$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft File: 823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json) Hash identifier: pEBM6KyrZyqJGklK1AYJ4cQMnSQ7juWwQYW1n+AzHnw= Subject key identifier: CF:91:40:DA:FC:86:8A:3C:7E:7B:90:49:DB:96:D1:C0:76:CC:4F:66 Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 0BF41D8A7FE19D015B5ECFCD279C44CDE06C8F2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft Manifest number: 42 Signing time: Fri 24 Jul 2026 02:15:06 +0000 Manifest this update: Fri 24 Jul 2026 02:10:06 +0000 Manifest next update: Sat 25 Jul 2026 03:58:06 +0000 Files and hashes: 1: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (hash: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA=) 2: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (hash: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk=) 3: 323430323a663134303a666630333a3a2f34382d3438203d3e203338323833.roa (hash: JPasNsDug0W5Rn92K6EqWBzIP/Agm6A9fVDgf+UVINo=) 4: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=) 5: 323430323a663134303a666631343a3a2f34382d3438203d3e2034383337.roa (hash: 5YFwBo/iyC0NCYe2fUQRMepGEYQTAVopWqjxpwpGlYs=) 6: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (hash: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs=) 7: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: w9xR3iBFfIdcYllruIZZyF1Ab6IhbjOeQ/VLgvF5juE=) 8: 323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (hash: RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=) 9: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=) 10: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (hash: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0=) 11: 323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (hash: 9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f4:1d:8a:7f:e1:9d:01:5b:5e:cf:cd:27:9c:44:cd:e0:6c:8f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jul 24 02:10:06 2026 GMT Not After : Jul 25 03:58:06 2026 GMT Subject: CN=CF9140DAFC868A3C7E7B9049DB96D1C076CC4F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:d6:49:bc:30:36:26:ad:6f:f8:fa:30:54: c2:e7:e9:dd:6d:ab:da:f6:02:0e:3b:65:67:d1:b7: a2:7c:39:84:2d:e6:e9:10:0f:74:7f:10:ac:af:95: 07:3e:21:0d:6b:f7:77:e6:33:2b:52:37:36:d9:b2: 35:0f:58:5f:b9:3d:65:6f:0c:f0:3f:58:3d:8c:b2: d1:3f:a8:61:d0:67:5c:2b:0c:69:f4:10:f9:2f:c5: 42:50:b6:a6:67:b5:e1:fd:7b:0a:b8:c2:38:d8:0e: 75:0e:98:c9:9a:57:cf:67:ab:39:aa:41:f3:15:2e: aa:b0:8d:ec:54:54:11:1d:97:5f:44:2c:ee:20:29: ff:fa:9b:af:93:c1:a7:ba:7b:55:a3:fc:9a:f2:f8: 74:c3:a4:18:fe:9c:ea:f9:c5:65:ee:1a:66:97:dc: 6b:b7:45:d1:c4:08:c3:17:59:5b:bc:62:7e:f7:5e: f6:69:14:de:e9:6f:93:4c:08:2c:2a:ac:45:20:6c: b1:a3:3c:49:ba:60:2f:59:9f:43:d4:c4:dd:63:8c: fa:a8:71:8e:ca:05:28:7a:20:09:49:80:be:4a:a7: 12:3e:ef:62:f3:b8:ef:63:43:43:6d:8a:aa:75:5e: f0:12:d3:a2:e9:a6:a1:12:9e:3e:2a:f5:c5:43:04: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:91:40:DA:FC:86:8A:3C:7E:7B:90:49:DB:96:D1:C0:76:CC:4F:66 X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:11:0c:75:7d:f3:18:1c:cf:16:72:5a:90:b8:39:3b:d9:49: 62:91:54:39:47:7e:ea:c0:86:31:10:b5:53:da:54:5f:4e:63: 1c:a9:9e:22:49:b4:1f:3f:65:27:a0:44:c8:24:57:37:5c:12: 34:7f:95:76:d2:32:42:94:89:89:cc:57:b8:55:d5:30:79:44: 18:f4:e4:d3:54:fb:6d:15:8b:91:2f:17:32:92:b6:72:fe:61: 33:0f:d8:41:db:43:9e:94:8a:5b:92:93:fd:93:1f:a0:c2:6f: 43:dd:ef:d0:9b:07:3e:4c:e0:26:72:ff:84:0c:c3:e1:e1:3b: 20:9c:f6:4f:e0:a1:8e:62:83:c2:cc:76:b6:de:6d:2a:98:b5: 4e:96:48:22:ba:e3:e6:6a:38:ad:19:22:7b:6c:db:1a:96:cd: af:41:ff:5f:8e:56:f8:97:c3:d2:9b:b4:47:ac:a8:14:3e:7e: 76:9d:4d:0c:34:12:cf:27:34:a4:52:6e:98:37:1b:e0:4b:c5: 7a:8f:3d:de:2e:24:18:3c:8f:bb:51:1e:1d:80:41:bc:a9:ae: 3a:94:60:8b:c1:68:9b:2d:1f:e8:e7:0a:89:71:c4:8a:98:42: 4e:78:85:aa:de:bc:07:62:21:62:b2:d8:96:37:02:ee:15:47: 39:a7:92:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC/Qdin/hnQFbXs/NJ5xEzeBsjywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA3MjQwMjEwMDZaFw0yNjA3MjUwMzU4MDZaMDMxMTAvBgNV BAMTKENGOTE0MERBRkM4NjhBM0M3RTdCOTA0OURCOTZEMUMwNzZDQzRGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH9ZJvDA2Jq1v+PowVMLn6d1t q9r2Ag47ZWfRt6J8OYQt5ukQD3R/EKyvlQc+IQ1r93fmMytSNzbZsjUPWF+5PWVv DPA/WD2MstE/qGHQZ1wrDGn0EPkvxUJQtqZnteH9ewq4wjjYDnUOmMmaV89nqzmq QfMVLqqwjexUVBEdl19ELO4gKf/6m6+Twae6e1Wj/Jry+HTDpBj+nOr5xWXuGmaX 3Gu3RdHECMMXWVu8Yn73XvZpFN7pb5NMCCwqrEUgbLGjPEm6YC9Zn0PUxN1jjPqo cY7KBSh6IAlJgL5KpxI+72LzuO9jQ0Ntiqp1XvAS06LppqESnj4q9cVDBJqrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz5FA2vyGijx+e5BJ25bRwHbMT2YwHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMi84MjNBOUQyNDgwMkFC MTAwMjYwOTVEOTI5NTJCRUM5MzYxMjBDOUYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxEMdX3zGBzP FnJakLg5O9lJYpFUOUd+6sCGMRC1U9pUX05jHKmeIkm0Hz9lJ6BEyCRXN1wSNH+V dtIyQpSJicxXuFXVMHlEGPTk01T7bRWLkS8XMpK2cv5hMw/YQdtDnpSKW5KT/ZMf oMJvQ93v0JsHPkzgJnL/hAzD4eE7IJz2T+ChjmKDwsx2tt5tKpi1TpZIIrrj5mo4 rRkie2zbGpbNr0H/X45W+JfD0pu0R6yoFD5+dp1NDDQSzyc0pFJumDcb4EvFeo89 3i4kGDyPu1EeHYBBvKmuOpRgi8Fomy0f6OcKiXHEiphCTniFqt68B2IhYrLYljcC 7hVHOaeSrQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:15:22 2026 by rpki-client