$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json) Hash identifier: lVu0Yd+C/9NG+UZn9xX9P+r078fX9AgalqgKzbxjsKM= Subject key identifier: 5B:70:34:32:28:AB:FA:86:FD:D1:A4:7A:C3:9F:48:02:43:ED:AC:DB Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Certificate serial: 0F073ABCB46241C93EC94442B52566D62EB93CA8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft Manifest number: 78 Signing time: Thu 23 Jul 2026 12:48:43 +0000 Manifest this update: Thu 23 Jul 2026 12:43:43 +0000 Manifest next update: Fri 24 Jul 2026 16:44:43 +0000 Files and hashes: 1: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=) 2: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=) 3: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=) 4: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: kPtH13ZNPhALit2EPXzpbJKIXwSH+Rk94U/sfA0nTdQ=) 5: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=) 6: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:07:3a:bc:b4:62:41:c9:3e:c9:44:42:b5:25:66:d6:2e:b9:3c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Validity Not Before: Jul 23 12:43:43 2026 GMT Not After : Jul 24 16:44:43 2026 GMT Subject: CN=5B70343228ABFA86FDD1A47AC39F480243EDACDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:f0:cf:7f:e8:77:35:8c:eb:8b:a4:64:42: b2:05:d9:8d:3b:fc:b0:ea:e1:fa:2d:80:18:78:16: 03:6d:d6:c7:30:ba:51:1a:1f:2e:c9:4f:c9:b5:63: 12:c2:f0:20:e4:ee:8a:82:0b:32:e5:c9:92:1d:77: 1d:ae:8d:9a:ac:d7:82:c7:a0:35:59:d8:5a:c7:9d: e0:64:4c:57:4c:da:b1:94:ca:91:df:c6:91:0e:01: a5:eb:4d:ca:31:e9:18:5a:42:de:72:7f:52:d1:a6: fd:0a:6f:32:07:39:cc:56:d5:f3:3a:68:bc:a2:1b: b1:8f:5b:1f:60:8c:7a:23:89:91:b6:c3:a0:82:de: f8:08:a6:e5:7f:c8:ff:a9:39:11:83:c1:b9:d3:51: 7b:29:0c:b5:4a:6c:fd:7c:7d:78:8c:86:03:4e:a1: 0b:08:9f:de:62:fa:93:70:f5:28:03:42:4e:65:50: 96:12:be:05:6d:c4:df:75:d3:55:8e:a9:3d:8e:12: 66:a8:43:ed:11:ca:9e:da:00:f0:69:95:d1:dc:64: 8b:b4:97:11:bf:06:c7:0d:40:6c:82:e3:3f:16:d4: 96:35:12:12:0f:88:18:85:f6:7b:6e:77:4f:25:51: 60:23:8f:af:78:85:17:fe:dc:7b:2f:41:a6:6d:a2: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:70:34:32:28:AB:FA:86:FD:D1:A4:7A:C3:9F:48:02:43:ED:AC:DB X509v3 Authority Key Identifier: keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:0a:1b:b6:c0:81:9c:51:4e:63:88:f8:ed:b6:ce:40:2b: f1:dc:28:25:7e:aa:9b:26:96:c2:f3:e0:b5:a1:f6:61:71:ae: 12:f0:a5:65:ab:78:80:df:89:cd:c3:89:2a:48:a1:68:b7:c8: 3f:06:26:77:36:b0:2b:02:df:a7:00:1d:b2:26:60:3c:ea:a9: ce:55:f3:da:ac:16:ba:ac:63:24:e5:19:6a:e2:cd:ba:e6:a3: 28:2e:3f:3b:be:b5:66:0b:16:b1:82:1c:66:24:16:63:79:ff: 8f:2b:58:26:5b:6f:4c:a1:6a:ea:aa:29:c1:ca:f9:57:4b:cf: 8c:6c:2f:75:d9:0c:db:92:b6:29:1c:e5:13:36:b6:c7:7d:bd: d3:65:26:c8:e9:96:86:bf:c9:d9:14:0b:fb:db:fe:fe:58:38: 54:bf:07:5a:2d:fb:ef:f7:cf:24:5a:09:d8:da:c7:52:3b:dd: f9:61:61:25:27:5b:aa:e1:07:75:0a:3a:e2:c3:4e:a3:a0:10: f6:b0:2a:f2:cc:69:66:23:93:4b:26:57:3b:fa:7c:57:99:b3: 56:6e:f6:48:36:a3:b8:eb:07:ea:89:b3:ef:4d:6d:43:99:83: 32:c7:bc:19:71:06:c8:80:7c:33:11:ca:ea:cc:e4:75:ac:2b: 5b:30:4c:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDwc6vLRiQck+yURCtSVm1i65PKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEw NjVGQjhBRDAeFw0yNjA3MjMxMjQzNDNaFw0yNjA3MjQxNjQ0NDNaMDMxMTAvBgNV BAMTKDVCNzAzNDMyMjhBQkZBODZGREQxQTQ3QUMzOUY0ODAyNDNFREFDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqL/DPf+h3NYzri6RkQrIF2Y07 /LDq4fotgBh4FgNt1scwulEaHy7JT8m1YxLC8CDk7oqCCzLlyZIddx2ujZqs14LH oDVZ2FrHneBkTFdM2rGUypHfxpEOAaXrTcox6RhaQt5yf1LRpv0KbzIHOcxW1fM6 aLyiG7GPWx9gjHojiZG2w6CC3vgIpuV/yP+pORGDwbnTUXspDLVKbP18fXiMhgNO oQsIn95i+pNw9SgDQk5lUJYSvgVtxN9101WOqT2OEmaoQ+0Ryp7aAPBpldHcZIu0 lxG/BscNQGyC4z8W1JY1EhIPiBiF9ntud08lUWAjj694hRf+3HsvQaZtogCPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW3A0Miir+ob90aR6w59IAkPtrNswHwYDVR0j BBgwFoAUBgZ3/9uPo8bG3C8Y7fe+2gZfuK0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk5MTg4MDU0OTYyOTk1NS8wLzA2MDY3N0ZGREI4RkEzQzZDNkRDMkYxOEVERjdC RURBMDY1RkI4QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEwNjVGQjhBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5OTE4ODA1NDk2Mjk5NTUvMC8wNjA2NzdGRkRCOEZB M0M2QzZEQzJGMThFREY3QkVEQTA2NUZCOEFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTYKG7bAgZxR TmOI+O22zkAr8dwoJX6qmyaWwvPgtaH2YXGuEvClZat4gN+JzcOJKkihaLfIPwYm dzawKwLfpwAdsiZgPOqpzlXz2qwWuqxjJOUZauLNuuajKC4/O761ZgsWsYIcZiQW Y3n/jytYJltvTKFq6qopwcr5V0vPjGwvddkM25K2KRzlEza2x32902UmyOmWhr/J 2RQL+9v+/lg4VL8HWi377/fPJFoJ2NrHUjvd+WFhJSdbquEHdQo64sNOo6AQ9rAq 8sxpZiOTSyZXO/p8V5mzVm72SDajuOsH6omz701tQ5mDMse8GXEGyIB8MxHK6szk dawrWzBMCQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:31:11 2026 by rpki-client