$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: IrjxTgkrb3BVhNOamrIPB0UnNt8sJUT57LQtmxjMPn8= Subject key identifier: A6:9D:45:51:1F:A3:D2:C4:B0:17:F7:69:8A:91:1A:ED:5A:1A:3A:C0 Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 10979E09E80784981F0E9740AA83FE0514D742E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 56 Signing time: Fri 24 Jul 2026 13:26:18 +0000 Manifest this update: Fri 24 Jul 2026 13:21:18 +0000 Manifest next update: Sat 25 Jul 2026 16:18:18 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: NyKKnn3cQA/wF5kQbkr+AIH0Rtgj2v61hxCRzH9IxcA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:97:9e:09:e8:07:84:98:1f:0e:97:40:aa:83:fe:05:14:d7:42:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Jul 24 13:21:18 2026 GMT Not After : Jul 25 16:18:18 2026 GMT Subject: CN=A69D45511FA3D2C4B017F7698A911AED5A1A3AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:85:17:18:c2:35:84:97:27:64:3a:3c:bf:ce: a8:d6:0f:d7:71:c0:2e:c7:37:27:63:50:a6:cb:c4: 84:c8:1f:54:fe:27:1c:56:9a:2e:7a:79:1c:79:66: 67:ae:70:9d:53:4b:4c:3a:b6:97:86:2c:7b:bf:cc: 44:13:f2:07:e2:7e:da:c9:d1:91:60:06:af:80:9c: d5:89:ea:86:d0:8c:6c:c0:56:39:33:44:32:d5:71: d3:9e:3a:56:7b:d8:64:13:2d:82:d9:51:38:5a:cc: 34:6a:72:b7:43:dc:4d:07:c7:c6:4f:49:89:28:e6: 39:30:3a:48:53:43:b6:b9:09:d3:aa:64:16:0a:ed: 5f:df:8c:6e:75:d5:bc:70:11:6a:b8:00:ca:a9:a9: bb:85:8a:8d:73:41:bb:98:22:5e:71:35:08:1b:47: e7:0f:75:47:7f:2f:2e:b0:65:9f:1c:b4:f3:b8:c0: bd:82:cd:f4:be:4f:04:ac:ff:eb:63:86:aa:c8:bf: ae:1e:38:38:2f:be:10:c7:3b:58:4d:cf:fe:85:a1: 98:59:31:60:d7:29:f6:a6:04:94:57:ad:32:85:14: 6e:f3:12:3f:ca:ce:bd:43:02:c6:3c:3f:e3:fd:8e: 93:de:1d:3f:8e:1c:7c:b6:7a:c6:43:a7:a7:41:32: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:45:51:1F:A3:D2:C4:B0:17:F7:69:8A:91:1A:ED:5A:1A:3A:C0 X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:48:38:cd:8e:92:e6:f7:64:c4:5b:df:44:db:2c:f5:84:d8: 6e:36:de:9a:32:a9:b9:e8:4d:2c:d9:d1:0e:92:8e:9d:4d:89: 41:60:44:90:63:70:d5:02:f6:08:b9:e5:a8:f2:6b:46:85:39: b5:a5:e9:d2:cb:e7:15:20:76:5b:a5:be:ee:13:c7:fe:10:4f: 28:73:cf:b6:93:80:bb:71:85:f9:e5:f8:6b:85:54:0d:87:dd: 59:f7:e4:30:9e:a6:d2:00:af:5c:56:48:57:f0:59:6a:3d:6f: 00:e1:e6:7d:f3:58:07:9e:98:fb:ee:1e:66:9d:ca:79:4f:fb: 66:76:bc:e6:cd:d7:48:ca:8e:eb:43:f2:c3:64:51:f4:bf:7d: 2e:16:c6:9c:55:54:dc:69:5b:0b:4f:76:e2:85:e1:74:6a:bc: 51:fb:71:72:8f:c5:5a:d7:e9:b2:52:67:3c:49:de:84:3d:ad: 55:d6:72:c5:3f:e3:e8:8b:06:d7:d0:b4:0c:28:2f:4d:38:e1: 17:71:e1:c2:1d:c5:23:62:5a:af:ff:0b:5b:12:36:3b:bb:ad: 79:d7:3c:47:a3:56:43:73:00:a9:5d:b5:01:da:5b:45:f3:1b: 38:b2:52:c4:07:e0:07:1b:a9:9a:b0:14:1d:bb:a8:9a:bf:3b: 84:f1:30:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEJeeCegHhJgfDpdAqoP+BRTXQugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjA3MjQxMzIxMThaFw0yNjA3MjUxNjE4MThaMDMxMTAvBgNV BAMTKEE2OUQ0NTUxMUZBM0QyQzRCMDE3Rjc2OThBOTExQUVENUExQTNBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuhRcYwjWElydkOjy/zqjWD9dx wC7HNydjUKbLxITIH1T+JxxWmi56eRx5ZmeucJ1TS0w6tpeGLHu/zEQT8gfiftrJ 0ZFgBq+AnNWJ6obQjGzAVjkzRDLVcdOeOlZ72GQTLYLZUThazDRqcrdD3E0Hx8ZP SYko5jkwOkhTQ7a5CdOqZBYK7V/fjG511bxwEWq4AMqpqbuFio1zQbuYIl5xNQgb R+cPdUd/Ly6wZZ8ctPO4wL2CzfS+TwSs/+tjhqrIv64eODgvvhDHO1hNz/6FoZhZ MWDXKfamBJRXrTKFFG7zEj/Kzr1DAsY8P+P9jpPeHT+OHHy2esZDp6dBMikdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpp1FUR+j0sSwF/dpipEa7VoaOsAwHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0g4zY6S5vdk xFvfRNss9YTYbjbemjKpuehNLNnRDpKOnU2JQWBEkGNw1QL2CLnlqPJrRoU5taXp 0svnFSB2W6W+7hPH/hBPKHPPtpOAu3GF+eX4a4VUDYfdWffkMJ6m0gCvXFZIV/BZ aj1vAOHmffNYB56Y++4eZp3KeU/7Zna85s3XSMqO60Pyw2RR9L99LhbGnFVU3Glb C0924oXhdGq8Uftxco/FWtfpslJnPEnehD2tVdZyxT/j6IsG19C0DCgvTTjhF3Hh wh3FI2Jar/8LWxI2O7utedc8R6NWQ3MAqV21AdpbRfMbOLJSxAfgBxupmrAUHbuo mr87hPEwTA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:01:24 2026 by rpki-client