$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: 6ELjCAgs7r/1mBzL7rvzUxxAR+nyUbPnM8jP8SQa+vU= Subject key identifier: 27:7A:CF:0F:94:73:06:61:10:BA:CA:A5:17:12:B6:54:45:91:6A:F9 Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 0DF2B62C53C434D79A01415682EABB00F2D64524 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: 90 Signing time: Fri 24 Jul 2026 10:10:57 +0000 Manifest this update: Fri 24 Jul 2026 10:05:57 +0000 Manifest next update: Sat 25 Jul 2026 12:19:57 +0000 Files and hashes: 1: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 2: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: 50bRxIWFeIpsKBX5Mfmdv0nqTGiH4zAG8DsgwzZVltw=) 3: 3130312e3132352e3235332e302f32342d3234203d3e20313337373032.roa (hash: opKyhsmS++FYHtfTnj/kaqOGfgLAE1EmtkYwGMmQCYc=) 4: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f2:b6:2c:53:c4:34:d7:9a:01:41:56:82:ea:bb:00:f2:d6:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Jul 24 10:05:57 2026 GMT Not After : Jul 25 12:19:57 2026 GMT Subject: CN=277ACF0F9473066110BACAA51712B65445916AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:fa:86:5c:15:d7:df:0e:95:82:1e:01:0c: 37:5a:cf:05:7a:54:48:c4:1a:2d:65:30:06:7b:3e: 33:e3:72:42:f0:e6:e4:c1:10:48:57:84:c8:5a:91: 46:61:0e:07:14:24:90:c0:8e:df:3e:99:9d:47:78: 20:02:b8:fa:60:7f:ad:6a:77:94:ea:0c:22:af:fb: 41:a7:62:dc:13:b6:99:7d:8d:05:10:1d:08:42:f1: d0:15:51:72:d4:14:9e:45:7d:61:07:31:4a:f7:47: 6e:b7:e0:4f:6a:fc:1c:29:97:af:33:d4:12:66:03: 56:d2:52:27:8b:a6:ab:5d:0b:18:ce:da:a4:b6:f3: 50:89:1c:b7:86:d0:c8:37:ca:47:a1:6a:9b:1d:65: 9d:06:9d:a0:6b:23:51:6e:a0:52:70:fa:dd:24:ea: 30:dd:25:0c:6b:8c:29:2b:2d:2b:fa:26:22:d4:fb: 9c:8a:76:6e:24:f0:10:0c:2b:26:9e:bb:9d:76:86: fc:48:38:4f:ef:9b:45:63:fc:69:b0:7b:65:7b:20: 26:0f:33:90:60:54:c0:3e:65:44:41:82:f5:31:63: 93:7b:18:22:eb:03:32:c2:81:db:0f:f8:4d:cd:40: 31:f7:94:3a:cf:45:b5:dd:d4:18:64:3c:70:23:97: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:CF:0F:94:73:06:61:10:BA:CA:A5:17:12:B6:54:45:91:6A:F9 X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a7:17:70:57:b4:10:cc:3d:47:cd:8d:08:c5:ed:ce:23:2f: 82:84:a6:35:66:3d:9f:9f:2c:92:f5:69:1b:ec:40:c5:68:8f: 69:7d:ec:6f:ac:0c:01:70:11:ac:c7:dc:e4:c5:d9:eb:14:a0: 62:99:41:ec:dd:a7:eb:b3:53:aa:df:4a:41:99:72:67:3b:d1: f1:57:c1:2d:9a:9a:4b:eb:ff:42:b5:8d:b4:29:26:ac:b5:2e: 18:59:6a:89:10:75:54:44:8b:07:e4:4f:aa:80:29:8f:f8:dc: b9:b5:73:ce:71:22:f8:95:6a:62:64:0a:59:7f:e2:99:75:38: 74:08:dd:10:2b:9e:0e:ec:f0:52:99:58:da:82:57:34:83:da: e1:64:da:b1:58:73:4c:27:6c:02:62:60:50:1c:bc:4f:e9:bb: 66:0e:26:30:15:c4:54:40:8c:d6:e5:e6:11:f2:26:f9:82:a7: b6:8a:7b:f8:09:93:2c:3e:d2:56:43:af:a6:ec:73:5f:14:b1: ee:82:e6:69:6f:74:38:94:35:28:3b:8b:77:05:68:99:55:88: ab:70:65:29:89:a3:f8:4d:c0:82:d2:22:84:72:47:e8:a7:51: 19:d9:92:8d:f1:96:e4:79:c4:c1:ee:e3:a8:0c:5a:a1:c8:ff: 3f:f0:bb:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDfK2LFPENNeaAUFWguq7APLWRSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA3MjQxMDA1NTdaFw0yNjA3MjUxMjE5NTdaMDMxMTAvBgNV BAMTKDI3N0FDRjBGOTQ3MzA2NjExMEJBQ0FBNTE3MTJCNjU0NDU5MTZBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqvqGXBXX3w6Vgh4BDDdazwV6 VEjEGi1lMAZ7PjPjckLw5uTBEEhXhMhakUZhDgcUJJDAjt8+mZ1HeCACuPpgf61q d5TqDCKv+0GnYtwTtpl9jQUQHQhC8dAVUXLUFJ5FfWEHMUr3R2634E9q/Bwpl68z 1BJmA1bSUieLpqtdCxjO2qS281CJHLeG0Mg3ykehapsdZZ0GnaBrI1FuoFJw+t0k 6jDdJQxrjCkrLSv6JiLU+5yKdm4k8BAMKyaeu512hvxIOE/vm0Vj/Gmwe2V7ICYP M5BgVMA+ZURBgvUxY5N7GCLrAzLCgdsP+E3NQDH3lDrPRbXd1BhkPHAjl77VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ3rPD5RzBmEQusqlFxK2VEWRavkwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6cXcFe0EMw9 R82NCMXtziMvgoSmNWY9n58skvVpG+xAxWiPaX3sb6wMAXARrMfc5MXZ6xSgYplB 7N2n67NTqt9KQZlyZzvR8VfBLZqaS+v/QrWNtCkmrLUuGFlqiRB1VESLB+RPqoAp j/jcubVzznEi+JVqYmQKWX/imXU4dAjdECueDuzwUplY2oJXNIPa4WTasVhzTCds AmJgUBy8T+m7Zg4mMBXEVECM1uXmEfIm+YKntop7+AmTLD7SVkOvpuxzXxSx7oLm aW90OJQ1KDuLdwVomVWIq3BlKYmj+E3AgtIihHJH6KdRGdmSjfGW5HnEwe7jqAxa ocj/P/C7tw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:31:30 2026 by rpki-client