$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: Oi0ZjU5q7opM/t/FkZDK+6KrqmJl5XYPtYtilHseeqc= Subject key identifier: DD:72:D9:61:21:14:C7:2B:77:08:96:52:44:E4:71:1A:A5:9D:75:2E Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 7870B7F525183FB0A7BA88BD1682E795666882B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 48 Signing time: Tue 14 Jul 2026 10:16:03 +0000 Manifest this update: Tue 14 Jul 2026 10:11:03 +0000 Manifest next update: Wed 15 Jul 2026 11:02:03 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: yBlYhxoZQ8WkkCF7YmHo4eCasX/0E5g+ukKKgMXHGzo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:70:b7:f5:25:18:3f:b0:a7:ba:88:bd:16:82:e7:95:66:68:82:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Jul 14 10:11:03 2026 GMT Not After : Jul 15 11:02:03 2026 GMT Subject: CN=DD72D9612114C72B7708965244E4711AA59D752E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:fd:37:f0:3b:81:38:54:93:eb:4e:b4:08: 10:a4:c4:d1:94:4e:7d:eb:6e:33:2d:3e:85:53:ff: 1c:4b:fa:27:a5:fb:51:98:cf:2d:1f:6a:d5:32:ba: 75:a2:20:2d:92:07:b8:11:a5:de:9f:51:f5:de:9e: bc:6c:55:b9:f0:08:9d:5d:4b:0f:2c:61:64:ea:54: fb:b8:f5:35:77:ca:35:ba:8c:44:fe:e2:bb:45:47: 68:79:95:00:a7:e9:15:58:a2:53:ee:f9:92:60:88: 34:7d:e0:df:1b:74:be:c9:89:3c:91:aa:e4:b4:23: 05:90:90:09:46:f3:8d:08:80:a8:2c:5a:e5:de:e3: b3:c6:fd:54:c7:05:27:2c:d6:93:6d:79:c5:83:42: 1e:b1:8d:ac:fc:72:d6:2c:d0:42:67:be:a9:d1:d7: 03:82:76:9b:6e:58:13:3e:28:88:60:54:f9:b0:bb: e2:2e:df:da:04:e7:52:15:91:fa:e9:11:e8:19:70: fc:99:5f:87:83:bf:ea:74:ad:4a:de:76:7f:62:74: a8:c0:c9:ff:6c:44:d8:86:9c:d0:d5:ed:3e:89:0a: 6a:93:ae:76:1a:57:df:a8:3a:d4:a0:12:ae:7e:2e: a4:a7:66:68:6e:19:18:89:0c:aa:24:53:0a:03:94: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:D9:61:21:14:C7:2B:77:08:96:52:44:E4:71:1A:A5:9D:75:2E X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:ad:87:1a:56:d6:c6:ce:4f:2d:bf:21:be:57:10:83:ee: c4:1e:76:73:20:69:07:2b:df:ad:45:67:65:c9:c2:7c:fd:31: 9d:bd:4c:21:25:2d:4f:ff:3e:d2:b7:85:e2:ad:73:90:69:2b: 12:de:1e:48:43:6f:5e:50:52:34:73:ff:bd:91:2f:be:57:0d: b1:9a:48:8a:30:6a:4c:cf:ff:8e:a8:c5:7a:40:e8:39:b9:7d: 42:98:20:03:12:1e:31:06:0f:39:ae:08:7e:81:b2:99:f0:5c: 4d:cc:5b:a7:4d:ae:22:01:e6:59:1b:01:01:a4:7c:0c:9c:39: bb:b8:d6:fa:19:fd:12:90:45:be:cc:e5:43:da:68:a7:2c:90: 76:c8:cd:7b:e7:3f:1b:78:e3:68:6b:3c:26:f0:3a:bf:fd:46: 43:21:dd:13:da:6a:e4:eb:5d:6e:d6:ae:18:99:92:e0:82:83: da:69:dc:c6:02:a5:56:2e:e6:54:6b:e2:0e:d2:3c:74:95:cf: 18:57:e7:5a:72:cf:d7:ce:17:7a:97:5f:6b:ac:80:ab:70:f5: 31:ea:8a:69:d6:35:3d:aa:8f:d8:9f:67:17:89:c6:29:35:b1: 30:7e:e9:05:78:6f:f1:ef:60:44:8c:72:79:06:9b:e4:0f:41: 7b:29:9b:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeHC39SUYP7Cnuoi9FoLnlWZogrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA3MTQxMDExMDNaFw0yNjA3MTUxMTAyMDNaMDMxMTAvBgNV BAMTKERENzJEOTYxMjExNEM3MkI3NzA4OTY1MjQ0RTQ3MTFBQTU5RDc1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0P038DuBOFST6060CBCkxNGU Tn3rbjMtPoVT/xxL+iel+1GYzy0fatUyunWiIC2SB7gRpd6fUfXenrxsVbnwCJ1d Sw8sYWTqVPu49TV3yjW6jET+4rtFR2h5lQCn6RVYolPu+ZJgiDR94N8bdL7JiTyR quS0IwWQkAlG840IgKgsWuXe47PG/VTHBScs1pNtecWDQh6xjaz8ctYs0EJnvqnR 1wOCdptuWBM+KIhgVPmwu+Iu39oE51IVkfrpEegZcPyZX4eDv+p0rUredn9idKjA yf9sRNiGnNDV7T6JCmqTrnYaV9+oOtSgEq5+LqSnZmhuGRiJDKokUwoDlE71AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3XLZYSEUxyt3CJZSRORxGqWddS4wHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreOthxpW1sbO Ty2/Ib5XEIPuxB52cyBpByvfrUVnZcnCfP0xnb1MISUtT/8+0reF4q1zkGkrEt4e SENvXlBSNHP/vZEvvlcNsZpIijBqTM//jqjFekDoObl9QpggAxIeMQYPOa4IfoGy mfBcTcxbp02uIgHmWRsBAaR8DJw5u7jW+hn9EpBFvszlQ9popyyQdsjNe+c/G3jj aGs8JvA6v/1GQyHdE9pq5OtdbtauGJmS4IKD2mncxgKlVi7mVGviDtI8dJXPGFfn WnLP184Xepdfa6yAq3D1MeqKadY1PaqP2J9nF4nGKTWxMH7pBXhv8e9gRIxyeQab 5A9BeymbdA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:44 2026 by rpki-client