$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: KXBJ1yZ9JyGILICj3NLjgPnwuexevCs/mcScbI7PWx8= Subject key identifier: 9C:5D:39:E1:27:7E:1B:FF:D3:EA:60:DD:ED:88:1F:BE:04:7F:5F:21 Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 3D0425FD58C0AE0150F69B89624C8787A2C56DD6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 06:45:33 +0000 Manifest this update: Fri 24 Jul 2026 06:40:33 +0000 Manifest next update: Sat 25 Jul 2026 09:30:33 +0000 Files and hashes: 1: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: sJYntZbE52yTz2IW+c5+24Iu77vSqefACjlN1mkcZqI=) 2: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:04:25:fd:58:c0:ae:01:50:f6:9b:89:62:4c:87:87:a2:c5:6d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Jul 24 06:40:33 2026 GMT Not After : Jul 25 09:30:33 2026 GMT Subject: CN=9C5D39E1277E1BFFD3EA60DDED881FBE047F5F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:1f:5c:a4:71:4d:b7:04:8d:11:52:dd:af: 50:6b:2c:b5:cd:79:7e:be:a9:32:e4:37:b8:72:bf: 78:a5:a5:9f:f0:c8:a9:cb:fb:15:d4:1a:27:0e:c1: b8:4b:c8:14:9c:d4:0c:d1:f7:30:3e:4c:32:51:16: c9:50:95:68:ad:45:34:da:6a:e4:42:b3:9c:b5:6c: a3:3f:49:53:03:3d:89:fc:a5:1a:ea:cc:8b:50:cc: d0:cc:36:76:02:1c:25:a5:a2:f3:80:61:16:ff:84: 0f:d6:61:61:05:0b:fb:2f:1e:f9:e6:ac:73:17:f7: c6:cb:da:1b:09:9a:45:85:27:3c:30:28:1a:e3:b4: c3:b6:11:8b:d4:79:ef:bf:ab:e7:df:5d:c0:a5:61: 99:a0:2c:25:82:9f:3e:a5:82:8d:12:fc:e5:af:97: c6:74:56:3e:5d:9d:65:fb:b0:23:59:9a:c0:ba:55: c7:4d:f8:7e:f3:e7:b9:92:d4:78:05:6c:8c:e2:77: b7:33:26:13:6d:31:79:e7:48:36:dd:33:2c:bc:c4: 01:00:28:de:d8:ab:33:53:e2:2f:81:db:9a:7e:e4: 2c:07:a2:65:ea:04:43:87:28:8e:9c:1d:c6:49:6e: 84:84:e3:20:5e:01:0a:13:82:f9:0e:7e:84:28:38: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5D:39:E1:27:7E:1B:FF:D3:EA:60:DD:ED:88:1F:BE:04:7F:5F:21 X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:db:93:c9:42:5d:d2:48:ce:cc:cc:43:ba:04:42:56:ca: 50:2f:d9:63:3d:7d:e5:b3:ea:47:0b:58:fe:9a:03:c7:74:26: 6c:1e:d1:3e:57:0b:2a:e1:41:03:58:1c:03:0d:a7:0e:19:1d: 4e:ee:fb:dd:d9:39:e4:52:67:7b:c0:b9:9e:c0:3a:ba:8f:38: 1c:8c:21:4a:0f:62:63:99:7d:37:20:a8:31:ea:75:7f:2d:bd: 63:b1:8a:a8:14:05:22:3b:b3:2f:66:9b:6f:28:ce:87:0e:bc: 3b:33:6e:ef:ed:44:62:42:dc:fc:0e:3d:af:b9:93:a0:ac:06: bc:eb:48:10:c2:c2:24:c1:60:e8:7a:e4:78:de:b3:c1:75:f9: b7:be:1a:93:84:41:f8:b5:dd:bb:ca:78:e0:63:12:2e:87:ad: 84:cb:92:d3:04:0c:b4:b1:47:36:28:c5:83:47:fe:79:71:3b: a7:cb:ec:56:f3:29:eb:2b:41:2c:6f:c7:5f:01:7e:e7:fc:9f: f3:66:e6:70:78:57:f5:4f:97:55:d4:a4:17:0b:6d:89:16:a5: 2f:81:74:22:db:c2:da:b4:76:0d:3f:11:27:b9:1d:69:3a:03: ec:36:ef:a1:27:e8:92:6f:8a:47:14:f6:7a:76:84:ff:e7:c9: 00:f0:7a:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPQQl/VjArgFQ9puJYkyHh6LFbdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA3MjQwNjQwMzNaFw0yNjA3MjUwOTMwMzNaMDMxMTAvBgNV BAMTKDlDNUQzOUUxMjc3RTFCRkZEM0VBNjBEREVEODgxRkJFMDQ3RjVGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizB9cpHFNtwSNEVLdr1BrLLXN eX6+qTLkN7hyv3ilpZ/wyKnL+xXUGicOwbhLyBSc1AzR9zA+TDJRFslQlWitRTTa auRCs5y1bKM/SVMDPYn8pRrqzItQzNDMNnYCHCWlovOAYRb/hA/WYWEFC/svHvnm rHMX98bL2hsJmkWFJzwwKBrjtMO2EYvUee+/q+ffXcClYZmgLCWCnz6lgo0S/OWv l8Z0Vj5dnWX7sCNZmsC6VcdN+H7z57mS1HgFbIzid7czJhNtMXnnSDbdMyy8xAEA KN7YqzNT4i+B25p+5CwHomXqBEOHKI6cHcZJboSE4yBeAQoTgvkOfoQoOI+rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnF054Sd+G//T6mDd7YgfvgR/XyEwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEvbk8lCXdJI zszMQ7oEQlbKUC/ZYz195bPqRwtY/poDx3QmbB7RPlcLKuFBA1gcAw2nDhkdTu77 3dk55FJne8C5nsA6uo84HIwhSg9iY5l9NyCoMep1fy29Y7GKqBQFIjuzL2abbyjO hw68OzNu7+1EYkLc/A49r7mToKwGvOtIEMLCJMFg6HrkeN6zwXX5t74ak4RB+LXd u8p44GMSLoethMuS0wQMtLFHNijFg0f+eXE7p8vsVvMp6ytBLG/HXwF+5/yf82bm cHhX9U+XVdSkFwttiRalL4F0ItvC2rR2DT8RJ7kdaToD7DbvoSfokm+KRxT2enaE /+fJAPB6qg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:54:19 2026 by rpki-client