$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: 2uhC+M4qIQe0sR1STOgjBZhHM1ou2tfiiZVb1MNKp14= Subject key identifier: 37:93:DB:88:1E:1C:94:1B:AD:BE:71:42:30:F6:66:EF:4E:84:E7:33 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 2A0BDBB278547DEFAF192FE8C8013813C8B41A21 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: FF Signing time: Fri 24 Jul 2026 01:45:04 +0000 Manifest this update: Fri 24 Jul 2026 01:40:04 +0000 Manifest next update: Sat 25 Jul 2026 02:04:04 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) 2: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: syGw/0zjuaxKq+SgwYsRNVQgV0YfDxLJYkaOMLKjB/U=) 3: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0b:db:b2:78:54:7d:ef:af:19:2f:e8:c8:01:38:13:c8:b4:1a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Jul 24 01:40:04 2026 GMT Not After : Jul 25 02:04:04 2026 GMT Subject: CN=3793DB881E1C941BADBE714230F666EF4E84E733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:50:45:ae:ff:60:8c:fb:b4:3c:bb:ac:20: 53:0f:02:ab:8f:57:f7:66:5c:ba:58:96:44:10:bb: 59:a4:64:e9:7d:2c:fb:86:ee:de:7f:9a:7c:4b:a0: dc:05:9e:1e:c0:47:f5:95:78:f3:ff:a5:ba:d1:ae: 3d:fb:32:7c:ec:b1:08:42:f0:d2:8a:80:67:96:11: d5:7c:07:ea:f5:8f:39:84:08:d4:af:ca:bd:6e:c8: 66:bc:80:41:52:13:c4:cb:5b:4a:4d:1e:1c:14:e5: 9a:6e:7d:55:47:fb:65:df:ec:da:82:33:16:4a:65: 44:92:83:68:ae:37:9f:85:3d:00:fe:d5:0c:36:5d: e7:f8:a8:55:b9:68:3e:4b:dd:75:f1:69:af:d4:1c: 12:53:28:d5:6e:70:e6:88:5e:a5:45:1c:54:82:af: 7e:e7:07:21:6c:a4:8e:f3:76:53:25:cb:f4:36:b1: ed:6d:3b:44:9c:ed:c8:e8:90:5f:7e:aa:63:91:f5: 5b:54:c3:07:78:f7:b7:98:f1:82:c3:fb:6a:93:69: 78:40:28:7a:1c:69:68:7c:58:88:d1:85:d2:8c:a1: 5c:1a:3e:ad:0e:54:e9:ff:b5:4a:71:91:f2:0c:e3: af:ae:a5:ef:cc:f7:d2:7c:52:6e:0d:eb:7b:d2:ae: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:DB:88:1E:1C:94:1B:AD:BE:71:42:30:F6:66:EF:4E:84:E7:33 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:67:56:d5:b3:3a:fc:8a:1c:6a:fd:27:a0:42:f6:2e:59:03: 1c:09:54:7c:f7:6a:bc:e0:55:67:d0:af:27:1d:22:f5:fd:e5: 4b:81:ea:19:91:82:ae:f0:be:71:5a:4e:d5:1d:a3:78:4e:53: 12:f2:f0:45:0c:2c:9b:fd:13:40:00:06:db:24:56:31:40:d7: bd:e0:03:01:f1:8c:16:9b:00:6c:2a:66:76:16:62:12:7f:05: d1:fc:30:50:49:a2:79:09:60:9e:78:59:3e:e8:2f:e9:2e:6b: 74:98:fc:4a:f6:7c:17:d7:40:30:f1:8d:2c:7f:05:16:4c:55: ba:8a:0a:28:ef:2a:05:f0:be:2c:2e:12:aa:e3:ce:20:ea:bb: a4:ec:fa:54:49:8c:38:b7:9e:6a:4b:d8:06:6e:66:cf:60:2b: bd:13:70:d8:b4:b7:af:42:7d:49:75:f9:03:86:00:9f:32:46: e6:78:6a:aa:ea:1d:16:b1:e1:11:57:2c:60:f1:4d:1a:8b:40: 99:8d:9c:20:1c:64:69:b7:fc:97:8a:5a:bb:74:c6:1a:e6:33: 93:ee:3f:c0:1c:17:b9:4d:71:1e:3d:44:df:84:83:ab:00:e9: dd:6a:44:86:33:70:f8:82:d6:72:4d:81:72:6b:b8:c0:9e:40: 90:82:db:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKgvbsnhUfe+vGS/oyAE4E8i0GiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjA3MjQwMTQwMDRaFw0yNjA3MjUwMjA0MDRaMDMxMTAvBgNV BAMTKDM3OTNEQjg4MUUxQzk0MUJBREJFNzE0MjMwRjY2NkVGNEU4NEU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3u1BFrv9gjPu0PLusIFMPAquP V/dmXLpYlkQQu1mkZOl9LPuG7t5/mnxLoNwFnh7AR/WVePP/pbrRrj37MnzssQhC 8NKKgGeWEdV8B+r1jzmECNSvyr1uyGa8gEFSE8TLW0pNHhwU5ZpufVVH+2Xf7NqC MxZKZUSSg2iuN5+FPQD+1Qw2Xef4qFW5aD5L3XXxaa/UHBJTKNVucOaIXqVFHFSC r37nByFspI7zdlMly/Q2se1tO0Sc7cjokF9+qmOR9VtUwwd497eY8YLD+2qTaXhA KHocaWh8WIjRhdKMoVwaPq0OVOn/tUpxkfIM46+upe/M99J8Um4N63vSrnG7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN5PbiB4clButvnFCMPZm706E5zMwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGdW1bM6/Ioc av0noEL2LlkDHAlUfPdqvOBVZ9CvJx0i9f3lS4HqGZGCrvC+cVpO1R2jeE5TEvLw RQwsm/0TQAAG2yRWMUDXveADAfGMFpsAbCpmdhZiEn8F0fwwUEmieQlgnnhZPugv 6S5rdJj8SvZ8F9dAMPGNLH8FFkxVuooKKO8qBfC+LC4SquPOIOq7pOz6VEmMOLee akvYBm5mz2ArvRNw2LS3r0J9SXX5A4YAnzJG5nhqquodFrHhEVcsYPFNGotAmY2c IBxkabf8l4pau3TGGuYzk+4/wBwXuU1xHj1E34SDqwDp3WpEhjNw+ILWck2Bcmu4 wJ5AkILb6w== -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:55 2026 by rpki-client