$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json) Hash identifier: dEelcff27gkcdp6veL0sFGYuZurbt7Uf25rPkDZ5LMw= Subject key identifier: 23:EF:F2:E6:18:0D:18:DB:02:DE:66:7C:42:77:23:5C:3E:26:3B:54 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 334628021882546ED159E1620FB6AD9A8455371D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft Manifest number: 71 Signing time: Tue 14 Jul 2026 15:56:35 +0000 Manifest this update: Tue 14 Jul 2026 15:51:35 +0000 Manifest next update: Wed 15 Jul 2026 19:11:35 +0000 Files and hashes: 1: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=) 2: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=) 3: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: 6mr+9H6v6Nvq0c6STv743ZX7dm+z05Wj/z6klSy1tBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:46:28:02:18:82:54:6e:d1:59:e1:62:0f:b6:ad:9a:84:55:37:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Jul 14 15:51:35 2026 GMT Not After : Jul 15 19:11:35 2026 GMT Subject: CN=23EFF2E6180D18DB02DE667C4277235C3E263B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:75:0c:ae:a5:15:c4:cb:d7:61:25:8c:db: bc:79:e6:53:c8:9e:cb:8c:8c:c3:b9:c6:b1:69:c0: 09:16:8d:78:e1:72:10:0a:9a:4a:61:a9:77:11:39: cb:a3:6c:25:1f:26:57:e3:19:50:cd:5c:3f:27:81: 09:dc:88:65:48:bd:78:d5:31:b2:c6:36:af:be:47: a2:0a:cc:31:6f:67:05:99:ca:fb:9e:ce:85:c7:88: 94:3c:e6:af:5a:12:db:11:86:81:9a:d2:8d:48:7a: 96:60:69:b8:e4:f7:c6:3b:17:d3:9f:48:91:44:cf: 9d:c3:ec:6e:d8:a9:50:5a:8b:42:06:5f:3f:8b:95: 9e:c1:0c:e9:71:8a:b7:56:d6:c7:5d:47:bc:bc:f3: ba:d5:5b:f8:2c:de:78:2e:91:f2:be:5d:81:13:dc: bb:ad:c5:9c:42:a4:9b:47:80:4e:a1:e6:1f:4c:ed: 30:e8:bd:ee:6e:f4:79:88:29:0e:96:88:3b:ed:2f: 25:a8:5f:3d:e6:5d:42:89:de:19:1e:e8:02:70:11: 4b:12:75:a1:fa:8c:6d:a6:b2:0a:8d:4b:fb:d6:f2: 55:81:c8:ef:03:c3:2c:60:56:9c:58:48:0f:19:d7: 0a:94:69:b6:7d:82:7d:b4:e5:f9:f8:0e:5d:bd:55: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EF:F2:E6:18:0D:18:DB:02:DE:66:7C:42:77:23:5C:3E:26:3B:54 X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:37:eb:20:27:62:dc:3d:d5:72:93:11:9c:cc:89:9f:52:2c: d5:1f:5e:9d:7a:98:ee:44:ac:51:ca:dc:ea:fc:fa:1c:c0:6b: 92:58:e8:13:84:bd:e9:9f:db:d1:18:c9:8c:d8:3e:b2:47:69: 4a:f5:38:23:ff:f0:ac:e3:95:d9:75:f2:ad:05:92:51:e5:26: d1:29:5d:83:5d:72:92:e7:af:69:6b:3f:f6:da:e0:41:ed:39: 37:a6:25:91:ea:8a:5e:3d:dc:59:8c:fc:0c:9e:7b:30:a6:dd: 21:2c:11:17:28:d8:99:3f:bd:34:a3:34:b9:8d:e2:69:7a:ba: 29:6e:24:0a:d6:13:ec:08:38:8b:06:83:c2:28:22:3a:40:3b: b2:2f:55:6b:6a:85:c9:d4:f7:13:e7:26:25:78:bc:b8:21:ad: 42:ef:29:9b:2c:df:73:1e:a3:d5:62:6a:9e:34:60:80:4b:08: 91:76:70:ae:fc:12:bc:43:0c:85:61:fd:ee:28:01:a4:95:84: 9f:69:8c:d4:e9:f8:95:a4:13:c8:ac:57:da:9c:74:6a:6f:d2: 19:a5:17:6a:16:84:4f:81:ec:b3:35:52:fc:42:7a:54:0b:c1: cb:bf:9a:f0:d2:84:01:f7:78:07:a4:11:f7:94:9a:03:7e:6b: c4:4f:6e:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM0YoAhiCVG7RWeFiD7atmoRVNx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA3MTQxNTUxMzVaFw0yNjA3MTUxOTExMzVaMDMxMTAvBgNV BAMTKDIzRUZGMkU2MTgwRDE4REIwMkRFNjY3QzQyNzcyMzVDM0UyNjNCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9s3UMrqUVxMvXYSWM27x55lPI nsuMjMO5xrFpwAkWjXjhchAKmkphqXcROcujbCUfJlfjGVDNXD8ngQnciGVIvXjV MbLGNq++R6IKzDFvZwWZyvuezoXHiJQ85q9aEtsRhoGa0o1IepZgabjk98Y7F9Of SJFEz53D7G7YqVBai0IGXz+LlZ7BDOlxirdW1sddR7y887rVW/gs3ngukfK+XYET 3LutxZxCpJtHgE6h5h9M7TDove5u9HmIKQ6WiDvtLyWoXz3mXUKJ3hke6AJwEUsS daH6jG2msgqNS/vW8lWByO8DwyxgVpxYSA8Z1wqUabZ9gn205fn4Dl29VU6rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI+/y5hgNGNsC3mZ8QncjXD4mO1QwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDfrICdi3D3V cpMRnMyJn1Is1R9enXqY7kSsUcrc6vz6HMBrkljoE4S96Z/b0RjJjNg+skdpSvU4 I//wrOOV2XXyrQWSUeUm0Sldg11ykuevaWs/9trgQe05N6YlkeqKXj3cWYz8DJ57 MKbdISwRFyjYmT+9NKM0uY3iaXq6KW4kCtYT7Ag4iwaDwigiOkA7si9Va2qFydT3 E+cmJXi8uCGtQu8pmyzfcx6j1WJqnjRggEsIkXZwrvwSvEMMhWH97igBpJWEn2mM 1On4laQTyKxX2px0am/SGaUXahaET4HsszVS/EJ6VAvBy7+a8NKEAfd4B6QR95Sa A35rxE9uOA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:48 2026 by rpki-client