:36:e1:f7:d5:a8:7d:ac:72:b2:db:f8: df:ce:9c:10:97:15:37:e5:78:35:94:7f:9a:56:cf:8b:92:78: 53:10:20:e1:ba:53:a1:86:a8:4f:43:f8:53:88:d8:c4:15:dd: 14:2e:a1:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXcqjAYt7Ft6jsUnpDpAUlVAgIO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA3MDcxMjE0MTNaFw0yNjA3MDgxMzU1MTNaMDMxMTAvBgNV BAMTKEJCQkM1NUY0MkM1NTBCOTMwNEVDNEZBQ0ExMTBCQjY4NTBERjFFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvj761cjiiMih2bd0Ee25UwQ+E ZavuYBLJjmXXeRoHchHyuw64J21o88BQIBWaklON+MiKsbXFlb3DPYb9U1bt/8mh tlZW6MU/67jh4DSlKgvbwoarmhExF0jUD4unjTSl8GHTiaFkL7StC7LNizW1mTlJ ViJlcb4n7a+QXpZwNkz9emJMVU4NyFh5xwVL5rULI5PqghciILPrMVXLBNsNtwqA RuENPt+yGK2p+eWuNjhgQAc9+kZxnIjBoFnmtBhwgsQiweKLYxFcfgb4ZfyG7dGZ 7Lhhup5cHzQmWa+2pmkokVy4em6k4r+TgVwqA0WA0pjvi/sI1lKUpOWRbaqhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu7xV9CxVC5ME7E+soRC7aFDfHlQwHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEfUd8S1q0d0 IWbPshYK++n93cvPAt2+fPweO0+/qz2lxJRo7LzVJcSriV/W/turwHEF75iXSFiI 5tOR5wRtYvZDM63TVnPGctsE+U0mCQGJ8riL9t4dWvZIiY+OTrA+bnsJqWk4rrer 5y70p9RlEErxR/xiih51gxPSEBEbqwaLJTcztOVzaa9D6se3KDOkU2U0slDwjIJX 4ifB15eAi/ty/ArzH7NcXY3LCN40idFFyXjcmnBn7mZy250feznhhUPQ3djxlYmJ qW0PPjbh99Wofaxystv4386cEJcVN+V4NZR/mlbPi5J4UxAg4bpToYaoT0P4U4jY xBXdFC6hvg== -----END CERTIFICATE-----Generated at Tue Jul 7 22:45:23 2026 by rpki-client