$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: XKqRMpTodIeclIcYuYizjFGr9h+0yC/GRVZcPmkRmAY= Subject key identifier: EC:9F:79:68:E7:A5:29:29:24:11:0D:AD:77:2D:E4:0A:ED:56:96:EA Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 6F35A559BB1203F16536807735797830EE32C6E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: FB Signing time: Fri 24 Jul 2026 18:26:52 +0000 Manifest this update: Fri 24 Jul 2026 18:21:52 +0000 Manifest next update: Sat 25 Jul 2026 20:59:52 +0000 Files and hashes: 1: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: gSXpM29ZY/7Y439hE7lYDIi4AjRlUlsxVfeNMZAHcFw=) 3: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:35:a5:59:bb:12:03:f1:65:36:80:77:35:79:78:30:ee:32:c6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Jul 24 18:21:52 2026 GMT Not After : Jul 25 20:59:52 2026 GMT Subject: CN=EC9F7968E7A5292924110DAD772DE40AED5696EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:a7:5f:b4:5b:56:c5:51:19:1f:c9:c0:7a: c5:4b:fa:60:03:83:44:3f:dd:07:57:d1:af:d5:6f: 84:15:ee:31:29:37:0e:e3:df:2a:1b:8b:d2:a7:24: 3a:bb:b6:99:88:41:16:35:a7:04:9a:37:0b:d3:8b: ff:26:bf:8c:da:94:8b:9d:a4:99:b4:2d:f2:cc:89: 9d:30:23:7e:a6:e6:25:6c:82:64:6f:9c:a6:7c:84: af:31:80:88:47:d3:98:f4:43:6c:fa:cc:ac:c3:83: bf:90:99:0f:fc:a7:ee:b8:b4:09:d6:75:c1:79:40: 70:6c:b5:30:0b:33:81:18:a3:74:c2:2a:57:86:80: 47:89:3f:06:f4:ba:cf:8b:98:ad:58:9a:d3:44:8c: 32:db:b7:e9:67:7a:7e:90:6d:01:62:5e:57:d8:98: 61:a2:ff:d3:1a:be:2a:a8:e5:c2:0f:7c:38:48:4e: 58:34:5a:eb:99:0c:9a:6b:7d:5c:48:a6:71:f8:99: 87:98:3c:da:05:a3:f7:8a:57:e6:5d:0e:fa:da:8e: 98:b2:14:f7:e6:97:0d:ea:09:f9:0b:29:b2:a0:6a: 82:f8:41:77:56:f5:f3:ef:b9:4c:88:b0:d1:19:b3: 48:38:a7:6a:e9:57:09:71:ee:53:a1:33:7f:6f:57: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:79:68:E7:A5:29:29:24:11:0D:AD:77:2D:E4:0A:ED:56:96:EA X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d2:0b:9f:7a:9c:f4:4a:52:1e:63:de:68:0a:7a:29:70:cb: 29:9d:29:dd:51:7f:91:a4:7c:4e:19:37:8b:dd:8e:c9:d8:26: 6e:f3:d5:b0:04:95:29:64:ee:72:79:83:7f:30:6d:52:ef:6f: 8f:d7:17:2e:45:04:9c:78:05:71:f5:b5:67:0a:c6:86:50:31: bb:99:66:78:1d:a2:e1:19:21:da:87:12:88:55:ba:ed:71:4f: a2:08:04:85:7f:27:2b:ee:0d:30:dd:3d:44:88:7c:57:38:2d: 70:47:6c:4e:60:09:04:af:8b:62:68:1c:86:40:eb:b0:7c:c4: da:8b:a9:5c:88:9d:4d:97:1c:e5:19:b3:f5:d1:63:93:f2:bc: b5:79:50:29:d9:ed:f3:5c:f6:05:ed:7b:45:7a:a7:19:db:95: ed:02:66:dd:46:d6:11:9f:a7:89:f6:26:bb:6a:42:d6:64:e5: 9d:6c:19:d5:6f:4e:8e:1e:03:45:c3:eb:62:fd:5d:d1:44:08: 82:4c:a2:c4:38:de:f5:ce:55:49:c9:09:8c:f5:de:70:d2:aa: 69:87:e2:fd:e5:7b:86:c2:a8:78:04:a5:35:83:51:57:af:ad: f5:9d:4b:98:96:2b:36:d8:a6:b3:7e:ab:76:bb:cb:6a:22:e7: 74:8f:38:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbzWlWbsSA/FlNoB3NXl4MO4yxuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA3MjQxODIxNTJaFw0yNjA3MjUyMDU5NTJaMDMxMTAvBgNV BAMTKEVDOUY3OTY4RTdBNTI5MjkyNDExMERBRDc3MkRFNDBBRUQ1Njk2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8qdftFtWxVEZH8nAesVL+mAD g0Q/3QdX0a/Vb4QV7jEpNw7j3yobi9KnJDq7tpmIQRY1pwSaNwvTi/8mv4zalIud pJm0LfLMiZ0wI36m5iVsgmRvnKZ8hK8xgIhH05j0Q2z6zKzDg7+QmQ/8p+64tAnW dcF5QHBstTALM4EYo3TCKleGgEeJPwb0us+LmK1YmtNEjDLbt+lnen6QbQFiXlfY mGGi/9Maviqo5cIPfDhITlg0WuuZDJprfVxIpnH4mYeYPNoFo/eKV+ZdDvrajpiy FPfmlw3qCfkLKbKgaoL4QXdW9fPvuUyIsNEZs0g4p2rpVwlx7lOhM39vV/KBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7J95aOelKSkkEQ2tdy3kCu1WluowHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdILn3qc9EpS HmPeaAp6KXDLKZ0p3VF/kaR8Thk3i92OydgmbvPVsASVKWTucnmDfzBtUu9vj9cX LkUEnHgFcfW1ZwrGhlAxu5lmeB2i4Rkh2ocSiFW67XFPoggEhX8nK+4NMN09RIh8 VzgtcEdsTmAJBK+LYmgchkDrsHzE2oupXIidTZcc5Rmz9dFjk/K8tXlQKdnt81z2 Be17RXqnGduV7QJm3UbWEZ+nifYmu2pC1mTlnWwZ1W9Ojh4DRcPrYv1d0UQIgkyi xDje9c5VSckJjPXecNKqaYfi/eV7hsKoeASlNYNRV6+t9Z1LmJYrNtims36rdrvL aiLndI84Tw== -----END CERTIFICATE-----Generated at Sat Jul 25 00:53:54 2026 by rpki-client