$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: 0eRxxY9ZK3qERqD8jlf/bAGOECycu4uR1lsSE0Xd3O4= Subject key identifier: 4D:01:EE:2C:C0:6F:D9:B3:03:50:76:24:F8:82:85:C4:90:BC:A3:1C Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 44BCFD9290D369CE9EBF891E7F9CD3F27B108BFB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 84 Signing time: Thu 23 Jul 2026 21:54:40 +0000 Manifest this update: Thu 23 Jul 2026 21:49:40 +0000 Manifest next update: Sat 25 Jul 2026 00:11:40 +0000 Files and hashes: 1: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: HHIeqtudWrmrZp3txtPBfbaJRsQjAOn+/GBksLQLaVw=) 2: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bc:fd:92:90:d3:69:ce:9e:bf:89:1e:7f:9c:d3:f2:7b:10:8b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Jul 23 21:49:40 2026 GMT Not After : Jul 25 00:11:40 2026 GMT Subject: CN=4D01EE2CC06FD9B303507624F88285C490BCA31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:d9:f6:d8:5b:22:f3:c7:1f:98:d7:df:d5: b8:3f:30:78:0c:49:91:99:85:22:92:05:d3:ad:91: 9b:15:67:ea:a4:b0:41:36:42:85:dd:e0:02:b0:d7: bf:f8:bf:a3:65:93:3a:cf:e7:89:fd:96:3b:1b:9b: 0b:34:2b:2c:4f:36:dc:42:e3:c7:00:a1:d4:10:a8: a6:39:7f:e2:c7:da:1c:0a:c3:4f:19:bd:7b:43:a9: 9b:52:79:1a:6f:a0:59:d1:5e:49:88:04:d0:c4:b1: 71:9d:31:10:31:69:ea:be:be:7f:43:a2:f0:69:b1: 62:2e:dc:7b:ac:35:5e:54:c2:ed:a7:5a:49:c1:cc: 68:ed:08:2b:b3:e0:7a:70:2d:0c:18:d7:23:56:e7: 48:1d:6f:86:7b:1f:6d:28:ff:c5:25:10:70:d0:ba: 9d:8b:32:f7:e4:7f:91:08:b3:97:dd:d3:82:e4:d5: 74:99:a0:40:94:6a:53:41:36:e2:41:2a:d5:81:b7: e3:68:36:9d:fe:96:1a:6d:b9:e9:62:fe:17:80:ff: 62:76:2e:b8:c3:e1:a2:1c:48:fc:ba:1c:17:45:31: f9:2e:9c:51:e3:e5:3f:6d:45:e2:58:ef:92:16:ee: 87:18:b7:d8:76:d9:19:a5:22:5b:bd:85:51:f5:6d: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:01:EE:2C:C0:6F:D9:B3:03:50:76:24:F8:82:85:C4:90:BC:A3:1C X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:d0:00:2f:41:f2:70:b0:4c:36:2e:93:02:e0:8a:4e:dc: 7f:72:72:8f:16:78:07:77:f1:e0:28:99:fd:48:2a:6d:a2:5f: 2f:89:c9:0a:0b:e7:49:bf:4b:2b:d9:6d:41:f6:f6:58:7a:c3: f4:58:d8:60:3a:6c:38:16:9e:b0:96:2c:af:e2:42:4d:2e:3b: 2b:a0:d4:a2:07:44:50:7b:0b:cb:e8:d1:c5:1e:b7:47:ca:a2: df:99:65:e2:5a:e7:c5:89:ab:00:e8:ca:df:15:7a:0f:b2:a6: 89:b4:ce:65:b9:f9:1a:de:86:5c:6e:2d:be:a2:e1:75:55:19: fa:0a:60:bf:77:2d:99:1d:07:cf:ae:3c:d5:35:bf:f1:8b:30: 33:5d:29:22:15:a7:13:ea:37:f2:ac:1f:bf:a0:57:7a:5a:0e: f5:75:4f:2a:d5:31:6e:f8:63:85:97:be:ed:29:52:58:d3:c7: b3:13:c5:82:59:88:06:80:79:08:31:28:a0:d3:9b:b3:26:81: a5:d9:d0:4d:07:cc:d2:3f:24:58:60:fe:5f:47:88:d1:9b:24: 35:bd:99:67:bc:85:5f:2d:91:07:08:80:12:9f:26:19:52:52: cc:67:c7:9a:cc:78:b1:6a:fe:22:d3:fc:f0:28:99:cc:15:8c: f4:25:06:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURLz9kpDTac6ev4kef5zT8nsQi/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA3MjMyMTQ5NDBaFw0yNjA3MjUwMDExNDBaMDMxMTAvBgNV BAMTKDREMDFFRTJDQzA2RkQ5QjMwMzUwNzYyNEY4ODI4NUM0OTBCQ0EzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwtn22Fsi88cfmNff1bg/MHgM SZGZhSKSBdOtkZsVZ+qksEE2QoXd4AKw17/4v6NlkzrP54n9ljsbmws0KyxPNtxC 48cAodQQqKY5f+LH2hwKw08ZvXtDqZtSeRpvoFnRXkmIBNDEsXGdMRAxaeq+vn9D ovBpsWIu3HusNV5Uwu2nWknBzGjtCCuz4HpwLQwY1yNW50gdb4Z7H20o/8UlEHDQ up2LMvfkf5EIs5fd04Lk1XSZoECUalNBNuJBKtWBt+NoNp3+lhptueli/heA/2J2 LrjD4aIcSPy6HBdFMfkunFHj5T9tReJY75IW7ocYt9h22RmlIlu9hVH1bfhBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTQHuLMBv2bMDUHYk+IKFxJC8oxwwHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvbQAC9B8nCw TDYukwLgik7cf3JyjxZ4B3fx4CiZ/UgqbaJfL4nJCgvnSb9LK9ltQfb2WHrD9FjY YDpsOBaesJYsr+JCTS47K6DUogdEUHsLy+jRxR63R8qi35ll4lrnxYmrAOjK3xV6 D7KmibTOZbn5Gt6GXG4tvqLhdVUZ+gpgv3ctmR0Hz6481TW/8YswM10pIhWnE+o3 8qwfv6BXeloO9XVPKtUxbvhjhZe+7SlSWNPHsxPFglmIBoB5CDEooNObsyaBpdnQ TQfM0j8kWGD+X0eI0ZskNb2ZZ7yFXy2RBwiAEp8mGVJSzGfHmsx4sWr+ItP88CiZ zBWM9CUGTQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:33:22 2026 by rpki-client