$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: 19cm+QJznHJI4/GpVXCzgYOVPmzmzS55813Fll4xGCs= Subject key identifier: 42:EB:B8:E6:F0:DF:8C:ED:AD:F7:A0:75:AA:8B:F4:30:03:51:50:88 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 2F3A0076C77DD4EE9885B5EE120EC7CE8E66A831 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 12:56:15 +0000 Manifest this update: Fri 24 Jul 2026 12:51:15 +0000 Manifest next update: Sat 25 Jul 2026 13:00:15 +0000 Files and hashes: 1: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 2: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: ZqEnfaBu3bGvVKElFRTuPs8/UJe/udhpDUZ++hSKlyY=) 3: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 4: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3a:00:76:c7:7d:d4:ee:98:85:b5:ee:12:0e:c7:ce:8e:66:a8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Jul 24 12:51:15 2026 GMT Not After : Jul 25 13:00:15 2026 GMT Subject: CN=42EBB8E6F0DF8CEDADF7A075AA8BF43003515088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:72:4e:58:c2:09:1a:fc:9a:d6:c8:8d:4f:a6: d1:6e:16:9b:43:a2:fe:20:ac:3a:bf:2f:25:ba:df: b0:52:03:a9:43:70:72:47:57:05:76:85:5b:64:33: 5a:bc:f3:41:43:08:3e:eb:21:53:e9:66:61:d9:ba: dc:0a:34:3b:fa:52:87:8e:7b:bd:55:ec:52:46:82: 9b:f8:82:ee:dd:f5:26:59:be:d1:6d:32:08:0c:2f: ef:fc:fa:e8:21:71:9b:e0:3c:9c:6e:34:77:36:90: c1:40:9a:58:90:99:62:54:14:56:93:83:ef:2f:b1: 30:21:d3:75:ea:54:f5:94:ea:ff:12:0b:7e:a7:0e: a3:d6:e1:fa:ae:28:43:06:c6:e8:d2:3d:a2:6d:2d: 4b:b0:f9:bf:82:71:ee:5d:96:2d:ce:5a:d1:cc:67: 76:79:79:44:6d:ef:1a:66:25:58:fd:4e:92:6c:f5: 05:8b:f8:c3:a1:a0:f5:c3:7e:1f:68:ef:1a:02:e1: 25:ce:d6:91:97:fc:d0:08:4a:d4:76:bc:f3:e5:6a: ef:62:99:1e:21:a3:e1:5d:a5:94:96:46:5c:a1:98: da:fc:68:6f:5b:36:fd:aa:c9:d6:03:d3:97:bb:73: ce:0a:75:ad:f6:ce:99:fb:64:57:e2:71:c7:19:7a: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EB:B8:E6:F0:DF:8C:ED:AD:F7:A0:75:AA:8B:F4:30:03:51:50:88 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b8:6b:c5:3e:e1:9b:22:62:4c:eb:d8:52:6c:0f:a2:fb:d3: 4b:03:5b:11:b9:2d:7e:85:ad:85:41:73:a9:59:e4:05:bf:e0: 3d:a8:95:81:b1:3c:92:4e:8c:64:68:8c:23:25:73:00:65:f9: db:62:e4:90:b0:6b:d5:05:46:85:7d:cc:8a:66:5d:bb:d2:b2: 09:c8:7d:ab:9a:8b:a5:68:ba:b1:32:f8:51:74:76:80:24:fe: 88:98:99:29:77:07:b7:22:de:5b:0c:68:bf:c6:ee:08:37:4d: d2:6d:0d:7d:93:b0:e9:60:55:5e:16:90:49:48:58:a1:9b:e1: 8a:f9:d3:9a:15:c0:71:63:81:70:6d:90:0f:ae:3c:f0:09:ea: 8c:cd:b5:40:1d:cd:d9:66:74:1d:42:3d:98:9b:f2:61:65:6c: b3:c8:43:66:1a:ec:0f:e3:b0:7b:65:b5:8e:76:e5:87:27:be: 59:0f:7e:3a:69:2b:b1:c6:90:7f:27:b3:9e:f3:65:73:fb:a9: 52:23:7d:3d:e9:ad:71:3b:f4:81:d3:9d:69:62:f6:be:56:dc: 07:5c:8b:94:91:8f:ea:db:30:79:9e:1d:20:a5:ac:f0:42:74: 84:92:10:41:99:01:68:4c:b4:d6:e1:80:bb:1f:37:14:01:1e: 45:62:e8:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULzoAdsd91O6YhbXuEg7Hzo5mqDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA3MjQxMjUxMTVaFw0yNjA3MjUxMzAwMTVaMDMxMTAvBgNV BAMTKDQyRUJCOEU2RjBERjhDRURBREY3QTA3NUFBOEJGNDMwMDM1MTUwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqck5Ywgka/JrWyI1PptFuFptD ov4grDq/LyW637BSA6lDcHJHVwV2hVtkM1q880FDCD7rIVPpZmHZutwKNDv6UoeO e71V7FJGgpv4gu7d9SZZvtFtMggML+/8+ughcZvgPJxuNHc2kMFAmliQmWJUFFaT g+8vsTAh03XqVPWU6v8SC36nDqPW4fquKEMGxujSPaJtLUuw+b+Cce5dli3OWtHM Z3Z5eURt7xpmJVj9TpJs9QWL+MOhoPXDfh9o7xoC4SXO1pGX/NAIStR2vPPlau9i mR4ho+FdpZSWRlyhmNr8aG9bNv2qydYD05e7c84Kda32zpn7ZFficccZertDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQuu45vDfjO2t96B1qov0MANRUIgwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7hrxT7hmyJi TOvYUmwPovvTSwNbEbktfoWthUFzqVnkBb/gPaiVgbE8kk6MZGiMIyVzAGX522Lk kLBr1QVGhX3MimZdu9KyCch9q5qLpWi6sTL4UXR2gCT+iJiZKXcHtyLeWwxov8bu CDdN0m0NfZOw6WBVXhaQSUhYoZvhivnTmhXAcWOBcG2QD6488AnqjM21QB3N2WZ0 HUI9mJvyYWVss8hDZhrsD+Owe2W1jnblhye+WQ9+OmkrscaQfyeznvNlc/upUiN9 PemtcTv0gdOdaWL2vlbcB1yLlJGP6tsweZ4dIKWs8EJ0hJIQQZkBaEy01uGAux83 FAEeRWLoeA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:11:18 2026 by rpki-client