$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: pUK00Me/NZtjE+GioeDQ/nQaH3Pvelt+rjdmz4hapSc= Subject key identifier: 68:8D:D6:10:64:16:40:6D:BD:35:BE:46:CF:A7:18:D3:42:5B:55:0B Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 3BF21BC1242BBC91F86E8B720127E2267B45C91C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: 8B Signing time: Fri 24 Jul 2026 07:10:35 +0000 Manifest this update: Fri 24 Jul 2026 07:05:35 +0000 Manifest next update: Sat 25 Jul 2026 10:42:35 +0000 Files and hashes: 1: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 2: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) 3: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 4: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 5: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: WCqpDpN1p1su1reiosZJVBBQKSGjtNyPuZMqzI1YWyw=) 6: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 7: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) 8: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 9: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) 10: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 11: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 12: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) 13: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 14: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 15: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 10:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f2:1b:c1:24:2b:bc:91:f8:6e:8b:72:01:27:e2:26:7b:45:c9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: Jul 24 07:05:35 2026 GMT Not After : Jul 25 10:42:35 2026 GMT Subject: CN=688DD6106416406DBD35BE46CFA718D3425B550B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:03:5a:1b:6a:ad:d0:03:e9:4f:df:46:d9: 58:5d:8e:98:88:b5:63:76:6e:bb:dc:b4:08:63:a4: 8a:11:5b:b4:b8:8a:72:a2:be:50:d9:60:9e:e3:c1: ba:d1:f8:cf:25:83:eb:e7:7a:70:2c:52:59:f5:18: c8:57:44:eb:88:a7:c4:20:73:d7:33:0b:d1:d4:0b: c5:04:18:9c:dc:69:40:26:62:74:32:89:da:de:14: 57:4d:e4:eb:ab:76:f9:c2:05:84:49:07:7f:d9:b6: 97:a5:fa:5f:54:22:b5:52:5f:1f:07:57:08:2c:9f: 77:ec:86:f4:b5:b9:f2:db:a2:eb:a3:e5:84:24:51: 54:83:13:d4:7f:3f:9c:d1:66:57:82:ae:de:ff:d5: 35:bd:21:23:cf:60:7a:12:16:d2:40:0f:76:20:08: 38:15:b5:31:42:4c:42:8a:d6:51:be:71:b6:69:3b: 10:03:f4:2d:76:b7:8e:95:49:37:b4:ae:e0:9a:34: 65:9d:4a:dd:46:a2:84:ff:db:f2:94:55:2a:f6:23: c3:05:c7:19:01:61:0c:a6:a6:8a:5a:2e:7f:81:aa: 02:a4:af:9a:5f:19:68:8d:5d:7f:88:05:6d:ca:fe: 6d:14:46:c6:3d:9c:60:99:1a:90:c8:24:ea:90:e1: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:D6:10:64:16:40:6D:BD:35:BE:46:CF:A7:18:D3:42:5B:55:0B X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e0:99:6b:df:cb:c3:a9:eb:90:33:84:8e:12:87:fe:ea:1a: f7:60:b4:86:d0:84:8d:24:e1:a1:04:f8:7e:22:e4:98:f5:86: 0d:51:44:6a:5f:ae:fa:c1:87:7a:cd:9a:da:ca:3b:d7:db:d0: 3b:b3:24:34:65:34:a4:1a:c1:08:d9:83:0e:a7:84:e7:bf:16: f7:53:91:62:bb:3b:f6:ca:89:d7:a1:68:97:6d:3b:93:27:ae: 50:13:4f:71:e6:e1:ba:3a:26:a1:05:44:c1:3d:51:88:56:0e: b4:b1:b6:37:c0:d5:c0:ee:92:b9:b1:99:92:4d:27:5c:18:fc: b4:2d:ac:5c:01:a9:60:ca:47:47:c1:b4:41:fa:0f:7d:67:59: 47:5c:2f:69:81:8d:02:ad:7f:61:78:52:25:32:4d:dd:ed:aa: 81:1d:9a:be:f6:36:fe:14:14:17:44:e4:bf:e9:37:db:9d:28: 13:3e:66:8c:96:a7:fd:7d:32:67:df:dd:3c:34:c7:1d:9a:c9: f9:3f:12:b5:8e:e2:70:da:03:1b:d9:da:89:3b:9a:5f:e3:3a: c2:8e:41:14:db:1d:a7:e8:8c:b9:e8:6b:c7:73:5f:bf:e8:fa: 28:08:7b:f0:85:26:af:2c:42:32:65:f1:89:b3:d0:1c:89:59: 4f:f8:81:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/IbwSQrvJH4botyASfiJntFyRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA3MjQwNzA1MzVaFw0yNjA3MjUxMDQyMzVaMDMxMTAvBgNV BAMTKDY4OERENjEwNjQxNjQwNkRCRDM1QkU0NkNGQTcxOEQzNDI1QjU1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0igNaG2qt0APpT99G2VhdjpiI tWN2brvctAhjpIoRW7S4inKivlDZYJ7jwbrR+M8lg+vnenAsUln1GMhXROuIp8Qg c9czC9HUC8UEGJzcaUAmYnQyidreFFdN5OurdvnCBYRJB3/Ztpel+l9UIrVSXx8H Vwgsn3fshvS1ufLbouuj5YQkUVSDE9R/P5zRZleCrt7/1TW9ISPPYHoSFtJAD3Yg CDgVtTFCTEKK1lG+cbZpOxAD9C12t46VSTe0ruCaNGWdSt1GooT/2/KUVSr2I8MF xxkBYQympopaLn+BqgKkr5pfGWiNXX+IBW3K/m0URsY9nGCZGpDIJOqQ4S+7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaI3WEGQWQG29Nb5Gz6cY00JbVQswHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+CZa9/Lw6nr kDOEjhKH/uoa92C0htCEjSThoQT4fiLkmPWGDVFEal+u+sGHes2a2so719vQO7Mk NGU0pBrBCNmDDqeE578W91ORYrs79sqJ16Fol207kyeuUBNPcebhujomoQVEwT1R iFYOtLG2N8DVwO6SubGZkk0nXBj8tC2sXAGpYMpHR8G0QfoPfWdZR1wvaYGNAq1/ YXhSJTJN3e2qgR2avvY2/hQUF0Tkv+k3250oEz5mjJan/X0yZ9/dPDTHHZrJ+T8S tY7icNoDG9naiTuaX+M6wo5BFNsdp+iMuehrx3Nfv+j6KAh78IUmryxCMmXxibPQ HIlZT/iBRQ== -----END CERTIFICATE-----Generated at Sat Jul 25 00:33:53 2026 by rpki-client