$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: SU5OFLfOMRrrHa0fgnJapc6EKuCSyJHxsS+erJM7Mnc= Subject key identifier: 01:25:F0:7F:54:D5:A8:C0:92:3C:18:2F:6A:7F:E1:5A:86:EF:C8:86 Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 2457D0B605EB0A7B472220EEED3C4AD3DAC6511D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 2A Signing time: Tue 12 May 2026 18:00:37 +0000 Manifest this update: Tue 12 May 2026 17:55:37 +0000 Manifest next update: Wed 13 May 2026 19:09:37 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 2: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: iMlcfhfJQao5GAUPH2bq67JE34w13pwdWD3noSJvEuU=) 3: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 4: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:57:d0:b6:05:eb:0a:7b:47:22:20:ee:ed:3c:4a:d3:da:c6:51:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: May 12 17:55:37 2026 GMT Not After : May 13 19:09:37 2026 GMT Subject: CN=0125F07F54D5A8C0923C182F6A7FE15A86EFC886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:9a:ea:30:d8:d3:97:b2:eb:f8:3f:00:7d: 8d:92:f8:7b:71:8f:82:fc:87:3d:ca:b4:7f:1b:b0: 22:3a:59:10:45:3e:41:e6:06:06:f7:2c:cd:00:cc: 05:f4:47:81:79:71:b7:af:d9:f0:df:d8:49:fc:8b: a7:66:d2:c3:42:0f:45:ac:c4:1c:7f:99:ac:f2:4c: 02:6f:cc:22:fb:68:9f:ab:89:c4:a3:57:4f:c3:39: 47:b3:67:ee:c6:48:1d:69:8c:1b:2b:5c:d4:4b:8d: 06:02:12:53:c5:e2:22:d6:39:23:52:46:1a:f3:90: 4e:22:05:55:53:39:ff:34:8d:16:8b:b3:22:f3:43: e6:9a:ae:72:85:35:bb:be:ce:b4:f3:bc:9c:fc:3a: 1a:fe:d6:39:e0:66:8e:4d:a0:c9:3e:8e:04:07:cd: f7:31:3e:61:a0:89:6b:e3:b8:b5:30:83:0c:db:59: a3:22:98:2b:e3:86:7f:a4:db:bc:7c:e1:f4:ec:7d: 1d:09:a8:09:d1:3a:ab:a5:90:ff:92:f4:6c:19:e3: ee:d5:15:5e:c7:de:88:df:5d:76:4f:84:9c:6c:f1: ba:25:a3:ec:f3:ad:5e:fa:f0:76:3e:10:a5:76:db: 6e:30:da:5d:da:92:5c:86:a0:54:86:23:4c:75:59: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:F0:7F:54:D5:A8:C0:92:3C:18:2F:6A:7F:E1:5A:86:EF:C8:86 X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:51:bf:f1:e4:a6:5d:b7:41:f6:42:5b:aa:3a:65:97:76:b3: 90:49:69:10:40:df:a0:19:7f:32:eb:a3:7b:b8:21:b5:5f:90: 8c:02:44:04:1e:bd:96:ff:9f:29:b7:6c:34:b0:fb:ad:0d:44: 4c:76:27:d1:2d:33:a8:ed:92:d0:20:1a:b0:77:fd:60:75:4f: 5c:55:c7:9c:eb:a7:4a:1f:43:2e:9f:94:f3:c6:37:0d:7d:04: 31:b5:43:ff:24:75:73:51:4e:33:db:03:0d:87:fd:0d:34:e0: 29:1e:82:41:3f:93:e2:a7:d0:a5:85:28:ed:e7:7b:d8:d4:f7: 88:c2:25:36:1f:1c:5e:44:b1:ea:a0:d5:ad:ea:70:ae:0c:09: d7:6b:63:aa:71:6c:15:35:51:3e:48:3c:89:44:a1:28:b9:2b: 2a:ff:b7:54:12:af:e5:27:1e:74:ad:eb:b9:02:96:ff:7c:23: c5:5c:cc:9c:59:78:23:3b:4d:67:69:30:68:64:83:dd:c5:91: 8a:3d:c1:63:a3:d2:40:c4:a9:57:28:df:3d:ad:a2:da:80:50: d7:b3:b0:49:57:ff:2a:c6:39:62:62:5a:8f:bf:54:39:3f:0a: 97:0b:99:c7:76:da:74:42:1a:f2:14:ff:50:5e:f0:0a:d6:c3: 7d:cf:03:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJFfQtgXrCntHIiDu7TxK09rGUR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA1MTIxNzU1MzdaFw0yNjA1MTMxOTA5MzdaMDMxMTAvBgNV BAMTKDAxMjVGMDdGNTRENUE4QzA5MjNDMTgyRjZBN0ZFMTVBODZFRkM4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB95rqMNjTl7Lr+D8AfY2S+Htx j4L8hz3KtH8bsCI6WRBFPkHmBgb3LM0AzAX0R4F5cbev2fDf2En8i6dm0sNCD0Ws xBx/mazyTAJvzCL7aJ+ricSjV0/DOUezZ+7GSB1pjBsrXNRLjQYCElPF4iLWOSNS RhrzkE4iBVVTOf80jRaLsyLzQ+aarnKFNbu+zrTzvJz8Ohr+1jngZo5NoMk+jgQH zfcxPmGgiWvjuLUwgwzbWaMimCvjhn+k27x84fTsfR0JqAnROqulkP+S9GwZ4+7V FV7H3ojfXXZPhJxs8bolo+zzrV768HY+EKV2224w2l3aklyGoFSGI0x1WS2jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUASXwf1TVqMCSPBgvan/hWobvyIYwHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFG/8eSmXbdB 9kJbqjpll3azkElpEEDfoBl/Muuje7ghtV+QjAJEBB69lv+fKbdsNLD7rQ1ETHYn 0S0zqO2S0CAasHf9YHVPXFXHnOunSh9DLp+U88Y3DX0EMbVD/yR1c1FOM9sDDYf9 DTTgKR6CQT+T4qfQpYUo7ed72NT3iMIlNh8cXkSx6qDVrepwrgwJ12tjqnFsFTVR Pkg8iUShKLkrKv+3VBKv5ScedK3ruQKW/3wjxVzMnFl4IztNZ2kwaGSD3cWRij3B Y6PSQMSpVyjfPa2i2oBQ17OwSVf/KsY5YmJaj79UOT8KlwuZx3badEIa8hT/UF7w CtbDfc8D0g== -----END CERTIFICATE-----Generated at Wed May 13 07:56:38 2026 by rpki-client