$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: LVoeMVCFHb1adZ8HfLbLmSwrcUYbNgYQrQmNLUQOQYE= Subject key identifier: B7:E8:F6:F3:32:7D:C2:61:04:37:EC:A7:E9:A9:C7:DF:38:5E:CD:EA Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 124098D740C7041D44BC9B51FDCFB4B90B4130BE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 9B Signing time: Fri 24 Jul 2026 07:50:39 +0000 Manifest this update: Fri 24 Jul 2026 07:45:39 +0000 Manifest next update: Sat 25 Jul 2026 08:52:39 +0000 Files and hashes: 1: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 2: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: 2FBziNmP8BWlLdV/nTCLEnD2J+A7+XvcwWdvkZrWCGI=) 3: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:40:98:d7:40:c7:04:1d:44:bc:9b:51:fd:cf:b4:b9:0b:41:30:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Jul 24 07:45:39 2026 GMT Not After : Jul 25 08:52:39 2026 GMT Subject: CN=B7E8F6F3327DC2610437ECA7E9A9C7DF385ECDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:cb:51:34:8c:c6:43:e9:03:7c:be:23:0a: 67:ac:8a:4b:c7:10:36:98:cc:8e:1f:40:67:a0:d6: 38:d0:6b:43:72:1f:02:41:4c:b6:27:c3:0a:81:f1: a9:8e:48:f6:64:3a:58:16:88:83:68:5f:74:22:21: 3b:a9:58:1e:e3:21:9e:fc:9a:ee:65:fd:17:de:38: 7f:c4:aa:46:59:ea:1d:8f:4e:1c:8c:ce:78:26:0f: a2:5a:6b:1c:1e:95:97:53:b5:6f:dd:79:ca:e8:2d: c2:db:29:38:af:81:5c:22:1a:7b:0b:bc:63:7b:8a: 93:69:c2:99:95:52:5b:2a:af:e5:27:9a:fb:c7:23: 9d:d8:c3:a1:89:6f:4b:65:86:79:17:c3:c0:52:f1: 6a:3d:db:58:a5:50:0b:7c:65:90:d8:63:8f:a4:b5: f0:95:6d:5f:2b:5d:62:94:51:d5:02:12:bc:89:97: f9:1c:e0:9d:70:f3:66:86:16:41:92:b5:a9:83:05: 9a:36:e7:aa:c2:d3:ae:c1:cc:f5:04:02:6e:d1:88: 3c:8f:12:58:50:40:9c:66:b2:79:9f:82:9a:48:f8: 0b:54:1e:8c:00:13:e7:db:6c:d6:7e:ae:5d:26:06: af:82:8a:b6:30:43:19:c9:c1:34:4c:f8:8a:b0:dd: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:F6:F3:32:7D:C2:61:04:37:EC:A7:E9:A9:C7:DF:38:5E:CD:EA X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:e2:e4:66:90:26:26:80:6d:5e:57:d3:c5:66:10:b2:9c: 2c:fd:2a:80:1f:78:e5:d0:34:97:b9:ca:75:9b:be:43:4a:91: b0:6c:47:5d:23:0a:39:75:16:e4:c7:3c:7e:2b:00:3e:50:87: de:19:af:f1:42:0e:3b:70:0d:64:a0:b9:30:96:8d:78:b1:f9: 9e:df:48:4b:da:e0:61:37:ad:d0:b8:60:f9:7a:ad:56:da:fc: f7:31:0e:12:de:c2:40:d8:8b:c4:91:19:ce:dc:60:13:5e:58: 3c:b4:f3:a9:2c:f5:96:90:6f:a8:13:b3:09:03:e7:26:f0:dc: 2f:38:23:74:84:f1:e7:6c:97:c4:87:0e:02:3c:33:f1:81:c2: f2:f8:bd:b7:aa:79:8b:29:3a:66:5b:8e:af:94:78:86:27:85: 43:45:a7:43:77:77:1d:a0:ff:89:07:5d:a6:db:9f:6d:14:ef: 59:35:17:d8:ce:81:29:d7:3b:54:67:76:cf:69:9d:02:65:af: 0c:3e:e8:78:f6:b7:ec:0a:64:f8:7a:d2:04:61:28:5f:0a:5f: 87:84:49:49:ba:c9:03:6b:a6:75:f4:b0:70:05:d5:5d:f4:01: 98:eb:d4:67:a9:66:a6:f6:4d:e6:6e:72:b0:1f:b9:12:b3:1f: 8d:2f:e4:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEkCY10DHBB1EvJtR/c+0uQtBML4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA3MjQwNzQ1MzlaFw0yNjA3MjUwODUyMzlaMDMxMTAvBgNV BAMTKEI3RThGNkYzMzI3REMyNjEwNDM3RUNBN0U5QTlDN0RGMzg1RUNERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGMtRNIzGQ+kDfL4jCmesikvH EDaYzI4fQGeg1jjQa0NyHwJBTLYnwwqB8amOSPZkOlgWiINoX3QiITupWB7jIZ78 mu5l/RfeOH/EqkZZ6h2PThyMzngmD6JaaxwelZdTtW/decroLcLbKTivgVwiGnsL vGN7ipNpwpmVUlsqr+UnmvvHI53Yw6GJb0tlhnkXw8BS8Wo921ilUAt8ZZDYY4+k tfCVbV8rXWKUUdUCEryJl/kc4J1w82aGFkGStamDBZo256rC067BzPUEAm7RiDyP ElhQQJxmsnmfgppI+AtUHowAE+fbbNZ+rl0mBq+CirYwQxnJwTRM+Iqw3Y6dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt+j28zJ9wmEEN+yn6anH3zhezeowHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJji5GaQJiaA bV5X08VmELKcLP0qgB945dA0l7nKdZu+Q0qRsGxHXSMKOXUW5Mc8fisAPlCH3hmv 8UIOO3ANZKC5MJaNeLH5nt9IS9rgYTet0Lhg+XqtVtr89zEOEt7CQNiLxJEZztxg E15YPLTzqSz1lpBvqBOzCQPnJvDcLzgjdITx52yXxIcOAjwz8YHC8vi9t6p5iyk6 ZluOr5R4hieFQ0WnQ3d3HaD/iQddptufbRTvWTUX2M6BKdc7VGd2z2mdAmWvDD7o ePa37Apk+HrSBGEoXwpfh4RJSbrJA2umdfSwcAXVXfQBmOvUZ6lmpvZN5m5ysB+5 ErMfjS/ktw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:14 2026 by rpki-client