$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json) Hash identifier: SOJUPjgTqHROcfHes/h6/ZANnoDFMnJtSohNCORUmo8= Subject key identifier: 38:94:99:B7:9A:ED:90:36:04:D4:36:78:6D:3A:13:87:8A:6C:84:34 Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Certificate serial: 2C8F81B2E579DDC68C4401DB765E70FAE2D66618 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft Manifest number: 0635 Signing time: Thu 23 Jul 2026 15:42:44 +0000 Manifest this update: Thu 23 Jul 2026 15:37:44 +0000 Manifest next update: Fri 24 Jul 2026 16:03:44 +0000 Files and hashes: 1: AS56045.roa (hash: JvCxAKjG86lRDOwFUy1JoWNJrWk/CVmpwlxSz7n/mBw=) 2: AS24445.roa (hash: U9aeKpr4+FBX/ykXl69Aspuv8cTZtMPrdlcmOJXV4TQ=) 3: AS9808.roa (hash: Q3TfgNnLd1fiNYG/EL1X33Jw6Dgs3VJROCg0xGk4rYM=) 4: AS56041.roa (hash: 6Dv1cc1O/yLCaMOZycm6+BHk58dy2J7jeWLNBUfEJ+8=) 5: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=) 6: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: tBTu2ZqumcrR2CyzL+Xt4uQ+FXE+PgeSY+1CQPdn9/M=) 7: AS134810.roa (hash: uCuc09kuT519jIA089mWGybf0KXQ2DLpvazGC1o2/oo=) 8: AS56048.roa (hash: un3dWxlw7TlNxCW61vUEU1cp+gdX6soQ1YzwNfKmmJg=) 9: AS24400.roa (hash: BiFnCkNCJdQndgzPtOs9qZ2ICg4/xMzeQqfu+OKlIRI=) 10: AS138407.roa (hash: mdEstKPY1PmZmoFkGYyReJHsModWrzGLYeFCK9C526M=) 11: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=) 12: AS139080.roa (hash: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=) 13: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=) 14: AS132525.roa (hash: RJcGeq6n4JRwoMzC3PHFyoRuqqunvbMnt7joPjaChQI=) 15: AS24547.roa (hash: 4YiLWCt/8WSd1FfcDOhhwDf8LtA4hWKC/P4511s/lbA=) 16: AS56042.roa (hash: z9TStiekLoa7fY+MO+3yQ+3Og8DvJUQ1AEnp2yMH0+s=) 17: AS56044.roa (hash: fySgsNdI0VaQG5w+0a74pK5zuMORl7lQYZqkRHUEzWI=) 18: AS38019.roa (hash: Q4QQYuZDI1ZoiGW7s6ZQYZHjorMttiCpdJ6jjDfShvE=) 19: AS56040.roa (hash: CiCzdDaGwRn2uqUxjQdc4Eu3cisRlqra2MyJbB26KN4=) 20: AS24444.roa (hash: 0WsENXB98x4xh7+wfpGwF8jnoNcoXiRQYZvFRE742Fo=) 21: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=) 22: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=) 23: AS56047.roa (hash: +N0aLhKPOp1Dhqxv5jsNZcCpdMfOUUtF7CABDyZy+Ic=) 24: AS56046.roa (hash: PU4q5FQHtm3/4vYWpABIA+bUsN4IU8zp7i6vetpbYWc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8f:81:b2:e5:79:dd:c6:8c:44:01:db:76:5e:70:fa:e2:d6:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Validity Not Before: Jul 23 15:37:44 2026 GMT Not After : Jul 24 16:03:44 2026 GMT Subject: CN=389499B79AED903604D436786D3A13878A6C8434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4e:9b:98:99:7b:b9:ca:5b:f0:33:28:cd:ed: 2a:a9:13:55:21:8f:b3:0d:eb:99:26:8f:cc:ac:91: a1:8c:9c:d6:10:f7:24:6d:2e:bf:17:1a:61:ed:83: fd:6d:c4:f7:35:14:e7:30:0f:e2:d6:e2:7f:38:a8: ce:2a:7b:74:bd:f5:16:a0:03:5b:0b:12:34:82:70: 9f:2d:b1:13:10:f1:ec:89:98:ed:7f:2a:32:b5:9a: e1:14:6b:94:6f:eb:7b:fe:a9:a8:a4:ea:f9:72:e6: 