$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: 7PdFMQ6S2gJUOxO/RTt9/swiDkdKJNJMP7dxJ0IB8Bk= Subject key identifier: 34:F6:50:8A:EB:7A:42:E6:14:A1:CB:AA:C3:B9:40:55:9C:4B:E7:B7 Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 5470603E3B70D80C8C9EC7771A9E43CCD78A47A3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 91 Signing time: Thu 23 Jul 2026 20:39:30 +0000 Manifest this update: Thu 23 Jul 2026 20:34:30 +0000 Manifest next update: Fri 24 Jul 2026 23:49:30 +0000 Files and hashes: 1: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 2: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: wLwz+HBqMe/bM8NS6g3tU8qkyXmzwSoGp8tZg/NCOoE=) 3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:70:60:3e:3b:70:d8:0c:8c:9e:c7:77:1a:9e:43:cc:d7:8a:47:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Jul 23 20:34:30 2026 GMT Not After : Jul 24 23:49:30 2026 GMT Subject: CN=34F6508AEB7A42E614A1CBAAC3B940559C4BE7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:58:95:f8:2d:ce:fa:31:cb:8d:55:46:86: 25:0a:7c:90:80:ed:1e:4a:71:20:fa:90:c5:df:4e: 22:db:a7:0b:50:6e:ac:33:3c:42:aa:ec:2a:bd:83: 26:c2:98:3a:a4:1f:92:cd:65:c3:f8:90:e5:57:58: bd:95:49:a9:cd:85:27:a1:02:7b:29:d7:6d:09:58: 32:bc:ff:46:91:fa:84:15:24:f8:47:28:03:d5:c0: c1:b7:d6:50:35:40:0f:8b:79:86:c6:1d:1e:e6:1f: f0:d5:b0:e7:05:40:bf:79:fc:08:e1:a0:5c:00:ae: 03:84:f4:4d:96:d2:7b:7d:cd:ab:07:35:b9:4a:d5: b4:17:f3:e4:7c:ed:c6:78:25:ca:27:68:54:fe:e9: 37:d8:b6:2d:2a:5f:87:6b:5a:0b:12:fe:80:67:a0: 2c:92:e9:8d:e4:b6:8c:59:f9:45:9f:b5:ac:f4:c2: 60:e7:65:5a:68:20:89:23:01:52:54:2d:6c:a5:2a: 6a:29:11:ab:14:77:c0:71:37:f5:39:ab:51:71:ca: 2c:c7:0b:a5:73:25:b6:73:28:b8:48:62:61:58:84: 75:c6:09:c6:ac:87:85:c1:cc:96:53:73:f0:48:54: c8:0a:04:2b:9f:f2:1f:21:88:06:5a:aa:7e:42:30: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:50:8A:EB:7A:42:E6:14:A1:CB:AA:C3:B9:40:55:9C:4B:E7:B7 X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e4:ef:bc:6d:64:00:57:af:d6:05:1c:41:61:41:bd:e8:ad: fd:aa:2d:d1:a1:99:92:1b:ab:89:4d:55:0b:f0:d6:b0:f2:7e: 59:05:7d:bd:d8:a0:75:c1:d6:39:e6:d0:55:94:cf:3a:3f:b5: 53:f6:73:08:16:83:ce:9a:31:2e:cf:a8:e6:7e:4e:90:4a:25: e7:dc:ef:4b:0a:50:bb:e2:8f:c8:11:3e:0b:0e:0c:b8:0c:aa: aa:4e:6b:1d:1b:77:e1:66:8b:36:a1:80:64:ed:92:77:98:95: 19:1f:92:6b:a0:36:49:11:e5:a3:9b:f3:67:79:2a:ce:a5:ef: ab:be:4f:07:5a:67:9a:c6:1b:dc:8c:60:52:38:1f:22:bf:b3: 29:84:53:a5:68:2a:ba:c6:6d:74:17:c1:59:c3:2d:8c:97:c8: 73:44:60:e0:41:a1:c2:ec:56:b3:a4:7d:dd:e9:65:e1:79:ab: 89:8f:f9:14:5c:07:01:84:90:27:2a:3d:b3:3c:71:9c:87:d0: 70:74:41:c8:c3:b5:64:5d:9d:5c:57:04:75:25:26:bd:41:4f: 41:0b:3c:d2:c8:cb:43:70:cc:7c:49:65:33:7a:5f:21:1d:0b: 9a:95:a1:d2:02:bd:b1:eb:db:30:94:33:f3:02:5c:2a:40:e6: 3f:13:0a:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVHBgPjtw2AyMnsd3Gp5DzNeKR6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA3MjMyMDM0MzBaFw0yNjA3MjQyMzQ5MzBaMDMxMTAvBgNV BAMTKDM0RjY1MDhBRUI3QTQyRTYxNEExQ0JBQUMzQjk0MDU1OUM0QkU3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJViV+C3O+jHLjVVGhiUKfJCA 7R5KcSD6kMXfTiLbpwtQbqwzPEKq7Cq9gybCmDqkH5LNZcP4kOVXWL2VSanNhSeh Ansp120JWDK8/0aR+oQVJPhHKAPVwMG31lA1QA+LeYbGHR7mH/DVsOcFQL95/Ajh oFwArgOE9E2W0nt9zasHNblK1bQX8+R87cZ4JconaFT+6TfYti0qX4drWgsS/oBn oCyS6Y3ktoxZ+UWftaz0wmDnZVpoIIkjAVJULWylKmopEasUd8BxN/U5q1FxyizH C6VzJbZzKLhIYmFYhHXGCcash4XBzJZTc/BIVMgKBCuf8h8hiAZaqn5CMAOBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNPZQiut6QuYUocuqw7lAVZxL57cwHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeTvvG1kAFev 1gUcQWFBveit/aot0aGZkhuriU1VC/DWsPJ+WQV9vdigdcHWOebQVZTPOj+1U/Zz CBaDzpoxLs+o5n5OkEol59zvSwpQu+KPyBE+Cw4MuAyqqk5rHRt34WaLNqGAZO2S d5iVGR+Sa6A2SRHlo5vzZ3kqzqXvq75PB1pnmsYb3IxgUjgfIr+zKYRTpWgqusZt dBfBWcMtjJfIc0Rg4EGhwuxWs6R93ell4XmriY/5FFwHAYSQJyo9szxxnIfQcHRB yMO1ZF2dXFcEdSUmvUFPQQs80sjLQ3DMfEllM3pfIR0LmpWh0gK9sevbMJQz8wJc KkDmPxMKjA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:18:26 2026 by rpki-client