$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: 94YGSYMIs9WWkPhpF/JQB84/YfEAKXH7eauFIqh7If8= Subject key identifier: A5:FB:56:50:55:DD:23:EA:78:58:1E:17:04:26:E7:15:39:0F:8B:6D Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 2B7D74AC4F52842B6DD32EB9E4B9905F24FCC4E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: 7D Signing time: Fri 24 Jul 2026 11:21:04 +0000 Manifest this update: Fri 24 Jul 2026 11:16:04 +0000 Manifest next update: Sat 25 Jul 2026 11:23:04 +0000 Files and hashes: 1: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 2: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 3: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 4: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 5: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 6: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) 7: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: I3ddlJ44UfQB3Yb2BTiqOvjPvp7v6WCUya/ySbgVNP0=) 8: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 9: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7d:74:ac:4f:52:84:2b:6d:d3:2e:b9:e4:b9:90:5f:24:fc:c4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Jul 24 11:16:04 2026 GMT Not After : Jul 25 11:23:04 2026 GMT Subject: CN=A5FB565055DD23EA78581E170426E715390F8B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:76:db:93:d2:1e:55:f7:01:50:f3:1f:cb: 5e:9e:fb:c1:0c:0b:1c:42:2b:d7:80:19:42:3c:e0: c8:bb:a3:38:57:24:03:f9:de:f6:9a:b6:b0:8c:50: d2:29:55:7d:b5:a4:72:38:26:a1:48:26:c7:c7:4d: 0b:62:7b:4e:99:39:3e:13:04:a4:77:39:86:57:30: 09:8a:65:ab:34:bc:32:1d:c7:d7:87:99:9c:27:10: 7b:15:2a:2f:1c:fc:d4:b1:c1:76:fa:a4:2e:6c:9e: 91:16:d1:2a:50:7f:f0:e0:39:85:6c:eb:65:fb:3a: 8b:14:78:b3:5c:96:ca:af:d4:60:91:47:dc:22:8f: 33:c8:d8:5a:e9:b0:d2:cc:46:52:3b:da:10:0f:b6: e2:3c:d0:3c:4d:3f:47:b0:a6:81:b0:76:6b:36:be: ef:54:90:eb:e9:7f:ad:dc:8e:f3:11:63:ae:e1:97: eb:ec:32:80:cb:81:3e:a1:72:8d:02:39:24:b2:64: 8d:ef:99:3b:e9:4a:c0:59:14:51:a6:04:4a:7e:ea: 50:13:c4:14:45:ff:30:aa:e2:91:2c:a1:76:2c:da: ae:ed:c8:30:15:2f:08:14:43:81:65:53:ef:b7:fa: b9:d8:fe:5d:f5:40:ea:91:47:87:1e:ec:0f:89:72: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:56:50:55:DD:23:EA:78:58:1E:17:04:26:E7:15:39:0F:8B:6D X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:77:25:e4:0f:55:b7:0b:b6:51:dd:24:5c:95:84:f1:30:16: 41:fa:9d:76:ba:b2:76:09:83:d5:34:ae:ab:bb:68:6a:90:b9: a1:cb:f6:c2:07:59:ce:8f:bf:02:7e:9e:bd:59:33:bf:50:ff: 56:34:42:19:84:50:57:d7:95:ef:5c:87:f5:03:3b:32:9c:49: 4a:0b:4b:9e:57:97:cc:57:3e:a4:05:87:d5:6b:d5:3e:7a:8f: 7d:41:7d:bd:08:a9:12:b5:26:de:fb:f8:31:d3:24:92:8a:60: 8a:2a:0d:a7:e2:c0:26:10:69:48:9d:b3:9b:bd:40:a4:ae:ab: 55:b5:97:1e:02:e8:ba:a4:ad:a7:86:8e:28:3e:b1:df:28:f5: 33:65:2f:db:7c:cc:10:21:16:df:63:db:a5:e5:a7:49:e6:a0: 7e:ab:ec:40:ae:9f:ba:8d:ea:a6:8f:0e:de:53:22:d0:b6:b0: 58:fa:a1:39:10:05:e5:05:4e:c7:43:c4:e8:5f:15:d0:e3:d5: b6:cb:51:22:46:cb:12:3c:e2:a2:53:8b:68:d0:a2:cc:4e:6f: f2:7b:38:d6:dc:c0:bb:96:51:08:1b:16:30:1f:26:bc:1f:67: 44:52:2b:4d:2a:cb:ba:c5:57:0c:8b:e7:7d:c9:26:b7:96:bb: 84:ce:7b:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK310rE9ShCtt0y655LmQXyT8xOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA3MjQxMTE2MDRaFw0yNjA3MjUxMTIzMDRaMDMxMTAvBgNV BAMTKEE1RkI1NjUwNTVERDIzRUE3ODU4MUUxNzA0MjZFNzE1MzkwRjhCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1Xbbk9IeVfcBUPMfy16e+8EM CxxCK9eAGUI84Mi7ozhXJAP53vaatrCMUNIpVX21pHI4JqFIJsfHTQtie06ZOT4T BKR3OYZXMAmKZas0vDIdx9eHmZwnEHsVKi8c/NSxwXb6pC5snpEW0SpQf/DgOYVs 62X7OosUeLNclsqv1GCRR9wijzPI2FrpsNLMRlI72hAPtuI80DxNP0ewpoGwdms2 vu9UkOvpf63cjvMRY67hl+vsMoDLgT6hco0COSSyZI3vmTvpSsBZFFGmBEp+6lAT xBRF/zCq4pEsoXYs2q7tyDAVLwgUQ4FlU++3+rnY/l31QOqRR4ce7A+Jcuf1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpftWUFXdI+p4WB4XBCbnFTkPi20wHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3cl5A9Vtwu2 Ud0kXJWE8TAWQfqddrqydgmD1TSuq7toapC5ocv2wgdZzo+/An6evVkzv1D/VjRC GYRQV9eV71yH9QM7MpxJSgtLnleXzFc+pAWH1WvVPnqPfUF9vQipErUm3vv4MdMk kopgiioNp+LAJhBpSJ2zm71ApK6rVbWXHgLouqStp4aOKD6x3yj1M2Uv23zMECEW 32PbpeWnSeagfqvsQK6fuo3qpo8O3lMi0LawWPqhORAF5QVOx0PE6F8V0OPVtstR IkbLEjziolOLaNCizE5v8ns41tzAu5ZRCBsWMB8mvB9nRFIrTSrLusVXDIvnfckm t5a7hM578g== -----END CERTIFICATE-----Generated at Fri Jul 24 19:57:49 2026 by rpki-client