$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: rX2U7j4cECxZi20wki5MONlCpcbwv3luVWsUf/vcDLo= Subject key identifier: 5C:B3:FE:6A:75:B8:AF:7B:3B:94:DE:DD:1B:C4:48:16:C6:E8:1F:2C Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 3F7EEFC1DD169E701CCB05CA8AEC1BD20859E297 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: 87 Signing time: Fri 24 Jul 2026 14:41:28 +0000 Manifest this update: Fri 24 Jul 2026 14:36:28 +0000 Manifest next update: Sat 25 Jul 2026 17:24:28 +0000 Files and hashes: 1: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: 1oc3bJjYx1lbWggUpJSA7px6rrkbSk3Rn/LCa/cYl8M=) 2: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) 3: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7e:ef:c1:dd:16:9e:70:1c:cb:05:ca:8a:ec:1b:d2:08:59:e2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: Jul 24 14:36:28 2026 GMT Not After : Jul 25 17:24:28 2026 GMT Subject: CN=5CB3FE6A75B8AF7B3B94DEDD1BC44816C6E81F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:98:1a:c1:13:15:61:8a:c5:68:72:4e:d0: b0:11:88:3e:36:07:50:f1:2b:09:ed:e6:db:4b:2f: cc:7c:09:9f:16:52:04:ce:ae:a4:7d:74:9d:f0:31: 7e:43:29:61:9a:b0:24:a3:55:41:46:c2:23:34:33: fe:d6:e1:d7:63:ed:db:2d:13:9b:1a:9d:3e:07:7c: f5:f9:96:6f:69:03:2b:e9:c5:eb:d1:26:a5:e8:39: 94:07:c7:d5:69:2a:a8:f3:8f:22:66:47:8d:b5:97: 86:dc:cd:b6:2a:54:66:c1:fa:95:da:d2:44:dc:8f: 54:58:d9:fa:23:f2:c4:ce:37:9e:ed:81:a2:c3:79: 27:b5:0b:7d:30:16:84:3f:38:36:15:d3:a2:d6:89: 3f:2c:78:16:f0:b0:64:b4:25:46:76:09:d6:87:43: f6:6b:42:53:4b:45:e9:36:13:df:5c:58:6b:4e:67: 0e:29:d9:6e:7e:a1:87:71:af:45:70:26:a3:64:04: ed:c1:e3:bb:90:e9:9b:bd:18:ce:dc:58:84:53:31: 00:37:60:17:a5:e9:fe:8c:f3:6b:fa:4e:d0:24:0b: 8e:98:18:72:ae:0a:60:f9:85:19:3b:12:e3:e9:45: 14:e2:d4:60:07:6f:2f:c3:ee:32:89:92:79:fa:7f: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:FE:6A:75:B8:AF:7B:3B:94:DE:DD:1B:C4:48:16:C6:E8:1F:2C X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:c1:14:86:70:c9:cb:f6:65:90:e6:0b:ab:7f:c4:b9:60: da:49:54:48:8a:b4:8e:3d:05:1d:a4:d3:8d:33:cd:4a:17:c2: c7:f1:e9:30:ba:8d:2c:a5:d1:8c:0c:ec:7f:d7:be:74:26:c1: 3c:2c:95:8e:e1:97:34:63:00:b9:ee:30:dc:85:6c:08:37:f8: d3:01:32:4b:5d:26:46:7c:23:d1:9d:20:c9:9a:84:3a:c4:39: a8:f3:95:5d:43:04:22:22:1c:6b:82:9b:41:c2:71:ff:b9:cf: 56:4e:36:21:20:51:80:79:e0:bd:34:11:7a:cd:37:59:f5:c3: 22:2b:43:c0:b0:b7:58:46:2c:f9:fa:7a:ee:0f:7f:6c:56:21: 27:e2:35:6d:00:76:06:71:80:20:1c:13:63:86:56:05:e3:80: 05:75:17:2b:33:f6:b0:39:44:cd:54:1a:c0:c6:8a:a6:17:bd: e9:2a:7f:f1:b0:67:a8:6b:e6:fc:65:da:9f:72:5e:46:5f:c1: d9:1d:b1:e9:e3:23:36:86:7f:4a:22:10:9c:19:24:dc:26:2f: 81:61:12:fd:ca:44:1a:52:db:f5:38:0e:e2:1d:ef:c1:30:48: 8a:f7:3d:e7:f0:26:5d:35:36:a4:4c:96:5f:3c:3d:72:17:7e: cf:de:d0:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP37vwd0WnnAcywXKiuwb0ghZ4pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA3MjQxNDM2MjhaFw0yNjA3MjUxNzI0MjhaMDMxMTAvBgNV BAMTKDVDQjNGRTZBNzVCOEFGN0IzQjk0REVERDFCQzQ0ODE2QzZFODFGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6JgawRMVYYrFaHJO0LARiD42 B1DxKwnt5ttLL8x8CZ8WUgTOrqR9dJ3wMX5DKWGasCSjVUFGwiM0M/7W4ddj7dst E5sanT4HfPX5lm9pAyvpxevRJqXoOZQHx9VpKqjzjyJmR421l4bczbYqVGbB+pXa 0kTcj1RY2foj8sTON57tgaLDeSe1C30wFoQ/ODYV06LWiT8seBbwsGS0JUZ2CdaH Q/ZrQlNLRek2E99cWGtOZw4p2W5+oYdxr0VwJqNkBO3B47uQ6Zu9GM7cWIRTMQA3 YBel6f6M82v6TtAkC46YGHKuCmD5hRk7EuPpRRTi1GAHby/D7jKJknn6f2bpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXLP+anW4r3s7lN7dG8RIFsboHywwHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIbBFIZwycv2 ZZDmC6t/xLlg2klUSIq0jj0FHaTTjTPNShfCx/HpMLqNLKXRjAzsf9e+dCbBPCyV juGXNGMAue4w3IVsCDf40wEyS10mRnwj0Z0gyZqEOsQ5qPOVXUMEIiIca4KbQcJx /7nPVk42ISBRgHngvTQRes03WfXDIitDwLC3WEYs+fp67g9/bFYhJ+I1bQB2BnGA IBwTY4ZWBeOABXUXKzP2sDlEzVQawMaKphe96Sp/8bBnqGvm/GXan3JeRl/B2R2x 6eMjNoZ/SiIQnBkk3CYvgWES/cpEGlLb9TgO4h3vwTBIivc95/AmXTU2pEyWXzw9 chd+z97QmA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:43:56 2026 by rpki-client