$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: l+G5kiKvvb5fD+AfIPi+xsXju5H1ic94+XPTvohlZq8= Subject key identifier: BF:A7:1D:BA:12:68:96:67:EE:93:B6:8B:C9:BB:FE:4D:26:4E:EB:9D Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 11D985B78BB86BD682A357ADE22389B436BBDF43 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 8A Signing time: Thu 23 Jul 2026 17:44:14 +0000 Manifest this update: Thu 23 Jul 2026 17:39:14 +0000 Manifest next update: Fri 24 Jul 2026 19:21:14 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 2: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: TCOIDrJWEYztKbk6xAaWzDdIbQfeUBSzvE+wIKhhP+8=) 3: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 4: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d9:85:b7:8b:b8:6b:d6:82:a3:57:ad:e2:23:89:b4:36:bb:df:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Jul 23 17:39:14 2026 GMT Not After : Jul 24 19:21:14 2026 GMT Subject: CN=BFA71DBA12689667EE93B68BC9BBFE4D264EEB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:5e:a2:a6:87:de:10:b3:9b:9c:11:fd:73: 25:ca:12:d6:de:1a:4a:b6:81:2c:72:45:c4:bb:35: b4:4a:e3:71:c1:f7:bf:57:d3:81:5f:cd:b3:f1:a2: 56:4b:73:47:70:a9:66:62:d7:31:40:6d:27:f8:db: 11:4f:2c:22:e3:db:26:ab:62:7d:de:fc:ee:99:c9: 05:c1:97:ae:c6:03:ea:a2:c3:ed:d5:e7:c0:80:85: a4:a8:45:b7:e2:e5:96:f1:26:ee:8c:f0:e0:4b:16: a2:ff:8c:36:ab:bc:47:b9:b9:c8:b2:ce:93:04:5b: 9c:d2:5d:bb:ea:bf:84:71:23:7c:e2:07:7a:5f:d0: dc:96:24:43:e5:5e:69:b1:97:01:98:23:86:b4:42: c0:59:89:c9:06:27:66:a4:8a:18:2d:28:31:55:ea: e3:79:b4:73:42:13:e8:02:7f:57:40:34:9b:52:7f: 19:25:53:ff:2f:92:4a:79:e1:ec:6f:dc:bd:2a:36: ed:02:1f:c9:ef:7d:9d:d5:23:36:71:06:52:61:95: 87:dc:31:75:72:91:cf:54:b8:84:6a:18:de:08:9a: 0e:f6:2b:00:1d:e9:7d:21:b0:03:67:ee:4a:e4:de: af:81:7b:f4:0c:c0:85:ed:1d:5b:80:42:28:1f:6e: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:1D:BA:12:68:96:67:EE:93:B6:8B:C9:BB:FE:4D:26:4E:EB:9D X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d2:cf:fd:8f:1f:9e:03:50:e2:bc:e1:10:e1:b1:4a:93:80: 1b:33:c5:0c:b0:53:cb:9d:7a:16:1c:62:bb:3d:10:c3:46:2c: ba:54:2e:e2:a5:c8:71:f3:cf:c8:58:c2:5f:ba:cb:fc:37:a1: 68:1e:b7:3f:e5:9d:ef:0f:a2:b5:bc:7b:9d:b6:ed:11:85:73: 27:f6:4a:ad:a1:e1:a7:54:27:0a:6a:d6:42:98:c0:cf:b9:a1: 11:3c:52:82:c2:ce:d9:da:72:af:b4:f1:89:84:cb:e0:b8:e6: 60:72:d3:9c:35:77:7f:f7:25:a9:f5:b2:61:23:e8:15:5c:dc: b0:b5:3b:f0:e9:9d:b3:f0:b0:30:be:09:48:9f:4c:31:9c:4c: dd:70:5a:02:a1:c6:52:b9:61:f3:01:d1:0e:de:48:99:25:d7: a1:bb:21:ab:01:a4:f6:03:f9:74:a8:3c:5e:99:5f:df:ec:e3: d9:d3:f9:4d:45:e0:24:01:3d:7e:39:f3:53:61:c6:9a:b2:e6: 3f:95:19:54:9f:ea:5c:5e:f8:81:c5:7e:90:78:ed:d8:72:cf: 09:b7:e6:69:67:4a:d6:1b:3d:05:3b:fb:52:c9:52:48:c0:b6: 7f:e1:ca:b3:1d:67:ba:e7:2c:2f:b5:28:0e:55:be:8e:41:93: 77:83:99:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEdmFt4u4a9aCo1et4iOJtDa730MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA3MjMxNzM5MTRaFw0yNjA3MjQxOTIxMTRaMDMxMTAvBgNV BAMTKEJGQTcxREJBMTI2ODk2NjdFRTkzQjY4QkM5QkJGRTREMjY0RUVCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNZF6ipofeELObnBH9cyXKEtbe Gkq2gSxyRcS7NbRK43HB979X04FfzbPxolZLc0dwqWZi1zFAbSf42xFPLCLj2yar Yn3e/O6ZyQXBl67GA+qiw+3V58CAhaSoRbfi5ZbxJu6M8OBLFqL/jDarvEe5uciy zpMEW5zSXbvqv4RxI3ziB3pf0NyWJEPlXmmxlwGYI4a0QsBZickGJ2akihgtKDFV 6uN5tHNCE+gCf1dANJtSfxklU/8vkkp54exv3L0qNu0CH8nvfZ3VIzZxBlJhlYfc MXVykc9UuIRqGN4Img72KwAd6X0hsANn7krk3q+Be/QMwIXtHVuAQigfbqGtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv6cduhJolmfuk7aLybv+TSZO650wHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdLP/Y8fngNQ 4rzhEOGxSpOAGzPFDLBTy516Fhxiuz0Qw0YsulQu4qXIcfPPyFjCX7rL/DehaB63 P+Wd7w+itbx7nbbtEYVzJ/ZKraHhp1QnCmrWQpjAz7mhETxSgsLO2dpyr7TxiYTL 4LjmYHLTnDV3f/clqfWyYSPoFVzcsLU78Omds/CwML4JSJ9MMZxM3XBaAqHGUrlh 8wHRDt5ImSXXobshqwGk9gP5dKg8Xplf3+zj2dP5TUXgJAE9fjnzU2HGmrLmP5UZ VJ/qXF74gcV+kHjt2HLPCbfmaWdK1hs9BTv7UslSSMC2f+HKsx1nuucsL7UoDlW+ jkGTd4OZDw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:34:17 2026 by rpki-client