$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: 5uWIc9p2JtIp0hGP75r/oiPpAuNshZaAgfUE+rdzrgw= Subject key identifier: E1:F4:6E:CB:7E:E0:C5:D7:24:9D:AC:19:A3:B2:94:62:E1:A9:44:7B Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 42849FB38F9576DA9ED015852FB1F272A740A1E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: 6D Signing time: Tue 14 Jul 2026 07:10:41 +0000 Manifest this update: Tue 14 Jul 2026 07:05:41 +0000 Manifest next update: Wed 15 Jul 2026 09:39:41 +0000 Files and hashes: 1: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 3: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 4: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 5: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 6: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: 3zMXspxSIZ4QDBLHl4H3E6y4OfFGIFVpH3lKHtLL+TQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:84:9f:b3:8f:95:76:da:9e:d0:15:85:2f:b1:f2:72:a7:40:a1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Jul 14 07:05:41 2026 GMT Not After : Jul 15 09:39:41 2026 GMT Subject: CN=E1F46ECB7EE0C5D7249DAC19A3B29462E1A9447B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:9d:28:ab:b2:7c:fb:74:be:50:98:e3:4a: bf:77:58:43:ad:1a:71:55:56:9f:88:7b:1d:cf:92: 01:5f:d6:1c:57:19:87:fb:0d:7f:92:3c:8e:b3:b3: e8:1a:37:6a:16:f5:0a:8d:7c:c2:e1:b5:5a:e1:d2: 0f:dc:bb:9e:fe:20:7a:3c:85:2b:9b:91:26:c0:8f: 62:e0:49:ff:77:43:ab:84:bd:57:8c:6f:f6:2b:53: 9b:b5:56:4a:4c:1c:1d:f0:ba:18:08:71:3a:8f:91: 9c:ec:49:54:04:ea:6c:ca:10:31:da:74:70:5e:db: 96:ec:1f:14:86:fe:03:f1:5b:ea:7c:07:9a:75:35: c6:39:a2:35:2d:58:62:fb:74:48:ec:96:87:e0:dc: 41:c1:d4:8d:7f:51:5c:73:9e:cc:6c:22:c8:cc:68: fe:5d:73:10:69:0a:3f:86:8b:89:9f:0e:e3:8a:34: 38:24:97:12:84:63:f2:f0:62:56:aa:2f:50:c5:52: 0d:bb:3f:2a:b6:20:4d:1d:03:fb:12:c9:5e:33:99: 5d:5d:e9:3f:fc:1f:62:30:26:1b:95:01:f8:bb:7c: 4c:a1:1c:a1:e7:9a:0d:60:79:5e:d6:bb:d7:d5:24: 85:eb:63:73:20:55:bb:f9:85:a9:e2:5a:6f:38:62: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:6E:CB:7E:E0:C5:D7:24:9D:AC:19:A3:B2:94:62:E1:A9:44:7B X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e2:21:b0:78:97:56:93:77:05:22:f0:8d:40:53:03:24:cd: 78:5d:90:b5:58:4b:6d:71:82:37:9e:f1:1d:17:48:85:e6:fc: 37:88:e9:d7:dc:50:1b:4e:02:fd:18:17:54:c0:b3:42:e4:a5: aa:80:11:a4:8c:56:16:c3:05:d6:7d:e7:1b:3e:f8:fd:53:26: dc:41:37:8c:b3:36:ed:d3:5a:25:66:a4:40:48:70:04:f6:1d: c2:44:01:fc:03:25:ed:20:9a:9d:51:32:62:21:70:bf:82:9b: 1b:d7:0d:f4:e7:c3:15:5f:54:f4:a9:d1:06:7d:89:b2:64:fe: f5:62:e8:1b:c4:e9:08:65:03:c7:01:83:b3:e5:75:d9:b9:03: dc:ee:2d:25:b4:fc:64:1b:4a:96:02:86:fe:e2:a0:d7:02:2f: 6b:cb:55:53:fd:e2:90:5b:c1:94:33:e7:77:f5:79:72:75:34: cb:9b:15:b6:cc:be:2d:0e:b5:2a:de:06:86:70:19:55:6b:40: 6a:00:ce:a4:9e:02:3d:cd:96:21:0e:93:0b:ca:e6:91:33:ce: d1:76:74:b6:7f:18:54:da:67:e1:f0:bc:fc:ec:ed:f1:e8:8f: 96:73:a6:49:9d:2e:38:09:83:eb:68:e0:aa:49:02:c9:7c:31: fa:b6:7c:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQoSfs4+Vdtqe0BWFL7HycqdAoeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA3MTQwNzA1NDFaFw0yNjA3MTUwOTM5NDFaMDMxMTAvBgNV BAMTKEUxRjQ2RUNCN0VFMEM1RDcyNDlEQUMxOUEzQjI5NDYyRTFBOTQ0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClu50oq7J8+3S+UJjjSr93WEOt GnFVVp+Iex3PkgFf1hxXGYf7DX+SPI6zs+gaN2oW9QqNfMLhtVrh0g/cu57+IHo8 hSubkSbAj2LgSf93Q6uEvVeMb/YrU5u1VkpMHB3wuhgIcTqPkZzsSVQE6mzKEDHa dHBe25bsHxSG/gPxW+p8B5p1NcY5ojUtWGL7dEjslofg3EHB1I1/UVxznsxsIsjM aP5dcxBpCj+Gi4mfDuOKNDgklxKEY/LwYlaqL1DFUg27Pyq2IE0dA/sSyV4zmV1d 6T/8H2IwJhuVAfi7fEyhHKHnmg1geV7Wu9fVJIXrY3MgVbv5haniWm84YtKTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4fRuy37gxdcknawZo7KUYuGpRHswHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+IhsHiXVpN3 BSLwjUBTAyTNeF2QtVhLbXGCN57xHRdIheb8N4jp19xQG04C/RgXVMCzQuSlqoAR pIxWFsMF1n3nGz74/VMm3EE3jLM27dNaJWakQEhwBPYdwkQB/AMl7SCanVEyYiFw v4KbG9cN9OfDFV9U9KnRBn2JsmT+9WLoG8TpCGUDxwGDs+V12bkD3O4tJbT8ZBtK lgKG/uKg1wIva8tVU/3ikFvBlDPnd/V5cnU0y5sVtsy+LQ61Kt4GhnAZVWtAagDO pJ4CPc2WIQ6TC8rmkTPO0XZ0tn8YVNpn4fC8/Ozt8eiPlnOmSZ0uOAmD62jgqkkC yXwx+rZ8nw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:50 2026 by rpki-client