$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: XwRNXC2xBsh7mFm/3eYnjFSE+KvDHRldO4ke+JgPtLM= Subject key identifier: DB:3F:D2:87:B0:B4:BA:B8:91:FE:51:B8:43:4E:01:0C:73:0B:8F:86 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 38E5281AF58CC9789718417147FAE2D07E575DED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 0135 Signing time: Thu 23 Jul 2026 14:53:56 +0000 Manifest this update: Thu 23 Jul 2026 14:48:56 +0000 Manifest next update: Fri 24 Jul 2026 15:29:56 +0000 Files and hashes: 1: 34332e3232392e35302e302f32342d3234203d3e20313331323734.roa (hash: a3u/LhA+DGLAdFqs0aTuSFzpipPQzEkkemy7dhA9ivk=) 2: 3130332e32302e33322e302f32322d3234203d3e203535393936.roa (hash: E8mO6jGZs71OoUIuhfb2X834G6ZyfeMsM+wvUk9EGWA=) 3: 3130332e3139372e302e302f32342d3234203d3e203535393936.roa (hash: gS4XLM9HgOMm5Uf+aSzL9fKHi+M+tKbMB/NsUYdedTQ=) 4: 34332e3232392e34382e302f32342d3234203d3e20313331323734.roa (hash: XmZinmtgbfH/cG4VGLO8rS0y7I9DQ23y/0PEtfA0f0M=) 5: 3130332e32302e33322e302f32332d3234203d3e203535393936.roa (hash: Pa0OymWG1mBaJte11obCv+8DGPkYUj8G3eNcfyu2L0k=) 6: 3130332e3139372e322e302f32332d3234203d3e203535393936.roa (hash: Rpn+gNy+he+8SJE20cyLGBhiBa1UGUN2Q187SKTzfOU=) 7: 3130332e32302e33332e302f32342d3234203d3e203535393936.roa (hash: OnjqOvqKjffKwS/jJooRVwTWNE/O+1GGHYpHpfy3GMs=) 8: 34332e3232392e35302e302f32342d3234203d3e203535393936.roa (hash: 7KyhR8O98/Aw0TapPHxHIcGk8Zz7j7SO6fxHMW76Yr8=) 9: 3132332e3130382e38392e302f32342d3234203d3e20313331323734.roa (hash: 7n8J6fUqXYRBj2bUNl124uf1OoynPYMBDjOI5i93ibg=) 10: 3130332e3234382e3130302e302f32322d3232203d3e2030.roa (hash: 4w1d4wlsq6lUtXfpCxdJqTU97i+wynzVpBk0KmYrvjA=) 11: 3130332e3139372e302e302f32332d3234203d3e203535393936.roa (hash: H9hsV7HURx454jiYtrgsOddljfZyc/Z0CdeqlfGOt0c=) 12: 34332e3232392e34392e302f32342d3234203d3e20313331323734.roa (hash: NjMhYq90S1vmqTmD7/WKyOVryE2lrKn7Oe7bbsvO/as=) 13: 3130332e34352e3136382e302f32342d3234203d3e203538353432.roa (hash: AW1JvqOamekXhkGFMJkyDNwYLJojvkaLCkrloizACRg=) 14: 3130332e34352e3137312e302f32342d3234203d3e203535393936.roa (hash: em0INCdOjHzKR4A5dFNDDw4gwUgBmzuNsgrZMsNJ6D4=) 15: 3130332e3139372e332e302f32342d3234203d3e203535393936.roa (hash: 10AvrKjCln8364mOWNOfi3SxOhye13GM5cNONPWVuZU=) 16: 3130332e32302e33332e302f32342d3234203d3e20313331323734.roa (hash: iARwCVNkXORTpKo4WtGKb5mPu1a7pE/IbhCdR2N+PjQ=) 17: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: J1BtbywEK2jVbGM+X/gcyGPdNErL2cdbOfI+KpNvCc4=) 18: 3130332e34302e3137342e302f32332d3234203d3e2034383131.roa (hash: DihtNsC2gpjLxDOdWLzJ2+aAU5Vkn4pziudimXIteks=) 19: 