$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json) Hash identifier: UW36c7AIrGnG5uWnXC/weXC3a1qJZf8Sod9Y2UQIek4= Subject key identifier: 2E:1E:08:AF:C6:D0:93:C2:9D:C2:01:2D:98:4E:D8:D7:2C:16:95:8D Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 359763D693BD19D169CDCE7A1681EAA25835D7FA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft Manifest number: 010A Signing time: Fri 24 Jul 2026 09:50:56 +0000 Manifest this update: Fri 24 Jul 2026 09:45:56 +0000 Manifest next update: Sat 25 Jul 2026 10:55:56 +0000 Files and hashes: 1: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (hash: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=) 2: 3230322e3136352e3230382e302f32312d3231203d3e20313332323033.roa (hash: dEG+kQvtarrj1C4NWnBPL9AHHKm7rT38VFsC+e+j+CI=) 3: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (hash: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=) 4: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=) 5: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=) 6: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (hash: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=) 7: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: q/bcyVH7BmNFn7znUhQhBUIrb536zQvbZWyzJnPywUw=) 8: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (hash: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=) 9: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=) 10: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=) 11: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=) 12: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (hash: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:97:63:d6:93:bd:19:d1:69:cd:ce:7a:16:81:ea:a2:58:35:d7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Jul 24 09:45:56 2026 GMT Not After : Jul 25 10:55:56 2026 GMT Subject: CN=2E1E08AFC6D093C29DC2012D984ED8D72C16958D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:89:48:be:c5:b6:0d:e2:77:56:0f:df:58: 21:b0:25:32:01:ce:d1:8a:ad:07:04:e4:5f:3f:87: 84:aa:70:5c:b1:ef:cc:0f:d3:f5:81:5b:6f:ce:4d: 97:42:98:83:05:7b:7c:13:fd:fa:af:cc:40:1c:b0: 88:da:35:97:4a:a4:19:08:70:57:fb:ca:eb:a4:5c: 2f:dd:ac:ac:47:21:d8:53:e4:a0:8d:35:d9:14:d7: 74:90:1f:d5:71:47:2b:fe:ee:6f:2a:0e:ea:99:45: ff:85:c2:8e:4e:c8:b3:08:01:7e:c7:0c:0f:0a:54: aa:fb:74:07:5d:e3:44:08:9a:03:d9:f2:8f:59:fa: fe:3f:64:9c:08:30:fb:10:c1:aa:50:c3:3b:48:96: 94:43:63:df:53:c3:b5:ff:98:53:8a:ba:e9:0f:11: 5f:2d:56:90:37:18:70:25:0a:4c:3e:48:ff:3e:2b: a2:8c:b4:88:69:c7:7e:59:22:79:f4:79:26:15:cc: 02:0a:79:f0:df:29:94:c2:33:4d:2f:69:a7:5b:95: b0:c8:79:da:aa:1c:05:10:c6:82:01:66:09:e4:1f: 87:df:55:10:4f:cd:41:fa:00:77:a6:63:b1:54:6c: 89:e5:43:5b:86:cc:ad:ef:46:30:dc:31:d9:c2:2e: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:08:AF:C6:D0:93:C2:9D:C2:01:2D:98:4E:D8:D7:2C:16:95:8D X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fd:47:86:71:16:36:5b:58:85:00:34:57:77:02:c9:19:e9: 25:d7:21:5e:5d:58:e7:06:78:01:00:61:60:ef:b0:1d:87:c3: 81:e3:06:bc:dc:7e:b3:ab:a6:32:ab:62:24:80:68:03:4a:33: e4:c6:d3:b6:cd:d5:2e:64:86:f3:06:a3:41:80:0c:85:8d:40: 96:fc:37:38:d2:93:81:c1:62:1a:2d:00:15:2e:23:35:ce:5a: 35:36:ce:d8:7d:30:ee:ef:56:ec:b4:ac:5a:f3:80:73:b1:b9: 0b:3f:70:96:37:f4:cc:2c:b6:70:2c:99:db:98:b2:7d:78:81: 75:80:4f:5e:fd:38:57:97:06:b5:b6:be:17:ab:86:3a:78:f5: 37:4f:20:67:11:53:14:53:32:de:8e:af:6e:56:0b:35:75:04: 7a:d7:1f:7a:e3:85:66:f7:a4:42:9c:13:90:4f:31:0f:86:27: 54:74:36:3e:d5:6d:d5:53:e3:b3:48:04:29:02:f4:0b:cc:65: dc:bb:9c:0c:9b:89:8c:52:77:45:f6:50:e6:45:2a:8f:67:48: 5c:bd:a5:27:25:ec:df:3d:b5:ae:57:88:19:5a:e2:65:67:41: 89:4d:91:1f:85:c1:ad:6a:1b:f0:32:d0:d2:84:5f:06:48:f6: 02:83:06:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNZdj1pO9GdFpzc56FoHqolg11/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjA3MjQwOTQ1NTZaFw0yNjA3MjUxMDU1NTZaMDMxMTAvBgNV BAMTKDJFMUUwOEFGQzZEMDkzQzI5REMyMDEyRDk4NEVEOEQ3MkMxNjk1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IYlIvsW2DeJ3Vg/fWCGwJTIB ztGKrQcE5F8/h4SqcFyx78wP0/WBW2/OTZdCmIMFe3wT/fqvzEAcsIjaNZdKpBkI cFf7yuukXC/drKxHIdhT5KCNNdkU13SQH9VxRyv+7m8qDuqZRf+Fwo5OyLMIAX7H DA8KVKr7dAdd40QImgPZ8o9Z+v4/ZJwIMPsQwapQwztIlpRDY99Tw7X/mFOKuukP EV8tVpA3GHAlCkw+SP8+K6KMtIhpx35ZInn0eSYVzAIKefDfKZTCM00vaadblbDI edqqHAUQxoIBZgnkH4ffVRBPzUH6AHemY7FUbInlQ1uGzK3vRjDcMdnCLukvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULh4Ir8bQk8KdwgEtmE7Y1ywWlY0wHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv1HhnEWNltY hQA0V3cCyRnpJdchXl1Y5wZ4AQBhYO+wHYfDgeMGvNx+s6umMqtiJIBoA0oz5MbT ts3VLmSG8wajQYAMhY1Alvw3ONKTgcFiGi0AFS4jNc5aNTbO2H0w7u9W7LSsWvOA c7G5Cz9wljf0zCy2cCyZ25iyfXiBdYBPXv04V5cGtba+F6uGOnj1N08gZxFTFFMy 3o6vblYLNXUEetcfeuOFZvekQpwTkE8xD4YnVHQ2PtVt1VPjs0gEKQL0C8xl3Luc DJuJjFJ3RfZQ5kUqj2dIXL2lJyXs3z21rleIGVriZWdBiU2RH4XBrWob8DLQ0oRf Bkj2AoMGSQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:50 2026 by rpki-client