$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: yxvyGnC0bh0NRHaRx0Ii5aEwiB5TlBogvVgMM+BjoKg= Subject key identifier: E7:2D:E3:21:4A:DF:A0:9A:0C:96:05:DA:31:E3:1C:42:10:31:58:C4 Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 206587938871BCD4B7F129A76A1176F768126F5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 83 Signing time: Fri 24 Jul 2026 11:26:04 +0000 Manifest this update: Fri 24 Jul 2026 11:21:04 +0000 Manifest next update: Sat 25 Jul 2026 13:06:04 +0000 Files and hashes: 1: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) 2: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) 3: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: K7t/hSnQ/YQ2LpkQUtDzysCkK9QogkjAWoClmXdb+7k=) 4: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) 5: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) 6: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:65:87:93:88:71:bc:d4:b7:f1:29:a7:6a:11:76:f7:68:12:6f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Jul 24 11:21:04 2026 GMT Not After : Jul 25 13:06:04 2026 GMT Subject: CN=E72DE3214ADFA09A0C9605DA31E31C42103158C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:52:38:c9:30:48:70:7b:c7:c6:95:f8:db:bb: 31:5d:ba:4c:75:4c:c4:a8:3c:80:82:d3:e8:f9:2b: a4:27:6a:15:f9:c4:07:88:5e:46:de:38:cb:79:8e: cb:42:f4:06:b7:ad:2c:fb:09:f8:68:74:bc:ac:a4: c2:fb:fc:7b:84:0e:c7:3f:a2:8f:7d:16:3b:e7:01: 25:80:36:c7:58:d5:ca:2e:fd:78:01:aa:bc:b6:f7: de:dd:55:bc:d3:45:14:46:2d:16:95:81:38:95:8e: cf:e0:3a:1b:f0:e2:06:cb:96:0a:35:3e:68:73:d7: 27:aa:39:16:54:5f:df:eb:9c:b2:88:23:02:23:6a: d4:28:c0:b3:2b:43:6b:cc:5b:a2:f6:c0:97:a3:44: 28:04:b6:25:78:fe:ad:d9:21:9d:5d:db:b6:59:c4: 7c:75:ba:2b:13:54:12:0f:c2:2a:ae:df:cc:ba:98: 19:8b:21:c0:5c:f5:d1:ce:26:8b:59:1b:74:42:05: 87:7d:db:ad:29:15:03:85:b7:e0:f0:cd:75:4f:a8: 7d:59:07:7d:98:a6:9b:b2:b3:c4:6e:01:9c:19:29: e1:58:7d:01:13:dd:20:4a:c6:46:5e:4b:d3:6d:5e: 3b:f5:8a:9e:25:5e:f9:c0:17:55:35:7d:2a:81:46: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2D:E3:21:4A:DF:A0:9A:0C:96:05:DA:31:E3:1C:42:10:31:58:C4 X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:95:c5:93:7f:fe:bf:7f:16:4a:7f:c3:35:8c:af:bf:a8:33: 4c:c3:49:6e:81:c1:3e:e9:ac:a8:95:f1:03:93:8c:15:68:a8: d6:69:b6:d6:fc:92:1a:5d:2d:53:03:bb:52:b7:7b:d0:22:50: ee:55:c6:e5:f0:bd:ea:05:54:c4:92:f6:29:00:04:51:99:67: 3b:0f:01:a6:e1:24:a2:9c:e0:7f:f5:63:df:f4:30:58:1b:9b: 7a:6d:5f:dc:6c:f7:cd:fc:f5:91:bc:3c:60:41:a8:40:12:ed: 12:8c:f5:d3:f9:fa:83:d6:fd:46:b2:a9:bf:31:2d:08:d8:be: dc:26:65:a1:0a:0e:58:8b:24:9a:2d:a3:31:da:54:0d:73:f4: b2:45:75:33:59:67:3b:32:45:2e:fd:df:f1:82:5b:25:0a:10: 93:a3:06:58:23:94:c4:ca:95:a6:00:f6:db:e2:87:fe:89:d8: 97:80:85:4e:67:df:31:a9:5c:dd:08:6e:57:b4:3c:5f:37:e9: 84:48:0b:db:ca:e2:93:16:17:a0:83:12:88:18:52:b0:51:62: ab:e9:ce:12:a6:93:62:d7:3d:2a:8d:a5:97:60:cc:7b:52:f8: 4b:aa:30:ca:38:d4:b0:b3:42:74:cc:cb:14:0f:c2:84:45:cc: 08:ad:ea:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIGWHk4hxvNS38SmnahF292gSb18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA3MjQxMTIxMDRaFw0yNjA3MjUxMzA2MDRaMDMxMTAvBgNV BAMTKEU3MkRFMzIxNEFERkEwOUEwQzk2MDVEQTMxRTMxQzQyMTAzMTU4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUjjJMEhwe8fGlfjbuzFdukx1 TMSoPICC0+j5K6QnahX5xAeIXkbeOMt5jstC9Aa3rSz7CfhodLyspML7/HuEDsc/ oo99FjvnASWANsdY1cou/XgBqry2997dVbzTRRRGLRaVgTiVjs/gOhvw4gbLlgo1 Pmhz1yeqORZUX9/rnLKIIwIjatQowLMrQ2vMW6L2wJejRCgEtiV4/q3ZIZ1d27ZZ xHx1uisTVBIPwiqu38y6mBmLIcBc9dHOJotZG3RCBYd9260pFQOFt+DwzXVPqH1Z B32Yppuys8RuAZwZKeFYfQET3SBKxkZeS9NtXjv1ip4lXvnAF1U1fSqBRp+FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5y3jIUrfoJoMlgXaMeMcQhAxWMQwHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJXFk3/+v38W Sn/DNYyvv6gzTMNJboHBPumsqJXxA5OMFWio1mm21vySGl0tUwO7Urd70CJQ7lXG 5fC96gVUxJL2KQAEUZlnOw8BpuEkopzgf/Vj3/QwWBubem1f3Gz3zfz1kbw8YEGo QBLtEoz10/n6g9b9RrKpvzEtCNi+3CZloQoOWIskmi2jMdpUDXP0skV1M1lnOzJF Lv3f8YJbJQoQk6MGWCOUxMqVpgD22+KH/onYl4CFTmffMalc3QhuV7Q8XzfphEgL 28rikxYXoIMSiBhSsFFiq+nOEqaTYtc9Ko2ll2DMe1L4S6owyjjUsLNCdMzLFA/C hEXMCK3q+Q== -----END CERTIFICATE-----Generated at Fri Jul 24 23:29:15 2026 by rpki-client