$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: /9gKqhDpIbI1F/DD5Fl1OtfrjA9PKLQcuTtLTXSEBsY= Subject key identifier: DF:B4:D7:91:22:12:65:CF:BE:BA:10:47:ED:B3:EB:12:6D:47:19:87 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 30FE536961A594471B20E05E9EB03D8E2D41BFC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: 61 Signing time: Fri 24 Jul 2026 09:30:54 +0000 Manifest this update: Fri 24 Jul 2026 09:25:54 +0000 Manifest next update: Sat 25 Jul 2026 13:13:54 +0000 Files and hashes: 1: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) 2: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: xK6ZNpKYAGp2eGeScBvIBOywaF4+rMaxWjb4oTj+V4E=) 3: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fe:53:69:61:a5:94:47:1b:20:e0:5e:9e:b0:3d:8e:2d:41:bf:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Jul 24 09:25:54 2026 GMT Not After : Jul 25 13:13:54 2026 GMT Subject: CN=DFB4D791221265CFBEBA1047EDB3EB126D471987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:05:d2:14:10:e6:5a:42:0c:84:2b:6a:c8: e3:42:b2:9a:e9:96:ad:93:27:60:ec:7d:05:a2:f3: e1:8f:f3:51:a1:69:02:73:b0:61:f5:ca:72:0e:bf: 6a:a4:ca:c2:93:09:bb:eb:38:b8:d4:d6:90:e3:e4: 85:76:c8:81:d1:4f:89:8b:00:bb:d7:46:9e:37:e5: 5b:e0:78:dc:ff:77:34:0d:94:e1:af:18:d1:bf:fb: 37:59:9e:5e:ea:a4:d2:86:32:70:73:e5:d9:73:eb: 4d:7a:97:81:06:b2:0d:10:89:88:56:b2:e2:b4:ab: af:de:06:93:75:c5:55:5f:18:74:b1:a4:10:84:11: 2b:e7:1a:88:f8:9d:fe:19:f0:cc:32:45:58:3e:c5: 08:7c:a2:f9:6b:be:71:d2:ea:1f:bc:7a:bd:45:16: eb:bf:63:6f:8b:8a:60:74:ab:c0:f2:4a:c6:72:30: 95:1c:be:7f:03:71:a8:2f:8e:7c:9b:ed:ef:2c:6e: 56:36:56:f2:43:d9:f5:72:a8:70:1c:cc:31:4c:f3: 95:fe:e0:af:0c:31:fd:d3:9b:74:65:8d:c2:3e:5f: 40:f8:79:0f:78:48:40:f9:9c:66:db:55:11:c7:8e: 0b:44:44:e7:f2:73:d3:2d:db:c2:86:1f:69:08:f4: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:D7:91:22:12:65:CF:BE:BA:10:47:ED:B3:EB:12:6D:47:19:87 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e1:ec:f0:7b:30:e4:f4:ff:6d:d1:c3:b4:c6:d7:44:d0:0f: 98:0e:6c:16:8a:f0:d8:21:9d:53:b3:30:da:1d:f0:13:81:9a: f5:0a:60:ea:7b:a7:c1:17:b4:46:a1:62:fe:c6:12:92:d5:96: 88:48:60:29:62:2a:fe:aa:26:02:a9:4f:d9:5d:64:8b:7b:3f: 69:96:b5:d2:04:eb:d2:23:4d:71:29:a8:95:c2:ad:8b:fd:74: e7:4d:e0:6c:78:6a:ce:09:ae:c7:55:fe:de:70:0c:23:7d:5e: 2d:c4:94:b6:7c:ea:d1:dd:68:37:4d:c2:1b:bb:bf:9e:c9:93: 8e:9a:fc:d5:7a:b1:d5:15:9c:b7:bc:f3:34:ed:71:90:fc:16: 3f:2e:a0:9c:80:d5:e2:27:45:ce:f4:9f:5d:03:3e:7b:c7:9b: ff:72:93:aa:af:5e:24:a5:8e:65:ef:be:42:38:b0:08:fd:cd: 38:5c:9e:57:c3:08:e5:05:45:63:0a:26:c4:b2:60:87:93:79: c6:ca:7e:1e:68:db:1c:f0:91:89:66:54:ce:85:a6:fe:8e:7a: 3e:58:6d:66:4d:85:ea:10:d1:b1:0f:00:cc:00:ac:51:6e:c8: 4a:ca:73:d2:83:c5:09:81:ce:e0:f8:52:b8:f7:c5:0d:6e:a6: 17:d2:50:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMP5TaWGllEcbIOBenrA9ji1Bv8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjA3MjQwOTI1NTRaFw0yNjA3MjUxMzEzNTRaMDMxMTAvBgNV BAMTKERGQjRENzkxMjIxMjY1Q0ZCRUJBMTA0N0VEQjNFQjEyNkQ0NzE5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKUQXSFBDmWkIMhCtqyONCsprp lq2TJ2DsfQWi8+GP81GhaQJzsGH1ynIOv2qkysKTCbvrOLjU1pDj5IV2yIHRT4mL ALvXRp435VvgeNz/dzQNlOGvGNG/+zdZnl7qpNKGMnBz5dlz6016l4EGsg0QiYhW suK0q6/eBpN1xVVfGHSxpBCEESvnGoj4nf4Z8MwyRVg+xQh8ovlrvnHS6h+8er1F Fuu/Y2+LimB0q8DySsZyMJUcvn8Dcagvjnyb7e8sblY2VvJD2fVyqHAczDFM85X+ 4K8MMf3Tm3RljcI+X0D4eQ94SED5nGbbVRHHjgtEROfyc9Mt28KGH2kI9OGlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU37TXkSISZc++uhBH7bPrEm1HGYcwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+Hs8Hsw5PT/ bdHDtMbXRNAPmA5sForw2CGdU7Mw2h3wE4Ga9Qpg6nunwRe0RqFi/sYSktWWiEhg KWIq/qomAqlP2V1ki3s/aZa10gTr0iNNcSmolcKti/10503gbHhqzgmux1X+3nAM I31eLcSUtnzq0d1oN03CG7u/nsmTjpr81Xqx1RWct7zzNO1xkPwWPy6gnIDV4idF zvSfXQM+e8eb/3KTqq9eJKWOZe++QjiwCP3NOFyeV8MI5QVFYwomxLJgh5N5xsp+ HmjbHPCRiWZUzoWm/o56PlhtZk2F6hDRsQ8AzACsUW7ISspz0oPFCYHO4PhSuPfF DW6mF9JQsg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:56:47 2026 by rpki-client