$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json) Hash identifier: TaN2fcx1rDXeL2GZ9l9bqvm4IakTr7U9lk/526FGUjc= Subject key identifier: DD:26:B8:50:D6:2A:4B:41:9E:7B:6E:B4:27:07:ED:94:26:7B:C4:90 Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Certificate serial: 4D3C58EAAEBDD9362078F7348E8A58F77613C3FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft Manifest number: 41 Signing time: Tue 14 Jul 2026 12:21:14 +0000 Manifest this update: Tue 14 Jul 2026 12:16:14 +0000 Manifest next update: Wed 15 Jul 2026 14:28:14 +0000 Files and hashes: 1: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=) 2: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: PGncNcXbitFRyupFKh08X9GMRve7OS8uxxsOcOsYwbg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3c:58:ea:ae:bd:d9:36:20:78:f7:34:8e:8a:58:f7:76:13:c3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Validity Not Before: Jul 14 12:16:14 2026 GMT Not After : Jul 15 14:28:14 2026 GMT Subject: CN=DD26B850D62A4B419E7B6EB42707ED94267BC490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:bb:19:3e:42:cb:3c:d0:2d:2d:8e:79:1a: d4:f8:b1:a1:d6:fd:45:bc:50:c0:d4:4e:86:e0:98: 1f:d2:30:f5:39:e0:6e:ee:89:0b:82:8b:32:78:a0: 68:76:ce:55:c0:3d:28:8c:15:d5:29:c7:45:01:5a: 50:88:10:1d:b3:d3:d8:db:5b:8f:dd:32:73:00:41: b7:28:90:b2:3b:6c:8b:68:86:43:6a:7e:81:10:ae: fb:b9:4e:a6:56:7e:eb:27:56:8d:bc:ce:4b:ef:00: 0f:34:03:2f:e5:df:45:c6:29:7a:f8:7c:cd:18:4e: a2:e4:70:07:45:46:5a:02:31:e9:8c:04:ba:29:05: 8d:1f:dd:b8:f2:71:aa:9a:30:4e:58:8d:0e:64:b8: ac:94:51:63:36:53:7b:c9:03:c1:1e:65:06:92:4e: cc:79:6a:7e:bd:5d:c8:cb:cc:3b:62:10:1f:08:7e: 49:1f:e0:5d:e3:69:c9:a3:59:cd:9b:ac:40:f3:85: 85:32:76:5c:45:37:db:6f:ad:89:73:a4:15:36:e6: f4:f2:db:a1:a8:e1:98:54:fe:d3:b4:6e:ac:c3:e4: 28:8c:1c:46:b5:6a:12:f5:68:c8:6e:36:f3:a8:ea: e6:0b:12:7c:8e:56:32:74:a5:c5:8a:b6:e0:0b:92: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:26:B8:50:D6:2A:4B:41:9E:7B:6E:B4:27:07:ED:94:26:7B:C4:90 X509v3 Authority Key Identifier: keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:99:05:74:82:d6:75:c3:eb:e0:b3:54:56:96:4f:74:a8:84: 7b:37:03:88:cf:c5:54:c0:95:3e:9f:51:cc:c3:b5:21:07:8c: bb:07:ea:17:f2:70:fc:93:4e:40:f6:51:1a:a5:e8:57:ea:e1: 27:cb:b3:c2:73:de:58:11:38:9d:b4:30:a8:5c:8f:6e:ff:27: 97:53:82:fe:59:51:e7:6c:14:5f:36:e9:54:ec:51:88:a7:cf: 0a:7f:fb:db:ad:e1:e5:46:ea:a6:fc:55:5e:03:75:f5:48:44: e2:68:87:49:f2:8e:d5:37:fa:eb:8e:4b:13:b2:67:5c:7b:2f: 65:8d:48:0d:8c:2e:5f:21:ea:8e:85:b4:3a:57:52:d3:ed:84: 3e:5a:b4:36:4f:4a:7b:2f:ce:b2:85:2e:d4:38:68:03:4f:03: 5d:8e:fa:d3:f7:89:cd:9e:77:cb:5f:86:aa:ea:e4:34:52:43: 9e:69:ae:3f:a2:42:50:2a:78:02:de:5a:7e:17:7a:7e:95:9d: 72:e6:14:ec:a8:c2:fd:b1:31:27:d3:88:2c:2d:29:42:4e:82: 6c:46:70:7d:3e:d2:c8:ea:4d:3d:fe:ca:5b:ba:95:85:a6:cc: a1:ed:62:2f:d7:d3:f8:57:e5:c3:d4:d2:f4:10:e1:54:29:98: 30:28:b2:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTTxY6q692TYgePc0jopY93YTw/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3 RDU2QjM4ODAeFw0yNjA3MTQxMjE2MTRaFw0yNjA3MTUxNDI4MTRaMDMxMTAvBgNV BAMTKEREMjZCODUwRDYyQTRCNDE5RTdCNkVCNDI3MDdFRDk0MjY3QkM0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOH7sZPkLLPNAtLY55GtT4saHW /UW8UMDUTobgmB/SMPU54G7uiQuCizJ4oGh2zlXAPSiMFdUpx0UBWlCIEB2z09jb W4/dMnMAQbcokLI7bItohkNqfoEQrvu5TqZWfusnVo28zkvvAA80Ay/l30XGKXr4 fM0YTqLkcAdFRloCMemMBLopBY0f3bjycaqaME5YjQ5kuKyUUWM2U3vJA8EeZQaS Tsx5an69XcjLzDtiEB8Ifkkf4F3jacmjWc2brEDzhYUydlxFN9tvrYlzpBU25vTy 26Go4ZhU/tO0bqzD5CiMHEa1ahL1aMhuNvOo6uYLEnyOVjJ0pcWKtuALkinBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Sa4UNYqS0Gee260JwftlCZ7xJAwHwYDVR0j BBgwFoAU5dV+SiR2Q5SYoC7BGEjI4X1Ws4gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI5MTUyMzM4ODU3MTY2OS8wL0U1RDU3RTRBMjQ3NjQzOTQ5OEEwMkVDMTE4NDhD OEUxN0Q1NkIzODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3RDU2QjM4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyOTE1MjMzODg1NzE2NjkvMC9FNUQ1N0U0QTI0NzY0 Mzk0OThBMDJFQzExODQ4QzhFMTdENTZCMzg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5kFdILWdcPr 4LNUVpZPdKiEezcDiM/FVMCVPp9RzMO1IQeMuwfqF/Jw/JNOQPZRGqXoV+rhJ8uz wnPeWBE4nbQwqFyPbv8nl1OC/llR52wUXzbpVOxRiKfPCn/7263h5UbqpvxVXgN1 9UhE4miHSfKO1Tf6645LE7JnXHsvZY1IDYwuXyHqjoW0OldS0+2EPlq0Nk9Key/O soUu1DhoA08DXY760/eJzZ53y1+GqurkNFJDnmmuP6JCUCp4At5afhd6fpWdcuYU 7KjC/bExJ9OILC0pQk6CbEZwfT7SyOpNPf7KW7qVhabMoe1iL9fT+Fflw9TS9BDh VCmYMCiyDg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:19:45 2026 by rpki-client