$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: q1YpjTSpdkIVZ52jTFpDGPvUkvPQnooM67rh+rqlYKY= Subject key identifier: 56:45:10:38:FE:C1:3D:3C:FC:DB:C1:4D:44:30:7B:01:12:20:A2:2F Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 405B87E5FED23AA5F4748FDDF9462DC2021215E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 8B Signing time: Fri 24 Jul 2026 09:35:55 +0000 Manifest this update: Fri 24 Jul 2026 09:30:55 +0000 Manifest next update: Sat 25 Jul 2026 09:59:55 +0000 Files and hashes: 1: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 2: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: F6kCSxlDAhSr3FASlC2RMd/XGats3l9IVLnwLNriqlQ=) 3: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 4: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 5: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 6: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5b:87:e5:fe:d2:3a:a5:f4:74:8f:dd:f9:46:2d:c2:02:12:15:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Jul 24 09:30:55 2026 GMT Not After : Jul 25 09:59:55 2026 GMT Subject: CN=56451038FEC13D3CFCDBC14D44307B011220A22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:65:8c:75:94:08:f6:c1:06:ea:c8:c3:76: 9b:95:89:ef:9e:1b:41:cc:44:8c:01:90:ad:5b:62: c2:76:c5:fc:fa:6e:42:d9:cf:34:47:fb:b9:68:85: bd:43:41:05:fb:df:a9:a8:db:24:a4:a8:a5:fb:b8: 67:40:a4:aa:08:9c:3d:25:26:ce:c5:d2:5c:0b:42: dd:2a:54:16:94:87:2b:93:ff:45:54:db:61:6e:7e: a4:26:a7:4a:42:b6:d5:1a:e1:3f:80:83:23:07:40: 81:2a:9b:17:08:eb:6c:b5:07:6c:93:82:95:64:0d: 3b:ea:91:52:47:d7:44:67:2e:6d:af:1c:ba:46:fc: 09:b0:3c:8c:9a:18:39:d5:32:c4:f3:5b:a8:b4:55: 7f:87:7c:bc:a3:2a:17:a9:3b:69:88:5a:f0:32:da: 69:7c:d7:62:5f:bf:3a:97:76:d9:9b:52:af:e4:05: b8:0c:a4:42:b0:c1:2f:6c:f9:16:b0:6c:83:44:88: 95:00:09:c9:a7:04:16:20:36:66:44:f5:b4:03:a2: 46:e8:64:49:34:1a:24:38:b3:ec:dd:15:a6:fd:19: 33:85:4f:f5:40:77:3d:5f:ab:10:12:eb:98:7f:5b: 99:27:77:15:e6:1c:b2:8e:8d:1e:ba:3c:89:65:c8: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:10:38:FE:C1:3D:3C:FC:DB:C1:4D:44:30:7B:01:12:20:A2:2F X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a9:91:33:31:03:7a:a9:82:74:46:e9:94:40:0d:e2:8e:fd: 3d:16:80:0e:33:eb:a5:63:e5:bb:05:00:a0:c1:7b:0f:29:b7: e2:0c:a8:b1:4d:c7:18:4b:cc:fe:2d:59:31:16:94:74:d3:12: 21:d2:b1:a2:1a:73:ee:da:0a:d8:f7:42:39:5b:ee:68:e6:51: bb:db:f1:ff:6b:98:1b:8f:86:f5:38:c6:33:ea:09:4d:a5:38: 0b:65:55:f8:7b:9e:be:ce:2a:ad:04:14:8d:92:ce:9c:a8:e7: fc:b4:2a:db:26:cd:90:76:04:ea:57:69:c2:28:31:de:32:62: 31:36:26:90:41:b8:fe:e2:40:72:61:08:cd:f4:2b:0c:6b:cd: cd:c2:70:17:24:84:8f:74:2f:e4:14:e8:37:1c:2d:8a:67:e8: 0d:cf:d5:99:34:16:1f:6a:76:c0:48:34:da:f2:16:69:ae:0f: ad:5f:12:d8:51:6d:1c:f2:56:a5:4b:b7:6e:2d:64:c0:65:32: ff:9c:51:29:b2:08:ca:87:3e:83:13:01:a7:0b:85:55:fd:1d: 6d:e2:71:a1:df:bb:dc:1c:86:cb:92:f7:6d:85:f1:69:20:86: 21:56:de:5a:cb:1e:f7:bb:6f:fe:62:f4:b1:77:49:dc:6a:95: 57:61:b7:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQFuH5f7SOqX0dI/d+UYtwgISFeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA3MjQwOTMwNTVaFw0yNjA3MjUwOTU5NTVaMDMxMTAvBgNV BAMTKDU2NDUxMDM4RkVDMTNEM0NGQ0RCQzE0RDQ0MzA3QjAxMTIyMEEyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqGWMdZQI9sEG6sjDdpuVie+e G0HMRIwBkK1bYsJ2xfz6bkLZzzRH+7lohb1DQQX736mo2ySkqKX7uGdApKoInD0l Js7F0lwLQt0qVBaUhyuT/0VU22FufqQmp0pCttUa4T+AgyMHQIEqmxcI62y1B2yT gpVkDTvqkVJH10RnLm2vHLpG/AmwPIyaGDnVMsTzW6i0VX+HfLyjKhepO2mIWvAy 2ml812JfvzqXdtmbUq/kBbgMpEKwwS9s+RawbINEiJUACcmnBBYgNmZE9bQDokbo ZEk0GiQ4s+zdFab9GTOFT/VAdz1fqxAS65h/W5kndxXmHLKOjR66PIllyNshAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVkUQOP7BPTz828FNRDB7ARIgoi8wHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6mRMzEDeqmC dEbplEAN4o79PRaADjPrpWPluwUAoMF7Dym34gyosU3HGEvM/i1ZMRaUdNMSIdKx ohpz7toK2PdCOVvuaOZRu9vx/2uYG4+G9TjGM+oJTaU4C2VV+Huevs4qrQQUjZLO nKjn/LQq2ybNkHYE6ldpwigx3jJiMTYmkEG4/uJAcmEIzfQrDGvNzcJwFySEj3Qv 5BToNxwtimfoDc/VmTQWH2p2wEg02vIWaa4PrV8S2FFtHPJWpUu3bi1kwGUy/5xR KbIIyoc+gxMBpwuFVf0dbeJxod+73ByGy5L3bYXxaSCGIVbeWsse97tv/mL0sXdJ 3GqVV2G38Q== -----END CERTIFICATE-----Generated at Fri Jul 24 15:12:35 2026 by rpki-client