$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json) Hash identifier: Q+fMnfiJ8ycNQj/kIX7YSX+yH45ZIuR7QmBPNe5HEhc= Subject key identifier: 56:3C:46:52:23:4B:CF:B5:0A:86:4C:05:24:4B:C1:F9:36:D3:0C:CC Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 101FED64F5077071B319B86752F175F752D9BC48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft Manifest number: 7E Signing time: Fri 24 Jul 2026 12:41:11 +0000 Manifest this update: Fri 24 Jul 2026 12:36:11 +0000 Manifest next update: Sat 25 Jul 2026 14:07:11 +0000 Files and hashes: 1: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=) 2: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: QYteyTgxZjPp2H+sAO4CTpWvXwRgwygfkCIqfpc3ZFU=) 3: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:ed:64:f5:07:70:71:b3:19:b8:67:52:f1:75:f7:52:d9:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Jul 24 12:36:11 2026 GMT Not After : Jul 25 14:07:11 2026 GMT Subject: CN=563C4652234BCFB50A864C05244BC1F936D30CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:6f:6f:93:86:fe:04:d4:8f:98:7e:36:02: 08:ba:2b:fd:0c:cd:52:ed:37:21:16:15:90:88:99: f9:3a:73:85:9a:85:99:39:45:a5:9a:7a:e3:b1:83: 32:a8:28:59:66:fa:8f:85:5c:c5:2e:0a:89:24:e5: df:2a:c0:a5:69:ac:70:d0:28:b5:bf:89:1f:36:db: bb:8d:25:d3:8f:7b:f1:ab:dd:cc:35:c8:ee:e7:45: 38:99:09:f4:da:7d:b4:94:9c:68:b8:13:7c:96:87: 1e:a5:b4:e3:e3:a5:7f:a5:fb:97:67:5e:e8:e4:32: cf:1c:46:fc:33:00:6b:9c:ed:d1:16:4b:f6:09:62: fb:a5:45:50:d2:d6:04:cd:2e:df:2f:31:9b:53:69: 17:58:4b:c3:df:a1:8c:45:5c:08:35:00:6c:d4:54: 11:ce:99:49:e9:26:95:9c:5f:64:d5:48:bb:8e:d1: 1a:84:af:cd:0d:8c:e5:9b:c0:b5:1a:d9:82:06:89: 76:04:d7:e6:40:f0:87:8d:b2:bc:17:5d:96:6f:7f: 2f:25:c3:84:36:38:33:54:ff:d2:07:cd:0a:4b:3a: 3b:b1:7b:39:04:49:8a:d8:c5:ac:45:5c:3c:5d:64: 46:26:b4:32:d4:4a:6c:d4:1e:54:71:06:7e:04:bd: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:46:52:23:4B:CF:B5:0A:86:4C:05:24:4B:C1:F9:36:D3:0C:CC X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:05:9f:6f:d0:fb:77:50:3d:3b:87:2d:cd:34:b2:a5:df:58: 68:4c:69:0c:5e:2e:8b:4e:13:7a:a0:0e:ec:a9:8d:b4:45:8d: 86:9f:30:84:8b:5a:2c:50:8e:c1:d3:0c:36:76:d2:35:72:b6: 67:09:28:4e:ac:4b:c4:46:e1:10:7a:b4:18:67:5d:02:fb:88: 24:c8:af:d3:31:db:34:97:87:0b:33:d2:4c:05:8f:d7:97:11: fb:70:8c:ed:8b:bc:8c:da:a6:16:24:8c:33:e4:4c:fd:1d:a1: 11:2b:1a:be:38:cd:51:a2:cf:83:27:29:ec:dc:50:76:42:35: fa:49:89:ae:ee:c3:1e:fa:c5:58:c9:83:fe:76:7a:e2:cf:b7: a0:8c:ea:d6:d4:8e:11:5b:b8:b2:de:b7:c5:7a:38:44:ae:50: 95:5f:72:9d:f4:8a:e7:56:6c:f6:5e:99:a8:af:73:99:04:d2: 7e:e9:6d:75:63:36:a7:2f:f2:1e:ec:71:b1:e7:9f:f7:b1:a7: a7:e8:b5:c4:57:cd:f0:1f:47:62:5d:ba:6d:a7:b4:8d:ec:01: 22:26:fd:45:da:88:92:c5:38:f9:57:50:e0:20:b3:05:5b:61: a1:68:60:b3:83:36:64:de:d6:d8:c3:96:42:4b:20:86:01:b0: df:89:03:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEB/tZPUHcHGzGbhnUvF191LZvEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA3MjQxMjM2MTFaFw0yNjA3MjUxNDA3MTFaMDMxMTAvBgNV BAMTKDU2M0M0NjUyMjM0QkNGQjUwQTg2NEMwNTI0NEJDMUY5MzZEMzBDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHm9vk4b+BNSPmH42Agi6K/0M zVLtNyEWFZCImfk6c4WahZk5RaWaeuOxgzKoKFlm+o+FXMUuCokk5d8qwKVprHDQ KLW/iR8227uNJdOPe/Gr3cw1yO7nRTiZCfTafbSUnGi4E3yWhx6ltOPjpX+l+5dn XujkMs8cRvwzAGuc7dEWS/YJYvulRVDS1gTNLt8vMZtTaRdYS8PfoYxFXAg1AGzU VBHOmUnpJpWcX2TVSLuO0RqEr80NjOWbwLUa2YIGiXYE1+ZA8IeNsrwXXZZvfy8l w4Q2ODNU/9IHzQpLOjuxezkESYrYxaxFXDxdZEYmtDLUSmzUHlRxBn4EvdttAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVjxGUiNLz7UKhkwFJEvB+TbTDMwwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagWfb9D7d1A9 O4ctzTSypd9YaExpDF4ui04TeqAO7KmNtEWNhp8whItaLFCOwdMMNnbSNXK2Zwko TqxLxEbhEHq0GGddAvuIJMiv0zHbNJeHCzPSTAWP15cR+3CM7Yu8jNqmFiSMM+RM /R2hESsavjjNUaLPgycp7NxQdkI1+kmJru7DHvrFWMmD/nZ64s+3oIzq1tSOEVu4 st63xXo4RK5QlV9ynfSK51Zs9l6ZqK9zmQTSfultdWM2py/yHuxxseef97Gnp+i1 xFfN8B9HYl26bae0jewBIib9RdqIksU4+VdQ4CCzBVthoWhgs4M2ZN7W2MOWQksg hgGw34kD2Q== -----END CERTIFICATE-----Generated at Fri Jul 24 17:51:55 2026 by rpki-client