$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: j9IgCtbq5doFCKCEs29hFR/1u+8OQMIA3dyeSneOzCk= Subject key identifier: 98:05:13:89:0A:3C:57:22:20:ED:D6:00:D7:A5:8C:7B:09:F4:EC:EA Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 52B66E91EA3013230D0BA00A22204E7EE0FD842F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: 78 Signing time: Fri 24 Jul 2026 18:11:50 +0000 Manifest this update: Fri 24 Jul 2026 18:06:50 +0000 Manifest next update: Sat 25 Jul 2026 22:02:50 +0000 Files and hashes: 1: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 2: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: QOixn4WRM4e4k2+YUb/wQDw2uRQw9d+OlW4qJU4oOuc=) 3: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 4: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) 5: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b6:6e:91:ea:30:13:23:0d:0b:a0:0a:22:20:4e:7e:e0:fd:84:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Jul 24 18:06:50 2026 GMT Not After : Jul 25 22:02:50 2026 GMT Subject: CN=980513890A3C572220EDD600D7A58C7B09F4ECEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:bc:66:73:05:d8:fd:41:16:51:dc:d3:d8: 3d:9a:b1:78:af:2e:61:05:1e:0c:f6:89:c0:32:34: e0:ea:68:1e:af:79:d4:7d:a9:58:08:2d:fe:7f:1f: cd:e6:03:fa:31:98:2f:3c:c6:a2:9d:d1:5c:56:6f: 72:25:b7:c3:70:c4:41:10:6d:0c:5c:f7:76:71:e4: fb:a7:99:44:1b:af:1b:9e:1a:05:6e:84:c7:6e:a0: e9:bd:de:fe:49:3f:44:92:14:ff:25:74:6b:4b:e3: e6:4d:01:6a:e7:15:af:83:15:69:55:a6:68:16:23: 85:d1:d3:c6:ac:4d:06:e5:a8:5b:cd:60:00:33:9c: cd:32:ff:aa:22:3c:8b:a3:86:57:d8:96:94:54:10: 94:0a:32:dc:4d:5c:94:14:46:16:e7:d4:1c:c9:5b: dc:f2:70:c9:75:df:e4:c1:c5:54:8b:16:04:29:e8: 74:6b:39:b8:21:02:d6:71:a6:ea:6a:dd:72:17:d9: f5:53:8a:f7:b9:9d:91:2e:f4:26:5e:66:4f:67:cb: 86:d9:65:53:02:67:ae:d2:c5:97:0f:76:83:63:ab: 13:6d:c1:d6:67:82:a5:87:35:1b:23:32:47:6b:51: ff:f7:47:6c:66:3d:37:19:90:83:20:20:0c:c5:74: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:05:13:89:0A:3C:57:22:20:ED:D6:00:D7:A5:8C:7B:09:F4:EC:EA X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:98:fb:b1:1f:77:11:68:12:3c:1f:3f:77:d7:14:30:3d:ca: 06:c5:82:3f:90:48:1a:dd:9b:01:c8:bd:a6:9d:16:a5:e8:4a: 1e:41:86:e4:90:cf:c4:bf:87:aa:aa:0a:68:af:a7:1a:07:6d: 8c:7b:30:70:3e:e5:7a:93:37:81:b8:c5:96:8c:29:7a:fa:0f: 50:69:b0:9b:45:e6:c6:11:36:f5:a9:fc:70:fe:a6:0b:43:ee: 55:93:ca:dd:98:2e:0d:e8:f0:b4:f4:1c:85:41:f2:0c:36:67: 54:0b:f4:55:df:c9:96:2e:e3:bb:08:ca:f3:70:5a:dd:d3:f2: 4e:4b:61:d6:8a:a8:b0:3f:00:b7:f2:5e:a5:d1:6b:f0:bc:cf: c3:b8:dd:6e:d1:90:64:c1:e7:a1:05:8e:d2:ee:af:93:bd:a4: 8a:c2:71:20:2b:5f:f1:a6:e8:97:36:af:c6:ec:8b:6a:58:f9: 15:69:37:ad:ae:bd:a0:d6:bf:75:dd:08:8c:3e:fe:f1:da:23: 88:a1:c3:3d:be:30:43:0e:fe:8a:20:75:b9:ef:7e:a3:4c:7b: 16:7f:e3:01:d6:00:ae:77:9d:26:41:25:df:a0:89:04:8f:5a: 35:eb:ab:48:bf:a7:1e:df:98:86:0c:19:06:d2:5a:2c:67:c5: 78:1c:88:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUrZukeowEyMNC6AKIiBOfuD9hC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA3MjQxODA2NTBaFw0yNjA3MjUyMjAyNTBaMDMxMTAvBgNV BAMTKDk4MDUxMzg5MEEzQzU3MjIyMEVERDYwMEQ3QTU4QzdCMDlGNEVDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGrxmcwXY/UEWUdzT2D2asXiv LmEFHgz2icAyNODqaB6vedR9qVgILf5/H83mA/oxmC88xqKd0VxWb3Ilt8NwxEEQ bQxc93Zx5PunmUQbrxueGgVuhMduoOm93v5JP0SSFP8ldGtL4+ZNAWrnFa+DFWlV pmgWI4XR08asTQblqFvNYAAznM0y/6oiPIujhlfYlpRUEJQKMtxNXJQURhbn1BzJ W9zycMl13+TBxVSLFgQp6HRrObghAtZxpupq3XIX2fVTive5nZEu9CZeZk9ny4bZ ZVMCZ67SxZcPdoNjqxNtwdZngqWHNRsjMkdrUf/3R2xmPTcZkIMgIAzFdJ2dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmAUTiQo8VyIg7dYA16WMewn07OowHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZj7sR93EWgS PB8/d9cUMD3KBsWCP5BIGt2bAci9pp0WpehKHkGG5JDPxL+HqqoKaK+nGgdtjHsw cD7lepM3gbjFlowpevoPUGmwm0XmxhE29an8cP6mC0PuVZPK3ZguDejwtPQchUHy DDZnVAv0Vd/Jli7juwjK83Ba3dPyTkth1oqosD8At/JepdFr8LzPw7jdbtGQZMHn oQWO0u6vk72kisJxICtf8abolzavxuyLalj5FWk3ra69oNa/dd0IjD7+8dojiKHD Pb4wQw7+iiB1ue9+o0x7Fn/jAdYArnedJkEl36CJBI9aNeurSL+nHt+YhgwZBtJa LGfFeByIdQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:56:23 2026 by rpki-client