34332e3232392e34382e302f32342d3234203d3e203535393936.roa (hash: C0m2CxnTlQL7W3Fi1XEgbs69WkWrnfz8u2pxr0AbFzY=) 20: 3130332e34352e3136392e302f32342d3234203d3e203137363231.roa (hash: J314LX3Hb0mOCocUeaSV+cUonLYIPlaa4/9xVTmWx+A=) 21: 3130332e3139372e302e302f32342d3234203d3e203538353432.roa (hash: heXu4ht0sQmHueb3NSgq7JCdgH94kXkrqP7OZmSCfts=) 22: 3130332e32302e33322e302f32342d3234203d3e203535393936.roa (hash: IK+lGP+F8jwQsfRcjHbxkRhJTFXBMvUgIhF6472apX8=) 23: 34332e3232392e34392e302f32342d3234203d3e2034383131.roa (hash: ZlF9KkmqSaU1S65NQ+Blx+R33WBEXI0yGOnr+zY+kk8=) 24: 3130332e3139372e312e302f32342d3234203d3e203535393936.roa (hash: WdN8fu6zRUPVwQR77iBG1AgxzE9HuU9JQa4vLYPW/mA=) 25: 3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa (hash: TW4xc3RMGZqziyoxyqI9iqabX4vSVegXlwZzmthrrfg=) 26: 3130332e34302e3137352e302f32342d3234203d3e203535393936.roa (hash: 8Rc5yHuqtfIObAi9AyTYu5igHlLk2dhezBkkxM8ZX14=) 27: 3130332e36312e3139312e302f32342d3234203d3e203137363233.roa (hash: 1SJfJi8JgEQfI/2tEhOIGKMsnIlTWVGFz13pCdV2UAU=) 28: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: 77RKVYaIfQkUkXHsGue9VQBrCuzhKyaSczZBLON7XhE=) 29: 3130332e36312e3138382e302f32332d3234203d3e203535393936.roa (hash: syiR8Mz/v0DlGwypwnRO25lmdsu0P6Mf7xemgHup8ow=) 30: 34332e3232392e35312e302f32342d3234203d3e203535393936.roa (hash: azn6q499D4Nt8DLGsSen3zyYHX7jw3l0YqO8zIUSgG0=) 31: 3130332e3139372e322e302f32342d3234203d3e203538353432.roa (hash: V68aOo++ig/KheCMfkJ8QzJ9Qe88JAt7FcvODI22GsI=) 32: 3132332e3130382e38382e302f32342d3234203d3e203535393936.roa (hash: K05YmwCHjZqvkWJCLtMZUG1T3xr19Ct0F+bHyrkh4W4=) 33: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 34: 3130332e36312e3139302e302f32342d3234203d3e203137363231.roa (hash: Fk8P7gCUw0L6K0c2d42vhmO2HNwhOKbWXUQd76vTIZI=) 35: 3130332e32302e33342e302f32342d3234203d3e20313334373732.roa (hash: enobqtGsEQf/Y+9MZR14s6BJ4onS6AGalEnjihsJa2I=) 36: 34332e3232392e35312e302f32342d3234203d3e2034383131.roa (hash: ncBz55iGt4rgLVNXSe0XNbpaNsTrhq2uUmq3zZ0NE/M=) 37: 34332e3232392e35312e302f32342d3234203d3e20313331323734.roa (hash: gPAgm0UUJHlLWfIZjGGDBM5+XSf1QRiyaG4mby4Q/pU=) 38: 3130332e3139372e322e302f32342d3234203d3e203535393936.roa (hash: 2Fm5Q0ZbmbiAMs3tgVqIwHDi/HLW7Xw1FCeHaAx/8dk=) 39: 3132332e3130382e38382e302f32342d3234203d3e20313331323734.roa (hash: sheafeIJDzKMXa+PCZxVA5vIVS2W+60Ur7psAvsuexM=) 40: 34332e3232392e34392e302f32342d3234203d3e203535393936.roa (hash: EJcGF45Hiqu5wwnosTG3pxw2XeyfbQH6AfcUA7whkBA=) 41: 3130332e36312e3138382e302f32342d3234203d3e2034383131.roa (hash: 5d5Vjwm2rktCCp830jqbkVnLiUJ4EyPxVRWFN92YceM=) 42: 