$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: dt1iBsLVKheqwGpES9C9OUqh39snPyO3BpQWrG5rOJc= Subject key identifier: 02:43:52:F0:B2:F0:C1:77:68:A3:F4:8F:2F:56:74:78:29:DD:B0:73 Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 4FDD58A1E2DF01A948745C4520AD028F7D46BFAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: 7A Signing time: Fri 24 Jul 2026 09:05:50 +0000 Manifest this update: Fri 24 Jul 2026 09:00:50 +0000 Manifest next update: Sat 25 Jul 2026 11:01:50 +0000 Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) 2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: agupoicwDA+a+65OYE38bT7dXxKKJPdYSXuotvZFOyI=) 3: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:dd:58:a1:e2:df:01:a9:48:74:5c:45:20:ad:02:8f:7d:46:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Jul 24 09:00:50 2026 GMT Not After : Jul 25 11:01:50 2026 GMT Subject: CN=024352F0B2F0C17768A3F48F2F56747829DDB073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:54:e8:ac:61:24:34:e2:77:f3:95:fb:79: b0:80:5e:ed:0e:6f:b2:6a:dc:f9:4d:ad:25:d4:b9: 20:f8:2d:5e:05:9c:a5:d5:4c:f4:1e:0b:c0:51:99: 98:89:21:77:d9:bd:ee:aa:12:0c:55:53:47:cc:13: a2:72:d5:ff:ad:aa:a1:65:4b:be:2f:6f:f3:35:ce: ed:c0:bb:94:82:c7:d3:5f:fe:95:45:20:54:d6:46: cb:16:a4:d1:30:a2:68:c1:31:9e:49:6a:ea:2c:ea: 03:96:78:96:58:92:26:d4:f8:68:68:59:48:bf:47: c9:21:cb:05:4a:22:b1:7d:65:e0:89:cc:f5:14:12: 2d:ca:12:28:51:10:f6:32:84:a7:51:96:de:0a:15: 9b:2a:23:e9:54:da:d3:84:cd:39:1d:a8:af:11:e3: b4:46:f5:f9:4e:95:c7:2f:03:5d:67:ab:00:d0:ef: 0f:3a:bb:86:02:01:2a:97:30:e4:a4:ea:61:4f:ac: 43:99:35:ef:1c:85:60:ce:36:58:5c:80:fa:36:e1: f4:0e:ff:03:f4:48:5a:fa:41:a3:f6:13:74:57:be: d9:d1:83:dc:33:7a:f7:15:17:95:b0:91:71:8c:b8: 1c:c4:d6:53:e1:3a:12:97:e1:92:5d:4f:e3:d6:aa: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:52:F0:B2:F0:C1:77:68:A3:F4:8F:2F:56:74:78:29:DD:B0:73 X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:1b:74:fa:07:d1:51:4a:88:7d:8b:c4:a9:05:81:00:ec: e8:d7:d5:5b:2e:6f:75:48:d7:7b:7e:0d:2e:03:bf:44:25:03: c9:51:df:e1:29:6c:23:28:82:ee:1c:02:35:97:92:00:7a:62: df:52:43:2a:7a:bf:d8:d1:99:03:91:7e:2f:f8:24:8e:67:0c: 3e:e1:b3:dd:58:7f:7d:e7:fc:63:38:9a:29:37:c1:62:c5:37: 31:4b:a0:b7:0a:62:d6:51:2f:74:d5:18:20:4f:e8:cc:c5:47: 0d:2b:d6:96:41:bf:68:78:52:86:e5:f4:6d:f3:e8:fc:fd:bd: 72:81:c3:fc:d0:9b:bd:fe:a2:06:f9:2d:ea:83:e8:71:dd:dd: 52:f7:e7:91:21:12:8f:4b:28:16:d1:24:73:97:55:0d:91:3f: b5:0c:6e:47:2e:c0:9b:9d:d0:9f:7e:54:58:61:ad:96:e0:89: 1a:5c:4a:9d:38:ab:23:6a:51:f6:ec:36:c6:40:9c:c4:28:75: 3d:da:3e:d3:3e:42:df:03:1b:a7:d2:a6:0e:f8:86:d2:fa:28: d0:a0:bf:c6:90:c4:66:20:d0:69:d7:3e:73:03:bb:1e:9f:56: cd:22:54:bc:a2:c0:4a:82:48:2f:fb:c2:ed:e5:df:67:08:d0: 86:33:4f:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT91YoeLfAalIdFxFIK0Cj31Gv60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjA3MjQwOTAwNTBaFw0yNjA3MjUxMTAxNTBaMDMxMTAvBgNV BAMTKDAyNDM1MkYwQjJGMEMxNzc2OEEzRjQ4RjJGNTY3NDc4MjlEREIwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmVTorGEkNOJ385X7ebCAXu0O b7Jq3PlNrSXUuSD4LV4FnKXVTPQeC8BRmZiJIXfZve6qEgxVU0fME6Jy1f+tqqFl S74vb/M1zu3Au5SCx9Nf/pVFIFTWRssWpNEwomjBMZ5Jauos6gOWeJZYkibU+Gho WUi/R8khywVKIrF9ZeCJzPUUEi3KEihREPYyhKdRlt4KFZsqI+lU2tOEzTkdqK8R 47RG9flOlccvA11nqwDQ7w86u4YCASqXMOSk6mFPrEOZNe8chWDONlhcgPo24fQO /wP0SFr6QaP2E3RXvtnRg9wzevcVF5WwkXGMuBzE1lPhOhKX4ZJdT+PWqkUHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAkNS8LLwwXdoo/SPL1Z0eCndsHMwHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiUbdPoH0VFK iH2LxKkFgQDs6NfVWy5vdUjXe34NLgO/RCUDyVHf4SlsIyiC7hwCNZeSAHpi31JD Knq/2NGZA5F+L/gkjmcMPuGz3Vh/fef8YziaKTfBYsU3MUugtwpi1lEvdNUYIE/o zMVHDSvWlkG/aHhShuX0bfPo/P29coHD/NCbvf6iBvkt6oPocd3dUvfnkSESj0so FtEkc5dVDZE/tQxuRy7Am53Qn35UWGGtluCJGlxKnTirI2pR9uw2xkCcxCh1Pdo+ 0z5C3wMbp9KmDviG0voo0KC/xpDEZiDQadc+cwO7Hp9WzSJUvKLASoJIL/vC7eXf ZwjQhjNPuw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:56:41 2026 by rpki-client