$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json) Hash identifier: Eeopt3c4lqlRy8QFLhoopj6ORGoHJ823eTDqhAlVq0M= Subject key identifier: EC:8E:B1:E0:85:A0:29:C1:53:B4:A5:1C:8C:21:3A:FB:9E:41:8B:30 Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 5E67A6EC25589C7AB2AE884FEAED3FC7222C5536 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft Manifest number: 50 Signing time: Thu 23 Jul 2026 22:34:42 +0000 Manifest this update: Thu 23 Jul 2026 22:29:42 +0000 Manifest next update: Fri 24 Jul 2026 23:06:42 +0000 Files and hashes: 1: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=) 2: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=) 3: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: svxVnT5uEEkKJ22xTUAR+vYxrJeAK/zbZqheKxZxipE=) 4: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=) 5: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:67:a6:ec:25:58:9c:7a:b2:ae:88:4f:ea:ed:3f:c7:22:2c:55:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: Jul 23 22:29:42 2026 GMT Not After : Jul 24 23:06:42 2026 GMT Subject: CN=EC8EB1E085A029C153B4A51C8C213AFB9E418B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:eb:81:8c:fc:0f:ee:63:a6:a4:5b:57:5e: 02:62:1b:12:e7:83:7b:7e:2e:54:fe:24:4f:b1:4a: 0f:36:aa:c6:16:c8:3a:54:cd:54:df:2d:92:a7:60: dd:ad:66:fa:73:41:5b:a8:1d:c3:93:1f:09:7b:af: 51:45:d8:f9:31:58:f2:63:60:d7:0b:dc:5b:a5:63: 33:f9:da:da:51:60:0a:56:b9:b1:21:26:b9:f2:c0: 29:09:3a:eb:a0:d8:e0:d4:05:19:23:0a:5f:53:22: 78:a9:65:dc:2e:c9:cc:bf:cc:58:76:48:11:03:37: 02:5f:a4:e3:84:a6:33:9c:b6:75:82:69:b2:b2:e5: 30:79:22:21:64:ba:3c:8e:4a:ba:6e:2b:b1:41:af: 6e:00:c8:71:a5:60:d7:39:4a:3d:ca:1f:ac:33:8b: e0:c4:2a:1d:a4:d9:0f:c8:a7:55:7e:87:d6:b5:d1: 03:26:41:c3:f9:68:64:4a:3f:3f:05:3d:62:bf:46: db:7f:2d:79:3a:ab:4b:58:7b:ea:33:7c:61:68:bb: 9e:5f:b7:6a:cd:93:43:b7:85:fd:6c:25:1a:09:89: 59:47:b1:d5:e3:4c:3a:6b:4a:90:1a:22:64:a8:31: e3:ce:b1:83:d4:a5:67:33:af:06:10:c4:0c:64:13: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:B1:E0:85:A0:29:C1:53:B4:A5:1C:8C:21:3A:FB:9E:41:8B:30 X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:95:f8:7f:d3:ea:68:78:72:66:ec:65:d7:00:47:37:47:0c: 0a:10:9d:ba:ff:96:cf:27:f5:c7:b7:a3:21:df:d7:3f:7d:4a: 27:d1:2a:33:11:1e:84:01:40:f0:a6:84:0d:75:14:ad:24:28: 1b:3d:71:cb:b6:09:b4:90:69:bf:a4:13:ee:6b:56:d7:c6:10: 6d:67:ed:eb:dd:47:d1:fd:f7:3d:f6:38:bd:ee:de:95:9e:8b: dd:40:a4:65:70:ca:a9:6e:8e:f9:ba:e7:4a:0e:d5:52:3d:fb: 2d:29:18:a1:bc:47:a5:4e:87:19:e3:e0:a0:c7:16:61:58:7c: 2a:55:71:31:95:4a:46:49:56:2b:b4:40:06:ea:d5:8d:fd:f6: f5:96:a0:81:70:c1:b8:58:32:56:10:e8:7d:1c:4c:2e:c5:cf: e7:d1:51:0d:7d:f1:cf:f8:e1:97:d7:7b:9a:fb:96:02:41:f1: e3:31:a9:73:d7:99:5a:a0:60:d5:27:d3:c9:c8:18:a2:e3:39: 5c:b1:e6:bd:cd:8b:c9:be:09:78:13:1b:55:1f:c2:7a:1f:f8: 5f:53:f5:2a:41:9f:1d:a3:fe:fe:aa:5b:cd:95:54:3b:52:88: 47:31:72:64:44:dd:b6:3c:e1:24:31:63:44:f2:1c:4c:55:5c: cd:e3:86:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXmem7CVYnHqyrohP6u0/xyIsVTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjA3MjMyMjI5NDJaFw0yNjA3MjQyMzA2NDJaMDMxMTAvBgNV BAMTKEVDOEVCMUUwODVBMDI5QzE1M0I0QTUxQzhDMjEzQUZCOUU0MThCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLquuBjPwP7mOmpFtXXgJiGxLn g3t+LlT+JE+xSg82qsYWyDpUzVTfLZKnYN2tZvpzQVuoHcOTHwl7r1FF2PkxWPJj YNcL3FulYzP52tpRYApWubEhJrnywCkJOuug2ODUBRkjCl9TInipZdwuycy/zFh2 SBEDNwJfpOOEpjOctnWCabKy5TB5IiFkujyOSrpuK7FBr24AyHGlYNc5Sj3KH6wz i+DEKh2k2Q/Ip1V+h9a10QMmQcP5aGRKPz8FPWK/Rtt/LXk6q0tYe+ozfGFou55f t2rNk0O3hf1sJRoJiVlHsdXjTDprSpAaImSoMePOsYPUpWczrwYQxAxkE14hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7I6x4IWgKcFTtKUcjCE6+55BizAwHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE1NTI0MzMyMjM0MzQyNTkvMC9BNjg3RUEzMEZEOUU5 NUIwQkI0NjZEQURGMEUyN0FGOThGMjE3Q0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZX4f9PqaHhy Zuxl1wBHN0cMChCduv+Wzyf1x7ejId/XP31KJ9EqMxEehAFA8KaEDXUUrSQoGz1x y7YJtJBpv6QT7mtW18YQbWft691H0f33PfY4ve7elZ6L3UCkZXDKqW6O+brnSg7V Uj37LSkYobxHpU6HGePgoMcWYVh8KlVxMZVKRklWK7RABurVjf329ZaggXDBuFgy VhDofRxMLsXP59FRDX3xz/jhl9d7mvuWAkHx4zGpc9eZWqBg1SfTycgYouM5XLHm vc2Lyb4JeBMbVR/Ceh/4X1P1KkGfHaP+/qpbzZVUO1KIRzFyZETdtjzhJDFjRPIc TFVczeOGoA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:56 2026 by rpki-client