$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: /eU++rJUzhduexreesa+ank1NsWktYo7mhnb9hjIKx8= Subject key identifier: B7:95:F0:F0:00:09:3E:43:8A:16:95:CA:A9:FD:8D:F1:F6:3B:22:96 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 176C6B9733F24FFDE1F006034F237F883C9A290F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: 8B Signing time: Fri 24 Jul 2026 03:55:18 +0000 Manifest this update: Fri 24 Jul 2026 03:50:18 +0000 Manifest next update: Sat 25 Jul 2026 07:09:18 +0000 Files and hashes: 1: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 2: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: hV3M3gukCdmuzXnuDBD+O4mq9b/s/xdcArY8qqq8LtI=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6c:6b:97:33:f2:4f:fd:e1:f0:06:03:4f:23:7f:88:3c:9a:29:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Jul 24 03:50:18 2026 GMT Not After : Jul 25 07:09:18 2026 GMT Subject: CN=B795F0F000093E438A1695CAA9FD8DF1F63B2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:c4:8b:64:74:fb:98:82:24:b0:33:58:fe: c4:c9:95:20:a2:ea:c2:4b:e5:ca:34:5c:12:a2:5c: 64:4f:76:98:c9:9c:9c:63:a0:ed:2d:67:af:ba:c3: 3b:91:0f:f7:18:34:15:4b:0d:19:4d:57:b7:0a:83: 8a:e2:21:9a:49:b9:3d:cf:89:7d:cf:98:1d:e6:aa: 6d:6d:9b:b3:d2:e3:8c:59:e5:7a:eb:24:5f:e9:20: b2:71:1a:6c:12:3d:32:3a:97:a2:4e:79:76:fd:65: 7a:9b:38:40:eb:34:3f:03:61:69:4a:bb:f7:4e:45: c3:40:9b:d7:52:b6:60:93:62:35:23:79:04:52:8d: 87:c7:36:d4:1d:f8:b2:53:01:a1:d0:f6:eb:d3:93: b8:3a:c9:97:fe:99:44:2f:68:70:fb:06:5b:5e:53: 0b:3c:84:7c:0b:3f:fa:0d:a3:3f:10:49:39:f0:ef: f1:2b:4f:b6:0b:e6:16:06:44:c5:ae:65:66:d5:f0: 61:72:31:fc:b6:b2:7f:0a:cd:55:e1:8c:f7:47:60: 41:ad:45:b5:5e:c7:6a:58:f4:bc:32:20:c8:5c:02: 53:0a:91:08:20:53:24:b1:5c:ac:00:6e:38:4e:4f: af:15:83:dc:08:1d:8a:18:15:23:a4:15:db:9e:09: 2d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:95:F0:F0:00:09:3E:43:8A:16:95:CA:A9:FD:8D:F1:F6:3B:22:96 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a0:56:b9:50:55:39:a6:5d:28:17:6e:83:d6:8e:b0:22:ea: 5a:c8:70:4a:ee:19:bc:3c:39:31:f1:fc:1f:93:c5:45:1e:57: 0a:25:a5:de:5e:ed:fc:ae:27:4e:50:69:43:d4:c8:68:02:c7: ec:c7:bc:b5:c5:6b:cc:b8:1d:a3:f3:a7:dc:fd:04:00:27:81: fe:3b:df:90:73:17:03:e9:1f:7d:c6:20:8f:0b:2a:0f:23:5a: fc:3f:4a:bb:00:d7:d3:18:99:c5:80:96:be:d0:32:5e:51:4c: eb:53:a3:e9:b7:5e:fb:38:27:91:f8:9d:eb:71:6f:c9:7c:1b: ea:d5:6c:57:8d:50:f7:86:c4:bb:2f:14:04:74:c8:1b:73:dd: c0:5d:3e:ec:e1:98:ea:32:d0:07:6d:34:59:2d:84:bd:34:0c: 9c:9a:87:a9:1e:26:c0:ff:da:9d:f3:a4:30:f3:5d:31:f8:ab: 88:e1:5b:67:e8:08:e8:be:a3:a0:a4:68:cb:83:85:92:38:9f: 70:0d:c7:8b:9b:cf:d4:06:57:80:fd:c1:e6:7e:21:0b:88:47: 32:59:14:0d:af:3b:c7:4f:06:23:4c:ce:e2:da:b9:40:3a:ac: 56:a6:32:90:bf:b2:d0:6b:c5:77:bc:8b:1c:b3:20:03:a8:fc: 28:ef:48:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF2xrlzPyT/3h8AYDTyN/iDyaKQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA3MjQwMzUwMThaFw0yNjA3MjUwNzA5MThaMDMxMTAvBgNV BAMTKEI3OTVGMEYwMDAwOTNFNDM4QTE2OTVDQUE5RkQ4REYxRjYzQjIyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXy8SLZHT7mIIksDNY/sTJlSCi 6sJL5co0XBKiXGRPdpjJnJxjoO0tZ6+6wzuRD/cYNBVLDRlNV7cKg4riIZpJuT3P iX3PmB3mqm1tm7PS44xZ5XrrJF/pILJxGmwSPTI6l6JOeXb9ZXqbOEDrND8DYWlK u/dORcNAm9dStmCTYjUjeQRSjYfHNtQd+LJTAaHQ9uvTk7g6yZf+mUQvaHD7Blte Uws8hHwLP/oNoz8QSTnw7/ErT7YL5hYGRMWuZWbV8GFyMfy2sn8KzVXhjPdHYEGt RbVex2pY9LwyIMhcAlMKkQggUySxXKwAbjhOT68Vg9wIHYoYFSOkFdueCS2xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt5Xw8AAJPkOKFpXKqf2N8fY7IpYwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaBWuVBVOaZd KBdug9aOsCLqWshwSu4ZvDw5MfH8H5PFRR5XCiWl3l7t/K4nTlBpQ9TIaALH7Me8 tcVrzLgdo/On3P0EACeB/jvfkHMXA+kffcYgjwsqDyNa/D9KuwDX0xiZxYCWvtAy XlFM61Oj6bde+zgnkfid63FvyXwb6tVsV41Q94bEuy8UBHTIG3PdwF0+7OGY6jLQ B200WS2EvTQMnJqHqR4mwP/anfOkMPNdMfiriOFbZ+gI6L6joKRoy4OFkjifcA3H i5vP1AZXgP3B5n4hC4hHMlkUDa87x08GI0zO4tq5QDqsVqYykL+y0GvFd7yLHLMg A6j8KO9IZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:29 2026 by rpki-client