3130332e32302e33342e302f32342d3234203d3e20313331323734.roa (hash: 3yg6ZP8TAF9lOL5GmkpIlQ86ynI3L07cyma6VwIj5j0=) 43: 3130332e36312e3139302e302f32332d3234203d3e2034383131.roa (hash: CBKxF4mrYIU4hd6Ww9WMpGNTlOd0LqHFkID3/+5GoMg=) 44: 3132332e3130382e38392e302f32342d3234203d3e203535393936.roa (hash: 130SRR30io0LfTsfzBIPoJa332P30v7oXz+QUWgEhmc=) 45: 3130332e36312e3139302e302f32332d3234203d3e203535393936.roa (hash: PXMzRIdaKTMt7AogtofdMReMyOa66iDkmwy5iBYSGBQ=) 46: 3130332e34352e3232342e302f32322d3232203d3e2030.roa (hash: k/J321lyPwJh6D+vxj7ZucPUZQtMUyNiBIn/LXIyi8w=) 47: 3130332e36312e3138392e302f32342d3234203d3e2034383131.roa (hash: bJ8OeKYd/HLWGuDn51Oeik2TThv04WXJ948zAzMKHC4=) 48: 3130332e36312e3138392e302f32342d3234203d3e203535393936.roa (hash: giIso/4gJFu0KNIh4Iogg2rYAItUOJo5haYbY2/YwiY=) 49: 3130332e36312e3139312e302f32342d3234203d3e203535393936.roa (hash: 6to3JJtaQzjtPd7nCnkNyfroQV5WHV9RjgGhYfwwwbI=) 50: 3130332e32302e33352e302f32342d3234203d3e203535393936.roa (hash: 9sRgDkE8+N1ZHKCVMXJGFKpfsyH7QUNpUBUCAARp/DI=) 51: 3130332e3139372e302e302f32332d3234203d3e20313331323734.roa (hash: fij9rb0OYinJsbLagHbItJlKmnYeIXs9CVTFwhwKcME=) 52: 3130332e32302e33342e302f32332d3234203d3e203535393936.roa (hash: U/xa3DTjR74F+MKKJ0Hpe6ivA4uFgo0sLkEPGO/ax6Q=) 53: 3130332e32302e33322e302f32342d3234203d3e20313331323734.roa (hash: noBDjNHzciQ+tdrNaDmKryRRSE2i53YupSAOrNrEr+M=) 54: 3130332e3139372e322e302f32332d3234203d3e20313331323734.roa (hash: 3PA3nFc0Lu79D6YZnjodFdIuMvdw1hcPpoE47fx8jto=) 55: 323430353a623330303a3a2f33322d3634203d3e20313331323734.roa (hash: AvRX9fTWH2T64bl+ZuSLtsmFc3V5V9XokCr+wcDOGTE=) 56: 3130332e3139372e332e302f32342d3234203d3e203538353432.roa (hash: FItEo1dOsmYj+3DmabSGIv72m6Lk7RbbGmsWTRwaFhM=) 57: 3130332e32302e33342e302f32342d3234203d3e203535393936.roa (hash: StJv+3zFHRYPYW4IjgmTTCATmgOTw3A1fofeYQV1X1U=) 58: 3130332e32302e33322e302f32322d3234203d3e20313331323734.roa (hash: LPwjB5Icrtz/gjqktzbuFe7oJeZ2KwYUJTw/40AlxrE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e5:28:1a:f5:8c:c9:78:97:18:41:71:47:fa:e2:d0:7e:57:5d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Jul 23 14:48:56 2026 GMT Not After : Jul 24 15:29:56 2026 GMT Subject: CN=DB3FD287B0B4BAB891FE51B8434E010C730B8F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:8e:e8:53:ed:56:89:8f:9f:8e:de:13:88: 43:59:45:1e:67:d0:b4:34:19:37:82:d9:11:fe:9c: ca:75:d1:f5:e9:a0:48:eb:6e:61:8b:41:80:83:6d: ce:df:f2:a6:19:12:b9:ac:36:e9:b7:0a:71:1f:2a: 65:1c:3a:51:72:43:c2:41:ef:74:1c:54:dd:ba:25: 6a:53:41:c5:e9:ef:ad:3e:70:cf:a5:00:9c:19:27: 27:33:c4:b6:f1:34:55:31:59:68:f3:08:81:0b:13: