$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: 6KazGhvhdpDTjIA5HaEf47eVqxMBzXK91AfIr1ElX4A= Subject key identifier: 92:8F:66:10:7D:41:E8:CE:80:C2:E0:25:93:BA:9E:1A:F2:C7:92:B3 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 5CDA363DE494545C6262DD416FA6D2BD903A0B4F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 58 Signing time: Thu 23 Jul 2026 15:54:03 +0000 Manifest this update: Thu 23 Jul 2026 15:49:03 +0000 Manifest next update: Fri 24 Jul 2026 18:23:03 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: g629s56a+K37rEhXALVyciZfd1lZZ/f8dFfN814zqvI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:da:36:3d:e4:94:54:5c:62:62:dd:41:6f:a6:d2:bd:90:3a:0b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Jul 23 15:49:03 2026 GMT Not After : Jul 24 18:23:03 2026 GMT Subject: CN=928F66107D41E8CE80C2E02593BA9E1AF2C792B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:57:3e:18:d0:40:c6:05:a3:99:22:8f:76: 62:89:2d:64:35:73:29:20:35:40:59:de:ec:bc:55: 1f:d3:f6:77:1d:7a:64:82:b0:61:02:70:78:a2:71: ab:b9:64:9e:9d:8d:7f:36:22:71:c0:39:af:47:7a: 2e:64:62:31:ef:86:f3:54:05:20:14:19:6b:3a:a0: 00:8b:ed:af:50:07:96:fc:ea:5f:79:11:31:a5:df: 38:20:ec:88:7c:77:29:21:32:73:4d:57:22:d9:68: aa:76:80:d0:4e:6a:09:8c:ff:8a:24:0e:98:6b:fd: 56:d1:bf:2e:50:63:0c:a5:74:e8:2f:5f:be:4f:40: dc:ff:e8:db:f0:20:8e:ac:38:13:3d:28:1d:8f:c1: 4d:16:4b:2d:ff:8b:97:51:7c:01:32:c5:fb:d0:d9: cf:93:5d:05:3d:7c:e3:36:9d:e4:cd:80:4c:a4:fe: 2b:5c:95:a8:0f:1f:5a:37:4b:d9:80:54:36:82:e4: 48:ea:c0:d1:95:45:5d:1a:24:63:e9:d5:54:91:21: 25:08:0c:6e:88:df:d2:0c:4b:a8:1e:15:5d:ed:ff: c9:17:e5:e1:92:77:64:c3:68:8a:6d:3a:28:e6:46: 7d:c6:8a:24:9d:2d:50:ac:1a:bf:fd:aa:cf:31:40: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:66:10:7D:41:E8:CE:80:C2:E0:25:93:BA:9E:1A:F2:C7:92:B3 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:77:33:a6:f0:0e:cf:eb:4a:6e:16:dd:21:8e:e7:90:5c:07: f9:fc:28:5d:c3:52:6f:4c:d0:71:66:ba:e4:1c:65:13:10:f1: c3:8d:83:41:c6:ed:18:29:e0:fa:ca:53:9b:38:6f:74:c7:aa: 8a:66:1b:9a:06:51:4e:70:fd:fe:7c:64:b0:0d:d8:80:a1:02: 07:60:1f:b0:8c:fc:c5:34:f1:a8:56:49:7d:39:e0:81:25:c0: 75:e2:0a:6c:b1:43:6e:7d:de:e3:7d:04:74:c9:a9:fc:9b:e9: c9:e8:7d:46:f5:d1:51:5e:87:64:bf:ec:77:47:61:51:c0:28: 4a:46:4f:12:97:bc:3f:61:2e:6e:08:63:78:4a:9c:56:6b:80: a2:50:fa:b7:7f:50:c1:d1:8d:ca:ba:3d:db:ff:ee:19:58:7c: d4:2f:f7:b3:8a:2b:8b:4d:69:19:c3:08:b5:14:34:7f:9f:5b: e4:55:ed:14:62:1f:2f:bb:8b:78:31:a9:06:b9:33:07:88:d9: 29:d8:9b:01:6f:fb:b5:86:ee:f3:de:f7:6a:b7:78:be:19:15: 52:03:c3:c0:c0:79:c1:db:bc:d9:fd:80:c3:12:de:37:ba:1f: d0:91:23:a1:ce:c3:61:0b:78:3f:65:87:99:da:cc:ac:f8:d4: 19:a6:cf:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXNo2PeSUVFxiYt1Bb6bSvZA6C08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjA3MjMxNTQ5MDNaFw0yNjA3MjQxODIzMDNaMDMxMTAvBgNV BAMTKDkyOEY2NjEwN0Q0MUU4Q0U4MEMyRTAyNTkzQkE5RTFBRjJDNzkyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIP1c+GNBAxgWjmSKPdmKJLWQ1 cykgNUBZ3uy8VR/T9ncdemSCsGECcHiicau5ZJ6djX82InHAOa9Hei5kYjHvhvNU BSAUGWs6oACL7a9QB5b86l95ETGl3zgg7Ih8dykhMnNNVyLZaKp2gNBOagmM/4ok Dphr/VbRvy5QYwyldOgvX75PQNz/6NvwII6sOBM9KB2PwU0WSy3/i5dRfAEyxfvQ 2c+TXQU9fOM2neTNgEyk/itclagPH1o3S9mAVDaC5EjqwNGVRV0aJGPp1VSRISUI DG6I39IMS6geFV3t/8kX5eGSd2TDaIptOijmRn3GiiSdLVCsGr/9qs8xQIK5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUko9mEH1B6M6AwuAlk7qeGvLHkrMwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3czpvAOz+tK bhbdIY7nkFwH+fwoXcNSb0zQcWa65BxlExDxw42DQcbtGCng+spTmzhvdMeqimYb mgZRTnD9/nxksA3YgKECB2AfsIz8xTTxqFZJfTnggSXAdeIKbLFDbn3e430EdMmp /Jvpyeh9RvXRUV6HZL/sd0dhUcAoSkZPEpe8P2EubghjeEqcVmuAolD6t39QwdGN yro92//uGVh81C/3s4ori01pGcMItRQ0f59b5FXtFGIfL7uLeDGpBrkzB4jZKdib AW/7tYbu8973ard4vhkVUgPDwMB5wdu82f2AwxLeN7of0JEjoc7DYQt4P2WHmdrM rPjUGabPcg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:40 2026 by rpki-client