$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: yH/pbJjqAhtjbBu+ZMuGJy1LlwtNXqgKNqmUvA6HS0I= Subject key identifier: D8:9A:0C:B4:89:9B:CE:50:DF:F5:A9:15:A4:CD:B1:BC:42:72:13:F4 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 3959EFCB49A81254B754F85B113ED78EFB2704AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: A2 Signing time: Fri 24 Jul 2026 02:30:09 +0000 Manifest this update: Fri 24 Jul 2026 02:25:09 +0000 Manifest next update: Sat 25 Jul 2026 02:40:09 +0000 Files and hashes: 1: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 2: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: PalBXGMsLl8ry6zj//I+IXEYXfTxNKtxcUmguq9RSI4=) 3: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) 4: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:59:ef:cb:49:a8:12:54:b7:54:f8:5b:11:3e:d7:8e:fb:27:04:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Jul 24 02:25:09 2026 GMT Not After : Jul 25 02:40:09 2026 GMT Subject: CN=D89A0CB4899BCE50DFF5A915A4CDB1BC427213F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:da:2e:1c:ff:f2:c4:a4:3b:c4:0c:2f:7d: aa:4f:d1:aa:36:e1:c3:91:d3:f3:03:3d:82:ed:8e: da:df:02:d3:df:33:ec:99:dc:0d:2f:13:a2:a6:92: e1:db:35:b5:2c:b2:62:7b:10:48:d7:3e:fe:09:da: 41:de:09:41:9b:c8:a9:05:bf:91:a6:9a:24:47:55: 46:e2:ec:ec:2e:af:45:e0:0c:84:5a:80:c5:f7:7e: 5a:2b:1e:20:0a:e3:0e:7e:71:46:be:2d:8f:7b:ed: a1:cd:fd:cb:40:12:86:d3:e7:04:d0:a2:84:16:ae: 80:18:5f:79:a2:99:0d:fd:02:28:1e:34:9a:7d:b2: da:66:72:58:b2:51:e6:1e:da:06:fe:22:86:55:75: fd:07:fd:0e:7f:3e:e5:81:c3:b0:ef:e4:1b:f5:59: 05:49:92:45:bf:f6:0d:18:a1:47:77:da:42:de:21: 1e:3f:24:6b:91:98:88:47:4d:bc:af:82:bb:a3:4b: 82:aa:75:63:8f:e7:1c:ec:78:2c:ba:f8:a8:e5:b1: a4:5d:8d:33:78:27:fb:8e:13:76:0c:02:0f:37:a7: 3f:5f:a7:e2:de:a3:32:59:9e:d3:2b:f2:b6:ee:86: c8:61:1c:49:e6:9b:7f:76:53:97:30:42:6f:95:a0: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:0C:B4:89:9B:CE:50:DF:F5:A9:15:A4:CD:B1:BC:42:72:13:F4 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:33:62:a0:fc:07:a6:df:8d:74:35:96:79:04:ae:c0:6e:ff: b8:4e:9b:2d:33:71:52:5f:bc:81:d7:06:29:7b:77:a5:00:b2: 34:0b:cc:3b:cd:e0:c9:36:df:e9:65:eb:55:38:17:23:20:62: fb:a5:8c:c1:45:48:98:3b:d2:b3:d6:df:a1:5b:1e:59:10:1e: 01:d8:80:1f:7e:ee:0e:d5:45:82:a2:06:30:67:73:0c:e6:3f: ac:23:65:3e:17:f0:11:43:94:e0:a8:ae:18:76:8f:b1:28:8a: a7:a7:b0:5e:bb:fc:28:58:30:93:39:c3:74:ec:3b:95:23:39: da:58:39:d4:84:c5:1d:9d:f6:4a:61:6a:11:8d:e1:1c:87:b2: b1:89:c5:a0:6f:49:8a:e9:8d:c0:0b:0c:d8:61:ca:49:89:d1: b2:88:cd:0b:7d:80:85:f1:f9:ee:bd:b3:df:d4:58:f2:91:a3: 9c:19:b2:94:2a:b8:cb:15:c1:de:21:c6:4a:d5:4a:7e:80:ee: 97:43:3e:75:f6:d1:6a:b8:e0:7d:82:bd:80:01:ef:e1:ef:1b: 1f:26:ea:c8:30:c9:dc:d7:ac:c7:f1:b8:3f:09:e8:f0:a4:99: 3c:1f:30:da:26:f5:02:45:46:77:db:97:5f:90:26:6e:1a:ec: 83:3a:2a:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOVnvy0moElS3VPhbET7XjvsnBK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA3MjQwMjI1MDlaFw0yNjA3MjUwMjQwMDlaMDMxMTAvBgNV BAMTKEQ4OUEwQ0I0ODk5QkNFNTBERkY1QTkxNUE0Q0RCMUJDNDI3MjEzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuztouHP/yxKQ7xAwvfapP0ao2 4cOR0/MDPYLtjtrfAtPfM+yZ3A0vE6KmkuHbNbUssmJ7EEjXPv4J2kHeCUGbyKkF v5GmmiRHVUbi7Owur0XgDIRagMX3florHiAK4w5+cUa+LY977aHN/ctAEobT5wTQ ooQWroAYX3mimQ39AigeNJp9stpmcliyUeYe2gb+IoZVdf0H/Q5/PuWBw7Dv5Bv1 WQVJkkW/9g0YoUd32kLeIR4/JGuRmIhHTbyvgrujS4KqdWOP5xzseCy6+KjlsaRd jTN4J/uOE3YMAg83pz9fp+LeozJZntMr8rbuhshhHEnmm392U5cwQm+VoLMxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2JoMtImbzlDf9akVpM2xvEJyE/QwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzNioPwHpt+N dDWWeQSuwG7/uE6bLTNxUl+8gdcGKXt3pQCyNAvMO83gyTbf6WXrVTgXIyBi+6WM wUVImDvSs9bfoVseWRAeAdiAH37uDtVFgqIGMGdzDOY/rCNlPhfwEUOU4KiuGHaP sSiKp6ewXrv8KFgwkznDdOw7lSM52lg51ITFHZ32SmFqEY3hHIeysYnFoG9JiumN wAsM2GHKSYnRsojNC32AhfH57r2z39RY8pGjnBmylCq4yxXB3iHGStVKfoDul0M+ dfbRarjgfYK9gAHv4e8bHybqyDDJ3Nesx/G4Pwno8KSZPB8w2ib1AkVGd9uXX5Am bhrsgzoqhw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:30:15 2026 by rpki-client