$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: NdDjBqzucTrZlh1CXdUH2oEhfAIJMQGYOx4w6ZE4mvg= Subject key identifier: F1:26:2B:4A:A0:58:0C:50:8C:54:AA:56:32:AC:8C:7E:2A:C3:24:20 Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 799BFF6EA4115E02DA47659A414F6AEC6AE212BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: 90 Signing time: Fri 24 Jul 2026 00:34:56 +0000 Manifest this update: Fri 24 Jul 2026 00:29:56 +0000 Manifest next update: Sat 25 Jul 2026 04:12:56 +0000 Files and hashes: 1: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) 2: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: yNw9WElsv1Gs60qLHxCOJ8FCu7wo1iwBHay5vypDk2w=) 3: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 4: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9b:ff:6e:a4:11:5e:02:da:47:65:9a:41:4f:6a:ec:6a:e2:12:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Jul 24 00:29:56 2026 GMT Not After : Jul 25 04:12:56 2026 GMT Subject: CN=F1262B4AA0580C508C54AA5632AC8C7E2AC32420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:eb:82:a5:39:12:3d:e6:16:42:5d:70:87: e6:dc:5d:9f:93:40:93:bf:78:5a:01:14:28:b1:46: 3e:9b:9c:47:c9:dd:0a:bf:13:d4:b0:cb:95:24:fa: 11:82:54:6b:ab:56:17:3a:3a:9f:29:5c:13:88:3c: f4:9b:9e:b0:06:37:e3:15:d7:26:9c:50:10:3d:ef: d7:d6:54:dd:1c:aa:7f:06:ce:ea:72:2c:2c:d7:4a: c3:61:81:8a:06:a3:d2:e6:2f:29:d8:e1:8d:eb:0e: da:89:cd:05:2d:aa:1d:a4:4b:ed:b2:a4:95:fd:b8: 81:6f:96:f6:82:1d:4d:9c:5f:9f:89:8b:1f:32:59: 97:71:f7:4e:23:ac:71:27:c1:89:02:1d:6b:f3:39: 41:dd:1f:31:da:0c:b1:b9:c2:d8:6a:e4:29:09:aa: 08:70:ef:da:bf:f1:96:a9:84:5a:b2:48:f9:98:34: cd:78:00:36:75:04:f1:39:9b:ce:48:c2:e5:1f:81: 88:5a:09:b5:cc:5d:d6:b5:02:ca:e4:17:49:bc:16: 99:f7:2a:09:81:bc:c7:62:c8:fc:a3:5e:a6:98:72: e7:3e:e5:7a:e5:fd:13:e7:1e:39:c1:af:8b:e9:59: 2b:ea:e7:41:60:56:39:0e:79:95:6a:07:44:b1:6a: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:2B:4A:A0:58:0C:50:8C:54:AA:56:32:AC:8C:7E:2A:C3:24:20 X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:46:a9:3f:31:7b:9b:20:ea:20:fb:87:f1:0d:62:61:72: b0:6c:55:ef:44:99:46:2a:0a:3f:33:46:42:78:bd:e8:38:a5: f6:5f:3f:9e:6c:ed:a9:0f:d1:27:71:96:8b:5b:85:ea:60:06: b9:55:b1:db:31:fd:be:d8:b7:0f:f1:dd:d7:2a:79:0c:2f:1b: cb:ab:20:be:ba:ee:b1:52:b8:4e:d6:86:63:33:40:1d:7e:60: 7b:66:b8:f4:29:a4:5d:96:f6:ec:3b:0a:99:58:b7:8b:c3:e1: f3:d5:57:64:4f:88:be:69:9d:d2:e6:a4:14:55:10:47:bf:7d: ad:d3:5a:8d:37:82:dc:07:6b:fa:d0:17:37:29:dc:37:c3:9c: 3e:d1:36:cf:32:d7:f5:a3:b8:a3:35:f3:bc:7a:26:85:9a:43: 4d:e4:e6:7f:9a:29:21:99:e6:a7:f5:34:94:65:37:f1:12:79: 2f:a1:52:ed:e4:42:52:8e:08:53:ac:e9:32:7a:d0:e3:5b:85: 40:78:45:a6:4c:f9:37:3a:d8:27:df:d3:f2:8b:9b:55:3f:68: 96:11:ac:3d:be:ba:70:2a:63:72:df:44:5d:a0:79:2a:da:2c: 9a:29:b8:49:f0:70:65:71:2e:bb:4d:14:3c:51:be:00:ee:6e: 36:8b:70:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeZv/bqQRXgLaR2WaQU9q7GriEr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA3MjQwMDI5NTZaFw0yNjA3MjUwNDEyNTZaMDMxMTAvBgNV BAMTKEYxMjYyQjRBQTA1ODBDNTA4QzU0QUE1NjMyQUM4QzdFMkFDMzI0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPeuCpTkSPeYWQl1wh+bcXZ+T QJO/eFoBFCixRj6bnEfJ3Qq/E9Swy5Uk+hGCVGurVhc6Op8pXBOIPPSbnrAGN+MV 1yacUBA979fWVN0cqn8GzupyLCzXSsNhgYoGo9LmLynY4Y3rDtqJzQUtqh2kS+2y pJX9uIFvlvaCHU2cX5+Jix8yWZdx904jrHEnwYkCHWvzOUHdHzHaDLG5wthq5CkJ qghw79q/8ZaphFqySPmYNM14ADZ1BPE5m85IwuUfgYhaCbXMXda1AsrkF0m8Fpn3 KgmBvMdiyPyjXqaYcuc+5Xrl/RPnHjnBr4vpWSvq50FgVjkOeZVqB0Sxao9VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8SYrSqBYDFCMVKpWMqyMfirDJCAwHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqVGqT8xe5sg 6iD7h/ENYmFysGxV70SZRioKPzNGQni96Dil9l8/nmztqQ/RJ3GWi1uF6mAGuVWx 2zH9vti3D/Hd1yp5DC8by6sgvrrusVK4TtaGYzNAHX5ge2a49CmkXZb27DsKmVi3 i8Ph89VXZE+Ivmmd0uakFFUQR799rdNajTeC3Adr+tAXNyncN8OcPtE2zzLX9aO4 ozXzvHomhZpDTeTmf5opIZnmp/U0lGU38RJ5L6FS7eRCUo4IU6zpMnrQ41uFQHhF pkz5NzrYJ9/T8oubVT9olhGsPb66cCpjct9EXaB5Ktosmim4SfBwZXEuu00UPFG+ AO5uNotwVQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:11 2026 by rpki-client