$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: PVXqwQUWlVbQp2JWdEk76ZBtPOGsmGM7PnhOLHFobtA= Subject key identifier: BB:75:05:36:1A:F1:D7:DC:4B:04:A7:F0:95:7D:ED:6B:85:B8:8D:A6 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 59454F2D53FC91B55C842F7BA983AE9BAA6F5EBA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 59 Signing time: Mon 27 Jul 2026 07:03:38 +0000 Manifest this update: Mon 27 Jul 2026 06:58:38 +0000 Manifest next update: Tue 28 Jul 2026 10:26:38 +0000 Files and hashes: 1: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 2: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 3: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 4: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 5: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 6: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 7: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 8: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 9: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 10: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: 1S5e409oH74ulj1qxMFL8sW7VGjCguCrKIDh0UuhUsY=) 11: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 12: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 13: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 14: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 15: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 16: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 17: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 18: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 19: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 20: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 21: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 22: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 23: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 24: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:45:4f:2d:53:fc:91:b5:5c:84:2f:7b:a9:83:ae:9b:aa:6f:5e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jul 27 06:58:38 2026 GMT Not After : Jul 28 10:26:38 2026 GMT Subject: CN=BB7505361AF1D7DC4B04A7F0957DED6B85B88DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:4b:17:e6:88:59:62:90:42:a1:f6:14:8e: ad:5f:0f:6f:52:70:79:87:2f:7d:08:b3:35:7b:1d: 29:93:6c:a6:6a:cf:5e:f1:53:9f:9f:2a:a4:79:f9: 95:eb:c3:f4:fd:eb:e2:e1:29:2d:04:55:c3:00:e7: 94:c7:d8:a4:5b:0c:0f:28:57:fc:20:1d:bd:a8:d6: 95:06:82:ed:bb:2b:79:94:d6:2e:c5:37:c1:37:18: 24:4c:9d:98:92:05:c7:f1:a6:fc:01:b6:47:39:b8: 34:50:29:92:c7:bf:9d:bc:6e:b6:df:1c:bd:05:20: 53:be:10:ef:e0:cc:e6:0a:ae:56:5b:7b:56:6e:1b: 9e:ff:d5:0b:95:87:bd:db:bc:ce:93:44:ba:42:fd: 45:42:b1:48:3e:80:05:d5:74:e8:54:6f:fd:cc:b4: 8b:e3:8f:29:00:14:25:59:72:94:b4:2c:a4:0c:8e: 39:e1:e3:a6:32:43:f8:26:4e:90:90:b5:87:e9:2e: 14:04:da:dd:a8:85:5e:64:72:f4:9b:a3:be:68:e6: 3b:fb:45:86:ba:9d:f4:2e:49:a1:f3:b0:2b:12:bf: c1:4b:a1:45:89:9b:ec:4f:36:a9:c0:2f:76:a5:f3: 34:7d:bd:8d:9e:b9:06:a0:0d:35:03:38:1b:a6:96: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:75:05:36:1A:F1:D7:DC:4B:04:A7:F0:95:7D:ED:6B:85:B8:8D:A6 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c3:72:aa:b7:3f:a0:80:10:56:08:89:80:ea:ed:c1:2a:6f: f6:11:7f:cc:35:7c:fc:a6:88:27:8a:32:3f:9c:51:f9:fc:1a: be:9e:e6:5d:67:d8:60:17:e3:43:b3:d2:9b:f1:b9:51:f4:ca: 87:ee:e8:9b:64:2a:a2:ab:4c:72:8d:fb:ec:27:98:a7:0a:e9: 8f:d4:a8:34:23:1d:76:94:cb:ad:9f:28:56:98:82:09:68:8e: 13:e7:38:88:f7:6d:2e:47:bf:b6:b1:9f:9c:1f:fe:b9:e8:43: 0d:95:7a:48:c7:b1:f6:d9:be:1f:5b:28:75:2f:39:33:d3:43: a5:15:92:72:07:bc:4d:62:f9:18:79:65:c8:2b:e7:8f:62:86: b1:ff:b7:ff:98:89:55:a6:81:67:b8:e9:e6:a6:8d:17:73:56: ed:43:9e:ed:41:15:3c:d5:d8:e8:a4:89:2b:ee:b5:74:5a:d8: ca:e0:be:09:ed:1b:54:a9:94:d4:04:97:c9:60:24:21:d8:ef: 8f:e0:30:e0:d3:d3:81:29:9d:50:1f:cd:cd:8a:1e:74:76:72: 94:7a:dd:4e:e9:a4:46:d6:f6:6e:12:b7:be:07:82:fa:1f:d4: ff:5f:95:e1:bf:46:bf:13:8c:4c:a0:c0:08:46:dd:b3:a0:19: 42:1b:ff:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWUVPLVP8kbVchC97qYOum6pvXrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA3MjcwNjU4MzhaFw0yNjA3MjgxMDI2MzhaMDMxMTAvBgNV BAMTKEJCNzUwNTM2MUFGMUQ3REM0QjA0QTdGMDk1N0RFRDZCODVCODhEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCN0sX5ohZYpBCofYUjq1fD29S cHmHL30IszV7HSmTbKZqz17xU5+fKqR5+ZXrw/T96+LhKS0EVcMA55TH2KRbDA8o V/wgHb2o1pUGgu27K3mU1i7FN8E3GCRMnZiSBcfxpvwBtkc5uDRQKZLHv528brbf HL0FIFO+EO/gzOYKrlZbe1ZuG57/1QuVh73bvM6TRLpC/UVCsUg+gAXVdOhUb/3M tIvjjykAFCVZcpS0LKQMjjnh46YyQ/gmTpCQtYfpLhQE2t2ohV5kcvSbo75o5jv7 RYa6nfQuSaHzsCsSv8FLoUWJm+xPNqnAL3al8zR9vY2euQagDTUDOBumlhDfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu3UFNhrx19xLBKfwlX3ta4W4jaYwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8Nyqrc/oIAQ VgiJgOrtwSpv9hF/zDV8/KaIJ4oyP5xR+fwavp7mXWfYYBfjQ7PSm/G5UfTKh+7o m2QqoqtMco377CeYpwrpj9SoNCMddpTLrZ8oVpiCCWiOE+c4iPdtLke/trGfnB/+ uehDDZV6SMex9tm+H1sodS85M9NDpRWScge8TWL5GHllyCvnj2KGsf+3/5iJVaaB Z7jp5qaNF3NW7UOe7UEVPNXY6KSJK+61dFrYyuC+Ce0bVKmU1ASXyWAkIdjvj+Aw 4NPTgSmdUB/NzYoedHZylHrdTumkRtb2bhK3vgeC+h/U/1+V4b9GvxOMTKDACEbd s6AZQhv/+w== -----END CERTIFICATE-----Generated at Mon Jul 27 11:15:44 2026 by rpki-client