$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json) Hash identifier: rGzDypb3Ku5iGVo2RjAhjNNT9OsakgMYrYBc/FojTS4= Subject key identifier: EF:92:B1:57:47:14:B5:13:0A:3D:FB:5E:9D:D8:C3:34:25:7B:C6:C5 Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Certificate serial: 330B5AA70E4A3218C00F3AB72F8BF9027585A7DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft Manifest number: 4E Signing time: Fri 24 Jul 2026 10:20:57 +0000 Manifest this update: Fri 24 Jul 2026 10:15:57 +0000 Manifest next update: Sat 25 Jul 2026 11:31:57 +0000 Files and hashes: 1: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=) 2: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: +DGpXI0AW4zWjF5R0DgWwKe1MdgMvPszEZ3av5XF6RU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0b:5a:a7:0e:4a:32:18:c0:0f:3a:b7:2f:8b:f9:02:75:85:a7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Validity Not Before: Jul 24 10:15:57 2026 GMT Not After : Jul 25 11:31:57 2026 GMT Subject: CN=EF92B1574714B5130A3DFB5E9DD8C334257BC6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:a2:de:15:30:c0:60:9b:a4:23:d0:51:37: 91:97:52:49:14:03:a0:fc:9c:02:12:0a:98:94:10: 74:10:91:db:38:e7:04:9e:6e:48:cc:a2:b0:fc:17: f7:c0:b1:b5:1c:79:1f:52:72:1c:c7:ed:08:f2:8a: 7a:7b:34:b8:ee:cf:1d:d4:f9:a1:58:67:26:bc:29: ed:a7:20:20:ce:00:0f:84:f6:84:22:eb:c6:d8:70: d3:ac:53:3d:84:88:61:30:5a:cc:5c:5c:9e:74:de: 0e:35:1e:cc:1d:a2:cb:8b:62:9b:30:8c:3d:19:15: b0:1c:d4:55:ed:cf:e0:26:1c:5d:45:f0:8d:60:5c: 76:da:1e:27:d9:60:be:cd:73:3d:67:cd:2d:f9:03: 0f:46:00:c5:06:32:a8:01:bf:eb:e6:b3:84:7c:b0: c6:76:b3:fb:79:a8:04:a0:40:20:df:54:f3:ab:b6: fe:8f:6e:38:d0:d5:38:d5:f2:ab:9d:4c:13:77:76: 97:c2:c6:44:ed:b0:2a:a6:c5:3e:5c:b4:f9:f0:0f: 7e:94:ac:26:8e:62:5a:93:f1:49:27:aa:76:65:a0: 61:04:2a:1c:d5:fc:ad:03:d1:64:81:d4:d8:bf:93: 1a:82:0e:24:f1:fb:50:38:b0:ea:47:62:5f:03:d8: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:92:B1:57:47:14:B5:13:0A:3D:FB:5E:9D:D8:C3:34:25:7B:C6:C5 X509v3 Authority Key Identifier: keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:64:d9:80:c1:ed:92:a6:1a:72:61:d6:2a:89:6e:31:45:55: 0b:1b:f9:c7:64:c0:93:60:d5:e6:bd:ac:1a:62:98:8b:4c:80: 1d:2c:d4:aa:c2:dd:6c:17:e8:03:7e:34:f5:db:ac:7b:fa:9f: 14:3f:9f:55:25:23:aa:06:38:a5:7d:1a:67:f0:05:09:d8:e9: 75:db:e4:25:b6:e8:f7:5e:91:5f:5c:56:d1:f1:20:01:1c:3b: 79:82:00:cf:3c:9a:de:3e:12:e1:a1:07:79:8b:3a:8d:64:09: 6e:8d:c3:41:2f:87:7a:3d:4b:5a:62:8d:fa:31:82:fd:a8:8a: b2:3d:cb:80:65:dc:c2:bf:be:61:53:5d:8b:65:0b:58:e4:e2: b8:2f:08:4f:3b:95:d7:f3:2e:b7:b8:37:27:9e:3a:dd:34:2e: 24:f3:55:a5:59:a2:de:23:30:28:29:a6:40:1b:4d:ac:b4:34: 44:c0:1b:f0:9a:44:cf:c7:49:fd:fb:4e:e2:6a:d4:c4:27:bd: 8e:e3:21:79:e5:c9:fd:6e:55:03:11:21:fa:2f:b9:91:0d:15: 7b:d5:a9:44:c9:55:ec:37:09:7c:94:cd:3f:51:6f:46:b5:8e: 4c:51:e1:60:56:10:55:65:61:28:db:14:5e:9e:72:a9:ce:f0: 55:75:ac:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMwtapw5KMhjADzq3L4v5AnWFp9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3 RDU2QjM4ODAeFw0yNjA3MjQxMDE1NTdaFw0yNjA3MjUxMTMxNTdaMDMxMTAvBgNV BAMTKEVGOTJCMTU3NDcxNEI1MTMwQTNERkI1RTlERDhDMzM0MjU3QkM2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLlKLeFTDAYJukI9BRN5GXUkkU A6D8nAISCpiUEHQQkds45wSebkjMorD8F/fAsbUceR9SchzH7Qjyinp7NLjuzx3U +aFYZya8Ke2nICDOAA+E9oQi68bYcNOsUz2EiGEwWsxcXJ503g41HswdosuLYpsw jD0ZFbAc1FXtz+AmHF1F8I1gXHbaHifZYL7Ncz1nzS35Aw9GAMUGMqgBv+vms4R8 sMZ2s/t5qASgQCDfVPOrtv6PbjjQ1TjV8qudTBN3dpfCxkTtsCqmxT5ctPnwD36U rCaOYlqT8UknqnZloGEEKhzV/K0D0WSB1Ni/kxqCDiTx+1A4sOpHYl8D2FVzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU75KxV0cUtRMKPftendjDNCV7xsUwHwYDVR0j BBgwFoAU5dV+SiR2Q5SYoC7BGEjI4X1Ws4gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI5MTUyMzM4ODU3MTY2OS8wL0U1RDU3RTRBMjQ3NjQzOTQ5OEEwMkVDMTE4NDhD OEUxN0Q1NkIzODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3RDU2QjM4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyOTE1MjMzODg1NzE2NjkvMC9FNUQ1N0U0QTI0NzY0 Mzk0OThBMDJFQzExODQ4QzhFMTdENTZCMzg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2TZgMHtkqYa cmHWKoluMUVVCxv5x2TAk2DV5r2sGmKYi0yAHSzUqsLdbBfoA3409duse/qfFD+f VSUjqgY4pX0aZ/AFCdjpddvkJbbo916RX1xW0fEgARw7eYIAzzya3j4S4aEHeYs6 jWQJbo3DQS+Hej1LWmKN+jGC/aiKsj3LgGXcwr++YVNdi2ULWOTiuC8ITzuV1/Mu t7g3J5463TQuJPNVpVmi3iMwKCmmQBtNrLQ0RMAb8JpEz8dJ/ftO4mrUxCe9juMh eeXJ/W5VAxEh+i+5kQ0Ve9WpRMlV7DcJfJTNP1FvRrWOTFHhYFYQVWVhKNsUXp5y qc7wVXWszA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:44:34 2026 by rpki-client