dd:11:c6:df:3c:db:66:fb:6c:55:40:94:66:67:31: 0a:08:f4:65:cb:34:e0:23:4e:4f:25:8b:28:e4:60: 3c:ba:69:dd:32:54:97:ae:8b:9c:c2:3d:ff:ae:f3: fb:ad:42:7d:13:2b:8c:4d:32:43:54:b9:cc:7c:2e: ba:a7:11:2c:2a:53:01:d6:56:e0:71:da:5e:cb:6d: af:e9:73:9b:46:37:3b:b6:02:47:ba:02:1d:8b:06: 59:b3:22:41:2f:c1:65:d6:01:fe:c1:20:a6:f9:22: 25:56:43:07:42:12:4c:1e:66:bb:da:26:2e:64:f8: 77:a9:48:83:26:2c:18:54:de:a7:f4:2d:38:3a:68: ec:92:dd:00:36:bb:54:24:d9:5d:f1:6e:a7:86:4f: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3F:D2:87:B0:B4:BA:B8:91:FE:51:B8:43:4E:01:0C:73:0B:8F:86 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:85:17:4f:f8:81:4b:a6:4f:1b:76:80:f5:cc:8b:30:fd:67: 5c:f6:bf:fd:18:30:05:fb:3f:cb:33:86:ab:ab:55:51:a8:fe: f1:19:6d:19:e4:69:16:42:39:90:cb:30:dd:58:62:54:16:92: f6:37:36:04:77:c1:30:d1:79:f3:76:6b:59:a9:eb:0f:ba:ba: 26:cc:a8:c7:86:20:ad:4a:56:b3:22:be:68:ac:1b:74:ac:81: 92:6f:5b:82:89:aa:d8:69:eb:6d:1c:d1:60:f0:0b:6c:ac:66: 67:fc:03:ea:ae:9d:88:7e:27:72:2f:74:2c:8c:45:f5:29:20: aa:55:0e:cb:60:4a:81:72:36:6c:39:3e:94:78:a4:52:e4:83: 40:19:6e:f1:d7:82:be:fb:5f:96:e3:89:b2:28:59:22:79:5a: 7f:7f:2a:68:5a:5a:6e:f0:14:9c:e3:b0:34:e3:46:36:ca:45: e0:c3:fc:fc:0e:5e:a6:93:e3:4c:55:5b:d6:4f:c5:14:ab:89: 4c:6a:b8:4b:88:fb:2a:d8:7b:21:0b:a8:40:78:7f:e1:3b:93: fd:64:7d:07:e0:ea:93:a4:78:a5:56:da:b6:ce:09:83:f5:c8: 7e:77:f1:bc:8a:9d:20:fd:1a:dd:f3:b3:71:49:c3:01:05:aa: 22:52:a2:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOOUoGvWMyXiXGEFxR/ri0H5XXe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA3MjMxNDQ4NTZaFw0yNjA3MjQxNTI5NTZaMDMxMTAvBgNV BAMTKERCM0ZEMjg3QjBCNEJBQjg5MUZFNTFCODQzNEUwMTBDNzMwQjhGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iY7oU+1WiY+fjt4TiENZRR5n 0LQ0GTeC2RH+nMp10fXpoEjrbmGLQYCDbc7f8qYZErmsNum3CnEfKmUcOlFyQ8JB 73QcVN26JWpTQcXp760+cM+lAJwZJyczxLbxNFUxWWjzCIELE90Rxt8822b7bFVA lGZnMQoI9GXLNOAjTk8liyjkYDy6ad0yVJeui5zCPf+u8/utQn0TK4xNMkNUucx8 LrqnESwqUwHWVuBx2l7Lba/pc5tGNzu2Ake6Ah2LBlmzIkEvwWXWAf7BIKb5IiVW QwdCEkweZrvaJi5k+HepSIMmLBhU3qf0LTg6aOyS3QA2u1Qk2V3xbqeGTxG7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2z/Sh7C0uriR/lG4Q04BDHMLj4YwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4UXT/iBS6ZP G3aA9cyLMP1nXPa//RgwBfs/yzOGq6tVUaj+8RltGeRpFkI5kMsw3VhiVBaS9jc2 BHfBMNF583ZrWanrD7q6Jsyox4YgrUpWsyK+aKwbdKyBkm9bgomq2GnrbRzRYPAL bKxmZ/wD6q6diH4nci90LIxF9SkgqlUOy2BKgXI2bDk+lHikUuSDQBlu8deCvvtf luOJsihZInlaf38qaFpabvAUnOOwNONGNspF4MP8/A5eppPjTFVb1k/FFKuJTGq4 S4j7Kth7IQuoQHh/4TuT/WR9B+Dqk6R4pVbats4Jg/XIfnfxvIqdIP0a3fOzcUnD AQWqIlKi0A== -----END CERTIFICATE-----Generated at Fri Jul 24 08:26:50 2026 by rpki-client