$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: 4fIB5cCK+UmJdZDsMI6p6RRwzJFaPYQNtr7xpfvz5lk= Subject key identifier: 40:9D:38:24:CB:0B:29:94:A8:07:0E:4D:74:07:C5:B2:74:20:94:24 Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 5E29948B1C7BAA34B78B51DD2F6AB3056B5C6085 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: 82 Signing time: Mon 27 Jul 2026 02:28:09 +0000 Manifest this update: Mon 27 Jul 2026 02:23:09 +0000 Manifest next update: Tue 28 Jul 2026 03:32:09 +0000 Files and hashes: 1: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: gDOZmoblTB0AAxcm+w/KSJHhVsz3luGpjJ6iFqvqn1U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:29:94:8b:1c:7b:aa:34:b7:8b:51:dd:2f:6a:b3:05:6b:5c:60:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Jul 27 02:23:09 2026 GMT Not After : Jul 28 03:32:09 2026 GMT Subject: CN=409D3824CB0B2994A8070E4D7407C5B274209424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:05:6d:b2:13:df:0e:8b:00:bb:ad:80:97: 5e:7c:73:52:dd:91:10:15:a7:a0:35:6a:04:81:20: b8:7c:a9:9e:c2:f3:17:f0:a2:10:61:74:1b:b5:d4: 64:ed:80:89:ab:34:de:9a:26:23:28:61:46:29:b2: 3d:bd:52:ab:97:41:66:20:43:b8:d3:21:38:fc:df: 51:50:40:c4:ce:bd:12:94:5b:9a:6b:cb:14:92:0f: cf:b5:ef:1a:44:f0:2b:b3:43:ac:78:3b:3d:5c:18: 55:44:93:7d:63:91:20:0a:ae:ee:22:02:86:8c:59: 22:1d:69:66:8b:bd:7c:2f:e6:e2:61:d5:bf:be:eb: b6:c3:28:f9:67:b8:90:39:51:63:17:fb:c8:7e:e7: 17:ea:a6:f4:1a:50:cb:8b:60:c3:39:e8:84:d2:e3: 5f:f0:aa:f7:69:79:ca:24:e9:ec:a8:82:bd:2b:89: cc:ca:d0:eb:14:39:0a:78:86:93:3c:3b:e4:ec:2a: 2a:9e:74:2d:51:6d:be:92:bd:25:f0:fd:f9:58:ac: 71:f5:a8:6d:bc:5f:ea:75:b1:8c:06:40:3e:68:2c: 78:4d:3c:c8:d0:57:5d:fb:02:21:27:6d:12:bc:32: 24:50:f6:61:3d:8d:49:69:5f:83:a4:3e:18:5c:16: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:38:24:CB:0B:29:94:A8:07:0E:4D:74:07:C5:B2:74:20:94:24 X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b7:43:4c:c0:9e:64:9d:73:39:21:b2:d1:39:79:9b:a4:ab: 3b:b3:a9:d3:cf:24:1e:0f:50:f8:4a:2f:2d:9c:55:ce:f0:1a: 1e:c3:7b:cc:96:d8:25:61:8b:c3:e9:a1:88:c6:c0:85:2d:04: 8c:62:26:75:4e:68:5c:f3:3d:17:01:6c:ff:52:e1:aa:41:ed: 49:17:0a:f8:6f:35:d7:37:aa:07:3d:f9:33:9f:4d:12:cc:f5: 00:03:5c:00:06:f8:a0:5f:79:42:21:71:78:38:ab:a2:c0:bc: ee:78:cb:c9:17:86:08:5d:ba:f8:da:f7:16:f9:19:49:ec:54: 08:81:68:e6:91:0b:4a:c9:12:c9:0c:89:83:48:44:93:c4:6f: f7:cf:4e:89:17:c7:c5:1d:6e:26:f2:b6:0c:15:44:d9:e3:b1: b1:bc:56:c5:27:56:88:47:d8:14:5b:82:f6:26:7d:f7:f2:e8: d0:b0:ce:32:00:29:7d:85:12:0c:36:4a:ab:21:88:1d:52:58: 49:06:b9:a6:7f:bc:30:95:b1:3d:5f:98:8a:a1:43:90:d3:eb: 13:fb:8a:de:4d:1f:b5:49:67:0f:92:ae:fc:7e:de:91:e1:07: 98:9c:3f:13:fc:3d:42:1c:0e:1e:58:aa:3c:26:45:b1:b9:f3: 73:07:e1:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXimUixx7qjS3i1HdL2qzBWtcYIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA3MjcwMjIzMDlaFw0yNjA3MjgwMzMyMDlaMDMxMTAvBgNV BAMTKDQwOUQzODI0Q0IwQjI5OTRBODA3MEU0RDc0MDdDNUIyNzQyMDk0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrgVtshPfDosAu62Al158c1Ld kRAVp6A1agSBILh8qZ7C8xfwohBhdBu11GTtgImrNN6aJiMoYUYpsj29UquXQWYg Q7jTITj831FQQMTOvRKUW5pryxSSD8+17xpE8CuzQ6x4Oz1cGFVEk31jkSAKru4i AoaMWSIdaWaLvXwv5uJh1b++67bDKPlnuJA5UWMX+8h+5xfqpvQaUMuLYMM56ITS 41/wqvdpecok6eyogr0riczK0OsUOQp4hpM8O+TsKiqedC1Rbb6SvSXw/flYrHH1 qG28X+p1sYwGQD5oLHhNPMjQV137AiEnbRK8MiRQ9mE9jUlpX4OkPhhcFmv7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQJ04JMsLKZSoBw5NdAfFsnQglCQwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLdDTMCeZJ1z OSGy0Tl5m6SrO7Op088kHg9Q+EovLZxVzvAaHsN7zJbYJWGLw+mhiMbAhS0EjGIm dU5oXPM9FwFs/1LhqkHtSRcK+G811zeqBz35M59NEsz1AANcAAb4oF95QiFxeDir osC87njLyReGCF26+Nr3FvkZSexUCIFo5pELSskSyQyJg0hEk8Rv989OiRfHxR1u JvK2DBVE2eOxsbxWxSdWiEfYFFuC9iZ99/Lo0LDOMgApfYUSDDZKqyGIHVJYSQa5 pn+8MJWxPV+YiqFDkNPrE/uK3k0ftUlnD5Ku/H7ekeEHmJw/E/w9QhwOHliqPCZF sbnzcwfhYA== -----END CERTIFICATE-----Generated at Mon Jul 27 11:16:31 2026 by rpki-client