$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json) Hash identifier: /M5Q/L84tRhDiB+F2iAHj3u9TxycYDVTfwt5jAYSkDU= Subject key identifier: 9A:B0:11:14:AE:C1:35:B0:C7:4D:97:4A:F0:07:5B:08:13:57:DD:9E Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 29F1058BA94E57C25F16A07E930D87615754A8B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft Manifest number: 01CF Signing time: Thu 23 Jul 2026 21:29:35 +0000 Manifest this update: Thu 23 Jul 2026 21:24:35 +0000 Manifest next update: Sat 25 Jul 2026 01:23:35 +0000 Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: 0zA+jCyaAgJPDAF9hn0E2ocMUpxoq5nGosh1gGghIrk=) 2: AS134366.roa (hash: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=) 3: AS59078.roa (hash: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=) 4: AS58466.roa (hash: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f1:05:8b:a9:4e:57:c2:5f:16:a0:7e:93:0d:87:61:57:54:a8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Jul 23 21:24:35 2026 GMT Not After : Jul 25 01:23:35 2026 GMT Subject: CN=9AB01114AEC135B0C74D974AF0075B081357DD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:96:8a:5f:13:4c:cd:f6:b0:23:e2:f4:69: b8:13:fc:18:b7:e6:b1:03:72:da:2f:84:fe:e9:b1: cb:2a:6f:db:e4:ae:57:12:67:8a:a3:0f:08:1a:cf: a9:8f:76:b9:69:10:ed:d9:0e:1c:d6:ba:d3:27:3f: 3d:5c:79:b6:4f:96:df:f1:1d:a5:b3:e4:d3:82:a5: 51:b3:77:8c:78:c0:73:27:4e:8c:e1:2d:99:df:cb: b7:ff:dd:dc:20:ff:4c:d3:8a:33:e9:81:bf:72:cd: fc:cd:43:a7:57:7f:86:eb:88:d8:d0:49:d8:5f:77: 67:25:14:b2:2f:40:e7:b9:fd:76:bd:2e:85:5a:23: 7c:46:68:0e:91:d0:8f:20:eb:e7:43:43:09:10:ec: 91:8a:09:44:07:5c:db:5f:d8:9a:77:0e:20:5c:4d: d4:70:38:b8:65:d1:c6:92:fb:6e:bd:ca:18:00:06: ba:87:30:2e:fb:b1:ef:62:49:9b:4c:23:d7:a8:a1: 3c:c2:14:48:19:63:3c:e5:a4:15:0d:82:1e:98:f5: d1:5f:40:34:01:fb:80:36:d9:9a:5e:1f:95:b1:20: 03:0a:2e:8a:81:11:e8:2c:56:7e:80:f3:d1:24:00: 76:62:0e:e4:2e:73:52:5c:3a:b6:a7:50:c7:60:0d: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B0:11:14:AE:C1:35:B0:C7:4D:97:4A:F0:07:5B:08:13:57:DD:9E X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:16:a6:66:77:0f:85:64:b1:5f:d9:da:ad:42:85:e6:4b:7b: 41:36:61:fc:c7:30:d3:13:d1:c2:69:d6:b4:8a:20:73:c0:a1: fd:97:fd:75:01:d7:d2:2b:94:bc:3e:7d:df:a8:95:5f:0e:1d: 0d:bf:eb:14:d8:ca:65:62:84:14:12:99:72:bb:4e:bb:52:60: 83:68:99:9c:f0:b6:cd:da:b9:ee:ed:48:56:0e:c9:df:fd:c2: 24:31:b2:01:20:21:e9:fe:c5:a7:e4:1c:72:c0:38:42:ae:e9: 0b:8d:34:05:46:ee:5f:ea:55:e7:c3:9c:1d:0d:3c:96:ca:e2: 31:68:5c:f4:14:00:d3:c3:c8:53:f2:69:c2:5e:65:26:61:c3: 59:50:99:c5:04:11:6f:dc:5f:11:ee:11:33:0f:24:7b:47:3e: db:be:90:92:94:19:fb:53:aa:5d:ff:e6:98:75:6e:62:cd:36: 21:6b:41:fd:4a:53:8f:73:36:fa:ec:32:35:ed:4e:34:23:ab: 4d:e1:75:d2:20:25:aa:bd:13:9c:2d:14:3e:b5:38:58:58:77: 0f:41:38:a7:c4:df:c2:8f:1b:f4:2b:49:5a:34:42:4e:54:0a: d0:6c:5e:4d:5c:5f:f0:b0:48:a8:4e:29:6f:21:67:ea:5f:ba: ec:2d:68:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKfEFi6lOV8JfFqB+kw2HYVdUqLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA3MjMyMTI0MzVaFw0yNjA3MjUwMTIzMzVaMDMxMTAvBgNV BAMTKDlBQjAxMTE0QUVDMTM1QjBDNzREOTc0QUYwMDc1QjA4MTM1N0REOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iZaKXxNMzfawI+L0abgT/Bi3 5rEDctovhP7pscsqb9vkrlcSZ4qjDwgaz6mPdrlpEO3ZDhzWutMnPz1cebZPlt/x HaWz5NOCpVGzd4x4wHMnTozhLZnfy7f/3dwg/0zTijPpgb9yzfzNQ6dXf4briNjQ Sdhfd2clFLIvQOe5/Xa9LoVaI3xGaA6R0I8g6+dDQwkQ7JGKCUQHXNtf2Jp3DiBc TdRwOLhl0caS+269yhgABrqHMC77se9iSZtMI9eooTzCFEgZYzzlpBUNgh6Y9dFf QDQB+4A22ZpeH5WxIAMKLoqBEegsVn6A89EkAHZiDuQuc1JcOranUMdgDUi7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmrARFK7BNbDHTZdK8AdbCBNX3Z4wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRamZncPhWSx X9narUKF5kt7QTZh/Mcw0xPRwmnWtIogc8Ch/Zf9dQHX0iuUvD5936iVXw4dDb/r FNjKZWKEFBKZcrtOu1Jgg2iZnPC2zdq57u1IVg7J3/3CJDGyASAh6f7Fp+QccsA4 Qq7pC400BUbuX+pV58OcHQ08lsriMWhc9BQA08PIU/Jpwl5lJmHDWVCZxQQRb9xf Ee4RMw8ke0c+276QkpQZ+1OqXf/mmHVuYs02IWtB/UpTj3M2+uwyNe1ONCOrTeF1 0iAlqr0TnC0UPrU4WFh3D0E4p8Tfwo8b9CtJWjRCTlQK0GxeTVxf8LBIqE4pbyFn 6l+67C1oyQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:37 2026 by rpki-client