$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json) Hash identifier: 2PrwDRhfD9gdObMB99dqtY6lZ1hBgg4/8bJyA914xuM= Subject key identifier: D2:09:DE:98:89:32:08:6F:57:C8:E8:59:D6:02:9E:A2:63:15:BA:E3 Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60 Certificate serial: 6335734A07D125726A38B6FA11D8C1A9126D73AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft Manifest number: 0A Signing time: Tue 14 Jul 2026 15:16:33 +0000 Manifest this update: Tue 14 Jul 2026 15:11:33 +0000 Manifest next update: Wed 15 Jul 2026 17:14:33 +0000 Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: Z24SZMCJm7TBJ1DidWc/2cW2otvgwJj5QxTnP/weTrk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:35:73:4a:07:d1:25:72:6a:38:b6:fa:11:d8:c1:a9:12:6d:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60 Validity Not Before: Jul 14 15:11:33 2026 GMT Not After : Jul 15 17:14:33 2026 GMT Subject: CN=D209DE988932086F57C8E859D6029EA26315BAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:84:1f:68:de:d0:87:50:e8:d5:20:17:42: 95:6c:11:4c:71:98:c6:93:58:5d:81:fb:cb:44:fd: 76:f3:9f:9c:0a:c1:cc:f4:ec:35:5d:7c:9e:95:c5: f9:f4:d8:02:24:2c:d6:d6:f1:72:91:01:2c:8c:5e: 1d:73:9d:14:6d:70:da:0a:51:6b:fe:7a:d7:8f:98: 75:a0:3a:3e:cc:61:49:cd:c1:83:5f:b2:ce:c3:2a: 68:51:18:16:4d:e0:0a:4f:68:ac:b3:58:a0:f3:96: c3:0b:5f:1b:92:00:3c:7f:51:8b:41:7d:06:cc:79: 40:8f:99:22:01:c0:f8:b6:32:7f:1d:63:55:b6:8a: a1:dc:b1:b3:f2:21:5b:b8:0a:95:f5:5e:45:c5:82: eb:ee:f1:1f:78:20:76:48:31:b2:41:46:85:d3:72: 87:d3:89:27:0e:1d:33:d3:69:91:55:f2:8d:1c:fe: 24:ae:01:85:43:55:9d:9d:77:0d:13:a5:f2:f8:b1: 04:06:a1:82:1e:75:a9:51:4e:ef:6c:89:5f:11:71: 1d:d7:2e:c1:63:35:50:1f:cd:2c:c1:4e:d8:cb:16: 49:20:0b:04:08:d9:61:df:74:d7:52:1a:d7:fd:68: c5:7d:fa:66:b6:f0:e9:bf:7b:67:8c:2d:a1:f3:b5: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:DE:98:89:32:08:6F:57:C8:E8:59:D6:02:9E:A2:63:15:BA:E3 X509v3 Authority Key Identifier: keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e9:78:ea:d3:84:13:4a:73:2b:f3:88:9b:cd:40:aa:00:b0: 68:11:ef:14:c1:a7:9a:41:4c:df:c4:f0:66:35:e0:fe:ae:f8: 06:bb:00:26:44:87:45:7b:80:c1:86:36:e8:bb:7c:24:fe:ae: 98:73:28:96:63:d1:75:03:42:fc:54:ee:23:6c:ca:92:7f:f5: 29:74:e5:62:5f:b8:24:86:c8:97:53:86:70:a3:cd:18:ea:95: bf:a5:fc:e4:70:07:d1:80:d9:b5:d5:3a:14:75:79:9b:21:a3: 53:90:90:f0:fe:ee:48:94:13:54:36:b0:8d:7d:73:81:62:da: da:7a:4b:26:9d:33:13:81:ab:86:1e:1f:80:4d:7f:d3:1e:1b: f8:4a:ec:51:bc:60:ec:1c:78:8a:d0:2e:bd:78:41:dc:c0:7e: d8:38:47:e5:c8:22:96:c1:13:c6:47:77:3e:db:97:77:47:8a: 6d:cd:0c:a9:d6:e3:cb:51:4b:3b:af:6b:bf:d1:1c:42:c6:69: 80:05:a6:94:ce:04:a8:c0:1a:d1:92:03:7c:02:f0:82:81:26: d5:c0:be:20:86:d3:d8:49:ca:1e:2f:39:ef:f0:6f:96:fb:68: 62:13:4c:7e:ca:43:ae:a4:6f:75:8a:95:f5:d5:17:13:2b:45: 7d:58:7c:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYzVzSgfRJXJqOLb6EdjBqRJtc60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdD QjY5MkY2MDAeFw0yNjA3MTQxNTExMzNaFw0yNjA3MTUxNzE0MzNaMDMxMTAvBgNV BAMTKEQyMDlERTk4ODkzMjA4NkY1N0M4RTg1OUQ2MDI5RUEyNjMxNUJBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxoQfaN7Qh1Do1SAXQpVsEUxx mMaTWF2B+8tE/Xbzn5wKwcz07DVdfJ6Vxfn02AIkLNbW8XKRASyMXh1znRRtcNoK UWv+etePmHWgOj7MYUnNwYNfss7DKmhRGBZN4ApPaKyzWKDzlsMLXxuSADx/UYtB fQbMeUCPmSIBwPi2Mn8dY1W2iqHcsbPyIVu4CpX1XkXFguvu8R94IHZIMbJBRoXT cofTiScOHTPTaZFV8o0c/iSuAYVDVZ2ddw0TpfL4sQQGoYIedalRTu9siV8RcR3X LsFjNVAfzSzBTtjLFkkgCwQI2WHfdNdSGtf9aMV9+ma28Om/e2eMLaHztYuLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0gnemIkyCG9XyOhZ1gKeomMVuuMwHwYDVR0j BBgwFoAUkdOxicZ/ChCEork5lhGCN8tpL2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NzA0NTcxMDg0ODQ1ODc4OS8wLzkxRDNCMTg5QzY3RjBBMTA4NEEyQjkzOTk2MTE4 MjM3Q0I2OTJGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdDQjY5MkY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjcwNDU3MTA4NDg0NTg3ODkvMC85MUQzQjE4OUM2N0Yw QTEwODRBMkI5Mzk5NjExODIzN0NCNjkyRjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKul46tOEE0pz K/OIm81AqgCwaBHvFMGnmkFM38TwZjXg/q74BrsAJkSHRXuAwYY26Lt8JP6umHMo lmPRdQNC/FTuI2zKkn/1KXTlYl+4JIbIl1OGcKPNGOqVv6X85HAH0YDZtdU6FHV5 myGjU5CQ8P7uSJQTVDawjX1zgWLa2npLJp0zE4Grhh4fgE1/0x4b+ErsUbxg7Bx4 itAuvXhB3MB+2DhH5cgilsETxkd3PtuXd0eKbc0Mqdbjy1FLO69rv9EcQsZpgAWm lM4EqMAa0ZIDfALwgoEm1cC+IIbT2EnKHi857/BvlvtoYhNMfspDrqRvdYqV9dUX EytFfVh8KA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:04 2026 by rpki-client