$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: AVUALvm9zwXWn4wdn1fjbe7fLqO6JHrCFZ0FWJtnUOY= Subject key identifier: 19:5A:0C:10:67:D0:62:20:98:13:DA:69:8F:4B:46:EE:9B:D0:87:CD Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 70C7699FABCA06961D85F525B5C82B6C49C3E271 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 4C Signing time: Tue 14 Jul 2026 13:06:20 +0000 Manifest this update: Tue 14 Jul 2026 13:01:20 +0000 Manifest next update: Wed 15 Jul 2026 13:20:20 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: WxpsySAtDXYLHAJ7WazYoWb4K9R1fau0Ay0SfPbRZoM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c7:69:9f:ab:ca:06:96:1d:85:f5:25:b5:c8:2b:6c:49:c3:e2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Jul 14 13:01:20 2026 GMT Not After : Jul 15 13:20:20 2026 GMT Subject: CN=195A0C1067D062209813DA698F4B46EE9BD087CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:70:0c:cf:94:38:07:d9:ee:ba:6a:84:a5: dc:7a:d5:74:b4:07:47:c9:4b:4b:5a:41:31:89:55: c9:8e:cf:84:54:1b:db:d6:85:a6:9b:0c:8a:da:96: d1:c9:db:4a:a9:5b:ac:16:12:1c:66:95:a5:7e:ba: f4:04:fb:de:f4:b9:ab:4d:44:e1:5d:eb:35:26:76: 2a:c1:f5:3d:20:25:40:8c:ee:ba:22:a0:a4:92:68: 7c:7f:5d:23:20:c2:50:56:d8:fb:0c:ec:3d:59:98: 09:96:5f:7e:88:18:53:95:75:37:55:b3:21:42:50: 47:8e:24:0f:db:20:46:2c:9f:bb:08:06:b1:79:74: 41:c2:17:b0:ff:32:37:35:c5:16:f4:55:3e:29:6e: c9:fd:f8:29:a8:13:2e:e9:34:aa:46:7f:e9:1d:89: 57:d1:84:14:88:ab:a4:40:d1:87:70:ac:f2:82:5b: e5:d4:a7:21:56:c8:b2:4b:89:2b:27:8b:5d:9b:80: 12:e2:1f:49:78:1e:f4:a2:83:67:35:27:b2:39:21: 38:0a:56:8a:3b:26:98:b2:c1:fc:1d:9f:a3:21:de: 18:91:28:53:63:dd:ca:d2:78:f6:87:12:91:3b:f6: 81:3a:a8:85:80:5d:c8:34:91:a5:a2:16:f5:fb:f4: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5A:0C:10:67:D0:62:20:98:13:DA:69:8F:4B:46:EE:9B:D0:87:CD X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:15:fd:be:54:05:d4:7e:6a:20:8e:15:32:d2:1c:e6:62:c8: 12:f1:ad:e8:84:3d:69:e0:af:ce:e1:cf:e4:f3:b2:cf:e4:5e: 04:49:68:8f:8e:4e:92:35:3b:27:c9:cc:2a:1e:4e:3d:7a:47: c3:85:37:50:d5:12:0a:cd:16:b0:5a:b5:d6:c3:aa:50:66:11: 89:a4:2c:ef:fc:80:d0:ca:80:75:14:51:e6:54:41:44:04:b2: 9a:64:a8:f3:91:75:2c:34:c1:e1:fc:63:85:1a:2d:00:ad:bd: 59:10:7e:0a:7d:90:9a:b6:aa:69:b2:84:bc:53:e6:d4:d3:8a: b2:8c:c9:a5:9d:cc:c0:34:f5:0c:1e:95:27:bd:67:40:5d:5c: be:23:98:80:77:48:1e:77:b7:15:dc:26:73:ff:12:a0:df:7c: 02:3c:db:bc:f0:ac:d8:1b:75:33:85:97:34:45:2c:e5:7a:70: 31:75:a1:46:aa:cd:44:4e:90:53:f4:03:98:f5:24:30:5d:0b: 99:3e:14:98:c1:f1:aa:2d:d4:ea:b7:21:02:19:ae:5e:7a:b4: 11:df:29:35:e7:50:5b:ee:47:10:f6:b7:57:4a:44:2f:25:29: f9:33:a2:14:d4:d1:f4:f2:64:b9:0b:e8:b9:86:80:7c:3a:a1: 02:14:b9:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcMdpn6vKBpYdhfUltcgrbEnD4nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA3MTQxMzAxMjBaFw0yNjA3MTUxMzIwMjBaMDMxMTAvBgNV BAMTKDE5NUEwQzEwNjdEMDYyMjA5ODEzREE2OThGNEI0NkVFOUJEMDg3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQm3AMz5Q4B9nuumqEpdx61XS0 B0fJS0taQTGJVcmOz4RUG9vWhaabDIraltHJ20qpW6wWEhxmlaV+uvQE+970uatN ROFd6zUmdirB9T0gJUCM7roioKSSaHx/XSMgwlBW2PsM7D1ZmAmWX36IGFOVdTdV syFCUEeOJA/bIEYsn7sIBrF5dEHCF7D/Mjc1xRb0VT4pbsn9+CmoEy7pNKpGf+kd iVfRhBSIq6RA0YdwrPKCW+XUpyFWyLJLiSsni12bgBLiH0l4HvSig2c1J7I5ITgK Voo7Jpiywfwdn6Mh3hiRKFNj3crSePaHEpE79oE6qIWAXcg0kaWiFvX79HzzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGVoMEGfQYiCYE9ppj0tG7pvQh80wHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBX9vlQF1H5q II4VMtIc5mLIEvGt6IQ9aeCvzuHP5POyz+ReBEloj45OkjU7J8nMKh5OPXpHw4U3 UNUSCs0WsFq11sOqUGYRiaQs7/yA0MqAdRRR5lRBRASymmSo85F1LDTB4fxjhRot AK29WRB+Cn2QmraqabKEvFPm1NOKsozJpZ3MwDT1DB6VJ71nQF1cviOYgHdIHne3 Fdwmc/8SoN98AjzbvPCs2Bt1M4WXNEUs5XpwMXWhRqrNRE6QU/QDmPUkMF0LmT4U mMHxqi3U6rchAhmuXnq0Ed8pNedQW+5HEPa3V0pELyUp+TOiFNTR9PJkuQvouYaA fDqhAhS5xg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:59 2026 by rpki-client