$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: AVbWbtT5DGBbM0IfuB/1W7mCoF6gadDDa3w1EZS+Dtg= Subject key identifier: CB:F7:CF:57:79:9B:25:8C:50:09:BA:D2:AA:C5:CF:27:7C:79:DE:91 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 17EB2E93B40FEA87AF9DF2AEADCDAB48E472DA47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: 86 Signing time: Fri 24 Jul 2026 09:55:57 +0000 Manifest this update: Fri 24 Jul 2026 09:50:57 +0000 Manifest next update: Sat 25 Jul 2026 11:31:57 +0000 Files and hashes: 1: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: 9OZRJoU4lo1gL0SR/S00iAhn0afnEaM+gdHsGKvY3Ig=) 2: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 3: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 4: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) 5: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 6: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) 7: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:eb:2e:93:b4:0f:ea:87:af:9d:f2:ae:ad:cd:ab:48:e4:72:da:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Jul 24 09:50:57 2026 GMT Not After : Jul 25 11:31:57 2026 GMT Subject: CN=CBF7CF57799B258C5009BAD2AAC5CF277C79DE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:81:cc:11:12:3d:f7:f5:6b:9c:66:68:f7: 63:11:cb:71:ea:c3:8a:51:4d:3a:ac:e8:cd:63:5b: 31:9d:73:6e:2f:c7:9b:e0:c2:f0:41:f2:16:1c:be: 03:5c:84:a1:bd:91:80:31:7d:ea:2b:97:ef:ba:2b: 11:99:25:ac:e1:fb:29:95:76:29:da:c6:03:0b:ba: f7:04:44:26:fc:a8:29:66:b8:d1:ea:4f:7a:98:27: d3:ae:49:bf:e4:72:49:8b:41:1c:d6:d0:ab:b5:c4: 27:b3:94:08:56:a2:30:71:19:00:0a:c3:72:3f:d5: 91:8a:e2:81:81:ca:22:66:fe:8f:c2:32:df:7d:08: 0d:1e:68:7a:4f:a4:79:b3:0d:78:0a:61:c3:2d:19: 21:1e:6c:1d:a9:00:ae:81:6f:ed:14:9a:c7:a1:5b: d1:a6:61:b5:7d:f9:2b:93:a0:49:30:82:cb:fd:bd: e9:36:38:3c:be:c1:c9:60:df:3c:17:73:ca:e4:ca: 2d:47:79:31:6d:4b:d2:7a:9b:97:21:ad:8d:03:df: 83:49:d2:fa:18:40:74:25:1a:f5:fc:45:e9:bc:6f: 6f:f3:7f:ff:a8:df:07:a7:4e:57:d8:71:1c:34:a5: cd:eb:ab:78:32:de:39:37:e8:29:5e:39:de:04:99: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F7:CF:57:79:9B:25:8C:50:09:BA:D2:AA:C5:CF:27:7C:79:DE:91 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:32:8d:c6:a9:fb:ac:fa:0e:6f:e8:60:c8:99:2a:d6:01: 4d:46:be:e5:7a:57:bb:db:41:a9:bd:21:55:3d:72:0a:8c:34: e8:74:71:1b:de:fd:1c:a3:51:f3:45:2c:ef:00:64:b4:37:e8: a1:87:10:96:ce:4d:52:ab:86:8e:03:09:05:43:53:7f:ab:6e: d9:31:7b:eb:5c:98:8d:48:4f:73:58:8c:3c:6b:d8:22:ab:d0: 2c:1f:37:01:71:0d:12:21:40:51:7f:fa:18:e7:76:57:96:d0: d6:38:fa:3e:96:a9:2f:bb:9c:64:78:be:1a:2e:2e:aa:ee:59: 2c:1a:e5:50:9b:cd:6c:b8:1e:27:82:59:97:dd:1c:61:fa:67: 36:67:29:dd:7f:5a:5b:05:5d:91:56:3d:7e:39:c2:f7:b8:51: a7:ba:22:62:5b:e4:ba:58:fe:02:64:47:5c:1d:1f:4e:c8:4c: ce:b7:a7:94:98:53:34:8a:32:b0:1a:eb:fa:9c:16:54:26:c4: 79:99:a6:b7:ec:3d:fd:d5:35:e6:ca:3a:b0:bd:6c:bd:5d:24: a2:b9:8d:02:6d:64:8b:e3:74:96:9c:7c:2c:65:76:bf:0c:02: de:8d:66:4d:dc:8f:8a:67:f8:3a:43:66:e3:80:10:32:dc:18: 2e:50:a2:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF+suk7QP6oevnfKurc2rSORy2kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA3MjQwOTUwNTdaFw0yNjA3MjUxMTMxNTdaMDMxMTAvBgNV BAMTKENCRjdDRjU3Nzk5QjI1OEM1MDA5QkFEMkFBQzVDRjI3N0M3OURFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTBoHMERI99/VrnGZo92MRy3Hq w4pRTTqs6M1jWzGdc24vx5vgwvBB8hYcvgNchKG9kYAxfeorl++6KxGZJazh+ymV dinaxgMLuvcERCb8qClmuNHqT3qYJ9OuSb/kckmLQRzW0Ku1xCezlAhWojBxGQAK w3I/1ZGK4oGByiJm/o/CMt99CA0eaHpPpHmzDXgKYcMtGSEebB2pAK6Bb+0Umseh W9GmYbV9+SuToEkwgsv9vek2ODy+wclg3zwXc8rkyi1HeTFtS9J6m5chrY0D34NJ 0voYQHQlGvX8Rem8b2/zf/+o3wenTlfYcRw0pc3rq3gy3jk36CleOd4EmYxdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy/fPV3mbJYxQCbrSqsXPJ3x53pEwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvUyjcap+6z6 Dm/oYMiZKtYBTUa+5XpXu9tBqb0hVT1yCow06HRxG979HKNR80Us7wBktDfooYcQ ls5NUquGjgMJBUNTf6tu2TF761yYjUhPc1iMPGvYIqvQLB83AXENEiFAUX/6GOd2 V5bQ1jj6PpapL7ucZHi+Gi4uqu5ZLBrlUJvNbLgeJ4JZl90cYfpnNmcp3X9aWwVd kVY9fjnC97hRp7oiYlvkulj+AmRHXB0fTshMzrenlJhTNIoysBrr+pwWVCbEeZmm t+w9/dU15so6sL1svV0kormNAm1ki+N0lpx8LGV2vwwC3o1mTdyPimf4OkNm44AQ MtwYLlCiTw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:49:24 2026 by rpki-client