$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json) Hash identifier: NvVhl6lAzdT6cWPzML4ezK4Y2hXM3ntPHPkZtyF1hto= Subject key identifier: 1C:D6:98:5D:BC:09:A6:27:9F:1E:9D:B5:A9:C4:A8:F6:10:C9:F2:19 Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA Certificate serial: 28F9E80E15BE57E15AF2C546BBFA15BD97325594 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft Manifest number: 2B Signing time: Fri 24 Jul 2026 04:15:20 +0000 Manifest this update: Fri 24 Jul 2026 04:10:20 +0000 Manifest next update: Sat 25 Jul 2026 07:53:20 +0000 Files and hashes: 1: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: Sm6bDqDb5676JIJwxbdFATKtP/9vB97oKprNziDswTE=) 2: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=) 3: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=) 4: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=) 5: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=) 6: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=) 7: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=) 8: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=) 9: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f9:e8:0e:15:be:57:e1:5a:f2:c5:46:bb:fa:15:bd:97:32:55:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA Validity Not Before: Jul 24 04:10:20 2026 GMT Not After : Jul 25 07:53:20 2026 GMT Subject: CN=1CD6985DBC09A6279F1E9DB5A9C4A8F610C9F219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:b2:9a:3b:fa:f8:58:68:53:5c:30:d6:2a: 91:cd:99:ce:40:87:7c:23:a7:0a:3e:8c:64:ba:75: 1d:ee:cf:d4:83:23:73:cb:22:91:44:9d:4f:f3:19: 5e:eb:4a:95:57:8d:7e:60:f5:d4:f3:e5:53:84:c0: 72:91:58:a4:11:43:46:50:ea:da:5d:7d:9c:bb:a7: ae:36:d1:ab:4b:cf:e3:a5:40:8d:96:be:91:1c:09: 85:8a:bb:4d:81:16:68:2b:a4:5c:27:01:05:30:3d: 12:42:91:29:80:6c:8c:3f:f8:bc:cf:fc:34:d4:d9: 27:17:d7:d5:2a:1a:85:40:9e:b3:64:fc:6d:3a:2a: 3c:d2:7c:09:75:1d:b6:3f:59:a2:8d:53:a6:9f:40: 95:32:ff:c6:a3:b7:5d:ab:0f:70:33:c9:94:10:26: b4:c5:0b:42:aa:bb:5c:6c:9c:8d:91:82:ae:b6:9a: 84:a0:d0:ec:ca:05:b7:f5:0e:be:66:65:4d:2b:65: 4f:66:00:07:32:c7:af:4b:dd:a5:04:ac:13:fc:04: cc:78:84:9d:09:1b:b0:4a:39:9b:5e:71:e4:f1:57: 52:dd:ac:d2:4d:eb:e5:ec:b4:dc:38:75:70:22:e3: d5:d3:a5:47:b4:66:8b:fd:65:95:f7:a4:78:78:3d: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D6:98:5D:BC:09:A6:27:9F:1E:9D:B5:A9:C4:A8:F6:10:C9:F2:19 X509v3 Authority Key Identifier: keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:31:3a:4c:dd:4e:a9:73:b3:3f:03:2e:72:3d:44:2a:bf:41: 84:50:73:81:59:38:d7:ad:43:f1:d0:f9:b9:98:36:25:7b:0c: 12:19:6e:85:83:a2:f6:44:e6:6d:8f:b7:22:85:e0:36:e6:35: c5:8d:0e:6a:22:16:6d:19:f7:a7:b9:f0:73:35:0b:01:f6:89: a1:42:ef:17:16:c9:15:2e:b0:06:4d:c1:f7:af:c0:5c:43:00: ae:33:b2:02:d7:b9:1c:64:16:b6:0a:72:9d:fe:8c:ba:d8:44: 30:0e:4a:d3:2e:c8:60:e5:7e:63:95:4f:a2:ee:14:03:8e:75: 57:18:b5:56:75:8c:45:b4:42:13:7f:98:a1:db:f2:9a:0e:a1: e0:be:db:88:69:2f:68:1c:e0:4f:78:3d:7c:0d:1b:0d:d3:db: f0:06:a6:c0:6b:5a:d7:1b:8a:01:18:36:31:0c:54:a6:5c:17: e1:2f:5d:e4:2b:39:90:b9:f5:af:16:66:9b:52:62:2a:e6:8c: 2a:53:49:ab:80:c2:a2:b1:68:3f:33:29:43:1f:8e:1d:1a:88: 74:c8:3d:22:27:66:fd:06:4c:52:54:18:a0:4c:e4:b1:82:20: 2a:3e:b5:87:84:2a:58:81:82:f5:8a:f9:b1:df:f7:cd:d5:85: 42:9b:6f:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKPnoDhW+V+Fa8sVGu/oVvZcyVZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz QjE5MTZGQTAeFw0yNjA3MjQwNDEwMjBaFw0yNjA3MjUwNzUzMjBaMDMxMTAvBgNV BAMTKDFDRDY5ODVEQkMwOUE2Mjc5RjFFOURCNUE5QzRBOEY2MTBDOUYyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfY7KaO/r4WGhTXDDWKpHNmc5A h3wjpwo+jGS6dR3uz9SDI3PLIpFEnU/zGV7rSpVXjX5g9dTz5VOEwHKRWKQRQ0ZQ 6tpdfZy7p6420atLz+OlQI2WvpEcCYWKu02BFmgrpFwnAQUwPRJCkSmAbIw/+LzP /DTU2ScX19UqGoVAnrNk/G06KjzSfAl1HbY/WaKNU6afQJUy/8ajt12rD3AzyZQQ JrTFC0Kqu1xsnI2Rgq62moSg0OzKBbf1Dr5mZU0rZU9mAAcyx69L3aUErBP8BMx4 hJ0JG7BKOZteceTxV1LdrNJN6+XstNw4dXAi49XTpUe0Zov9ZZX3pHh4PdDNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHNaYXbwJpiefHp21qcSo9hDJ8hkwHwYDVR0j BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2 MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTE6TN1OqXOz PwMucj1EKr9BhFBzgVk4161D8dD5uZg2JXsMEhluhYOi9kTmbY+3IoXgNuY1xY0O aiIWbRn3p7nwczULAfaJoULvFxbJFS6wBk3B96/AXEMArjOyAte5HGQWtgpynf6M uthEMA5K0y7IYOV+Y5VPou4UA451Vxi1VnWMRbRCE3+Yodvymg6h4L7biGkvaBzg T3g9fA0bDdPb8AamwGta1xuKARg2MQxUplwX4S9d5Cs5kLn1rxZmm1JiKuaMKlNJ q4DCorFoPzMpQx+OHRqIdMg9Iidm/QZMUlQYoEzksYIgKj61h4QqWIGC9Yr5sd/3 zdWFQptvTA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:42:59 2026 by rpki-client