$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: p1tmoocGze+SQXOe51Wj0A4xy8QeQ+pskA1PmPoE9kY= Subject key identifier: DE:B1:A5:99:D1:C2:30:B5:D5:8A:E9:0A:A4:62:37:78:85:BE:F9:29 Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 6DE3B208D08DEE474BC755E9AF7E4D97CF759B0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: 8E Signing time: Fri 24 Jul 2026 17:26:44 +0000 Manifest this update: Fri 24 Jul 2026 17:21:44 +0000 Manifest next update: Sat 25 Jul 2026 18:25:44 +0000 Files and hashes: 1: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: vARW8bNN9uCqvCIBwbYcQRlARmSSte+dDUYkc/QJp60=) 2: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) 3: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:b2:08:d0:8d:ee:47:4b:c7:55:e9:af:7e:4d:97:cf:75:9b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Jul 24 17:21:44 2026 GMT Not After : Jul 25 18:25:44 2026 GMT Subject: CN=DEB1A599D1C230B5D58AE90AA462377885BEF929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:5e:ec:df:c4:b6:d7:6b:da:ea:b5:fc:0e: a6:26:b1:91:ba:ce:16:97:07:f7:be:35:5f:47:ba: 97:01:9a:af:5b:ae:13:67:d9:9e:fa:10:5e:d5:d4: 89:29:d6:9d:c2:f1:31:d4:3c:dc:42:b6:06:36:f0: a7:9e:88:94:72:c3:71:f5:30:9c:38:18:94:d9:35: 03:61:a8:12:1d:9c:31:02:0f:12:f1:fc:fa:fd:68: 89:20:a4:6f:d0:f9:9a:cd:dd:12:ae:e3:71:59:d8: 22:d3:b7:aa:ab:de:55:5e:2d:4b:aa:4b:95:68:61: 13:bc:f5:cc:3f:80:5a:30:aa:2f:b6:0f:a9:d6:4d: 21:9a:3e:ad:90:f6:fb:42:1d:00:eb:f5:dd:b8:68: b8:12:2c:a9:db:5c:f9:7b:e5:a9:15:4a:81:5c:f7: 99:09:95:1d:33:71:34:b3:90:b7:ce:15:5f:21:f7: 79:23:10:47:49:75:6a:44:c6:4a:94:b4:da:6a:c6: 78:7f:8e:bb:70:00:40:ed:2e:63:28:85:40:f8:6e: 78:89:af:66:c2:81:82:ef:c2:2e:1f:e9:d5:c2:ba: 2c:d2:c7:f4:11:d5:0f:a7:81:8d:ad:82:a9:d9:c7: 1e:9d:52:32:27:e5:ca:d1:13:46:f4:09:35:a5:00: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:A5:99:D1:C2:30:B5:D5:8A:E9:0A:A4:62:37:78:85:BE:F9:29 X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c4:fc:86:e5:eb:a4:39:aa:2b:62:9e:fd:5f:32:af:83:e2: 63:21:a7:4f:41:33:66:f3:2b:ef:96:61:84:4a:21:c7:2b:50: 05:e7:c1:7a:b6:80:af:57:d0:67:c3:44:fa:57:ab:8c:a0:35: 4f:6a:b9:aa:61:7e:c8:ff:d3:72:e7:04:96:11:ca:46:97:b0: 7f:05:8c:71:87:c6:f5:29:1e:98:68:21:cb:76:fb:9b:c3:9b: 91:6a:7f:1d:40:22:da:6a:5f:ed:49:c2:19:6b:4f:22:bb:30: 97:27:e9:0e:e4:37:67:ce:70:cd:95:2d:59:a1:dc:52:1a:9c: 22:be:9e:fc:63:ad:76:32:8c:78:52:a9:87:a3:fa:4f:00:c4: 6b:d1:21:57:15:87:14:71:5d:df:74:d8:4c:89:35:3a:09:ad: 4c:80:ae:be:09:1b:94:f5:29:36:e4:7c:06:ad:f9:11:af:b6: c9:bc:f5:83:3d:e3:b0:e0:30:9e:83:2d:53:50:76:da:57:1d: 45:93:01:05:36:21:12:b9:fc:f0:aa:17:ee:a8:e2:e1:0c:02: 73:80:3b:dc:78:4b:17:bb:32:a6:1e:27:21:91:13:3d:db:36: 99:63:0f:b1:ab:28:db:ae:19:47:13:4b:31:c8:ef:01:50:96: f9:c9:0e:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbeOyCNCN7kdLx1Xpr35Nl891mw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjA3MjQxNzIxNDRaFw0yNjA3MjUxODI1NDRaMDMxMTAvBgNV BAMTKERFQjFBNTk5RDFDMjMwQjVENThBRTkwQUE0NjIzNzc4ODVCRUY5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiiV7s38S212va6rX8DqYmsZG6 zhaXB/e+NV9HupcBmq9brhNn2Z76EF7V1Ikp1p3C8THUPNxCtgY28KeeiJRyw3H1 MJw4GJTZNQNhqBIdnDECDxLx/Pr9aIkgpG/Q+ZrN3RKu43FZ2CLTt6qr3lVeLUuq S5VoYRO89cw/gFowqi+2D6nWTSGaPq2Q9vtCHQDr9d24aLgSLKnbXPl75akVSoFc 95kJlR0zcTSzkLfOFV8h93kjEEdJdWpExkqUtNpqxnh/jrtwAEDtLmMohUD4bniJ r2bCgYLvwi4f6dXCuizSx/QR1Q+ngY2tgqnZxx6dUjIn5crRE0b0CTWlALn/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3rGlmdHCMLXViukKpGI3eIW++SkwHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMT8huXrpDmq K2Ke/V8yr4PiYyGnT0EzZvMr75ZhhEohxytQBefBeraAr1fQZ8NE+lerjKA1T2q5 qmF+yP/TcucElhHKRpewfwWMcYfG9SkemGghy3b7m8ObkWp/HUAi2mpf7UnCGWtP IrswlyfpDuQ3Z85wzZUtWaHcUhqcIr6e/GOtdjKMeFKph6P6TwDEa9EhVxWHFHFd 33TYTIk1OgmtTICuvgkblPUpNuR8Bq35Ea+2ybz1gz3jsOAwnoMtU1B22lcdRZMB BTYhErn88KoX7qji4QwCc4A73HhLF7syph4nIZETPds2mWMPsaso264ZRxNLMcjv AVCW+ckO/A== -----END CERTIFICATE-----Generated at Fri Jul 24 19:54:04 2026 by rpki-client