$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: UNfVJ+ci7xfZu7OWLDkTvk1XWpXlzIquEY6zy1b4Mtk= Subject key identifier: B2:C1:80:84:5D:BC:06:8B:78:35:93:EA:DE:F8:F7:B6:0D:F6:5E:94 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 209ED199FF48103081C0C837978FED8F789A4453 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 017E Signing time: Fri 24 Jul 2026 13:21:17 +0000 Manifest this update: Fri 24 Jul 2026 13:16:17 +0000 Manifest next update: Sat 25 Jul 2026 15:36:17 +0000 Files and hashes: 1: AS4134.roa (hash: fXejOFdV5eaFcvHgGSKlgpUo37ea48C+DMHePf+GKgA=) 2: AS4837.roa (hash: SBoAFQfVIbP1sO3DsIywYPHEyoGjeAh2mu8MjJTzvu4=) 3: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: su5FQM2TJdGiXZVuxxhnFYqV6XQiVelo2xo08WV+v8M=) 4: AS9808.roa (hash: RAHCjoZiKyNzBq3FMDIaEpR2kH3+XTi1YGQ3vOVwGyk=) 5: AS13378.roa (hash: OPyi8mTllKWBTmPe21LoqwD2zrSCH/8SJK7Z44pkkFs=) 6: AS56046.roa (hash: 8MvzYVqIb60aBw7ICs4pxcXONgJRqwTj09zKGBVIEto=) 7: AS63567.roa (hash: 3uz+p/aF6FyCjNl25DbP3+KxCjFc79nCAtWo76qvoGk=) 8: AS23650.roa (hash: D9jVg0LLO+giI4vySvty+x8Af/ENhgC630tuamgNdUA=) 9: AS0.roa (hash: 2whuGFj5CSwsR/pdhiLgE8oiFshD2k+kToFmQb91xT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9e:d1:99:ff:48:10:30:81:c0:c8:37:97:8f:ed:8f:78:9a:44:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 24 13:16:17 2026 GMT Not After : Jul 25 15:36:17 2026 GMT Subject: CN=B2C180845DBC068B783593EADEF8F7B60DF65E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:76:74:27:a5:19:0c:2a:7a:7e:e2:2d:17:4b: c8:02:5b:9f:aa:2a:dc:4b:c7:16:3e:ff:1a:4e:6c: cf:af:6f:b2:a4:bd:37:1c:41:33:14:b1:5b:84:68: 9b:c4:aa:45:54:fc:17:3c:e4:2b:00:e5:6f:a1:c8: d0:2a:0c:f2:1d:da:af:00:3a:b5:48:4b:4a:e7:03: 01:dd:d2:cc:66:2a:6d:43:89:d0:5e:e8:e7:6f:a7: 7d:18:55:94:b3:69:30:60:2f:29:28:d7:8d:d6:eb: 01:68:1a:6d:01:85:cf:6c:2e:4f:e8:31:89:b3:54: 9a:4b:0f:2e:62:fe:d3:51:f9:8f:ed:6f:1f:3a:31: f5:47:34:ef:b8:38:a3:5d:30:9b:48:bc:37:b1:4c: 47:32:a2:fb:1d:b3:cc:5b:58:8b:3b:ab:6f:2e:2c: 56:9d:f2:48:61:73:12:e0:8e:70:da:7e:51:06:92: 0d:54:b9:6c:c8:82:79:3e:0d:2f:fa:40:67:cc:f8: 96:21:aa:a2:68:ac:fc:8e:b8:30:c9:2a:b2:74:c1: 82:bb:a3:f6:0e:0a:50:be:34:69:6f:84:b3:17:5c: 5b:a5:62:bb:dc:8f:0c:4d:04:3d:e2:82:db:f4:32: c5:2c:00:c9:93:14:2b:e6:33:f5:99:15:3e:bd:36: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:80:84:5D:BC:06:8B:78:35:93:EA:DE:F8:F7:B6:0D:F6:5E:94 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:18:92:71:f1:9c:c4:49:68:6e:9c:48:37:08:a4:4b:88:73: 18:b5:fd:e8:a7:32:d3:45:0d:37:c2:70:79:9b:26:20:3c:aa: 41:90:8b:88:ba:a0:25:47:52:b2:00:cb:41:73:f4:cc:6f:c1: 2a:59:1a:53:9b:8d:f2:bd:21:7a:72:32:6e:d4:ae:99:6a:f1: e8:56:a3:c9:2f:96:7d:9e:d0:84:f4:83:cd:79:ad:58:16:17: dd:dc:b0:32:c6:00:8a:f0:a7:f6:55:e6:e8:57:b3:76:0c:6e: 27:22:df:1c:11:4b:0e:46:de:75:cd:eb:9f:4a:12:e5:34:38: 35:3c:2d:cd:93:e4:e1:32:3a:27:d8:c4:26:01:0b:46:e8:d5: aa:89:46:d1:25:2c:8a:f4:5c:77:1a:95:f3:0f:ba:92:46:78: d2:a1:ca:da:08:1a:f1:e7:a7:1a:8d:9a:37:ae:c1:0e:56:6b: 90:1a:75:07:e5:9e:74:3b:52:0a:29:22:c9:6b:78:4c:92:04: 3e:c9:d0:1f:f1:73:60:a7:ef:bf:74:d4:83:99:33:d2:a5:87: 7b:ef:69:dc:2e:7d:7a:d0:21:59:18:94:d3:71:24:45:74:9e: 90:0c:c4:5c:8d:a2:ab:e3:62:31:91:0b:3d:b4:68:ac:a8:cc: 9b:bf:c4:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIJ7Rmf9IEDCBwMg3l4/tj3iaRFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MjQxMzE2MTdaFw0yNjA3MjUxNTM2MTdaMDMxMTAvBgNV BAMTKEIyQzE4MDg0NURCQzA2OEI3ODM1OTNFQURFRjhGN0I2MERGNjVFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpdnQnpRkMKnp+4i0XS8gCW5+q KtxLxxY+/xpObM+vb7KkvTccQTMUsVuEaJvEqkVU/Bc85CsA5W+hyNAqDPId2q8A OrVIS0rnAwHd0sxmKm1DidBe6Odvp30YVZSzaTBgLyko143W6wFoGm0Bhc9sLk/o MYmzVJpLDy5i/tNR+Y/tbx86MfVHNO+4OKNdMJtIvDexTEcyovsds8xbWIs7q28u LFad8khhcxLgjnDaflEGkg1UuWzIgnk+DS/6QGfM+JYhqqJorPyOuDDJKrJ0wYK7 o/YOClC+NGlvhLMXXFulYrvcjwxNBD3igtv0MsUsAMmTFCvmM/WZFT69NqFfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUssGAhF28Bot4NZPq3vj3tg32XpQwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxiScfGcxElo bpxINwikS4hzGLX96Kcy00UNN8JweZsmIDyqQZCLiLqgJUdSsgDLQXP0zG/BKlka U5uN8r0henIybtSumWrx6FajyS+WfZ7QhPSDzXmtWBYX3dywMsYAivCn9lXm6Fez dgxuJyLfHBFLDkbedc3rn0oS5TQ4NTwtzZPk4TI6J9jEJgELRujVqolG0SUsivRc dxqV8w+6kkZ40qHK2gga8eenGo2aN67BDlZrkBp1B+WedDtSCikiyWt4TJIEPsnQ H/FzYKfvv3TUg5kz0qWHe+9p3C59etAhWRiU03EkRXSekAzEXI2iq+NiMZELPbRo rKjMm7/EsA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:06:21 2026 by rpki-client