$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json) Hash identifier: /vfOKBFjgS9rIdjhALDJC6c5aaCqcbbBDd8KS0za/So= Subject key identifier: C8:7E:74:42:D8:E1:54:2E:51:C2:A0:F4:6D:29:AC:58:BA:DA:71:F9 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 5005FA028D6C499E696E64E427ED6AD4C7789BC8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft Manifest number: 9A Signing time: Fri 24 Jul 2026 03:35:16 +0000 Manifest this update: Fri 24 Jul 2026 03:30:16 +0000 Manifest next update: Sat 25 Jul 2026 04:10:16 +0000 Files and hashes: 1: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=) 2: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=) 3: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=) 4: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=) 5: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=) 6: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=) 7: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: qajQzbw3BQGVgY6wqEiMprqXuDipaFCbw2NaO5/ro+g=) 8: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=) 9: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=) 10: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:05:fa:02:8d:6c:49:9e:69:6e:64:e4:27:ed:6a:d4:c7:78:9b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Jul 24 03:30:16 2026 GMT Not After : Jul 25 04:10:16 2026 GMT Subject: CN=C87E7442D8E1542E51C2A0F46D29AC58BADA71F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:02:b5:da:fe:b0:a8:1b:48:a8:1e:29:04: bf:4b:47:d2:8d:8f:c3:e5:42:9d:80:4c:18:5d:3e: 83:79:dc:71:33:0c:c0:09:13:95:e5:25:7e:c2:d1: b7:e5:94:d3:a9:56:bf:21:22:02:bb:79:cc:b7:c7: a7:78:76:8d:b2:35:5c:5f:64:16:c0:11:88:68:24: 87:f5:fe:df:2b:32:15:1a:b1:45:12:b5:77:c5:74: 97:64:63:85:e6:9b:c0:e0:27:4e:ae:05:e8:49:3a: 24:c5:f6:2b:33:63:cf:cd:25:c8:0c:26:aa:7c:fd: 0f:15:25:22:be:06:1f:c8:cd:32:3e:10:c7:0f:96: 4c:6d:61:8f:dc:e4:b0:08:cc:50:03:e6:53:7a:23: 03:48:6d:f5:e4:b1:e5:a1:b9:66:1a:4c:ea:9d:28: b9:3a:60:79:ce:6e:04:14:b7:36:67:00:29:b2:4c: d4:29:86:4b:ce:09:52:ff:25:99:50:00:79:16:2d: 2a:57:4e:55:df:ac:61:ca:1c:42:1a:a0:cb:f5:05: bf:60:9f:7b:b9:66:4a:71:71:c5:15:4f:9e:96:0a: fe:d3:83:62:ef:70:06:31:17:e0:0e:6f:9c:27:79: 25:b3:39:f3:97:d9:74:dd:33:63:58:da:af:29:f1: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:74:42:D8:E1:54:2E:51:C2:A0:F4:6D:29:AC:58:BA:DA:71:F9 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:2b:4c:3e:98:e7:6d:7d:9b:32:0e:19:d1:a7:1e:73:3b: 49:13:71:90:0e:bf:27:59:20:f6:ab:3b:7f:fa:6f:92:53:2e: f6:f6:22:cf:94:fa:a0:cf:91:b7:7d:40:08:54:cf:dc:14:c8: bd:0c:df:7e:d6:48:ba:0b:92:0c:6e:25:32:d5:ea:b4:98:09: 51:1d:c2:e5:30:47:3b:b9:6f:1a:58:d8:c2:b3:60:78:aa:54: e1:66:ba:93:1a:90:85:d8:73:6e:da:71:41:9b:63:c1:d0:e1: d2:0e:2e:3b:43:e1:09:f3:ff:b2:d6:f3:76:d9:37:7a:65:f0: bd:77:e3:9d:63:3a:e3:6a:fa:7b:e9:27:88:dc:f5:89:c1:a3: 7b:27:46:eb:6b:09:e4:83:be:03:ed:49:b4:b7:05:1e:7b:11: 86:8a:5d:88:04:c3:d3:46:eb:ff:cc:8c:10:cb:bb:59:c3:92: fb:3a:ef:2e:5a:4b:cf:77:fe:d0:2a:ab:bf:71:36:42:82:aa: 16:9d:48:06:dc:cf:da:3d:ab:eb:7b:43:78:09:97:2e:77:23: 6c:78:3a:2f:51:1e:fe:68:d4:1a:42:f1:ce:ad:1a:6c:e7:11: 69:5f:62:5e:fc:69:3e:73:35:c4:ef:c6:4e:79:b9:d2:94:b7: b5:cc:39:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUAX6Ao1sSZ5pbmTkJ+1q1Md4m8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA3MjQwMzMwMTZaFw0yNjA3MjUwNDEwMTZaMDMxMTAvBgNV BAMTKEM4N0U3NDQyRDhFMTU0MkU1MUMyQTBGNDZEMjlBQzU4QkFEQTcxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLwK12v6wqBtIqB4pBL9LR9KN j8PlQp2ATBhdPoN53HEzDMAJE5XlJX7C0bfllNOpVr8hIgK7ecy3x6d4do2yNVxf ZBbAEYhoJIf1/t8rMhUasUUStXfFdJdkY4Xmm8DgJ06uBehJOiTF9iszY8/NJcgM Jqp8/Q8VJSK+Bh/IzTI+EMcPlkxtYY/c5LAIzFAD5lN6IwNIbfXkseWhuWYaTOqd KLk6YHnObgQUtzZnACmyTNQphkvOCVL/JZlQAHkWLSpXTlXfrGHKHEIaoMv1Bb9g n3u5ZkpxccUVT56WCv7Tg2LvcAYxF+AOb5wneSWzOfOX2XTdM2NY2q8p8cVvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyH50QtjhVC5RwqD0bSmsWLracfkwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxkrTD6Y5219 mzIOGdGnHnM7SRNxkA6/J1kg9qs7f/pvklMu9vYiz5T6oM+Rt31ACFTP3BTIvQzf ftZIuguSDG4lMtXqtJgJUR3C5TBHO7lvGljYwrNgeKpU4Wa6kxqQhdhzbtpxQZtj wdDh0g4uO0PhCfP/stbzdtk3emXwvXfjnWM642r6e+kniNz1icGjeydG62sJ5IO+ A+1JtLcFHnsRhopdiATD00br/8yMEMu7WcOS+zrvLlpLz3f+0Cqrv3E2QoKqFp1I BtzP2j2r63tDeAmXLncjbHg6L1Ee/mjUGkLxzq0abOcRaV9iXvxpPnM1xO/GTnm5 0pS3tcw5gw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:26 2026 by rpki-client