$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: E5niv5GNJdVCDS0gV3NFm7LIE6iIkDwUkv2CvDyjw4o= Subject key identifier: 98:24:9E:13:74:1B:2B:01:84:DA:45:CF:C3:44:DF:16:55:78:6A:4F Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 53082306DA895DDD10C1658F7C377D7EA770C43C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 20:44:30 +0000 Manifest this update: Thu 23 Jul 2026 20:39:30 +0000 Manifest next update: Fri 24 Jul 2026 20:48:30 +0000 Files and hashes: 1: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 2: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) 3: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) 4: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=) 5: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 6: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 7: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=) 8: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: /cGtm9yHKcAuhXh4VMhVrCVhIgBUoV89uGkEgAWMy8c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:08:23:06:da:89:5d:dd:10:c1:65:8f:7c:37:7d:7e:a7:70:c4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: Jul 23 20:39:30 2026 GMT Not After : Jul 24 20:48:30 2026 GMT Subject: CN=98249E13741B2B0184DA45CFC344DF1655786A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:4d:fb:d3:55:e2:57:3c:b6:8e:72:05:08: 67:96:af:97:de:3a:c8:cb:35:6b:b3:fb:1c:c6:14: ad:66:e0:be:b1:07:0b:b2:52:46:39:d5:39:56:b5: ae:dc:f2:fc:76:4f:ce:fb:ea:39:39:9c:84:1a:77: 84:54:d2:ee:21:38:b9:bf:2b:b0:ac:0b:59:98:0c: 5e:87:67:9f:9a:fa:04:73:5e:e8:a5:6e:16:24:04: bd:c1:6e:28:82:81:e7:5a:89:ca:de:b1:e2:0c:07: a6:e8:e4:58:c2:ab:4d:25:17:34:73:76:44:b6:90: 0c:1f:73:51:8f:33:99:b8:2f:d6:cc:10:14:f3:d2: 50:e9:a5:1e:0a:26:20:d0:77:15:6c:ad:09:e5:0e: 56:1b:51:6b:2f:bc:4d:93:29:88:dc:b8:9c:d7:0b: 8e:70:60:66:26:34:d1:d3:f7:5d:21:39:cf:e0:1f: 5e:51:6b:6a:2c:8b:99:6a:6f:fe:69:28:3e:b4:e0: c9:27:3b:e7:8d:6a:20:87:e3:c8:81:74:ea:03:62: b0:b1:ce:68:51:bb:5c:41:db:bb:0e:22:98:fd:24: 1c:ef:c5:39:0f:7c:bc:17:6f:df:b2:9f:19:41:cd: 20:5b:61:2e:81:2e:f6:b1:b9:0e:12:9f:56:ec:ed: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:9E:13:74:1B:2B:01:84:DA:45:CF:C3:44:DF:16:55:78:6A:4F X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:68:bc:05:4e:2f:da:7b:f3:b1:14:3a:42:da:7e:82:f5:01: 29:d2:2c:da:78:63:37:29:09:1f:61:2b:f5:23:6b:2b:49:ad: ab:ab:33:66:18:86:73:22:1d:59:fc:3e:de:f7:62:3f:e9:77: 41:9a:64:4f:49:2d:86:a8:88:44:7d:2c:2a:ca:90:35:c9:86: 9f:5d:2c:cc:a8:d6:44:a5:ae:90:69:05:e1:44:be:3c:92:c3: 91:ac:4e:fb:4f:1f:e5:34:97:6b:7a:ba:d9:07:49:25:1f:e4: c1:f0:d7:49:c2:c2:ce:09:88:3c:cf:3d:26:5c:83:a6:f1:64: 15:47:ff:74:8f:c4:5c:f3:4c:19:6c:25:ff:24:f3:ff:5e:5c: 1f:df:e0:25:35:47:0f:42:ac:fe:f1:26:0b:51:7d:89:4b:01: 5a:4f:c1:d8:d7:e2:a4:23:1f:70:fb:56:7f:fd:5d:48:75:5b: 5f:79:35:44:51:c7:f5:b3:8b:6c:98:d1:e7:7e:08:49:90:86: 62:c8:81:0d:9d:d6:50:85:23:59:59:22:23:94:94:4d:80:50: 5e:04:7a:94:56:0d:b8:50:e2:93:0b:8e:6b:18:89:d0:62:99: f4:dd:9f:72:c6:b6:63:ad:99:0a:93:9e:4b:f2:8d:f9:49:4f: 36:19:a8:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUwgjBtqJXd0QwWWPfDd9fqdwxDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjA3MjMyMDM5MzBaFw0yNjA3MjQyMDQ4MzBaMDMxMTAvBgNV BAMTKDk4MjQ5RTEzNzQxQjJCMDE4NERBNDVDRkMzNDRERjE2NTU3ODZBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPk3701XiVzy2jnIFCGeWr5fe OsjLNWuz+xzGFK1m4L6xBwuyUkY51TlWta7c8vx2T8776jk5nIQad4RU0u4hOLm/ K7CsC1mYDF6HZ5+a+gRzXuilbhYkBL3BbiiCgedaicreseIMB6bo5FjCq00lFzRz dkS2kAwfc1GPM5m4L9bMEBTz0lDppR4KJiDQdxVsrQnlDlYbUWsvvE2TKYjcuJzX C45wYGYmNNHT910hOc/gH15Ra2osi5lqb/5pKD604MknO+eNaiCH48iBdOoDYrCx zmhRu1xB27sOIpj9JBzvxTkPfLwXb9+ynxlBzSBbYS6BLvaxuQ4Sn1bs7Uo/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmCSeE3QbKwGE2kXPw0TfFlV4ak8wHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2i8BU4v2nvz sRQ6Qtp+gvUBKdIs2nhjNykJH2Er9SNrK0mtq6szZhiGcyIdWfw+3vdiP+l3QZpk T0kthqiIRH0sKsqQNcmGn10szKjWRKWukGkF4US+PJLDkaxO+08f5TSXa3q62QdJ JR/kwfDXScLCzgmIPM89JlyDpvFkFUf/dI/EXPNMGWwl/yTz/15cH9/gJTVHD0Ks /vEmC1F9iUsBWk/B2NfipCMfcPtWf/1dSHVbX3k1RFHH9bOLbJjR534ISZCGYsiB DZ3WUIUjWVkiI5SUTYBQXgR6lFYNuFDikwuOaxiJ0GKZ9N2fcsa2Y62ZCpOeS/KN +UlPNhmoAw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:00 2026 by rpki-client