$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft File: 48394F266C145173319F25807E0F7F0C02A6894A.mft (raw, json) Hash identifier: 9WBY1ACSNZDGwDWRRbtj7q8+OeNN6UJ06/lL7cCHFRs= Subject key identifier: C8:9F:B5:40:1D:6F:21:51:CD:A6:06:C9:C9:DC:88:98:BF:7A:52:DB Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A Certificate serial: 2954D3E2E05259A5D6C7A63DF9049E405CFBBCDD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 01:55:04 +0000 Manifest this update: Fri 24 Jul 2026 01:50:04 +0000 Manifest next update: Sat 25 Jul 2026 04:35:04 +0000 Files and hashes: 1: 48394F266C145173319F25807E0F7F0C02A6894A.crl (hash: TuVi3SVSU9qytLqY4J2lqofbVxlPQCAdXKRd6n5DQSw=) 2: 3231392e3233352e302e302f32302d3230203d3e20313339313534.roa (hash: huRlYO+09FxgnCnNVPyqhV/uiBFlNuHHw2ZsrH3jefA=) 3: 323430353a663934303a3a2f33322d3332203d3e20313339313534.roa (hash: lhgN0L9WHGTQkGTRCfQY8FavApS7jNFQ59DMwInIVKM=) 4: 3130332e3135302e32342e302f32332d3233203d3e20313339313534.roa (hash: D8YNJPMwU58KLUevFRebwhHA8dOoH0VTSkz2kVFv0Sw=) 5: 3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa (hash: wXAduiWjp7UFtX2sJ8+R8PFnchSO4/z/J9zAx35yjFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:54:d3:e2:e0:52:59:a5:d6:c7:a6:3d:f9:04:9e:40:5c:fb:bc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A Validity Not Before: Jul 24 01:50:04 2026 GMT Not After : Jul 25 04:35:04 2026 GMT Subject: CN=C89FB5401D6F2151CDA606C9C9DC8898BF7A52DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:62:18:77:5b:21:40:27:f6:97:4f:79:37: 38:0f:fe:36:fc:98:eb:be:6b:67:00:2b:50:5a:f5: 5c:b9:59:81:f6:e0:1f:1d:82:15:3e:a1:b1:08:a5: bd:8c:44:94:e5:98:83:e7:32:6e:08:e0:03:6e:63: 10:e4:c4:70:53:3b:a2:8b:76:82:a6:19:11:f2:c1: 0d:6e:4e:16:89:43:80:91:eb:ae:95:d5:14:70:2e: bd:16:f1:97:6a:a0:e6:ed:b3:bc:92:30:2e:91:ea: 20:57:76:b7:b6:71:86:1e:fd:a8:ec:21:a0:38:cc: f7:18:60:d2:55:c3:74:9b:3c:b5:94:f5:d4:57:31: a3:c5:b1:19:91:8b:51:df:65:90:fc:48:33:94:cf: 94:85:6b:5e:54:fc:f6:21:77:aa:5f:22:41:6d:43: 1a:8a:58:a4:ac:c4:a3:70:4f:5f:6f:24:c0:1f:01: 8a:57:1d:2c:94:e9:49:29:6b:21:6d:c0:20:41:3a: f0:91:c0:ab:b2:0f:74:6f:98:86:e1:9a:0f:9a:81: d0:b3:ee:23:b7:b7:d8:6c:77:d7:3b:25:91:51:36: 38:47:78:df:5c:aa:17:ee:dc:1a:31:9a:7b:36:3b: 5a:91:bd:50:e1:4c:9d:6b:e9:59:3c:dd:ad:63:e9: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9F:B5:40:1D:6F:21:51:CD:A6:06:C9:C9:DC:88:98:BF:7A:52:DB X509v3 Authority Key Identifier: keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:94:b6:3a:a3:fb:4e:0f:e1:dc:77:7c:7a:bc:75:11:31:90: a7:4f:72:0e:b6:5c:4c:84:7c:f9:d6:8a:36:b6:ae:71:74:6e: 99:fe:e8:54:63:29:a3:1f:07:ad:d1:bf:a3:d5:54:5b:d0:9d: 74:97:a5:66:19:9e:4d:6a:af:2b:82:4c:28:dd:f6:63:e7:1c: a3:34:06:75:09:ef:e7:c5:70:4f:37:8a:95:42:95:63:ae:1f: d2:41:78:b5:d6:f0:a9:db:09:f5:fd:6f:6c:8a:75:a6:32:17: b7:b5:ff:6a:b9:43:5e:83:21:35:e8:73:7d:19:46:ae:54:c4: a5:7c:57:47:58:77:ca:86:b4:61:69:a2:07:23:5c:aa:f9:70: 97:7e:bb:cb:72:2f:fb:da:60:a9:f2:d3:c2:b2:fc:73:ba:ca: 36:f6:fd:84:a4:d1:a2:83:39:b0:44:37:0b:6a:f4:b6:d3:b8: 80:6c:94:1e:af:8a:1a:ea:43:91:80:54:54:8a:25:6a:de:42: a5:bf:56:72:0b:18:cb:59:b2:ff:47:ce:58:50:af:0c:a0:45: f6:ed:ad:a8:7b:66:22:c2:24:6d:ee:41:60:91:01:62:d3:e0: 11:76:77:ee:03:ce:8c:5b:8d:03:ce:5d:64:c5:b0:61:b6:ed: 8a:00:e0:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKVTT4uBSWaXWx6Y9+QSeQFz7vN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMw MkE2ODk0QTAeFw0yNjA3MjQwMTUwMDRaFw0yNjA3MjUwNDM1MDRaMDMxMTAvBgNV BAMTKEM4OUZCNTQwMUQ2RjIxNTFDREE2MDZDOUM5REM4ODk4QkY3QTUyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNGIYd1shQCf2l095NzgP/jb8 mOu+a2cAK1Ba9Vy5WYH24B8dghU+obEIpb2MRJTlmIPnMm4I4ANuYxDkxHBTO6KL doKmGRHywQ1uThaJQ4CR666V1RRwLr0W8ZdqoObts7ySMC6R6iBXdre2cYYe/ajs IaA4zPcYYNJVw3SbPLWU9dRXMaPFsRmRi1HfZZD8SDOUz5SFa15U/PYhd6pfIkFt QxqKWKSsxKNwT19vJMAfAYpXHSyU6UkpayFtwCBBOvCRwKuyD3RvmIbhmg+agdCz 7iO3t9hsd9c7JZFRNjhHeN9cqhfu3Boxmns2O1qRvVDhTJ1r6Vk83a1j6cKHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyJ+1QB1vIVHNpgbJydyImL96UtswHwYDVR0j BBgwFoAUSDlPJmwUUXMxnyWAfg9/DAKmiUowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc0MDg3NDk4Njk3OTMzMC8wLzQ4Mzk0RjI2NkMxNDUxNzMzMTlGMjU4MDdFMEY3 RjBDMDJBNjg5NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMwMkE2ODk0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NDA4NzQ5ODY5NzkzMzAvMC80ODM5NEYyNjZDMTQ1 MTczMzE5RjI1ODA3RTBGN0YwQzAyQTY4OTRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZS2OqP7Tg/h 3Hd8erx1ETGQp09yDrZcTIR8+daKNraucXRumf7oVGMpox8HrdG/o9VUW9CddJel ZhmeTWqvK4JMKN32Y+ccozQGdQnv58VwTzeKlUKVY64f0kF4tdbwqdsJ9f1vbIp1 pjIXt7X/arlDXoMhNehzfRlGrlTEpXxXR1h3yoa0YWmiByNcqvlwl367y3Iv+9pg qfLTwrL8c7rKNvb9hKTRooM5sEQ3C2r0ttO4gGyUHq+KGupDkYBUVIolat5Cpb9W cgsYy1my/0fOWFCvDKBF9u2tqHtmIsIkbe5BYJEBYtPgEXZ37gPOjFuNA85dZMWw YbbtigDglg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:28:53 2026 by rpki-client