$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: 3+yH/LfIg4kD3OMy2fDZxQaipybns0IqfkbSs87zqcQ= Subject key identifier: 71:B8:68:F9:BA:85:00:11:86:E0:54:32:2C:EA:48:92:C3:AC:24:C3 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 07ACC85B539C13EC4879FFFABFF9827087F0D530 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 0128 Signing time: Fri 24 Jul 2026 18:26:53 +0000 Manifest this update: Fri 24 Jul 2026 18:21:53 +0000 Manifest next update: Sat 25 Jul 2026 21:54:53 +0000 Files and hashes: 1: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=) 2: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=) 3: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: 1H6djsUa98cA0P/uloONq4X44oWRiLMuZxlfX4TuNQQ=) 4: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=) 5: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=) 6: AS54994.roa (hash: 9DefOK5XxXnJzTec5kqRFcozhtzg8e+5NjI/KjSCGRo=) 7: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=) 8: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=) 9: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 21:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:c8:5b:53:9c:13:ec:48:79:ff:fa:bf:f9:82:70:87:f0:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Jul 24 18:21:53 2026 GMT Not After : Jul 25 21:54:53 2026 GMT Subject: CN=71B868F9BA85001186E054322CEA4892C3AC24C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:36:70:15:9d:ac:cc:45:a2:83:4d:28:0e: 25:1f:99:29:ca:9a:29:3f:1d:7e:87:5c:41:93:90: 36:2f:e9:f4:c0:84:d8:03:81:78:ed:e0:31:13:5d: db:71:95:47:08:fd:c2:41:ea:f7:cd:36:7b:63:2a: 01:d8:16:b4:ea:93:70:d3:60:56:fa:db:5b:7d:a1: a4:55:83:30:04:c3:e8:3c:f5:a2:17:2c:7e:3d:cf: 17:fd:cd:bb:90:2f:83:d8:12:90:b6:37:9d:61:12: 39:2b:20:05:53:40:49:b8:19:3f:7e:f8:7a:e4:9e: bb:44:08:00:5c:14:63:42:8f:9d:1e:f8:1b:a4:9d: f1:23:5e:ff:b8:78:2b:c9:97:0a:2a:b6:62:61:e6: 6d:ea:6d:32:c5:96:e5:b6:fe:f6:3d:b8:0b:80:3c: a1:be:e1:e0:13:b7:64:45:d8:9c:cf:63:bb:e1:e5: 22:54:04:a5:22:01:00:8c:68:f3:fc:36:2f:2c:e7: 83:3e:c8:7e:82:d5:da:e0:9c:55:82:05:14:73:e2: c9:ec:06:77:05:bb:f0:ae:26:ff:f8:14:d7:b1:d0: c4:93:88:7e:c8:4d:a7:e3:18:50:76:0b:a4:a0:14: 52:52:5c:2a:6a:59:56:a9:de:c3:1f:a8:cd:bb:a4: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:68:F9:BA:85:00:11:86:E0:54:32:2C:EA:48:92:C3:AC:24:C3 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:1a:7d:6b:b4:36:b1:4a:cb:87:2b:fd:27:22:4a:9f:8a:0f: 45:4e:b2:f7:ee:ea:80:b0:c2:9c:e6:db:df:e5:52:fe:03:a9: 6f:e4:bd:52:9b:ce:bc:db:40:3e:a1:9d:6c:ef:3c:59:30:7f: 57:d0:04:de:37:3f:18:12:8a:9b:ea:55:6c:a4:f7:e4:28:59: 1d:b4:1a:fb:7c:a3:67:13:bc:96:56:b3:f7:47:e8:f9:85:69: 7b:89:0c:05:d1:42:eb:b8:fd:6c:07:d5:55:70:d8:bb:4a:7f: 6a:b2:57:84:02:47:d7:d6:f4:2d:86:f4:0c:f1:86:db:84:c9: 94:9a:49:45:5f:36:51:82:63:3e:fe:a6:f1:65:53:0f:73:e5: 65:1b:7e:e8:3f:49:aa:34:70:72:15:06:5a:9e:74:dd:29:b4: 0e:d6:dc:19:08:d7:50:76:2d:0d:5a:70:e3:96:6c:2e:1f:e7: 5c:5a:60:f9:03:f8:9c:4a:57:3c:22:f5:b6:08:ba:c9:3d:65: 82:d2:ed:f9:c9:c2:a2:f2:fe:17:f7:96:4f:5c:f7:fb:53:02: ec:a2:89:d7:51:47:a5:1f:59:6e:60:b2:62:45:bb:7b:ab:75: 5f:c2:69:41:1a:55:2e:ab:62:2a:cd:f5:63:84:08:77:93:0e: e8:be:ed:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB6zIW1OcE+xIef/6v/mCcIfw1TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA3MjQxODIxNTNaFw0yNjA3MjUyMTU0NTNaMDMxMTAvBgNV BAMTKDcxQjg2OEY5QkE4NTAwMTE4NkUwNTQzMjJDRUE0ODkyQzNBQzI0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0jZwFZ2szEWig00oDiUfmSnK mik/HX6HXEGTkDYv6fTAhNgDgXjt4DETXdtxlUcI/cJB6vfNNntjKgHYFrTqk3DT YFb621t9oaRVgzAEw+g89aIXLH49zxf9zbuQL4PYEpC2N51hEjkrIAVTQEm4GT9+ +HrknrtECABcFGNCj50e+BuknfEjXv+4eCvJlwoqtmJh5m3qbTLFluW2/vY9uAuA PKG+4eATt2RF2JzPY7vh5SJUBKUiAQCMaPP8Ni8s54M+yH6C1drgnFWCBRRz4sns BncFu/CuJv/4FNex0MSTiH7ITafjGFB2C6SgFFJSXCpqWVap3sMfqM27pOcRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcbho+bqFABGG4FQyLOpIksOsJMMwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxp9a7Q2sUrL hyv9JyJKn4oPRU6y9+7qgLDCnObb3+VS/gOpb+S9UpvOvNtAPqGdbO88WTB/V9AE 3jc/GBKKm+pVbKT35ChZHbQa+3yjZxO8llaz90fo+YVpe4kMBdFC67j9bAfVVXDY u0p/arJXhAJH19b0LYb0DPGG24TJlJpJRV82UYJjPv6m8WVTD3PlZRt+6D9JqjRw chUGWp503Sm0DtbcGQjXUHYtDVpw45ZsLh/nXFpg+QP4nEpXPCL1tgi6yT1lgtLt +cnCovL+F/eWT1z3+1MC7KKJ11FHpR9ZbmCyYkW7e6t1X8JpQRpVLqtiKs31Y4QI d5MO6L7tKg== -----END CERTIFICATE-----Generated at Fri Jul 24 22:28:43 2026 by rpki-client