$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: HX1B0TQZSgvEa4X9bU8bjLhyvOq5OqaiwzP8c0b8IsY= Subject key identifier: DF:45:E0:E3:76:46:70:47:1E:BA:AD:D5:D8:A2:EF:73:CE:06:AD:6D Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 0469F5B9DC5FC6E98DDEFF6E3D9941E1DBBA3EE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 86 Signing time: Fri 24 Jul 2026 08:35:46 +0000 Manifest this update: Fri 24 Jul 2026 08:30:46 +0000 Manifest next update: Sat 25 Jul 2026 09:08:46 +0000 Files and hashes: 1: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: FoYEx0wK5vyIH0X3BmLmJ0JnXYgnPGg3pDlBzujteHY=) 2: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 3: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 4: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:69:f5:b9:dc:5f:c6:e9:8d:de:ff:6e:3d:99:41:e1:db:ba:3e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Jul 24 08:30:46 2026 GMT Not After : Jul 25 09:08:46 2026 GMT Subject: CN=DF45E0E3764670471EBAADD5D8A2EF73CE06AD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:f9:cf:ce:b8:07:5d:a3:2a:0c:a5:10:fe: 97:73:76:5a:09:66:02:e9:6f:ba:36:be:48:98:a8: dc:28:61:31:a4:24:8d:70:1b:0e:c6:98:ee:aa:0d: 55:67:92:63:8f:43:c7:e4:6f:e5:8d:03:2a:87:6c: 5e:3f:15:41:f0:0d:db:d7:05:b8:85:e5:d6:dc:99: d3:17:30:eb:85:97:6e:24:e0:b1:2d:8e:52:92:14: 55:0b:14:9c:f4:d9:e2:7f:12:82:a1:91:08:f4:7f: 8b:0c:50:2e:3b:b5:07:8c:08:41:90:30:76:df:1c: 7f:94:1a:53:c9:77:eb:20:9b:50:a5:e3:17:b2:19: 8b:03:e2:35:42:b6:0c:88:3c:23:41:a0:c9:f2:f6: 89:94:df:fa:25:ba:d8:3e:2e:99:0b:62:02:90:49: 1c:eb:da:de:85:c4:a8:a2:dd:ac:2f:98:bf:20:e2: ab:86:d9:b1:31:be:99:ee:02:02:69:51:fe:73:a7: 20:f1:ad:43:d6:c8:a3:02:5b:fb:81:41:88:02:67: 6f:ba:c6:4b:8c:15:ec:93:0c:1a:ac:1a:b2:f3:f1: 89:20:7a:61:4b:31:d4:0c:e0:b5:52:39:a4:bd:5c: 65:f8:bc:98:67:c9:35:d9:88:0b:00:d1:aa:1b:e7: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:E0:E3:76:46:70:47:1E:BA:AD:D5:D8:A2:EF:73:CE:06:AD:6D X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6d:e5:18:de:16:40:11:7d:27:d7:10:6e:d6:69:82:9c:85: 35:02:8a:ec:a9:50:ab:cc:b6:85:86:e4:4a:33:fd:7f:11:52: ef:f3:0e:1b:1c:78:fc:aa:84:bc:56:f8:ef:af:a8:7c:6d:2a: 1e:c1:d0:f0:93:b6:7b:9d:97:1f:24:fb:5e:fe:f1:d8:02:a0: 99:e4:4c:5e:36:44:b4:e5:99:f4:b2:ea:8e:b8:44:83:a3:7b: 91:b4:2e:4b:13:1c:a1:a0:36:f1:b0:1a:47:2d:57:61:32:82: b7:da:1c:59:02:62:eb:ea:ba:ed:93:ad:32:53:0c:f7:a9:9d: af:c0:5c:81:8c:17:b5:82:74:55:15:a6:f1:1c:2e:e9:af:97: d1:6f:1a:3b:0d:c6:d0:db:ba:8e:8e:d7:45:16:d2:c6:71:4f: b1:59:ef:0c:a9:64:b7:13:a3:c5:4e:00:fa:90:62:21:65:ac: 2c:7a:1d:d0:5c:c3:34:f8:29:23:a3:ee:82:35:f7:c1:a8:14: 42:d9:63:2e:03:d5:84:cc:c9:95:21:ef:b5:c0:75:17:45:02: c1:e3:da:ab:6b:fe:ce:ec:09:80:d9:2c:0d:05:31:cf:5e:5c: be:06:b7:9b:8c:a7:a9:ab:eb:7b:53:b6:ce:41:e0:8c:82:d0: 45:fb:d8:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBGn1udxfxumN3v9uPZlB4du6PuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA3MjQwODMwNDZaFw0yNjA3MjUwOTA4NDZaMDMxMTAvBgNV BAMTKERGNDVFMEUzNzY0NjcwNDcxRUJBQURENUQ4QTJFRjczQ0UwNkFENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS4fnPzrgHXaMqDKUQ/pdzdloJ ZgLpb7o2vkiYqNwoYTGkJI1wGw7GmO6qDVVnkmOPQ8fkb+WNAyqHbF4/FUHwDdvX BbiF5dbcmdMXMOuFl24k4LEtjlKSFFULFJz02eJ/EoKhkQj0f4sMUC47tQeMCEGQ MHbfHH+UGlPJd+sgm1Cl4xeyGYsD4jVCtgyIPCNBoMny9omU3/olutg+LpkLYgKQ SRzr2t6FxKii3awvmL8g4quG2bExvpnuAgJpUf5zpyDxrUPWyKMCW/uBQYgCZ2+6 xkuMFeyTDBqsGrLz8YkgemFLMdQM4LVSOaS9XGX4vJhnyTXZiAsA0aob5yMPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU30Xg43ZGcEceuq3V2KLvc84GrW0wHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom3lGN4WQBF9 J9cQbtZpgpyFNQKK7KlQq8y2hYbkSjP9fxFS7/MOGxx4/KqEvFb476+ofG0qHsHQ 8JO2e52XHyT7Xv7x2AKgmeRMXjZEtOWZ9LLqjrhEg6N7kbQuSxMcoaA28bAaRy1X YTKCt9ocWQJi6+q67ZOtMlMM96mdr8BcgYwXtYJ0VRWm8Rwu6a+X0W8aOw3G0Nu6 jo7XRRbSxnFPsVnvDKlktxOjxU4A+pBiIWWsLHod0FzDNPgpI6PugjX3wagUQtlj LgPVhMzJlSHvtcB1F0UCwePaq2v+zuwJgNksDQUxz15cvga3m4ynqavre1O2zkHg jILQRfvYuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:41 2026 by rpki-client