$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: jIg9HBYEnMCuZY/TirTM5RF0mqycKzc6zuQsOREBx8A= Subject key identifier: B6:7D:4D:11:39:C8:62:E1:5F:64:64:E9:6F:B0:7B:7E:77:F6:49:20 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 19E0A625A335F75459D998983AEC307BBB880547 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: 87 Signing time: Fri 24 Jul 2026 10:41:00 +0000 Manifest this update: Fri 24 Jul 2026 10:36:00 +0000 Manifest next update: Sat 25 Jul 2026 12:51:00 +0000 Files and hashes: 1: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: jxkM3SLpRMwueUi0Jgr4iFaZhJy8wQazu+NTQUhe/Ds=) 2: 3231312e3135382e302e302f31362d3136203d3e2034383337.roa (hash: i9hECE3kOB5KCZJDOyjFbCvXCgNoN/LRN4pG0/aZL80=) 3: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (hash: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y=) 4: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (hash: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e0:a6:25:a3:35:f7:54:59:d9:98:98:3a:ec:30:7b:bb:88:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: Jul 24 10:36:00 2026 GMT Not After : Jul 25 12:51:00 2026 GMT Subject: CN=B67D4D1139C862E15F6464E96FB07B7E77F64920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:41:6a:64:37:8b:d8:e2:9b:93:6d:7e:a6: 87:9c:91:f3:4b:23:39:b1:52:25:33:0f:90:4c:bc: aa:75:53:83:5a:c3:45:d2:65:a1:5c:0e:e7:5e:55: 82:65:28:76:71:04:96:35:94:6a:11:4e:c8:bc:42: 75:3f:57:a5:b3:8b:0b:f0:ab:dc:bc:8c:bc:be:5c: 28:1b:f0:0a:74:f2:87:f2:65:46:8a:14:0c:fd:35: 8a:8a:93:75:de:4a:39:61:a6:f1:a0:05:c8:5a:53: b7:04:2e:62:89:d5:cd:66:c5:1a:10:0d:11:8e:f6: ad:c0:00:aa:f4:48:77:4f:0f:64:8f:83:d3:03:87: 84:e3:a8:26:d1:18:c6:ec:d1:4b:dc:90:41:81:50: 66:7a:39:55:86:5c:ab:55:3f:5f:1e:32:5a:b5:06: 79:9d:4a:23:b3:2d:ff:64:78:44:3b:cb:e6:20:d0: 77:c9:e1:41:ee:3d:78:b0:7a:84:60:38:36:0c:8a: 1a:f3:17:29:5d:de:9d:86:84:79:00:b1:24:8e:04: 2a:cb:b8:fb:f9:2f:cf:90:7e:0c:51:69:56:11:80: 3a:f3:c2:28:42:32:5a:61:a3:fe:98:2c:51:84:ff: 59:ef:79:12:bc:36:32:ff:e5:8a:84:94:8e:53:0a: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7D:4D:11:39:C8:62:E1:5F:64:64:E9:6F:B0:7B:7E:77:F6:49:20 X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ae:77:15:6a:8b:13:43:2d:13:fe:93:e4:21:d9:b5:5e:a1: 8b:ce:29:a9:aa:1e:e7:28:9b:5d:fc:3c:ca:0f:9a:98:6e:3c: 85:6a:92:43:63:13:73:0a:3b:63:f5:75:82:77:f1:a2:f8:a7: f1:04:0d:f4:da:68:2e:a3:15:c0:6d:9f:10:e9:57:7c:42:32: b6:4f:7b:13:7b:76:c1:a9:66:b9:5c:62:65:48:0b:93:59:13: 37:34:ea:af:fc:4d:ad:24:90:3e:3f:63:ab:f3:95:f3:4b:5d: c8:98:a2:7e:c9:6a:14:30:4e:af:87:2c:a7:24:d8:ac:a3:19: 5f:1f:d7:51:55:2c:b2:69:42:05:24:88:19:4e:10:8f:ef:13: cf:4e:ca:1e:27:b0:72:a3:03:da:96:46:d5:0f:59:4b:a8:67: 02:9f:63:b6:2e:59:87:38:9b:ab:78:97:a3:03:7c:a1:fd:ff: e5:ae:66:31:b7:dc:c3:e8:a7:bb:18:35:3f:51:b8:a0:eb:ee: 67:1d:60:f6:21:e1:b3:5d:d7:eb:aa:c9:82:52:fa:da:e9:5e: 1c:b0:d0:cd:7c:7d:83:de:11:1f:cb:e6:c6:ae:6d:7c:b6:9a: 0c:27:dc:b9:e5:33:7a:1d:9a:9a:69:3c:7e:93:dc:29:8f:b8: b7:1e:49:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGeCmJaM191RZ2ZiYOuwwe7uIBUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA3MjQxMDM2MDBaFw0yNjA3MjUxMjUxMDBaMDMxMTAvBgNV BAMTKEI2N0Q0RDExMzlDODYyRTE1RjY0NjRFOTZGQjA3QjdFNzdGNjQ5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/0FqZDeL2OKbk21+poeckfNL IzmxUiUzD5BMvKp1U4Naw0XSZaFcDudeVYJlKHZxBJY1lGoRTsi8QnU/V6Wziwvw q9y8jLy+XCgb8Ap08ofyZUaKFAz9NYqKk3XeSjlhpvGgBchaU7cELmKJ1c1mxRoQ DRGO9q3AAKr0SHdPD2SPg9MDh4TjqCbRGMbs0UvckEGBUGZ6OVWGXKtVP18eMlq1 BnmdSiOzLf9keEQ7y+Yg0HfJ4UHuPXiweoRgODYMihrzFyld3p2GhHkAsSSOBCrL uPv5L8+QfgxRaVYRgDrzwihCMlpho/6YLFGE/1nveRK8NjL/5YqElI5TCu9rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtn1NETnIYuFfZGTpb7B7fnf2SSAwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq53FWqLE0Mt E/6T5CHZtV6hi84pqaoe5yibXfw8yg+amG48hWqSQ2MTcwo7Y/V1gnfxovin8QQN 9NpoLqMVwG2fEOlXfEIytk97E3t2walmuVxiZUgLk1kTNzTqr/xNrSSQPj9jq/OV 80tdyJiifslqFDBOr4cspyTYrKMZXx/XUVUssmlCBSSIGU4Qj+8Tz07KHiewcqMD 2pZG1Q9ZS6hnAp9jti5Zhzibq3iXowN8of3/5a5mMbfcw+inuxg1P1G4oOvuZx1g 9iHhs13X66rJglL62uleHLDQzXx9g94RH8vmxq5tfLaaDCfcueUzeh2ammk8fpPc KY+4tx5JTQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:40:17 2026 by rpki-client