$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft File: 7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json) Hash identifier: 5fHeY6DaMM795AOyYx12c0SdJxpfcDyG7iQVYx3BmhQ= Subject key identifier: 87:49:C1:5E:4E:4D:D1:71:73:E8:3A:92:E1:84:F8:95:8E:2C:8A:81 Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C Certificate serial: 1D139331EE091B894DFB4CFB3D4967D9B5D97AC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft Manifest number: 96 Signing time: Tue 12 May 2026 19:05:42 +0000 Manifest this update: Tue 12 May 2026 19:00:42 +0000 Manifest next update: Wed 13 May 2026 20:13:42 +0000 Files and hashes: 1: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=) 2: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: cqFkagb2zy0Xd9M9UzsDt9nAUzFSe/aCbKqfcu44plg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:13:93:31:ee:09:1b:89:4d:fb:4c:fb:3d:49:67:d9:b5:d9:7a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C Validity Not Before: May 12 19:00:42 2026 GMT Not After : May 13 20:13:42 2026 GMT Subject: CN=8749C15E4E4DD17173E83A92E184F8958E2C8A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:b7:be:67:68:e1:fb:fc:2d:52:6f:d4:79: d3:8b:61:3e:ee:76:c2:2c:3b:30:f4:d2:5f:94:60: 94:bd:8f:48:c1:8d:c7:21:0d:e2:82:8c:70:3e:77: 4a:99:b2:21:7f:dd:69:49:7b:a3:40:8d:e9:97:ea: b3:fe:2c:3b:f4:3a:e4:97:e1:11:ff:7e:c9:eb:74: d2:3c:31:0d:30:ce:c2:a7:0c:f7:ad:00:81:e8:c8: 82:6f:1b:6e:f8:00:28:6d:d5:8a:dd:87:a0:89:bf: a4:dd:2e:f3:1c:a6:33:33:16:55:be:55:2b:57:5f: dd:18:ba:e5:30:8f:92:31:18:83:12:88:8d:62:7a: 46:fa:8a:40:67:c0:32:56:b5:86:ef:db:0b:0a:b1: 1e:fe:a0:1a:f9:0e:47:19:56:a0:c8:01:42:ff:d1: 24:02:ae:57:ad:ec:b3:e0:9d:e8:97:fe:c8:14:dc: 32:1e:b9:0b:30:e6:ed:cc:d9:ee:60:36:e0:b9:cf: f7:9f:28:86:91:0a:07:5b:9d:12:ab:c0:39:43:d3: 0d:8c:04:f9:71:a4:f3:e2:35:ed:3d:cd:79:3b:35: 5f:56:ad:51:a4:3e:a3:5d:4b:58:08:e7:8a:22:d7: 4b:36:82:df:2b:1d:d5:ca:eb:fb:44:da:ec:c9:9b: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:49:C1:5E:4E:4D:D1:71:73:E8:3A:92:E1:84:F8:95:8E:2C:8A:81 X509v3 Authority Key Identifier: keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:36:17:48:46:6f:72:7a:b3:0b:2d:4c:5d:c1:f0:03:ac:89: 67:d6:96:82:04:ab:ab:80:2f:b8:41:64:25:6f:22:f5:1f:87: 30:f2:92:61:d8:08:af:8b:c4:45:53:aa:60:b9:c6:76:a5:76: dc:25:8f:c4:d4:7b:d6:3f:bd:f7:1c:f1:e4:fb:d5:65:12:5b: 6b:97:89:d9:91:80:fe:97:bf:f4:34:c3:cb:7b:70:28:be:0e: 04:c2:1d:a8:5a:e4:9f:d6:a1:36:9f:ac:02:b7:e4:af:5c:01: 9e:5f:66:01:52:bf:4f:e5:2b:c6:d6:10:e6:70:4c:6c:91:94: d0:e3:f2:0b:56:c5:e5:e2:c8:9f:1b:c6:44:16:67:3e:f0:41: 0f:47:70:7f:bf:00:b6:26:7d:45:15:93:47:aa:55:81:e6:5d: 8e:b7:06:38:7c:bd:f9:87:f6:1e:f4:d3:e6:88:e9:d0:fd:ac: 8a:02:09:20:23:a7:0c:e6:99:13:92:26:28:f0:26:1e:0f:82: 36:d5:3d:e2:54:a9:1b:6c:ae:e3:ba:83:80:40:01:07:d6:08: c8:d0:57:45:0b:77:5e:e8:a6:4c:e4:8e:f8:bc:25:18:49:74: e9:4e:36:36:dc:b9:81:97:61:30:9c:14:93:53:52:b3:eb:dd: eb:9b:60:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHROTMe4JG4lN+0z7PUln2bXZesYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5 RjU3NzI5QzAeFw0yNjA1MTIxOTAwNDJaFw0yNjA1MTMyMDEzNDJaMDMxMTAvBgNV BAMTKDg3NDlDMTVFNEU0REQxNzE3M0U4M0E5MkUxODRGODk1OEUyQzhBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tbe+Z2jh+/wtUm/UedOLYT7u dsIsOzD00l+UYJS9j0jBjcchDeKCjHA+d0qZsiF/3WlJe6NAjemX6rP+LDv0OuSX 4RH/fsnrdNI8MQ0wzsKnDPetAIHoyIJvG274ACht1Yrdh6CJv6TdLvMcpjMzFlW+ VStXX90YuuUwj5IxGIMSiI1iekb6ikBnwDJWtYbv2wsKsR7+oBr5DkcZVqDIAUL/ 0SQCrlet7LPgneiX/sgU3DIeuQsw5u3M2e5gNuC5z/efKIaRCgdbnRKrwDlD0w2M BPlxpPPiNe09zXk7NV9WrVGkPqNdS1gI54oi10s2gt8rHdXK6/tE2uzJm/59AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh0nBXk5N0XFz6DqS4YT4lY4sioEwHwYDVR0j BBgwFoAUfBUH8Iciiu3L8zdodSh04J9XcpwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjkyOTk2MzY4NjQyODY3NS8wLzdDMTUwN0YwODcyMjhBRURDQkYzMzc2ODc1Mjg3 NEUwOUY1NzcyOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5RjU3NzI5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY5Mjk5NjM2ODY0Mjg2NzUvMC83QzE1MDdGMDg3MjI4 QUVEQ0JGMzM3Njg3NTI4NzRFMDlGNTc3MjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTYXSEZvcnqz Cy1MXcHwA6yJZ9aWggSrq4AvuEFkJW8i9R+HMPKSYdgIr4vERVOqYLnGdqV23CWP xNR71j+99xzx5PvVZRJba5eJ2ZGA/pe/9DTDy3twKL4OBMIdqFrkn9ahNp+sArfk r1wBnl9mAVK/T+UrxtYQ5nBMbJGU0OPyC1bF5eLInxvGRBZnPvBBD0dwf78AtiZ9 RRWTR6pVgeZdjrcGOHy9+Yf2HvTT5ojp0P2sigIJICOnDOaZE5ImKPAmHg+CNtU9 4lSpG2yu47qDgEABB9YIyNBXRQt3XuimTOSO+LwlGEl06U42Nty5gZdhMJwUk1NS s+vd65tgXQ== -----END CERTIFICATE-----Generated at Wed May 13 07:06:21 2026 by rpki-client