$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json) Hash identifier: slSuDQjtGPG0NKtg3PyUx673AHSlkuMgSDLZh8WDzUY= Subject key identifier: CC:83:ED:2E:14:D2:DB:DF:68:A0:16:FB:82:AF:00:CE:BF:E0:38:3F Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Certificate serial: 32330E24352D90DBE397EE8A575F10BF30134A8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 17:14:11 +0000 Manifest this update: Thu 23 Jul 2026 17:09:11 +0000 Manifest next update: Fri 24 Jul 2026 18:38:11 +0000 Files and hashes: 1: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: UGwito5YCeIrDvqpRbJDOGHo7VyyYxdFRK5RT9gDkn0=) 2: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=) 3: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=) 4: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:33:0e:24:35:2d:90:db:e3:97:ee:8a:57:5f:10:bf:30:13:4a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Validity Not Before: Jul 23 17:09:11 2026 GMT Not After : Jul 24 18:38:11 2026 GMT Subject: CN=CC83ED2E14D2DBDF68A016FB82AF00CEBFE0383F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:0d:4b:58:21:e1:6a:52:ce:4f:99:30:10: be:61:c2:75:86:15:bb:c0:f8:8a:c7:c5:fe:48:f9: 32:e7:c8:68:c9:10:98:35:73:69:96:2d:ab:cb:34: 57:05:c9:11:09:ad:ba:f2:7c:06:aa:32:b2:65:ad: 9a:a3:e5:64:e1:80:5b:52:79:46:cc:4f:38:00:f6: 0c:c1:c5:23:db:c9:8b:dd:d5:93:c9:ec:f7:70:79: 9c:f2:08:93:49:0c:f3:5c:34:02:cd:a8:35:62:13: 33:56:88:04:6e:57:2b:12:d8:b3:e1:79:3e:35:c9: 07:18:de:49:a5:b0:99:9d:51:cc:8a:ec:6b:5f:83: f4:73:f8:07:36:8d:27:28:63:70:4b:42:ed:d9:ce: 65:dc:0a:90:3c:9d:12:6d:e3:bc:f5:f0:f8:33:6a: c6:cf:bd:e2:6a:b7:29:f0:80:c7:8d:c0:eb:b0:e3: f4:32:93:26:d3:99:2e:e3:e1:3d:23:7b:27:ef:35: 35:52:f6:25:d4:3b:93:c4:27:09:bb:1e:e6:b0:d0: cf:7b:68:0b:71:b6:38:f8:93:2b:e7:05:9f:62:bf: e6:29:a8:f2:50:6e:ab:38:d8:03:9d:7f:f6:7f:4e: f3:c9:bc:4a:51:33:0e:f1:b5:ac:da:de:ee:b9:74: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:ED:2E:14:D2:DB:DF:68:A0:16:FB:82:AF:00:CE:BF:E0:38:3F X509v3 Authority Key Identifier: keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:47:e6:01:05:20:a8:31:9d:d1:9e:b9:3f:07:81:81:f7:8c: a8:fe:f0:8c:98:f5:88:fe:5e:30:d4:b7:17:f8:4c:80:09:93: 76:ab:65:ac:60:64:44:cd:60:3a:a4:69:d7:34:06:60:09:07: 76:9a:ca:77:96:13:3e:93:5d:bb:86:eb:2e:57:41:0d:d8:35: 92:32:a6:fc:30:74:26:93:06:5c:aa:b4:a2:08:5d:44:db:13: 99:37:b6:b8:94:f8:e6:e7:18:b6:cf:b2:30:5a:07:0f:7a:4a: 6e:5d:be:c9:e9:a3:9b:cc:08:37:27:df:da:75:e4:77:aa:ff: 96:77:ed:8d:f3:0d:f1:15:3f:df:99:de:ee:96:3e:2c:f7:cd: ee:5a:ac:ad:2d:7c:2b:12:fe:d7:83:7c:53:e9:a6:01:4c:ed: d3:b1:93:12:3f:bd:a6:fb:da:62:76:64:90:5e:70:8b:48:21: 70:e3:f0:7f:6f:1a:05:b6:1e:5c:0f:c3:eb:d4:91:25:5d:6a: 11:ac:44:4b:e3:05:ac:64:25:a8:a4:cf:4c:2b:ab:bd:3c:27: f6:b3:34:90:38:c8:82:47:9e:e0:88:2b:99:59:a9:40:62:b8: 08:7b:00:9e:ec:ce:28:01:0f:12:4a:d5:1b:2d:fa:65:dd:4c: 0a:fa:e7:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMjMOJDUtkNvjl+6KV18QvzATSo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5 OEY4NjQyRTAeFw0yNjA3MjMxNzA5MTFaFw0yNjA3MjQxODM4MTFaMDMxMTAvBgNV BAMTKENDODNFRDJFMTREMkRCREY2OEEwMTZGQjgyQUYwMENFQkZFMDM4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBA1LWCHhalLOT5kwEL5hwnWG FbvA+IrHxf5I+TLnyGjJEJg1c2mWLavLNFcFyREJrbryfAaqMrJlrZqj5WThgFtS eUbMTzgA9gzBxSPbyYvd1ZPJ7PdweZzyCJNJDPNcNALNqDViEzNWiARuVysS2LPh eT41yQcY3kmlsJmdUcyK7Gtfg/Rz+Ac2jScoY3BLQu3ZzmXcCpA8nRJt47z18Pgz asbPveJqtynwgMeNwOuw4/QykybTmS7j4T0jeyfvNTVS9iXUO5PEJwm7Huaw0M97 aAtxtjj4kyvnBZ9iv+YpqPJQbqs42AOdf/Z/TvPJvEpRMw7xtaza3u65dGEnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzIPtLhTS299ooBb7gq8Azr/gOD8wHwYDVR0j BBgwFoAU//lvixPJNqwZettDjifE6Zj4ZC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ1Nzc0MTMwNjQyOTQ2My8wL0ZGRjk2RjhCMTNDOTM2QUMxOTdBREI0MzhFMjdD NEU5OThGODY0MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NTc3NDEzMDY0Mjk0NjMvMC9GRkY5NkY4QjEzQzkz NkFDMTk3QURCNDM4RTI3QzRFOTk4Rjg2NDJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkfmAQUgqDGd 0Z65PweBgfeMqP7wjJj1iP5eMNS3F/hMgAmTdqtlrGBkRM1gOqRp1zQGYAkHdprK d5YTPpNdu4brLldBDdg1kjKm/DB0JpMGXKq0oghdRNsTmTe2uJT45ucYts+yMFoH D3pKbl2+yemjm8wINyff2nXkd6r/lnftjfMN8RU/35ne7pY+LPfN7lqsrS18KxL+ 14N8U+mmAUzt07GTEj+9pvvaYnZkkF5wi0ghcOPwf28aBbYeXA/D69SRJV1qEaxE S+MFrGQlqKTPTCurvTwn9rM0kDjIgkee4IgrmVmpQGK4CHsAnuzOKAEPEkrVGy36 Zd1MCvrnxg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:26:52 2026 by rpki-client