$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json) Hash identifier: 6jz2XhFiUafzI/FpnnL0rrvBJccSojmIyb+A2WFbRKA= Subject key identifier: 51:8F:F3:1E:23:DD:63:3D:78:8E:5C:86:DE:CA:6D:3B:30:4F:B7:7D Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60 Certificate serial: 0D170D2C6122722609D4D1E420A751845B4F644B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft Manifest number: 17 Signing time: Thu 23 Jul 2026 22:49:45 +0000 Manifest this update: Thu 23 Jul 2026 22:44:45 +0000 Manifest next update: Sat 25 Jul 2026 02:28:45 +0000 Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: Qm4CurONFZDe5CrDGBY6vYyRnGyQtXWzw26X1gbFPb8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:17:0d:2c:61:22:72:26:09:d4:d1:e4:20:a7:51:84:5b:4f:64:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60 Validity Not Before: Jul 23 22:44:45 2026 GMT Not After : Jul 25 02:28:45 2026 GMT Subject: CN=518FF31E23DD633D788E5C86DECA6D3B304FB77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:5d:93:52:a0:6a:48:f6:71:9f:1c:d1:b3: 91:95:b1:ea:b8:69:75:b1:ea:86:05:c6:a2:2a:f3: 03:2f:4a:15:7c:ec:b8:9d:7d:51:6f:1b:46:37:3c: e8:50:d5:4a:19:41:89:5f:fb:39:df:68:71:73:6b: 0d:70:70:fd:bd:b0:ac:42:7a:3f:02:a5:6b:95:49: 9e:fb:41:dc:7d:fa:55:53:7b:9a:37:c8:66:a0:da: 67:49:d1:52:fc:0e:9c:f9:80:cb:0c:4e:3e:c0:ab: 7b:75:6f:53:f9:3b:8f:3f:34:71:09:d8:a8:a2:2a: fb:ab:0b:b4:6e:73:ff:ed:09:99:fe:75:08:9d:04: 1a:0b:69:ad:01:30:0e:a0:13:8a:70:3c:18:70:1e: 2c:1a:9d:fa:01:11:64:61:9c:55:e3:95:84:ba:5b: 21:19:f9:a2:03:4d:e0:45:9e:d6:6a:14:97:70:01: 5b:71:e8:cd:8d:69:06:78:76:1c:7e:20:b7:f0:9d: 20:7d:87:10:1a:47:06:ad:62:39:d4:0d:7e:88:0f: 2f:6f:9d:eb:6e:db:52:8f:52:0f:66:5e:ae:34:8a: d1:52:3a:c8:71:22:45:89:96:47:70:bb:de:c8:00: 9c:70:06:90:5c:e8:c9:65:8b:fb:e5:69:e7:63:7a: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8F:F3:1E:23:DD:63:3D:78:8E:5C:86:DE:CA:6D:3B:30:4F:B7:7D X509v3 Authority Key Identifier: keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:81:7c:7f:d5:42:c0:37:c2:19:18:b2:c0:c3:82:e9:aa:cd: 31:98:35:dc:e9:34:cf:82:74:59:3e:bb:da:28:67:e2:e8:55: 23:19:74:7e:49:3b:02:a5:ea:2c:90:4d:a7:d1:d9:a8:09:18: 41:c8:22:20:c5:63:47:83:48:6f:ff:77:ee:c1:45:1e:45:bc: f0:85:c4:0f:ce:98:5d:e2:82:7c:7b:b8:fc:40:c3:35:a8:6f: 85:65:d6:97:d8:c5:c3:73:51:8d:09:88:7f:ce:22:bb:01:a0: cd:13:4c:e3:22:9c:82:ad:f0:e4:72:d1:db:5f:9d:a4:24:7d: 0b:68:53:92:15:8d:61:48:93:91:62:c4:c3:48:d8:38:a8:7e: 48:9a:20:f5:82:b8:42:24:be:3b:e5:b8:68:3e:55:08:10:c0: d3:eb:51:88:a1:66:fa:a8:83:85:58:f5:8e:2f:c3:3b:48:87: d3:76:e1:6c:3b:f5:c6:d5:3e:b3:4a:75:4f:14:a8:62:3e:62: 9d:7c:0c:0e:00:10:41:35:f9:b9:88:80:dd:b7:df:b4:f6:c4: 6c:41:8f:7f:f6:9b:08:54:42:82:44:44:4c:e7:fd:3a:6c:6d: f1:af:7a:34:2e:e5:f0:6e:58:64:80:aa:39:78:62:b6:10:29: 03:45:4c:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDRcNLGEiciYJ1NHkIKdRhFtPZEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdD QjY5MkY2MDAeFw0yNjA3MjMyMjQ0NDVaFw0yNjA3MjUwMjI4NDVaMDMxMTAvBgNV BAMTKDUxOEZGMzFFMjNERDYzM0Q3ODhFNUM4NkRFQ0E2RDNCMzA0RkI3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1P12TUqBqSPZxnxzRs5GVseq4 aXWx6oYFxqIq8wMvShV87LidfVFvG0Y3POhQ1UoZQYlf+znfaHFzaw1wcP29sKxC ej8CpWuVSZ77Qdx9+lVTe5o3yGag2mdJ0VL8Dpz5gMsMTj7Aq3t1b1P5O48/NHEJ 2KiiKvurC7Ruc//tCZn+dQidBBoLaa0BMA6gE4pwPBhwHiwanfoBEWRhnFXjlYS6 WyEZ+aIDTeBFntZqFJdwAVtx6M2NaQZ4dhx+ILfwnSB9hxAaRwatYjnUDX6IDy9v netu21KPUg9mXq40itFSOshxIkWJlkdwu97IAJxwBpBc6Mlli/vlaedjeobLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUY/zHiPdYz14jlyG3sptOzBPt30wHwYDVR0j BBgwFoAUkdOxicZ/ChCEork5lhGCN8tpL2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NzA0NTcxMDg0ODQ1ODc4OS8wLzkxRDNCMTg5QzY3RjBBMTA4NEEyQjkzOTk2MTE4 MjM3Q0I2OTJGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdDQjY5MkY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjcwNDU3MTA4NDg0NTg3ODkvMC85MUQzQjE4OUM2N0Yw QTEwODRBMkI5Mzk5NjExODIzN0NCNjkyRjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoF8f9VCwDfC GRiywMOC6arNMZg13Ok0z4J0WT672ihn4uhVIxl0fkk7AqXqLJBNp9HZqAkYQcgi IMVjR4NIb/937sFFHkW88IXED86YXeKCfHu4/EDDNahvhWXWl9jFw3NRjQmIf84i uwGgzRNM4yKcgq3w5HLR21+dpCR9C2hTkhWNYUiTkWLEw0jYOKh+SJog9YK4QiS+ O+W4aD5VCBDA0+tRiKFm+qiDhVj1ji/DO0iH03bhbDv1xtU+s0p1TxSoYj5inXwM DgAQQTX5uYiA3bfftPbEbEGPf/abCFRCgkRETOf9Omxt8a96NC7l8G5YZICqOXhi thApA0VMJg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:01:23 2026 by rpki-client