$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: Uc/O0fnbjXcAB5B/TDVqONBD7lV7TMV7HJkS6XHcCZo= Subject key identifier: 92:8F:6D:F8:54:60:7E:E8:BF:26:21:D5:A7:4F:0E:50:6E:4F:7F:1C Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 112172868ADB51FA8942F9745957D7503FB389DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 82 Signing time: Fri 24 Jul 2026 08:35:47 +0000 Manifest this update: Fri 24 Jul 2026 08:30:47 +0000 Manifest next update: Sat 25 Jul 2026 09:08:47 +0000 Files and hashes: 1: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 2: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 3: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 4: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: ZIfDWrwSKFPi44S3BwKrdvzf+Z/1tgNj2SJ3XIOUlvE=) 5: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 6: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:21:72:86:8a:db:51:fa:89:42:f9:74:59:57:d7:50:3f:b3:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Jul 24 08:30:47 2026 GMT Not After : Jul 25 09:08:47 2026 GMT Subject: CN=928F6DF854607EE8BF2621D5A74F0E506E4F7F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:d5:46:cd:bf:8b:b5:f4:98:a3:92:72:f5: 3c:56:30:00:4c:5b:6a:68:ac:25:51:e5:e8:8e:da: 6a:ee:b4:ba:92:30:79:70:5e:75:83:63:87:12:d4: a7:f7:25:02:a9:e2:c6:77:d1:a9:55:9c:66:f5:d6: fb:59:7d:97:98:f6:47:d2:49:f6:39:6b:5d:24:fe: c1:78:50:30:f5:20:5e:21:47:b9:e6:d9:d1:c4:07: 9f:42:fb:ef:33:95:88:c5:7a:13:da:d1:49:c8:01: d7:d7:94:45:5a:97:68:02:69:69:f9:0b:d7:d6:18: e7:23:06:9f:10:da:cb:8e:b6:dc:61:07:a1:e6:84: 50:1a:1c:71:b1:81:29:97:44:35:56:37:8b:b4:b3: 9a:7b:ee:c9:6d:e4:28:07:88:19:e0:bf:71:ee:e3: 66:48:aa:30:0c:04:f4:52:bc:51:a0:75:49:05:4c: 98:9d:81:73:47:5d:c0:4f:b5:b6:c1:01:f4:97:77: c3:df:25:7d:88:fc:93:af:43:50:1e:ef:b5:31:ad: dc:40:1b:b9:57:01:ab:b4:d9:07:43:12:e5:d8:3d: 27:0b:c7:56:52:8a:c4:3e:41:14:87:aa:26:ef:2f: 48:8d:20:d1:e7:a4:69:65:1e:73:47:a9:8b:0a:3a: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:6D:F8:54:60:7E:E8:BF:26:21:D5:A7:4F:0E:50:6E:4F:7F:1C X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:08:9e:79:99:e9:76:04:f0:48:2c:6e:13:5a:17:4c:2f:55: ae:58:e8:80:e7:c7:89:e4:92:9d:74:ae:8c:a1:e4:fe:99:a3: 03:fb:f4:f7:02:54:5b:86:4d:6b:cc:4f:3e:14:15:58:21:20: 69:44:64:31:5b:05:f9:81:85:f4:62:1b:bd:a0:1b:05:fb:c8: fc:f9:dd:05:02:c6:6b:ef:60:7c:ab:66:60:4a:0f:45:d3:6a: 8d:04:c7:30:9f:fb:ef:e7:b9:e0:a7:cb:bb:71:4a:14:86:13: a6:80:f5:88:6a:c2:d3:6e:5c:fb:51:86:4b:e9:b1:cc:70:39: 4a:09:0f:2e:2a:76:61:50:cf:25:31:5c:f6:a1:aa:4f:09:1c: b5:84:fb:94:04:ee:53:81:75:ef:5b:38:65:40:45:59:92:b3: 0e:23:16:00:de:2e:7a:d1:eb:03:08:7c:95:f9:cd:4f:62:ca: cf:70:a2:54:ba:2f:9f:48:3c:37:a6:e0:c1:17:62:33:70:b8: 72:df:3f:44:6f:30:c9:e6:55:27:be:52:35:f2:40:57:f0:51: af:b5:7e:8e:be:22:ed:8c:af:92:31:bb:60:06:9a:10:fe:ad: 92:aa:e3:c1:e2:37:81:14:7a:65:8f:89:86:74:84:f9:ef:d3: 29:2b:bf:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUESFyhorbUfqJQvl0WVfXUD+zidwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA3MjQwODMwNDdaFw0yNjA3MjUwOTA4NDdaMDMxMTAvBgNV BAMTKDkyOEY2REY4NTQ2MDdFRThCRjI2MjFENUE3NEYwRTUwNkU0RjdGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZtVGzb+LtfSYo5Jy9TxWMABM W2porCVR5eiO2mrutLqSMHlwXnWDY4cS1Kf3JQKp4sZ30alVnGb11vtZfZeY9kfS SfY5a10k/sF4UDD1IF4hR7nm2dHEB59C++8zlYjFehPa0UnIAdfXlEVal2gCaWn5 C9fWGOcjBp8Q2suOttxhB6HmhFAaHHGxgSmXRDVWN4u0s5p77slt5CgHiBngv3Hu 42ZIqjAMBPRSvFGgdUkFTJidgXNHXcBPtbbBAfSXd8PfJX2I/JOvQ1Ae77UxrdxA G7lXAau02QdDEuXYPScLx1ZSisQ+QRSHqibvL0iNINHnpGllHnNHqYsKOnLLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUko9t+FRgfui/JiHVp08OUG5PfxwwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgieeZnpdgTw SCxuE1oXTC9VrljogOfHieSSnXSujKHk/pmjA/v09wJUW4ZNa8xPPhQVWCEgaURk MVsF+YGF9GIbvaAbBfvI/PndBQLGa+9gfKtmYEoPRdNqjQTHMJ/77+e54KfLu3FK FIYTpoD1iGrC025c+1GGS+mxzHA5SgkPLip2YVDPJTFc9qGqTwkctYT7lATuU4F1 71s4ZUBFWZKzDiMWAN4uetHrAwh8lfnNT2LKz3CiVLovn0g8N6bgwRdiM3C4ct8/ RG8wyeZVJ75SNfJAV/BRr7V+jr4i7YyvkjG7YAaaEP6tkqrjweI3gRR6ZY+JhnSE +e/TKSu/Mg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:26:13 2026 by rpki-client