$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: Qz729JlypI+oE+302HcuvzaM5xxRJHgXOsaWMP42l0w= Subject key identifier: 62:18:87:7B:AA:44:45:D6:FE:F6:BA:90:00:15:7F:B5:D6:01:58:F5 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 18267F430C6E12D4BCE85786110A9866E5346B35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 8E Signing time: Thu 23 Jul 2026 22:24:41 +0000 Manifest this update: Thu 23 Jul 2026 22:19:41 +0000 Manifest next update: Fri 24 Jul 2026 23:08:41 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: o9f8Hhfdxo2daN0UrOgKS978XKFQx/cFBnU2JppM3Go=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:26:7f:43:0c:6e:12:d4:bc:e8:57:86:11:0a:98:66:e5:34:6b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Jul 23 22:19:41 2026 GMT Not After : Jul 24 23:08:41 2026 GMT Subject: CN=6218877BAA4445D6FEF6BA9000157FB5D60158F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:c7:b5:c4:6f:1c:b5:5c:8e:ad:50:ab:67: 5f:3c:b8:c1:6c:19:40:56:d8:4a:70:ef:7c:3e:26: 99:33:6e:21:e7:ff:e3:41:61:6c:09:07:32:df:17: 85:42:15:e5:a8:f0:fe:2d:03:03:67:9a:d0:d9:69: 90:80:a2:1b:24:a9:40:a5:a2:2b:a3:f0:b5:15:30: 6d:3c:70:a6:7c:94:7e:ae:c8:11:ca:7b:37:69:c5: 20:98:d3:60:5a:c7:09:4c:c6:e1:7d:44:f5:9d:d8: df:7a:c4:c4:3d:c1:df:51:57:ce:07:88:67:87:3d: 0a:15:fb:c0:09:29:7c:ff:21:39:7e:52:46:95:f2: e3:de:6f:5b:e2:78:d7:4a:a2:96:68:8b:da:04:44: 2f:cd:3d:b8:36:c8:c6:2b:c1:0b:9a:e1:af:04:f9: fc:0c:fd:67:a9:18:37:ab:6f:bc:f6:5f:bd:87:5b: 32:e8:f6:ba:c7:30:65:f6:65:3a:e2:3c:74:b5:58: 10:0b:a6:72:03:61:74:3c:fb:94:c9:c2:56:e2:a4: 60:6c:93:6f:e5:17:49:ff:ce:9d:2e:2e:aa:b5:8c: de:ef:45:42:5a:75:75:e8:cf:e4:6c:63:14:9c:ec: 0a:cd:a3:de:d0:30:86:ab:6b:fb:70:4d:17:28:e9: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:18:87:7B:AA:44:45:D6:FE:F6:BA:90:00:15:7F:B5:D6:01:58:F5 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:15:ff:8f:f4:68:4c:42:08:0b:28:1a:51:e9:14:2f:59: c2:69:d0:df:df:b2:5a:96:44:c3:13:ad:f9:35:9e:a1:a7:32: 3f:f2:95:7c:d2:73:75:f7:b8:42:79:b8:57:95:18:2b:cb:c7: 49:b0:85:11:50:34:4f:21:b8:9d:ad:e8:b2:9e:06:57:7c:34: 7c:f4:aa:5e:41:13:7f:b3:05:fe:b2:af:46:c9:10:e2:fa:51: 65:a6:af:17:33:60:b4:bb:05:af:f8:80:39:1c:1b:e0:b8:92: 78:5e:1c:e2:cc:f2:8a:67:c3:d2:41:08:45:24:1b:ed:04:78: a3:2d:9b:1c:20:b4:92:49:6c:bd:99:d8:56:36:10:28:f7:d3: 96:45:68:d8:c0:7f:db:ad:27:2f:75:3f:de:0e:c3:d5:72:6a: 7f:f9:d3:86:7b:be:67:10:76:f7:50:b6:6a:85:ae:97:3a:b2: d8:4d:fc:85:3e:e0:76:52:f2:11:55:e2:d5:ad:90:a8:ff:a9: 87:4b:cc:6c:8a:58:b9:ec:61:6a:84:33:8c:6b:77:ad:2d:3f: d4:9e:39:97:10:85:02:eb:2d:e6:1c:5d:eb:be:be:b0:33:ef: c6:36:ea:57:5d:e2:65:c8:c6:01:81:bb:bb:52:28:1a:7e:f5: 06:a3:25:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGCZ/QwxuEtS86FeGEQqYZuU0azUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA3MjMyMjE5NDFaFw0yNjA3MjQyMzA4NDFaMDMxMTAvBgNV BAMTKDYyMTg4NzdCQUE0NDQ1RDZGRUY2QkE5MDAwMTU3RkI1RDYwMTU4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tce1xG8ctVyOrVCrZ188uMFs GUBW2Epw73w+JpkzbiHn/+NBYWwJBzLfF4VCFeWo8P4tAwNnmtDZaZCAohskqUCl oiuj8LUVMG08cKZ8lH6uyBHKezdpxSCY02BaxwlMxuF9RPWd2N96xMQ9wd9RV84H iGeHPQoV+8AJKXz/ITl+UkaV8uPeb1vieNdKopZoi9oERC/NPbg2yMYrwQua4a8E +fwM/WepGDerb7z2X72HWzLo9rrHMGX2ZTriPHS1WBALpnIDYXQ8+5TJwlbipGBs k2/lF0n/zp0uLqq1jN7vRUJadXXoz+RsYxSc7ArNo97QMIara/twTRco6aLVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYhiHe6pERdb+9rqQABV/tdYBWPUwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL4V/4/0aExC CAsoGlHpFC9ZwmnQ39+yWpZEwxOt+TWeoacyP/KVfNJzdfe4Qnm4V5UYK8vHSbCF EVA0TyG4na3osp4GV3w0fPSqXkETf7MF/rKvRskQ4vpRZaavFzNgtLsFr/iAORwb 4LiSeF4c4szyimfD0kEIRSQb7QR4oy2bHCC0kklsvZnYVjYQKPfTlkVo2MB/260n L3U/3g7D1XJqf/nThnu+ZxB291C2aoWulzqy2E38hT7gdlLyEVXi1a2QqP+ph0vM bIpYuexhaoQzjGt3rS0/1J45lxCFAust5hxd676+sDPvxjbqV13iZcjGAYG7u1Io Gn71BqMlFA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:15:31 2026 by rpki-client