$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: /KIXcqMv3TQFt/Hx63Tby1AJcmMeD2KCOzjpD71pHgg= Subject key identifier: 1A:A6:35:34:03:09:22:AD:36:89:18:B8:31:E6:B0:09:52:AE:E0:05 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 6240BE6179C3DAA2DF13EAABFD2A62523D9ADB64 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: 59 Signing time: Thu 23 Jul 2026 14:28:52 +0000 Manifest this update: Thu 23 Jul 2026 14:23:52 +0000 Manifest next update: Fri 24 Jul 2026 15:43:52 +0000 Files and hashes: 1: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: RTS3AckO5mkf9oB9TGG56mj344OTZMIj2/qJ6+TDp0w=) 2: 323030313a6463373a623a3a2f34382d3438203d3e203234313531.roa (hash: nCmmLKf7p/+gDBZjpiG7vY0+piKta/7HzgAV8Daoohw=) 3: 312e322e342e302f32342d3234203d3e203234313531.roa (hash: TBnC2LzR+6Db4WOI7E+8pudN/0AB0HhXouySfw2xuiY=) 4: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (hash: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs=) 5: 3231302e322e342e302f32342d3234203d3e203234313531.roa (hash: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c=) 6: 3231302e322e342e302f32342d3234203d3e203234343039.roa (hash: dsVTcMJyEhqmVODGZAIkGc623cScIW3ZMfG651m2w+c=) 7: 312e322e342e302f32342d3234203d3e203234343039.roa (hash: nEQtgygHVMKG47GK6dkWFFlZukvt0PGUFnlFtUuFZLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:40:be:61:79:c3:da:a2:df:13:ea:ab:fd:2a:62:52:3d:9a:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Jul 23 14:23:52 2026 GMT Not After : Jul 24 15:43:52 2026 GMT Subject: CN=1AA63534030922AD368918B831E6B00952AEE005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:9a:4b:39:e8:cb:6b:2f:a5:bb:0e:95:19: 04:4d:a6:5e:f9:0a:9f:28:f0:eb:f1:3c:9f:c6:77: 68:1e:03:ac:8d:35:62:68:75:ff:e3:80:ec:6d:36: 13:a1:1d:84:ab:3c:2a:c0:df:ac:64:3c:d0:dc:7c: df:47:07:58:96:38:44:90:d9:5e:16:79:e7:e5:a5: cf:e9:00:19:8a:02:e4:01:01:42:e3:7d:b9:c8:fc: 02:b8:23:7e:b8:aa:9e:b3:e8:3a:74:f2:e0:e2:36: 73:32:90:6a:68:1b:1e:b4:62:81:64:e6:d6:40:42: 2c:29:fd:7b:df:e1:f9:d3:a8:d7:e7:31:87:09:f7: 21:c2:0b:ee:70:7a:d1:3a:ca:60:4f:f3:63:47:34: a1:ed:d4:29:98:55:a4:5f:2b:bb:31:63:18:6a:3e: aa:7d:f0:79:80:56:56:8f:7e:da:72:d3:1f:ee:44: 77:3d:c6:ee:cc:63:1f:6c:54:b7:d5:b3:c2:55:1d: 8e:cb:32:45:18:07:f2:57:b5:2b:e4:f5:75:75:00: af:58:18:39:9a:1d:59:7c:3e:df:3c:d5:36:0d:e6: f9:b1:1b:80:59:76:de:f5:bc:fa:50:6d:2c:22:18: f3:09:2a:4b:a8:ad:9c:57:11:f6:ea:69:a4:ec:8d: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A6:35:34:03:09:22:AD:36:89:18:B8:31:E6:B0:09:52:AE:E0:05 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:39:da:1a:cb:bb:38:c3:3f:35:93:74:46:de:32:fe:f1:31: ea:97:4c:ec:4c:c4:19:4b:d1:d5:74:43:eb:0d:af:b0:2a:19: 01:9f:0f:c5:23:71:9a:77:48:8c:6f:07:b3:0a:20:68:00:cc: 33:12:06:4c:d2:1f:a9:22:f7:16:79:f0:6e:50:48:61:cf:d9: 35:a6:5b:bc:ae:d0:ae:fd:16:af:bd:b8:1d:d0:2e:5f:39:53: 16:c8:c4:1c:26:d1:60:5a:37:ce:0d:f1:c2:f5:d5:6d:ea:8d: d8:b3:59:4b:b6:0a:9d:41:a7:36:ac:5d:28:c5:2b:33:c7:f4: ad:14:64:6a:01:e8:87:15:8c:2f:e5:22:a0:8b:21:3f:4d:bc: 24:33:65:84:ac:3f:ad:82:ad:ea:c7:0c:87:c5:2e:f0:b7:c1: 01:05:83:93:ed:9c:f7:9f:7e:af:52:82:97:0c:93:94:28:2b: 10:4d:cd:d6:16:20:1e:79:b0:b2:33:f0:54:0a:fd:5c:d7:be: 71:e2:38:2a:37:c9:46:ce:62:8c:12:2e:a8:f9:ff:e9:10:75: 7a:a3:68:3c:bc:28:2a:65:01:57:42:46:cc:da:20:b1:59:09: 8a:de:23:45:8e:b4:7d:ff:4f:08:00:a6:79:7a:69:87:97:52: 02:d2:37:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYkC+YXnD2qLfE+qr/SpiUj2a22QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA3MjMxNDIzNTJaFw0yNjA3MjQxNTQzNTJaMDMxMTAvBgNV BAMTKDFBQTYzNTM0MDMwOTIyQUQzNjg5MThCODMxRTZCMDA5NTJBRUUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR45pLOejLay+luw6VGQRNpl75 Cp8o8OvxPJ/Gd2geA6yNNWJodf/jgOxtNhOhHYSrPCrA36xkPNDcfN9HB1iWOESQ 2V4Weeflpc/pABmKAuQBAULjfbnI/AK4I364qp6z6Dp08uDiNnMykGpoGx60YoFk 5tZAQiwp/Xvf4fnTqNfnMYcJ9yHCC+5wetE6ymBP82NHNKHt1CmYVaRfK7sxYxhq Pqp98HmAVlaPftpy0x/uRHc9xu7MYx9sVLfVs8JVHY7LMkUYB/JXtSvk9XV1AK9Y GDmaHVl8Pt881TYN5vmxG4BZdt71vPpQbSwiGPMJKkuorZxXEfbqaaTsjWSVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGqY1NAMJIq02iRi4MeawCVKu4AUwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjnaGsu7OMM/ NZN0Rt4y/vEx6pdM7EzEGUvR1XRD6w2vsCoZAZ8PxSNxmndIjG8HswogaADMMxIG TNIfqSL3FnnwblBIYc/ZNaZbvK7Qrv0Wr724HdAuXzlTFsjEHCbRYFo3zg3xwvXV beqN2LNZS7YKnUGnNqxdKMUrM8f0rRRkagHohxWML+UioIshP028JDNlhKw/rYKt 6scMh8Uu8LfBAQWDk+2c959+r1KClwyTlCgrEE3N1hYgHnmwsjPwVAr9XNe+ceI4 KjfJRs5ijBIuqPn/6RB1eqNoPLwoKmUBV0JGzNogsVkJit4jRY60ff9PCACmeXpp h5dSAtI3Iw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:28:48 2026 by rpki-client