$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: hNfXIViEceuHDxSQeGMaOCeHM8zyg7TY0cuyCVrEkzk= Subject key identifier: F2:F9:46:17:5C:ED:31:9F:C3:8B:D8:C2:72:1C:DC:B4:B7:56:7E:D3 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 2944252EE8FCE86CAD461ADFBB5084E1EAD7C728 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 14:36:28 +0000 Manifest this update: Fri 24 Jul 2026 14:31:28 +0000 Manifest next update: Sat 25 Jul 2026 17:10:28 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: N2e2wFezBdr1v2eMF8CgsBwF8Vg86BH14KCBL8xT3Bg=) 2: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:44:25:2e:e8:fc:e8:6c:ad:46:1a:df:bb:50:84:e1:ea:d7:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Jul 24 14:31:28 2026 GMT Not After : Jul 25 17:10:28 2026 GMT Subject: CN=F2F946175CED319FC38BD8C2721CDCB4B7567ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:f9:87:01:2e:bf:b7:67:46:a1:eb:45:9c: 37:45:2b:a1:95:ff:a8:1f:40:d0:32:3d:b0:6c:dd: 5a:2d:d6:09:9f:2e:72:94:56:ce:81:cc:ca:ad:8d: ce:37:4e:e2:95:1b:40:ac:df:46:8a:e4:ec:cc:0b: 4c:0c:33:7f:83:0f:b7:ea:f5:f7:96:8a:78:d4:e2: 8f:b4:35:16:c7:bb:58:86:91:46:82:a3:8b:df:1d: 99:dc:6f:68:86:5f:69:88:1e:9b:e8:c5:da:9f:f2: 11:e5:4e:d3:8f:be:79:a5:2d:27:70:35:15:d5:03: c0:3c:93:b5:0f:dc:40:f5:b4:e8:d9:a9:f0:00:92: c2:3e:5f:25:f4:58:9e:a9:fd:db:93:df:b5:35:b6: 5c:8d:4c:4b:75:bd:77:e6:03:ee:50:8e:36:11:cd: 29:f2:f5:87:9c:13:4c:c4:ef:c8:30:52:44:c0:89: a2:52:8b:ba:98:29:21:ac:91:7d:0e:4c:19:e4:81: 40:36:27:fc:05:ee:83:88:3b:fc:79:c4:91:10:5f: 8f:8f:17:bb:34:85:d1:a3:64:a3:11:2f:ab:63:af: 1c:32:16:5a:e3:0c:51:a6:ab:5b:7f:5a:79:dc:16: dc:2f:41:d7:ae:3a:63:a6:e7:ad:4b:43:c5:04:6c: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F9:46:17:5C:ED:31:9F:C3:8B:D8:C2:72:1C:DC:B4:B7:56:7E:D3 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a5:d2:12:7c:1d:d7:3f:3b:c7:41:02:ba:74:94:fb:09:0e: 4a:c8:46:39:ab:b8:11:be:34:bc:78:23:2e:22:48:e4:c7:8f: 5e:35:d5:6c:eb:9d:07:fc:9d:0f:6a:ae:14:06:91:48:5a:57: 72:c9:17:1c:59:82:64:1f:eb:a4:bd:60:77:2b:18:32:1d:f2: 52:df:68:82:c5:7d:a1:ad:df:13:4a:22:63:21:e1:29:c1:0a: a4:ff:b8:d0:58:01:00:02:fe:ce:56:d3:d8:cd:5f:6c:44:bd: 81:c2:5a:73:c2:6b:49:43:50:71:1c:bb:b3:8b:e2:18:ac:e2: 45:12:19:e6:65:06:ef:04:e9:68:2a:50:89:a5:a3:01:77:22: 64:e8:7e:c4:f9:6b:83:f9:0e:f7:c0:5f:55:1c:20:63:b6:0b: 96:00:3f:26:87:0c:96:65:35:80:38:02:48:5e:f6:c7:f8:0f: 81:ba:2b:d0:42:bf:7d:91:fd:6c:f9:e7:e2:5a:29:55:2b:14: 17:45:31:a6:26:3f:0c:cc:32:9a:62:ce:d7:45:2d:d1:37:7b: 9b:af:48:e0:ee:7c:ff:98:fd:16:95:56:db:35:3a:68:7a:86: b1:29:dc:dc:12:84:3c:67:b8:d6:a9:e8:b0:e9:f4:67:f6:75: d3:fc:44:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKUQlLuj86GytRhrfu1CE4erXxygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA3MjQxNDMxMjhaFw0yNjA3MjUxNzEwMjhaMDMxMTAvBgNV BAMTKEYyRjk0NjE3NUNFRDMxOUZDMzhCRDhDMjcyMUNEQ0I0Qjc1NjdFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9vmHAS6/t2dGoetFnDdFK6GV /6gfQNAyPbBs3Vot1gmfLnKUVs6BzMqtjc43TuKVG0Cs30aK5OzMC0wMM3+DD7fq 9feWinjU4o+0NRbHu1iGkUaCo4vfHZncb2iGX2mIHpvoxdqf8hHlTtOPvnmlLSdw NRXVA8A8k7UP3ED1tOjZqfAAksI+XyX0WJ6p/duT37U1tlyNTEt1vXfmA+5QjjYR zSny9YecE0zE78gwUkTAiaJSi7qYKSGskX0OTBnkgUA2J/wF7oOIO/x5xJEQX4+P F7s0hdGjZKMRL6tjrxwyFlrjDFGmq1t/WnncFtwvQdeuOmOm561LQ8UEbMhpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8vlGF1ztMZ/Di9jCchzctLdWftMwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqXSEnwd1z87 x0ECunSU+wkOSshGOau4Eb40vHgjLiJI5MePXjXVbOudB/ydD2quFAaRSFpXcskX HFmCZB/rpL1gdysYMh3yUt9ogsV9oa3fE0oiYyHhKcEKpP+40FgBAAL+zlbT2M1f bES9gcJac8JrSUNQcRy7s4viGKziRRIZ5mUG7wTpaCpQiaWjAXciZOh+xPlrg/kO 98BfVRwgY7YLlgA/JocMlmU1gDgCSF72x/gPgbor0EK/fZH9bPnn4lopVSsUF0Ux piY/DMwymmLO10Ut0Td7m69I4O58/5j9FpVW2zU6aHqGsSnc3BKEPGe41qnosOn0 Z/Z10/xEcg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:26:12 2026 by rpki-client