$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: sqfhTjiX45Csmj8vLf7bpASp0kH9bIgVQCM9hraH3KA= Subject key identifier: A2:5A:FF:56:5D:8C:F4:B9:0D:92:85:BC:82:BF:B2:01:17:C9:6D:60 Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 6DDB23B68843B036EBE5797D11EE945EC234A9B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 8B Signing time: Fri 24 Jul 2026 11:26:04 +0000 Manifest this update: Fri 24 Jul 2026 11:21:04 +0000 Manifest next update: Sat 25 Jul 2026 13:38:04 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 2: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: RIyedoodvJU6atavYIubrSSkInZCV88oXj+EuC0mJdQ=) 3: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 4: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:db:23:b6:88:43:b0:36:eb:e5:79:7d:11:ee:94:5e:c2:34:a9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Jul 24 11:21:04 2026 GMT Not After : Jul 25 13:38:04 2026 GMT Subject: CN=A25AFF565D8CF4B90D9285BC82BFB20117C96D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0f:d4:51:86:d2:1f:62:43:7f:64:33:87:8b: 31:5f:8d:27:f3:70:0c:b2:4e:83:3e:10:3d:a2:88: 40:a8:94:34:c7:d0:6b:d7:d8:44:fb:a0:aa:3f:2d: 27:d7:5a:d9:52:6c:e6:df:2a:d3:8f:3f:e9:e5:3b: 69:40:47:db:51:c0:7a:c8:c9:8d:de:44:4d:db:c2: 2a:5e:f5:31:59:40:1f:02:f9:72:26:25:31:bf:a9: c2:94:65:09:e6:7e:b3:79:8b:cc:9a:c3:03:b2:8a: 1c:a0:86:01:3b:9f:f7:62:db:07:8b:e4:de:0d:7f: 63:1a:85:33:a5:81:30:c3:e2:24:be:fe:08:5d:3b: 10:7c:73:06:c3:a2:13:34:f4:47:15:27:63:51:c0: e4:e2:97:16:6c:55:6a:88:2e:34:42:b6:07:ea:f3: 8d:db:38:6f:38:2f:50:56:0e:ec:c4:57:c1:52:b5: cb:b5:10:81:91:f4:01:5e:d1:01:71:29:4e:11:d4: ea:7d:c8:1d:10:cb:7e:8a:b5:7b:fc:f6:1e:8a:fe: fd:be:09:b1:79:c9:8f:bc:f4:80:46:61:ce:32:02: 35:3e:e1:69:06:3f:41:1b:a9:33:35:9a:d4:70:bc: fa:3e:d8:57:13:df:19:3b:e9:b0:7c:a0:e3:19:f3: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5A:FF:56:5D:8C:F4:B9:0D:92:85:BC:82:BF:B2:01:17:C9:6D:60 X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1a:26:99:ad:de:bb:88:0f:ac:35:2c:79:a2:68:ec:06:ae: 2d:04:44:0b:ea:9a:bf:8d:6d:55:2b:df:5d:63:24:48:f4:20: dc:6c:37:d2:67:bc:96:82:66:90:a1:bc:83:75:ee:ee:f2:c4: 5b:58:c8:52:29:9f:69:65:b7:4f:ae:33:fc:29:9a:05:1e:76: e3:23:bd:69:cd:18:7e:b1:4c:fc:46:a7:eb:c2:96:77:f1:cf: 53:ba:d0:fb:88:36:f1:1a:b9:11:a4:53:9b:d1:cd:af:56:43: a7:af:2a:cf:01:97:aa:23:53:bf:9f:f9:87:aa:f3:df:e7:64: 75:aa:65:df:6d:02:a1:81:e2:2a:5c:f8:2f:a1:c0:1e:f5:57: b2:c3:86:27:a5:95:4c:f6:a8:1d:c5:19:32:f4:9e:34:cc:52: c2:95:a2:ba:10:e7:68:b4:21:15:c0:7e:5b:26:4e:a7:44:93: ea:bb:a6:58:d1:96:25:bb:96:50:35:48:f8:6e:e8:81:8c:86: 48:b2:d2:d5:c7:69:64:f8:79:bb:e6:81:03:40:00:cd:fb:56: 42:91:0f:36:39:8b:96:ce:1c:70:1d:ee:2e:d5:75:bd:55:ee: b2:76:39:3e:2a:4c:ca:77:8a:09:83:bc:6e:74:86:fa:c6:04: f5:3c:ef:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbdsjtohDsDbr5Xl9Ee6UXsI0qbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA3MjQxMTIxMDRaFw0yNjA3MjUxMzM4MDRaMDMxMTAvBgNV BAMTKEEyNUFGRjU2NUQ4Q0Y0QjkwRDkyODVCQzgyQkZCMjAxMTdDOTZENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnD9RRhtIfYkN/ZDOHizFfjSfz cAyyToM+ED2iiEColDTH0GvX2ET7oKo/LSfXWtlSbObfKtOPP+nlO2lAR9tRwHrI yY3eRE3bwipe9TFZQB8C+XImJTG/qcKUZQnmfrN5i8yawwOyihyghgE7n/di2weL 5N4Nf2MahTOlgTDD4iS+/ghdOxB8cwbDohM09EcVJ2NRwOTilxZsVWqILjRCtgfq 843bOG84L1BWDuzEV8FStcu1EIGR9AFe0QFxKU4R1Op9yB0Qy36KtXv89h6K/v2+ CbF5yY+89IBGYc4yAjU+4WkGP0EbqTM1mtRwvPo+2FcT3xk76bB8oOMZ881hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUolr/Vl2M9LkNkoW8gr+yARfJbWAwHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxomma3eu4gP rDUseaJo7AauLQREC+qav41tVSvfXWMkSPQg3Gw30me8loJmkKG8g3Xu7vLEW1jI UimfaWW3T64z/CmaBR524yO9ac0YfrFM/Ean68KWd/HPU7rQ+4g28Rq5EaRTm9HN r1ZDp68qzwGXqiNTv5/5h6rz3+dkdapl320CoYHiKlz4L6HAHvVXssOGJ6WVTPao HcUZMvSeNMxSwpWiuhDnaLQhFcB+WyZOp0ST6rumWNGWJbuWUDVI+G7ogYyGSLLS 1cdpZPh5u+aBA0AAzftWQpEPNjmLls4ccB3uLtV1vVXusnY5PipMyneKCYO8bnSG +sYE9Tzvzg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:15 2026 by rpki-client