$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: ehThKumEpgvn5zRSjg94bGxbHp95I+7ix+C3ejdCSQE= Subject key identifier: DD:05:80:90:52:4E:79:4B:A3:E8:E4:A6:58:29:99:45:8E:F9:E7:E8 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 3721485214D81E367E5237C04A51D5020535F8DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 8A Signing time: Fri 24 Jul 2026 08:00:40 +0000 Manifest this update: Fri 24 Jul 2026 07:55:40 +0000 Manifest next update: Sat 25 Jul 2026 08:50:40 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 902I5G64m30nUrrw0yQYwqJLbd7VHzni15GZdZ+C4QQ=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:21:48:52:14:d8:1e:36:7e:52:37:c0:4a:51:d5:02:05:35:f8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Jul 24 07:55:40 2026 GMT Not After : Jul 25 08:50:40 2026 GMT Subject: CN=DD058090524E794BA3E8E4A6582999458EF9E7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:0e:4e:36:1e:32:26:9b:9c:25:e5:82:3c: 6f:23:87:b5:db:96:46:86:a1:c3:5d:b8:d7:fe:04: d4:b8:e4:5c:74:8b:2b:b2:2f:b0:4b:44:1b:cf:11: c2:70:a4:a8:99:41:d0:6c:0c:bc:c0:ea:3e:98:c4: 1d:34:69:c1:1c:8a:a3:3a:00:48:01:02:fc:7f:9f: 2b:d9:66:af:c3:4c:d6:51:e3:de:55:5c:e2:f6:de: 9e:d5:7f:68:b2:79:b6:a7:fa:cd:90:e9:b0:a5:ad: 06:ca:77:d7:d7:b2:6c:a0:28:81:8e:c5:c7:e8:fb: e5:0e:8e:2f:43:46:a9:66:1e:b2:bd:d5:ba:81:b3: db:2f:06:29:77:e7:52:9a:28:2a:1c:05:71:bf:0e: 45:ea:04:73:c8:62:94:7d:e1:4e:14:32:69:fd:e4: 2b:ae:03:ba:73:f3:cc:00:a2:1b:d9:0e:e9:dc:eb: a4:93:83:be:86:11:5d:09:d0:23:c9:2f:88:db:5a: 3b:c6:9d:df:28:fc:fc:dd:4e:c1:1d:4f:f3:5a:40: 06:b6:da:4d:de:05:1b:85:08:e4:e8:c2:e9:f7:70: 58:f6:2d:21:66:b8:f1:bc:69:25:ae:b8:33:dc:49: 67:8d:e3:61:d6:20:4a:0a:bc:3d:60:54:b5:8e:ce: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:80:90:52:4E:79:4B:A3:E8:E4:A6:58:29:99:45:8E:F9:E7:E8 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:37:c1:09:7f:0d:56:9f:4a:14:35:97:85:ef:82:22:57:65: 2d:fc:fa:5e:af:6b:02:ee:08:8c:26:d7:67:b1:be:0f:2f:dd: 6b:4b:89:ca:5b:91:2e:d9:88:ee:b4:59:dd:ea:39:f9:24:06: d6:3d:0c:f6:02:9e:66:5e:18:5b:5f:ed:76:19:3b:d8:c9:0a: 69:39:02:9f:f2:97:dd:ec:f2:5d:e4:9d:97:99:6e:a9:ba:ba: 8f:0e:c7:a9:34:9e:35:6e:8c:bf:91:3b:34:e5:3d:1b:e0:6e: c0:bd:a6:30:75:76:70:30:57:5c:fc:5a:04:fe:1c:ca:ac:32: 6d:e6:69:33:9e:06:0c:fa:aa:78:c8:c1:b7:8b:b1:94:e9:ab: e3:0b:df:e5:f4:ec:89:ab:30:de:5e:a5:57:98:48:e1:65:8d: f5:15:5b:9d:3e:85:ae:cf:a1:9c:ac:17:fb:9a:3e:46:55:87: 99:13:fc:c1:ec:de:4d:89:18:12:1c:52:e6:9d:89:ee:f1:96: 90:38:2e:91:60:c5:47:cd:a3:92:08:96:11:e0:05:1d:4d:91: 9e:fd:72:90:0f:96:9f:32:29:bb:f0:71:2a:a2:6c:69:71:bc: 41:dd:fa:f7:39:38:36:33:02:14:26:55:0f:77:e0:2a:7f:01: 2d:2e:ff:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNyFIUhTYHjZ+UjfASlHVAgU1+NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA3MjQwNzU1NDBaFw0yNjA3MjUwODUwNDBaMDMxMTAvBgNV BAMTKEREMDU4MDkwNTI0RTc5NEJBM0U4RTRBNjU4Mjk5OTQ1OEVGOUU3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/g5ONh4yJpucJeWCPG8jh7Xb lkaGocNduNf+BNS45Fx0iyuyL7BLRBvPEcJwpKiZQdBsDLzA6j6YxB00acEciqM6 AEgBAvx/nyvZZq/DTNZR495VXOL23p7Vf2iyeban+s2Q6bClrQbKd9fXsmygKIGO xcfo++UOji9DRqlmHrK91bqBs9svBil351KaKCocBXG/DkXqBHPIYpR94U4UMmn9 5CuuA7pz88wAohvZDunc66STg76GEV0J0CPJL4jbWjvGnd8o/PzdTsEdT/NaQAa2 2k3eBRuFCOTowun3cFj2LSFmuPG8aSWuuDPcSWeN42HWIEoKvD1gVLWOzo7pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3QWAkFJOeUuj6OSmWCmZRY755+gwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzfBCX8NVp9K FDWXhe+CIldlLfz6Xq9rAu4IjCbXZ7G+Dy/da0uJyluRLtmI7rRZ3eo5+SQG1j0M 9gKeZl4YW1/tdhk72MkKaTkCn/KX3ezyXeSdl5luqbq6jw7HqTSeNW6Mv5E7NOU9 G+BuwL2mMHV2cDBXXPxaBP4cyqwybeZpM54GDPqqeMjBt4uxlOmr4wvf5fTsiasw 3l6lV5hI4WWN9RVbnT6Frs+hnKwX+5o+RlWHmRP8wezeTYkYEhxS5p2J7vGWkDgu kWDFR82jkgiWEeAFHU2Rnv1ykA+WnzIpu/BxKqJsaXG8Qd369zk4NjMCFCZVD3fg Kn8BLS7/PQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:29 2026 by rpki-client