$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: vlGQa31/ITRILIOk30f8x34vNN5TstiKZNQUZ4C5h7s= Subject key identifier: CA:EE:E8:76:3D:5A:AD:7D:71:38:4D:FB:86:1D:6E:25:6C:D4:8A:C2 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 4A14302F2C95BD5E52BEFCCE5404DE2312D53C90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 77 Signing time: Fri 24 Jul 2026 18:56:55 +0000 Manifest this update: Fri 24 Jul 2026 18:51:55 +0000 Manifest next update: Sat 25 Jul 2026 21:22:55 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: YHVKgKgROA375TVxziDqPRbwGVg7Zy6Sk4eKHqvlRAk=) 3: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:14:30:2f:2c:95:bd:5e:52:be:fc:ce:54:04:de:23:12:d5:3c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Jul 24 18:51:55 2026 GMT Not After : Jul 25 21:22:55 2026 GMT Subject: CN=CAEEE8763D5AAD7D71384DFB861D6E256CD48AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:78:66:c6:70:87:91:12:f2:6b:52:0a:5a: 5f:39:77:6b:02:4a:74:59:98:33:3c:d3:18:d7:2c: fa:14:a4:f0:6b:c0:8d:8f:b2:da:98:f3:a5:d6:81: 33:be:d8:9f:34:02:e6:c7:bc:cc:55:98:c5:7a:72: 02:53:f2:16:dc:e1:36:f4:20:a9:ff:76:79:d3:d5: b3:ba:88:d9:8c:cb:cc:89:21:f1:be:d3:4c:b5:64: d3:83:1b:e5:3c:6c:0a:3d:54:5e:d3:3f:59:f3:0e: 9f:ac:2b:0c:59:39:08:23:41:64:2d:19:59:44:80: 8a:03:19:b0:f2:c0:1a:4d:c5:77:e1:83:7a:16:8d: c2:08:98:e6:24:8f:19:77:76:8e:a5:7e:7a:30:27: 85:cb:be:f3:db:72:3b:a4:27:48:29:3a:52:1f:d0: 56:87:c5:a6:33:6f:01:fc:1b:20:ae:0a:bf:76:0e: 55:c2:bc:70:33:08:68:f7:a7:a6:59:26:4c:86:f8: ea:d1:ba:fe:ee:f4:5e:0a:1e:64:2b:da:ca:54:15: 2c:a3:dc:0c:6e:9b:7a:9a:e5:2b:60:01:95:89:69: 18:a4:4e:4f:5a:ee:57:b2:38:8a:f9:a2:28:45:09: a0:fc:da:f6:51:33:b4:ed:33:88:57:41:1e:f4:4c: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EE:E8:76:3D:5A:AD:7D:71:38:4D:FB:86:1D:6E:25:6C:D4:8A:C2 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f6:12:1b:d3:aa:57:19:03:2a:39:90:ce:e9:c6:96:c4:c2: 09:0e:54:81:24:de:d4:ec:6a:ab:10:a1:14:51:4a:89:85:f0: f4:b2:02:0a:22:53:87:ea:a6:2a:e5:da:6b:4f:76:49:3e:56: e5:de:eb:e0:42:29:f6:63:fe:b3:37:ce:ee:d8:f4:81:47:42: 55:76:87:6c:a1:a7:dc:ac:5e:2e:f2:9a:79:26:d1:40:9b:23: 5a:36:a1:ee:be:67:d2:c7:21:9c:6a:5d:4e:6f:59:93:bf:8c: 23:9e:66:eb:29:aa:33:1f:18:c8:f2:16:ee:f9:19:9f:6b:32: c3:65:7b:8f:47:b0:c4:50:00:96:67:79:4b:63:12:20:fb:d3: d8:0e:49:d7:46:6c:e0:88:39:66:6a:6a:7e:14:21:0f:21:fb: ab:c3:34:af:67:54:bd:67:f9:b0:da:4a:c8:78:e2:cd:4f:84: 06:15:4c:59:02:cb:81:dc:7d:3c:ec:af:f0:b1:ed:b5:6c:5f: 67:00:bc:bc:d3:80:d6:6d:87:b7:cd:af:62:56:8f:15:88:5a: 3a:b1:6f:bd:00:a6:74:61:00:4b:e0:6b:9a:fa:8c:27:a3:50: 44:09:49:03:0b:f0:63:50:02:35:63:d5:b4:0f:eb:aa:a8:77: fa:63:a0:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUShQwLyyVvV5SvvzOVATeIxLVPJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA3MjQxODUxNTVaFw0yNjA3MjUyMTIyNTVaMDMxMTAvBgNV BAMTKENBRUVFODc2M0Q1QUFEN0Q3MTM4NERGQjg2MUQ2RTI1NkNENDhBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHl3hmxnCHkRLya1IKWl85d2sC SnRZmDM80xjXLPoUpPBrwI2PstqY86XWgTO+2J80AubHvMxVmMV6cgJT8hbc4Tb0 IKn/dnnT1bO6iNmMy8yJIfG+00y1ZNODG+U8bAo9VF7TP1nzDp+sKwxZOQgjQWQt GVlEgIoDGbDywBpNxXfhg3oWjcIImOYkjxl3do6lfnowJ4XLvvPbcjukJ0gpOlIf 0FaHxaYzbwH8GyCuCr92DlXCvHAzCGj3p6ZZJkyG+OrRuv7u9F4KHmQr2spUFSyj 3Axum3qa5StgAZWJaRikTk9a7leyOIr5oihFCaD82vZRM7TtM4hXQR70TNErAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyu7odj1arX1xOE37hh1uJWzUisIwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/YSG9OqVxkD KjmQzunGlsTCCQ5UgSTe1OxqqxChFFFKiYXw9LICCiJTh+qmKuXaa092ST5W5d7r 4EIp9mP+szfO7tj0gUdCVXaHbKGn3KxeLvKaeSbRQJsjWjah7r5n0schnGpdTm9Z k7+MI55m6ymqMx8YyPIW7vkZn2syw2V7j0ewxFAAlmd5S2MSIPvT2A5J10Zs4Ig5 ZmpqfhQhDyH7q8M0r2dUvWf5sNpKyHjizU+EBhVMWQLLgdx9POyv8LHttWxfZwC8 vNOA1m2Ht82vYlaPFYhaOrFvvQCmdGEAS+BrmvqMJ6NQRAlJAwvwY1ACNWPVtA/r qqh3+mOgUg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:13:12 2026 by rpki-client