40:24:01:d5:e2:aa:8c:b6:bb:59:ba:d2:b3:27:5f: bb:da:99:5d:f4:a5:80:fb:8a:be:96:be:24:70:76: db:a8:a2:aa:94:fd:39:f1:6c:f1:e8:49:c8:82:29: 2c:cf:c6:2b:91:a2:a2:93:43:0b:32:f7:c8:e9:50: b2:2a:e9:03:c1:2c:c4:b7:75:3b:9b:bb:2d:de:ac: 42:1a:f5:94:5b:82:67:0a:a7:66:96:05:69:b4:04: c1:07:b6:14:c2:91:57:4f:41:fd:7c:63:ea:a6:30: 65:e4:66:4e:fa:b9:62:bc:09:7c:a2:47:b0:ca:18: 74:42:98:f6:81:30:4f:74:dd:10:a6:4b:ee:44:ac: a0:a4:5f:50:28:fb:05:ad:43:62:30:4b:90:d2:8f: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:99:B7:9A:ED:90:36:04:D4:36:78:6D:3A:13:87:8A:6C:84:34 X509v3 Authority Key Identifier: keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:a2:b5:55:af:09:e6:72:58:6b:20:25:ca:84:ae:37:d2: c3:00:b4:4d:83:46:91:5e:2b:a4:4f:77:6d:89:c2:06:79:03: 42:cc:4d:c7:b7:74:a3:3e:25:12:8f:f5:9e:4e:7f:23:95:2a: 5c:b8:66:b3:c3:97:87:26:ca:7d:7f:06:41:80:e1:58:1f:97: e9:75:af:bc:1a:ed:2c:e6:ab:86:2b:0b:15:50:41:9a:9b:30: c8:a4:3f:a0:cf:82:5c:63:40:b8:d4:6c:30:65:a1:72:50:3a: 67:e7:25:77:16:e3:1a:77:cc:dc:f0:0e:db:ca:97:9f:6d:31: 3a:25:d8:ea:34:e9:4c:c0:6c:4c:19:b8:3c:3a:67:52:af:67: dd:cf:fa:6b:53:54:63:92:03:7f:08:54:f5:c0:8a:ad:72:86: 5f:3b:6f:03:e6:26:09:e8:fa:3f:8e:2c:0f:a8:b5:6c:99:b2: 4b:cc:cc:f3:19:33:0d:82:4a:97:98:56:93:f9:48:c2:bc:f3: 77:0a:77:05:ba:04:7b:90:8c:41:a5:1b:fb:74:94:92:ea:eb: 25:ba:b2:95:ba:19:14:74:80:fb:88:2d:ae:9b:b1:c1:c0:9d: c7:e5:42:be:58:f3:94:31:31:92:2b:bc:06:6d:4b:c9:65:0f: 8d:fd:68:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULI+BsuV53caMRAHbdl5w+uLWZhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0 OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDcyMzE1Mzc0NFoX DTI2MDcyNDE2MDM0NFowMzExMC8GA1UEAxMoMzg5NDk5Qjc5QUVEOTAzNjA0RDQz Njc4NkQzQTEzODc4QTZDODQzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNOm5iZe7nKW/AzKM3tKqkTVSGPsw3rmSaPzKyRoYyc1hD3JG0uvxcaYe2D /W3E9zUU5zAP4tbifziozip7dL31FqADWwsSNIJwny2xExDx7ImY7X8qMrWa4RRr lG/re/6pqKTq+XLmQCQB1eKqjLa7WbrSsydfu9qZXfSlgPuKvpa+JHB226iiqpT9 OfFs8ehJyIIpLM/GK5GiopNDCzL3yOlQsirpA8EsxLd1O5u7Ld6sQhr1lFuCZwqn ZpYFabQEwQe2FMKRV09B/Xxj6qYwZeRmTvq5YrwJfKJHsMoYdEKY9oEwT3TdEKZL 7kSsoKRfUCj7Ba1DYjBLkNKP0bkCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQ4lJm3 mu2QNgTUNnhtOhOHimyENDAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ UzZvV0xlT0hHYV9JcGpsck5RLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5 NTc3NTc0Ny8wL0RCQjIzQzdFRTQ5MjIxMkVBODU4Qjc4RTFDNjZCRjIyOThFNUFD RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAnxqK1Va8J5nJYayAlyoSuN9LDALRNg0aRXiukT3dticIG eQNCzE3Ht3SjPiUSj/WeTn8jlSpcuGazw5eHJsp9fwZBgOFYH5fpda+8Gu0s5quG KwsVUEGamzDIpD+gz4JcY0C41GwwZaFyUDpn5yV3FuMad8zc8A7bypefbTE6Jdjq NOlMwGxMGbg8OmdSr2fdz/prU1RjkgN/CFT1wIqtcoZfO28D5iYJ6Po/jiwPqLVs mbJLzMzzGTMNgkqXmFaT+UjCvPN3CncFugR7kIxBpRv7dJSS6uslurKVuhkUdID7 iC2um7HBwJ3H5UK+WPOUMTGSK7wGbUvJZQ+N/WjX -----END CERTIFICATE-----Generated at Thu Jul 23 21:52:33 2026 by rpki-client