$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: ircO5fx9TRKV9SAeG0die2j2ZUJ3Apn5a3cVAJAfDhk= Subject key identifier: 89:CF:2B:63:B6:8F:AE:63:E8:80:FF:12:A4:53:5F:CE:AA:5D:52:8A Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 2BD4EA411FA2201F76D82FFE411D7B08818ED42F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 00:14:54 +0000 Manifest this update: Fri 24 Jul 2026 00:09:54 +0000 Manifest next update: Sat 25 Jul 2026 00:42:54 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: JE/k8wVBcr/p0MWMERxTAwb6Dz23AnG0XR2rRl3eSvU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d4:ea:41:1f:a2:20:1f:76:d8:2f:fe:41:1d:7b:08:81:8e:d4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Jul 24 00:09:54 2026 GMT Not After : Jul 25 00:42:54 2026 GMT Subject: CN=89CF2B63B68FAE63E880FF12A4535FCEAA5D528A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:be:74:a4:ae:e3:85:c0:f7:9f:85:26:4c: 3b:84:9b:35:26:75:00:2d:42:5c:61:2c:5d:12:d2: a5:7d:cb:18:0c:ed:f1:37:65:ce:1e:cb:88:0d:e5: 60:05:91:4f:b7:82:09:aa:0c:e5:0d:e6:b4:a5:4f: 2d:36:24:ef:c6:0f:e8:2e:c8:8c:71:a4:8f:5e:86: 22:6e:4d:3d:44:35:4e:fe:73:74:85:d3:5d:64:d5: bf:1a:1c:cb:d2:ef:f0:85:88:2f:b0:9c:9d:9c:20: 3c:db:9a:4b:47:69:0b:4e:de:b0:7d:19:48:d4:57: e4:4c:02:77:f6:ee:c9:18:e1:71:5b:6d:25:55:7e: 57:c7:9c:a1:55:87:0e:a1:c4:1a:5b:80:58:78:e4: 23:de:3b:3c:d6:14:f3:b2:14:15:bf:53:96:58:fc: b4:22:f9:f4:b1:f2:ae:76:75:c5:8a:f4:be:ab:b4: f3:b2:81:ae:23:e5:1d:78:ba:07:72:8f:1f:b8:a2: c0:9f:92:09:4b:2f:eb:ec:fb:01:e7:13:2e:67:f8: ec:44:18:f0:67:34:96:ae:1e:bd:6b:a2:27:09:ee: 59:30:39:63:e7:95:ab:83:31:b4:98:14:a8:75:a7: 64:82:48:40:6d:49:cd:59:8b:54:90:a5:28:d8:62: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:2B:63:B6:8F:AE:63:E8:80:FF:12:A4:53:5F:CE:AA:5D:52:8A X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:37:1e:6b:67:55:82:0a:47:31:93:2f:50:4a:de:94:4d:5f: 17:0b:77:9f:da:7e:6e:e6:91:9f:ee:0e:3a:84:07:ff:09:35: 22:98:ed:0b:d1:22:f1:3f:c8:ed:71:cc:59:6c:39:f9:e9:f1: 17:ff:56:e6:2b:43:d6:83:0f:85:6b:de:e7:ea:91:db:1d:32: ca:e5:e3:78:4d:e5:f1:b1:fd:7f:9c:25:93:a5:f9:bc:29:b6: b0:12:e3:ef:07:07:5a:dc:6c:5b:83:55:6c:79:f7:9e:2f:de: 22:f1:8f:9b:4f:6d:d0:11:46:bd:5b:bb:1d:8c:ef:ff:c1:42: d8:7b:f3:49:a7:fd:bf:ea:e2:d5:35:d8:8c:14:ef:41:a2:d7: ee:3a:36:ac:6b:6f:57:84:7c:7d:38:d3:c5:9a:d7:a9:51:94: 41:50:ef:d3:e8:e0:f2:98:d7:0c:ce:92:6c:27:6b:5f:54:6f: 20:98:39:9e:30:3e:98:dd:5e:8c:0b:72:2f:be:25:d5:8d:9f: a6:fe:ad:f8:1a:b2:9b:27:44:24:82:e8:c1:f0:c9:99:d8:75: 20:1f:05:46:d6:92:a9:32:01:fa:6c:7b:28:39:9f:25:ba:3b: 3c:a8:04:b4:09:ef:0c:07:4a:53:2d:4b:af:ea:2c:d2:2b:05: 50:2e:0b:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK9TqQR+iIB922C/+QR17CIGO1C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA3MjQwMDA5NTRaFw0yNjA3MjUwMDQyNTRaMDMxMTAvBgNV BAMTKDg5Q0YyQjYzQjY4RkFFNjNFODgwRkYxMkE0NTM1RkNFQUE1RDUyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8r50pK7jhcD3n4UmTDuEmzUm dQAtQlxhLF0S0qV9yxgM7fE3Zc4ey4gN5WAFkU+3ggmqDOUN5rSlTy02JO/GD+gu yIxxpI9ehiJuTT1ENU7+c3SF011k1b8aHMvS7/CFiC+wnJ2cIDzbmktHaQtO3rB9 GUjUV+RMAnf27skY4XFbbSVVflfHnKFVhw6hxBpbgFh45CPeOzzWFPOyFBW/U5ZY /LQi+fSx8q52dcWK9L6rtPOyga4j5R14ugdyjx+4osCfkglLL+vs+wHnEy5n+OxE GPBnNJauHr1roicJ7lkwOWPnlauDMbSYFKh1p2SCSEBtSc1Zi1SQpSjYYh+dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUic8rY7aPrmPogP8SpFNfzqpdUoowHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjcea2dVggpH MZMvUErelE1fFwt3n9p+buaRn+4OOoQH/wk1IpjtC9Ei8T/I7XHMWWw5+enxF/9W 5itD1oMPhWve5+qR2x0yyuXjeE3l8bH9f5wlk6X5vCm2sBLj7wcHWtxsW4NVbHn3 ni/eIvGPm09t0BFGvVu7HYzv/8FC2HvzSaf9v+ri1TXYjBTvQaLX7jo2rGtvV4R8 fTjTxZrXqVGUQVDv0+jg8pjXDM6SbCdrX1RvIJg5njA+mN1ejAtyL74l1Y2fpv6t +BqymydEJILowfDJmdh1IB8FRtaSqTIB+mx7KDmfJbo7PKgEtAnvDAdKUy1Lr+os 0isFUC4LhQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:17:46 2026 by rpki-client