$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: pMjcPEx1ReT8OaQzbDi7r8E2NPQrdq7jNklcNg8BY/o= Subject key identifier: 4F:D9:DA:B8:56:17:33:E6:B7:11:31:E5:CC:48:71:D7:69:1E:F7:48 Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 1AA60770BB9C2539CFCA06010E399993C9AAD110 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: 57 Signing time: Tue 14 Jul 2026 08:20:49 +0000 Manifest this update: Tue 14 Jul 2026 08:15:49 +0000 Manifest next update: Wed 15 Jul 2026 09:09:49 +0000 Files and hashes: 1: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 2: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=) 3: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) 4: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: a5YC84RRYDk/tkKiyXc+aSCk/EafC4YBqB4q6o5LCN8=) 5: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 6: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=) 7: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 8: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a6:07:70:bb:9c:25:39:cf:ca:06:01:0e:39:99:93:c9:aa:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: Jul 14 08:15:49 2026 GMT Not After : Jul 15 09:09:49 2026 GMT Subject: CN=4FD9DAB8561733E6B71131E5CC4871D7691EF748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:b9:02:0e:34:02:83:28:14:fa:3e:c2:ab: c1:8d:64:90:1f:e3:20:39:54:c8:16:bd:08:44:2c: 18:28:a2:a0:8a:01:3b:f1:9e:28:98:70:24:07:53: eb:9f:8f:72:9d:81:f2:3b:88:e1:b5:f5:31:2d:80: ba:fe:b0:ca:47:46:5b:ee:ba:01:78:84:68:85:54: 62:bc:04:44:db:31:19:91:46:b9:d1:e5:9e:b9:77: f2:2d:75:f8:fe:26:50:82:41:0b:c0:18:a3:76:ae: 6b:3e:81:1a:b2:87:34:0c:0e:50:f1:cb:f6:45:f3: 17:c1:49:39:18:5e:db:df:10:40:34:96:6d:c9:26: de:ce:43:a9:77:7d:90:c2:a4:82:05:b6:1c:a4:56: 3d:1d:b7:85:42:7e:fa:9f:20:0a:c5:42:4d:de:54: 8b:3a:36:0f:45:88:ef:47:67:9d:cb:25:ef:22:2d: 08:c2:e2:e6:85:cb:04:b1:48:c0:6a:fc:9b:6a:9f: d5:bf:94:69:e2:16:9d:1d:2d:73:52:92:53:0d:2f: 83:2f:76:e8:e7:6a:bd:21:1e:58:88:a5:6d:15:b5: 79:ad:74:11:8b:4d:88:f4:99:9a:05:37:57:8e:a3: d4:3e:ac:40:a5:ef:46:b5:87:68:df:79:be:36:9c: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D9:DA:B8:56:17:33:E6:B7:11:31:E5:CC:48:71:D7:69:1E:F7:48 X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:e2:ee:37:46:ae:22:3c:d9:0e:87:62:30:65:aa:62:2e: 72:7d:b3:d0:49:53:87:6c:96:12:10:d9:28:d2:12:0c:57:43: 77:bb:ec:e2:51:c7:7e:eb:df:c3:90:f5:ff:9e:27:2c:22:7f: cc:f9:31:91:79:3c:1a:f6:1d:4a:18:08:22:a6:f1:7e:57:ad: bc:73:c3:eb:f5:53:41:ef:a2:23:66:03:42:d6:17:a2:43:6c: e1:4f:e9:1f:aa:9c:3e:b9:b2:e6:cd:a5:eb:62:51:e2:d8:b6: 96:7c:83:29:5a:be:de:40:55:93:38:f9:88:60:62:ac:f1:1e: 42:80:0e:39:0b:a7:b0:ea:1b:af:2b:4f:d7:82:8d:a9:13:72: 15:8c:33:c5:f3:bb:a1:3c:65:be:3a:8f:eb:bc:1e:48:d7:00: 76:5a:c8:d2:bf:1d:4f:cf:cb:f1:39:ee:65:4d:28:af:1a:98: f2:00:d5:d8:0a:02:f0:3d:cc:26:a1:e9:8a:7f:73:bf:68:99: a6:63:76:2c:5e:49:b3:31:41:32:57:c6:e0:63:f0:c6:e4:84: 5e:41:e5:2b:02:8a:5e:25:3e:54:85:1c:61:c1:77:f6:ce:43: 53:43:93:89:3b:58:72:aa:48:d9:8b:52:91:e8:bf:7e:71:33: db:12:bc:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGqYHcLucJTnPygYBDjmZk8mq0RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjA3MTQwODE1NDlaFw0yNjA3MTUwOTA5NDlaMDMxMTAvBgNV BAMTKDRGRDlEQUI4NTYxNzMzRTZCNzExMzFFNUNDNDg3MUQ3NjkxRUY3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQuLkCDjQCgygU+j7Cq8GNZJAf 4yA5VMgWvQhELBgooqCKATvxniiYcCQHU+ufj3KdgfI7iOG19TEtgLr+sMpHRlvu ugF4hGiFVGK8BETbMRmRRrnR5Z65d/Itdfj+JlCCQQvAGKN2rms+gRqyhzQMDlDx y/ZF8xfBSTkYXtvfEEA0lm3JJt7OQ6l3fZDCpIIFthykVj0dt4VCfvqfIArFQk3e VIs6Ng9FiO9HZ53LJe8iLQjC4uaFywSxSMBq/Jtqn9W/lGniFp0dLXNSklMNL4Mv dujnar0hHliIpW0VtXmtdBGLTYj0mZoFN1eOo9Q+rECl70a1h2jfeb42nIapAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT9nauFYXM+a3ETHlzEhx12ke90gwHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnDi7jdGriI8 2Q6HYjBlqmIucn2z0ElTh2yWEhDZKNISDFdDd7vs4lHHfuvfw5D1/54nLCJ/zPkx kXk8GvYdShgIIqbxfletvHPD6/VTQe+iI2YDQtYXokNs4U/pH6qcPrmy5s2l62JR 4ti2lnyDKVq+3kBVkzj5iGBirPEeQoAOOQunsOobrytP14KNqRNyFYwzxfO7oTxl vjqP67weSNcAdlrI0r8dT8/L8TnuZU0orxqY8gDV2AoC8D3MJqHpin9zv2iZpmN2 LF5JszFBMlfG4GPwxuSEXkHlKwKKXiU+VIUcYcF39s5DU0OTiTtYcqpI2YtSkei/ fnEz2xK8SQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:05 2026 by rpki-client