$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: wvBE137uWe4fkbUjIpNzpSAEPWSk0po9neHO17mcjuw= Subject key identifier: 6D:B0:66:7E:48:07:7D:0B:9D:C6:42:91:D8:48:70:70:A2:52:6F:4B Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 239FFA43429E8124866E8066C55B4B50B8D6F4BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 03:50:18 +0000 Manifest this update: Fri 24 Jul 2026 03:45:18 +0000 Manifest next update: Sat 25 Jul 2026 04:41:18 +0000 Files and hashes: 1: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) 2: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: QaWL1A4PhA5DYGtnyoLNPCi+S6J0RttTEHC+JlPR/8o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9f:fa:43:42:9e:81:24:86:6e:80:66:c5:5b:4b:50:b8:d6:f4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Jul 24 03:45:18 2026 GMT Not After : Jul 25 04:41:18 2026 GMT Subject: CN=6DB0667E48077D0B9DC64291D8487070A2526F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:bc:a7:7c:a4:2f:70:ec:05:5e:37:46:b4: 16:77:99:de:64:c5:c1:cd:93:c8:18:53:0f:05:fa: 95:fc:f2:9a:70:03:14:91:ab:44:56:4a:ae:a7:fb: 53:11:26:11:03:3f:ef:61:3f:d6:96:c8:e7:92:32: 57:e3:7c:ae:41:b7:7c:3f:12:c0:a5:80:0c:ca:e2: c6:74:96:d8:ed:e1:75:54:c7:b9:c0:29:b5:21:0a: 9d:ca:8d:81:21:1d:96:21:a3:f5:15:e7:c2:79:66: 26:d8:73:19:56:82:fd:71:32:0b:35:ba:73:ba:dc: ed:c8:b9:a7:0b:8e:a2:50:e6:0b:2f:34:97:e8:c8: 74:3c:fb:6e:3f:cc:23:5c:62:d8:7b:28:42:6b:13: dd:1c:96:21:05:c8:86:c0:5f:04:ce:91:e3:a0:c2: c4:dd:67:39:49:15:33:57:16:ae:cb:a4:b3:e7:96: 45:4d:91:55:a5:76:99:1f:d4:fe:07:12:03:b0:94: 88:be:11:85:58:76:b6:79:80:12:7e:d9:e4:e0:d4: 49:8b:1b:ac:7f:c7:08:d2:93:90:67:59:99:f0:c3: 3b:7b:4a:b0:31:61:b0:93:ed:03:3e:1f:6a:c4:b6: 64:ac:df:68:02:b9:e7:fa:79:f1:d4:9c:29:51:4a: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:66:7E:48:07:7D:0B:9D:C6:42:91:D8:48:70:70:A2:52:6F:4B X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:60:91:3f:12:49:db:90:9a:2d:a3:87:f7:c3:96:93:c2: 22:69:c7:5b:2b:4c:fd:a4:1d:c6:01:91:b5:de:c4:6c:71:03: 2d:46:74:89:dd:60:aa:47:87:77:3c:44:13:a6:75:a7:3b:8b: 2d:17:ee:35:e9:4c:d1:c1:c0:7f:ee:78:59:ec:ef:84:32:97: 51:3f:72:43:fe:ef:42:cb:53:9f:d8:24:a5:7f:23:5d:b7:f5: 2c:fe:bf:cd:f2:a3:56:35:1c:7c:d1:b2:1f:e2:96:a1:f8:4e: 04:dc:a8:35:66:f3:4d:2c:ca:f4:e4:c4:c8:5b:94:80:75:4f: a9:78:62:57:fd:89:1a:54:fd:cb:83:c1:96:5d:4f:d6:a5:d9: 67:d3:b5:ec:96:13:d2:4e:7f:e7:37:f5:b8:50:26:46:e5:aa: cc:c1:7a:d0:a7:83:15:d0:66:67:8b:77:b1:cb:f3:8b:81:d4: 54:54:04:08:91:0d:18:4f:82:52:f2:5c:cb:c8:d4:78:bb:e4: 3c:a4:0e:2f:4f:22:e2:c2:ab:50:5d:bf:7b:c8:f5:4d:c8:b8: f6:03:e8:b4:96:cd:f1:92:38:a7:cb:b4:7d:d9:2d:1a:12:2b: 17:f2:a5:57:91:20:1f:96:83:d8:91:83:0c:76:9b:ae:45:3b: 13:32:c1:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI5/6Q0KegSSGboBmxVtLULjW9L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA3MjQwMzQ1MThaFw0yNjA3MjUwNDQxMThaMDMxMTAvBgNV BAMTKDZEQjA2NjdFNDgwNzdEMEI5REM2NDI5MUQ4NDg3MDcwQTI1MjZGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxY7ynfKQvcOwFXjdGtBZ3md5k xcHNk8gYUw8F+pX88ppwAxSRq0RWSq6n+1MRJhEDP+9hP9aWyOeSMlfjfK5Bt3w/ EsClgAzK4sZ0ltjt4XVUx7nAKbUhCp3KjYEhHZYho/UV58J5ZibYcxlWgv1xMgs1 unO63O3IuacLjqJQ5gsvNJfoyHQ8+24/zCNcYth7KEJrE90cliEFyIbAXwTOkeOg wsTdZzlJFTNXFq7LpLPnlkVNkVWldpkf1P4HEgOwlIi+EYVYdrZ5gBJ+2eTg1EmL G6x/xwjSk5BnWZnwwzt7SrAxYbCT7QM+H2rEtmSs32gCuef6efHUnClRSskHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbbBmfkgHfQudxkKR2EhwcKJSb0swHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5ZgkT8SSduQ mi2jh/fDlpPCImnHWytM/aQdxgGRtd7EbHEDLUZ0id1gqkeHdzxEE6Z1pzuLLRfu NelM0cHAf+54WezvhDKXUT9yQ/7vQstTn9gkpX8jXbf1LP6/zfKjVjUcfNGyH+KW ofhOBNyoNWbzTSzK9OTEyFuUgHVPqXhiV/2JGlT9y4PBll1P1qXZZ9O17JYT0k5/ 5zf1uFAmRuWqzMF60KeDFdBmZ4t3scvzi4HUVFQECJENGE+CUvJcy8jUeLvkPKQO L08i4sKrUF2/e8j1Tci49gPotJbN8ZI4p8u0fdktGhIrF/KlV5EgH5aD2JGDDHab rkU7EzLB5w== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:45 2026 by rpki-client