$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: gRY1fjE3HiQtJ/fONeTJQQf7aCUqaYFjD9LlzFqZIO4= Subject key identifier: F2:14:AB:31:78:B4:AE:C2:47:A6:EC:7C:0A:E0:0E:A0:67:96:8C:C4 Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 1A9D47015E79C66D35CADBF1FE171692FA502E14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 16:36:38 +0000 Manifest this update: Fri 24 Jul 2026 16:31:38 +0000 Manifest next update: Sat 25 Jul 2026 19:00:38 +0000 Files and hashes: 1: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=) 2: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: 2K4gLsszrp+CbohUmrhEOyMq1onSy/YQ6dNQlxgBc9I=) 3: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) 4: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9d:47:01:5e:79:c6:6d:35:ca:db:f1:fe:17:16:92:fa:50:2e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: Jul 24 16:31:38 2026 GMT Not After : Jul 25 19:00:38 2026 GMT Subject: CN=F214AB3178B4AEC247A6EC7C0AE00EA067968CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:72:a2:c2:36:03:38:7d:4b:41:db:e1:1c: 55:2b:df:28:bd:ff:65:76:e5:85:34:d1:b8:10:bd: 73:3b:b4:e3:67:d1:dc:b9:3c:cc:95:56:a7:a0:6b: e8:fb:7d:ba:2c:19:6f:4e:ba:7a:df:46:03:dd:32: fe:c2:e5:0c:d8:71:68:13:75:b7:72:79:f6:87:e3: 2d:73:0e:f8:3a:14:cd:b0:03:0b:11:fe:c5:cf:ec: 8e:89:0c:0b:e0:c5:2c:08:e6:a7:f1:5d:65:70:1e: 1d:ea:53:b7:df:3d:4a:f6:8d:05:58:9a:90:d8:24: 51:80:9f:e9:9e:76:2f:b4:9e:29:78:4e:fb:af:a8: 94:e2:b8:d2:d7:c9:f1:3b:13:d8:f6:a1:14:df:d4: f6:2b:a5:e9:31:a6:98:b3:e3:13:b4:1d:3b:f9:8d: 0d:29:0d:b7:a3:c5:4a:c4:e5:72:02:19:32:c7:04: 80:11:05:ad:6a:95:27:13:ca:81:2a:45:8a:5c:44: e5:ac:b7:44:f5:1e:ab:ec:14:c8:f7:b0:6f:0a:e3: a3:21:2f:3c:df:da:f7:7e:c7:6e:bd:c3:5d:ef:03: a0:17:01:6e:d9:99:da:77:d1:e5:ec:86:0b:00:57: a5:28:1d:8a:50:34:45:fa:cd:f6:f4:60:f1:df:ad: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:14:AB:31:78:B4:AE:C2:47:A6:EC:7C:0A:E0:0E:A0:67:96:8C:C4 X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:09:ca:24:40:03:b0:57:6a:f1:5a:d0:d0:c3:d7:25:25:bb: 25:99:47:fb:98:ac:b5:b3:b3:de:f5:c5:a7:30:90:f7:c5:1e: d2:3b:aa:bd:1f:92:ec:c7:f6:dc:94:a1:7e:f5:b5:8b:f1:6f: 87:15:08:43:06:97:5b:02:a2:95:ed:0d:41:8b:20:95:8e:3d: 12:d1:05:43:5e:63:43:d2:8b:ab:b8:9e:26:d6:dc:12:09:56: 61:22:d2:df:40:80:bf:87:82:47:62:25:a3:e3:f1:96:8d:3f: df:9c:95:c1:80:df:cc:7d:b4:96:02:e8:8f:3f:a0:e5:dc:c8: 33:01:8f:03:4d:70:00:c7:be:20:5e:8b:51:9d:42:91:32:05: 04:f7:6d:4d:f4:5a:27:ff:a0:e9:3f:99:f5:4e:ab:57:3d:81: 7b:0a:39:71:20:8b:c2:12:f7:de:9f:5b:00:45:10:31:cf:51: 33:9c:ba:16:32:9c:47:a2:d3:12:c0:ca:3e:27:89:f4:72:bc: 1f:2f:b7:8f:e7:af:64:7c:80:55:ed:45:f2:94:c2:e1:2f:32: 1e:35:6b:e6:b1:56:58:2d:46:cd:00:c6:5a:17:9f:0f:0b:c5: 2d:8b:11:79:c6:23:14:13:20:0a:dc:a6:b2:2b:b0:2a:45:6e: c1:1f:b1:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGp1HAV55xm01ytvx/hcWkvpQLhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjA3MjQxNjMxMzhaFw0yNjA3MjUxOTAwMzhaMDMxMTAvBgNV BAMTKEYyMTRBQjMxNzhCNEFFQzI0N0E2RUM3QzBBRTAwRUEwNjc5NjhDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnc3KiwjYDOH1LQdvhHFUr3yi9 /2V25YU00bgQvXM7tONn0dy5PMyVVqega+j7fbosGW9OunrfRgPdMv7C5QzYcWgT dbdyefaH4y1zDvg6FM2wAwsR/sXP7I6JDAvgxSwI5qfxXWVwHh3qU7ffPUr2jQVY mpDYJFGAn+medi+0nil4TvuvqJTiuNLXyfE7E9j2oRTf1PYrpekxppiz4xO0HTv5 jQ0pDbejxUrE5XICGTLHBIARBa1qlScTyoEqRYpcROWst0T1HqvsFMj3sG8K46Mh Lzzf2vd+x269w13vA6AXAW7Zmdp30eXshgsAV6UoHYpQNEX6zfb0YPHfrZlFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8hSrMXi0rsJHpux8CuAOoGeWjMQwHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgnKJEADsFdq 8VrQ0MPXJSW7JZlH+5istbOz3vXFpzCQ98Ue0juqvR+S7Mf23JShfvW1i/FvhxUI QwaXWwKile0NQYsglY49EtEFQ15jQ9KLq7ieJtbcEglWYSLS30CAv4eCR2Ilo+Px lo0/35yVwYDfzH20lgLojz+g5dzIMwGPA01wAMe+IF6LUZ1CkTIFBPdtTfRaJ/+g 6T+Z9U6rVz2Bewo5cSCLwhL33p9bAEUQMc9RM5y6FjKcR6LTEsDKPieJ9HK8Hy+3 j+evZHyAVe1F8pTC4S8yHjVr5rFWWC1GzQDGWhefDwvFLYsRecYjFBMgCtymsiuw KkVuwR+x8A== -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:09 2026 by rpki-client