$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: ceoKIbYH6Qs5z2VSA1KxL4DUgPy2jG+sEdUPGHGUu6I= Subject key identifier: 5D:51:E7:EE:79:4F:CA:D7:AE:45:FD:B3:7F:6C:A7:2A:64:18:70:99 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 4104C23D2549E37D2754FD1CE2ECD7F45C72AA82 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 8F Signing time: Fri 24 Jul 2026 12:21:09 +0000 Manifest this update: Fri 24 Jul 2026 12:16:09 +0000 Manifest next update: Sat 25 Jul 2026 16:15:09 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: Cj4LECzpHJMAGAQ/tXvhYKXpUIAufeVmKdSAGVYJC/w=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 4: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:04:c2:3d:25:49:e3:7d:27:54:fd:1c:e2:ec:d7:f4:5c:72:aa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Jul 24 12:16:09 2026 GMT Not After : Jul 25 16:15:09 2026 GMT Subject: CN=5D51E7EE794FCAD7AE45FDB37F6CA72A64187099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:c0:aa:e8:e7:d3:2a:a1:2f:ed:d9:c2:d7: a8:13:c2:cc:0c:ea:2b:b1:92:90:6d:80:b1:b7:6b: 35:80:07:94:0c:13:46:0e:97:94:48:b4:63:44:be: cb:b6:f7:a2:ef:47:b1:8e:e3:25:87:e3:18:74:c5: 9e:0d:8f:98:2e:5d:34:40:e9:5c:11:07:bb:3c:3a: c4:e3:c0:4d:f6:a8:6f:da:81:1a:61:a4:30:f2:5b: a4:3f:7b:1b:8c:f0:5e:98:ff:27:a1:6e:b2:3f:b0: 7b:63:7b:a8:fc:2e:a6:ac:8e:bc:04:88:f7:10:e1: e0:71:a3:b7:4c:1d:43:5d:af:e4:8c:57:47:a6:d0: 4f:bf:a0:bd:53:2a:01:ad:4a:33:b7:e8:55:66:8d: bb:d5:e5:8c:e6:fb:a0:98:bf:99:de:c3:13:37:12: 6d:ab:b3:b4:94:7e:42:a4:14:6b:31:1a:82:ee:60: e3:56:4e:0b:19:04:93:f7:49:6a:c9:3a:52:4b:04: 5a:30:59:8c:df:81:18:cc:81:e8:c5:17:48:f4:80: 8f:e7:7f:e7:1f:74:db:f5:df:2a:23:b3:08:3f:a0: fe:a3:ce:ea:ac:27:a2:5d:80:05:6e:04:e2:ba:f2: 42:4b:55:c5:f6:0e:33:77:77:65:af:6f:15:9e:0a: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:51:E7:EE:79:4F:CA:D7:AE:45:FD:B3:7F:6C:A7:2A:64:18:70:99 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3d:05:60:bb:66:a9:c0:d8:75:82:0c:a4:57:e4:fc:4d:b2: 04:13:a3:46:81:25:c8:3e:09:b1:f6:08:40:29:9e:27:39:de: 19:95:c0:81:33:2d:bb:bc:92:36:5f:b2:b9:12:01:f3:88:94: c4:d4:b2:7a:88:31:88:29:c9:e7:89:03:79:9c:3e:76:85:00: a9:35:8b:d1:b3:0b:86:2b:b4:87:3c:ca:12:3d:0a:e2:c9:20: d7:ed:8b:25:a0:b4:84:40:6d:5b:2d:89:6c:9a:16:c0:ff:71: 6c:55:50:3e:88:5e:17:6c:0b:78:76:f3:26:cd:ab:8f:75:9f: a6:7f:98:3f:34:0f:d0:3a:3c:9b:21:cf:79:6e:e4:3a:c1:f4: f6:7b:1d:55:c6:ee:a7:42:69:18:1c:b1:8e:f0:a4:2b:a1:34: 0c:6a:70:7c:45:4f:4b:8a:98:be:a2:26:0b:85:4f:75:7e:ea: 92:20:df:f2:b7:c1:db:81:f4:bc:2a:cb:f9:f9:16:3b:86:ce: 0f:0a:39:d1:e5:a1:d9:af:fb:ea:f3:7d:95:8a:03:1f:bc:83: d4:f6:57:72:80:34:51:63:5b:ec:c7:8d:20:19:d6:c1:10:9a: 19:b8:f2:8b:2a:ab:13:96:66:21:08:be:0f:21:3c:eb:20:b4: ec:2b:94:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQQTCPSVJ430nVP0c4uzX9FxyqoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA3MjQxMjE2MDlaFw0yNjA3MjUxNjE1MDlaMDMxMTAvBgNV BAMTKDVENTFFN0VFNzk0RkNBRDdBRTQ1RkRCMzdGNkNBNzJBNjQxODcwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA8Cq6OfTKqEv7dnC16gTwswM 6iuxkpBtgLG3azWAB5QME0YOl5RItGNEvsu296LvR7GO4yWH4xh0xZ4Nj5guXTRA 6VwRB7s8OsTjwE32qG/agRphpDDyW6Q/exuM8F6Y/yehbrI/sHtje6j8LqasjrwE iPcQ4eBxo7dMHUNdr+SMV0em0E+/oL1TKgGtSjO36FVmjbvV5Yzm+6CYv5newxM3 Em2rs7SUfkKkFGsxGoLuYONWTgsZBJP3SWrJOlJLBFowWYzfgRjMgejFF0j0gI/n f+cfdNv13yojswg/oP6jzuqsJ6JdgAVuBOK68kJLVcX2DjN3d2WvbxWeCjAzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXVHn7nlPyteuRf2zf2ynKmQYcJkwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD0FYLtmqcDY dYIMpFfk/E2yBBOjRoElyD4JsfYIQCmeJzneGZXAgTMtu7ySNl+yuRIB84iUxNSy eogxiCnJ54kDeZw+doUAqTWL0bMLhiu0hzzKEj0K4skg1+2LJaC0hEBtWy2JbJoW wP9xbFVQPoheF2wLeHbzJs2rj3Wfpn+YPzQP0Do8myHPeW7kOsH09nsdVcbup0Jp GByxjvCkK6E0DGpwfEVPS4qYvqImC4VPdX7qkiDf8rfB24H0vCrL+fkWO4bODwo5 0eWh2a/76vN9lYoDH7yD1PZXcoA0UWNb7MeNIBnWwRCaGbjyiyqrE5ZmIQi+DyE8 6yC07CuUbg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:33 2026 by rpki-client