$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft (raw, json) Hash identifier: vuLndzWbQPpM1CHBRIGTUnWEDtSiJBXax+IvdYqyLys= Subject key identifier: A6:A9:81:D3:27:B7:B7:41:E5:E7:58:B3:FA:6E:63:D7:8A:0B:30:9E Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 3898DFF82E67D1FF1996ABE62EF03319C35BEE7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft Manifest number: 9A Signing time: Thu 23 Jul 2026 19:59:26 +0000 Manifest this update: Thu 23 Jul 2026 19:54:26 +0000 Manifest next update: Fri 24 Jul 2026 20:11:26 +0000 Files and hashes: 1: AS153911.roa (hash: k4d0lln+WCz9yCQ8SJx1RZQW5mhDozOELFG2+G2vBiY=) 2: AS4837.roa (hash: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY=) 3: AS56046.roa (hash: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog=) 4: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl (hash: 0S+pL48XRavjA7789S4NM2KYQTc8/laAwd0Q7HgAOi4=) 5: AS23650.roa (hash: ZrXwoi3Yc5wEkiCFcSV0YRLu2did5FGgulcpf2h2DTs=) 6: AS131483.roa (hash: wricmOxr6vSrRQNd1vocTKW3nC/2pcVrm0VvZPVplfs=) 7: AS151302.roa (hash: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo=) 8: AS151300.roa (hash: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:98:df:f8:2e:67:d1:ff:19:96:ab:e6:2e:f0:33:19:c3:5b:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Jul 23 19:54:26 2026 GMT Not After : Jul 24 20:11:26 2026 GMT Subject: CN=A6A981D327B7B741E5E758B3FA6E63D78A0B309E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:24:d6:b9:00:f4:7d:fb:3c:69:10:e5:21: 6f:ea:f0:ab:5d:fb:9e:26:14:c2:7f:20:e7:0b:3d: 28:20:63:4d:a6:1a:92:85:b5:2d:00:ea:b1:82:f6: b5:93:2f:00:a4:6c:35:14:15:db:cc:99:80:29:cd: c0:8a:86:57:89:8f:a5:72:68:2e:15:ba:cb:97:e3: 9b:b4:c4:f9:02:47:5d:36:c0:2a:dc:99:1c:97:8d: b3:8c:67:9e:9d:f6:3f:ea:0c:79:aa:6e:d0:9c:1a: c4:5f:fa:af:52:bb:f2:20:d0:bd:fe:25:7f:b8:f2: 0c:90:65:a9:86:c4:3e:26:e5:f1:44:78:aa:21:ac: dc:ce:ac:6a:ac:19:7c:05:7b:9e:1d:8e:54:24:58: dc:22:55:ea:16:43:b8:a4:35:31:4e:35:c3:40:ad: 51:11:9c:7c:a5:dc:fd:5c:d1:64:87:e0:e9:e8:b4: 0b:0b:a3:f7:89:95:e6:06:d1:e1:d2:a2:0d:96:99: 91:65:42:9e:7e:cd:59:fb:8f:a6:52:ef:b0:ed:03: d8:1d:20:c4:97:c6:69:1c:66:60:5a:31:15:21:70: d1:68:fa:0f:25:f7:4b:89:d6:af:f5:87:62:26:f0: bd:99:9e:a2:bb:97:80:7b:8e:91:e2:af:da:76:5b: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:81:D3:27:B7:B7:41:E5:E7:58:B3:FA:6E:63:D7:8A:0B:30:9E X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8d:c2:a9:6b:93:18:5e:be:6e:42:6a:74:f4:1f:21:bb:5a: 74:8f:48:02:82:39:23:31:4e:8f:ad:86:e6:3e:7e:04:e2:2b: e9:ae:a8:7a:db:6a:e9:3c:dd:5a:c7:1f:46:69:ef:7d:f6:06: e9:42:9c:77:b2:b9:db:dc:e3:ff:d2:54:cf:b6:5c:f1:98:68: fd:39:27:0c:93:55:75:c0:ce:bd:a6:85:ba:45:26:65:61:56: 3c:70:b6:d5:09:75:7e:65:e1:9f:64:06:3f:e2:8f:14:21:75: 84:3c:46:5c:02:9a:2b:05:a9:fd:30:96:a3:5f:da:67:e9:37: b3:12:c3:68:09:1d:e9:ba:b4:4b:da:84:31:f0:c9:c4:d2:61: ee:32:ac:51:2d:12:07:6a:a7:a4:4b:ff:0f:4b:50:40:51:33: d6:2c:40:0a:07:80:97:79:10:0b:dc:05:9b:4b:a0:a1:41:ca: fd:2d:d4:97:7c:cc:7b:21:89:32:00:48:fc:45:95:eb:00:13: d7:fc:59:1d:c5:60:91:83:4f:f2:0a:50:5f:4e:3a:86:4b:2d: f5:f1:16:1e:cd:db:9e:0f:fb:34:d8:77:c1:d5:a3:e1:bb:cb: 1a:87:cb:47:42:c9:23:8e:81:44:78:46:20:87:9c:a6:18:55: 90:98:38:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOJjf+C5n0f8ZlqvmLvAzGcNb7nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA3MjMxOTU0MjZaFw0yNjA3MjQyMDExMjZaMDMxMTAvBgNV BAMTKEE2QTk4MUQzMjdCN0I3NDFFNUU3NThCM0ZBNkU2M0Q3OEEwQjMwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxiTWuQD0ffs8aRDlIW/q8Ktd +54mFMJ/IOcLPSggY02mGpKFtS0A6rGC9rWTLwCkbDUUFdvMmYApzcCKhleJj6Vy aC4VusuX45u0xPkCR102wCrcmRyXjbOMZ56d9j/qDHmqbtCcGsRf+q9Su/Ig0L3+ JX+48gyQZamGxD4m5fFEeKohrNzOrGqsGXwFe54djlQkWNwiVeoWQ7ikNTFONcNA rVERnHyl3P1c0WSH4OnotAsLo/eJleYG0eHSog2WmZFlQp5+zVn7j6ZS77DtA9gd IMSXxmkcZmBaMRUhcNFo+g8l90uJ1q/1h2Im8L2ZnqK7l4B7jpHir9p2W93VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpqmB0ye3t0Hl51iz+m5j14oLMJ4wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC81MzJFQzk1RDlFRTI3 NkQ5NjU2MjBCN0U0MENBNTBCNEFCOEZDQjBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY3CqWuTGF6+ bkJqdPQfIbtadI9IAoI5IzFOj62G5j5+BOIr6a6oettq6TzdWscfRmnvffYG6UKc d7K529zj/9JUz7Zc8Zho/TknDJNVdcDOvaaFukUmZWFWPHC21Ql1fmXhn2QGP+KP FCF1hDxGXAKaKwWp/TCWo1/aZ+k3sxLDaAkd6bq0S9qEMfDJxNJh7jKsUS0SB2qn pEv/D0tQQFEz1ixACgeAl3kQC9wFm0ugoUHK/S3Ul3zMeyGJMgBI/EWV6wAT1/xZ HcVgkYNP8gpQX046hkst9fEWHs3bng/7NNh3wdWj4bvLGofLR0LJI46BRHhGIIec phhVkJg4pg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:35:51 2026 by rpki-client