$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json) Hash identifier: mqRB1MEtq3dMLsjsijz4B6wzYg9ZRutUrmm23+nAzz8= Subject key identifier: 29:20:9D:82:89:74:7F:8E:05:0B:4A:97:4B:B1:43:4F:41:08:71:9A Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA Certificate serial: 6E6E4F64392A01315EAB133F29BAB2629FED9466 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft Manifest number: 14 Signing time: Tue 07 Jul 2026 08:38:44 +0000 Manifest this update: Tue 07 Jul 2026 08:33:44 +0000 Manifest next update: Wed 08 Jul 2026 09:18:44 +0000 Files and hashes: 1: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=) 2: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=) 3: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=) 4: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=) 5: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=) 6: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=) 7: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=) 8: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: 9jeYI0V8h/d46z6B50DmYd4Y4KIWm3s7K9EZlsnfL9o=) 9: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6e:4f:64:39:2a:01:31:5e:ab:13:3f:29:ba:b2:62:9f:ed:94:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA Validity Not Before: Jul 7 08:33:44 2026 GMT Not After : Jul 8 09:18:44 2026 GMT Subject: CN=29209D8289747F8E050B4A974BB1434F4108719A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:fb:77:d8:ae:01:73:7b:0a:94:0a:42:c2: f0:ef:51:e0:71:41:49:f4:00:a2:14:52:44:24:ef: 1b:c6:2d:18:57:fc:38:98:df:fc:00:67:1e:06:dc: c3:4b:a8:36:71:16:30:65:02:8f:02:7c:78:01:db: 9a:95:81:10:43:91:ea:bb:db:ee:aa:88:d4:02:a2: eb:e8:d8:02:07:46:dc:0e:fe:a9:67:b3:fd:54:49: 01:b0:c0:9d:c5:dd:48:da:a0:11:ac:5a:27:39:b6: c7:61:74:72:8a:e4:91:c3:f4:a5:98:fc:6d:53:52: 86:69:6e:0a:ba:79:c8:e8:ab:15:a5:19:d8:36:93: 9e:e5:46:b8:ad:ab:25:c2:ef:d7:7c:17:5e:2e:8c: d3:a5:b4:81:8b:7d:32:95:f9:7c:20:8a:7d:f8:48: e2:ef:95:a7:12:29:05:b2:0b:d5:aa:99:3e:26:68: b9:9d:e0:1b:2d:dd:bd:5e:65:87:b3:fb:f4:00:db: 63:e3:81:2b:89:d7:41:23:cb:47:f6:f1:e9:31:ed: e4:10:f5:5d:98:25:42:b6:84:7d:f2:6d:b4:4c:72: 8b:f6:cf:fd:b6:d8:ba:bf:51:23:3d:b1:b6:17:1b: bb:f7:95:9e:49:8c:8d:fb:a9:7b:ae:f7:e9:ec:be: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:9D:82:89:74:7F:8E:05:0B:4A:97:4B:B1:43:4F:41:08:71:9A X509v3 Authority Key Identifier: keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4b:39:fb:7e:3b:43:8f:26:a7:6c:b2:cb:a1:27:f2:e0:60: 38:57:97:95:f0:97:0d:a0:63:83:bb:f5:43:09:bc:80:3b:46: bb:89:6c:d9:16:22:85:2b:6a:28:ec:8a:f8:d3:a6:be:ba:38: ac:1a:e0:78:c9:24:cc:4a:3c:ad:80:23:de:08:23:7f:69:f4: 8f:59:ce:45:2d:53:0b:14:09:c2:f0:58:ff:ec:ca:79:17:13: d2:7f:af:01:28:a6:98:c0:c4:33:6c:cb:fd:ff:99:34:a1:59: 82:52:d1:55:0b:47:d3:81:c4:db:a1:ad:9f:72:20:15:b4:96: 76:ec:30:66:a0:18:e7:92:75:37:bc:87:41:6c:8a:21:38:bf: 29:e9:ea:ec:92:70:d1:fb:2f:f4:66:9c:de:b6:d3:c8:06:66: eb:27:ca:51:72:1a:9b:4c:f4:e3:9c:62:4b:6d:18:29:27:05: b8:7f:a1:a1:6d:09:0b:96:9d:49:f0:9c:4e:b2:36:34:8f:f9: 54:61:7c:08:75:dd:1f:fa:ec:8b:c5:1d:f6:d9:92:57:b3:70: 2b:bd:98:47:e9:27:c8:cf:7d:20:12:5f:79:fd:de:1d:35:75: d4:78:c6:ab:9c:75:78:e9:e2:f7:17:0a:d1:79:05:6a:db:89: 76:22:21:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbm5PZDkqATFeqxM/KbqyYp/tlGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz QjE5MTZGQTAeFw0yNjA3MDcwODMzNDRaFw0yNjA3MDgwOTE4NDRaMDMxMTAvBgNV BAMTKDI5MjA5RDgyODk3NDdGOEUwNTBCNEE5NzRCQjE0MzRGNDEwODcxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWft32K4Bc3sKlApCwvDvUeBx QUn0AKIUUkQk7xvGLRhX/DiY3/wAZx4G3MNLqDZxFjBlAo8CfHgB25qVgRBDkeq7 2+6qiNQCouvo2AIHRtwO/qlns/1USQGwwJ3F3UjaoBGsWic5tsdhdHKK5JHD9KWY /G1TUoZpbgq6ecjoqxWlGdg2k57lRritqyXC79d8F14ujNOltIGLfTKV+Xwgin34 SOLvlacSKQWyC9WqmT4maLmd4Bst3b1eZYez+/QA22PjgSuJ10Ejy0f28ekx7eQQ 9V2YJUK2hH3ybbRMcov2z/222Lq/USM9sbYXG7v3lZ5JjI37qXuu9+nsvkErAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKSCdgol0f44FC0qXS7FDT0EIcZowHwYDVR0j BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2 MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIks5+347Q48m p2yyy6En8uBgOFeXlfCXDaBjg7v1Qwm8gDtGu4ls2RYihStqKOyK+NOmvro4rBrg eMkkzEo8rYAj3ggjf2n0j1nORS1TCxQJwvBY/+zKeRcT0n+vASimmMDEM2zL/f+Z NKFZglLRVQtH04HE26Gtn3IgFbSWduwwZqAY55J1N7yHQWyKITi/Kenq7JJw0fsv 9Gac3rbTyAZm6yfKUXIam0z045xiS20YKScFuH+hoW0JC5adSfCcTrI2NI/5VGF8 CHXdH/rsi8Ud9tmSV7NwK72YR+knyM99IBJfef3eHTV11HjGq5x1eOni9xcK0XkF atuJdiIheQ== -----END CERTIFICATE-----Generated at Tue Jul 7 19:10:37 2026 by rpki-client