$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: tkmCMrkFaO6tOzJTpFTbtX1QCv8gN8oeofW5GskeJo8= Subject key identifier: EC:81:F6:8C:2D:BD:79:63:FE:B6:09:CA:FC:56:EE:CF:82:55:42:6F Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 05D5936914B75628E2E91DE74B48FAC7D8C46C99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 76 Signing time: Thu 23 Jul 2026 23:29:50 +0000 Manifest this update: Thu 23 Jul 2026 23:24:50 +0000 Manifest next update: Sat 25 Jul 2026 02:56:50 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: ifz7BeoIKxrbm6eTp07Vq2Mjhe/hPVkooUh5ODmWQmU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d5:93:69:14:b7:56:28:e2:e9:1d:e7:4b:48:fa:c7:d8:c4:6c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Jul 23 23:24:50 2026 GMT Not After : Jul 25 02:56:50 2026 GMT Subject: CN=EC81F68C2DBD7963FEB609CAFC56EECF8255426F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:1f:f7:77:b0:fb:6b:ad:5c:4e:9a:fc:12: 03:81:cd:f2:99:45:5e:33:bf:6d:05:ce:41:8a:57: f4:70:64:e9:8d:a0:c3:3b:36:81:ac:c1:ff:bf:bd: 46:31:bd:a9:54:2e:bf:f6:74:a5:8a:a3:f9:55:56: 76:53:85:e2:60:04:c8:34:cb:4b:d4:00:7d:85:c0: cc:90:3a:61:e2:f1:b4:24:52:eb:dd:56:63:1a:6d: 0d:06:18:da:40:cb:14:0c:ce:e1:54:2c:23:b1:93: e5:0f:e1:d5:ae:c1:95:15:68:6a:86:a0:6f:8a:c0: ff:98:3c:04:a5:65:06:34:16:46:8a:90:0c:76:29: 20:25:23:b0:0c:0e:5e:17:31:dd:1f:dd:20:e6:0e: ef:8d:f6:87:9c:9f:1a:45:76:65:2c:4e:23:a3:e1: d7:95:57:57:72:a6:42:e6:d1:78:4d:bd:bb:5f:5a: 94:16:cd:f3:a8:f4:1d:94:08:69:e7:2e:3a:df:46: 67:87:9f:35:f9:1c:92:6e:8d:ee:3b:00:63:af:f8: ba:42:eb:c6:20:97:96:dd:cd:8e:38:13:33:53:81: 9a:e7:ab:75:b2:ee:f2:2b:8a:70:ad:36:8b:66:34: 8e:29:84:c5:3e:a0:41:a0:53:d8:80:d5:61:9c:4a: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:F6:8C:2D:BD:79:63:FE:B6:09:CA:FC:56:EE:CF:82:55:42:6F X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:22:ee:d2:bc:c8:96:c1:d3:bc:3a:fb:f4:c7:45:63:6b:e5: e7:7b:f1:f5:c3:0a:31:87:31:62:e5:70:ae:c2:03:c9:19:91: 9e:29:88:8c:e0:d1:0d:36:f8:66:78:09:af:52:e9:b8:4f:7a: 3b:10:f8:c6:40:07:66:83:7c:6a:6f:55:e9:1d:30:4a:e2:0e: 89:d9:bd:1f:22:f6:c6:71:23:ac:8b:29:d8:7b:b6:77:82:87: 66:41:14:d9:95:60:85:51:a9:e4:59:9c:77:0b:ef:26:a6:4d: 43:f4:4b:9e:11:42:71:09:41:ce:6d:a1:0e:b7:d1:e0:cd:d8: f4:c6:74:ab:68:dd:9d:13:33:55:a4:2b:60:b4:35:0a:e4:a3: 14:e4:19:0a:ee:92:35:d4:99:1b:80:09:4f:7c:b7:93:79:cc: 46:d4:dc:58:47:c8:ac:20:3a:eb:6e:e7:6e:e1:ea:c7:03:8d: 90:43:aa:9d:51:2c:a9:67:e1:42:50:46:06:f1:ab:54:25:24: dd:97:15:39:de:c3:78:e0:c6:e7:64:af:36:0e:04:92:ba:ff: 00:42:c0:5f:78:98:50:b9:b4:19:24:82:ec:54:4b:a0:3b:41: e0:de:93:8a:82:33:7d:0e:4a:3f:9b:d8:a4:ac:d2:fe:f2:d9: 72:81:c5:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBdWTaRS3Viji6R3nS0j6x9jEbJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA3MjMyMzI0NTBaFw0yNjA3MjUwMjU2NTBaMDMxMTAvBgNV BAMTKEVDODFGNjhDMkRCRDc5NjNGRUI2MDlDQUZDNTZFRUNGODI1NTQyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyR/3d7D7a61cTpr8EgOBzfKZ RV4zv20FzkGKV/RwZOmNoMM7NoGswf+/vUYxvalULr/2dKWKo/lVVnZTheJgBMg0 y0vUAH2FwMyQOmHi8bQkUuvdVmMabQ0GGNpAyxQMzuFULCOxk+UP4dWuwZUVaGqG oG+KwP+YPASlZQY0FkaKkAx2KSAlI7AMDl4XMd0f3SDmDu+N9oecnxpFdmUsTiOj 4deVV1dypkLm0XhNvbtfWpQWzfOo9B2UCGnnLjrfRmeHnzX5HJJuje47AGOv+LpC 68Ygl5bdzY44EzNTgZrnq3Wy7vIrinCtNotmNI4phMU+oEGgU9iA1WGcSpZnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7IH2jC29eWP+tgnK/Fbuz4JVQm8wHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyLu0rzIlsHT vDr79MdFY2vl53vx9cMKMYcxYuVwrsIDyRmRnimIjODRDTb4ZngJr1LpuE96OxD4 xkAHZoN8am9V6R0wSuIOidm9HyL2xnEjrIsp2Hu2d4KHZkEU2ZVghVGp5Fmcdwvv JqZNQ/RLnhFCcQlBzm2hDrfR4M3Y9MZ0q2jdnRMzVaQrYLQ1CuSjFOQZCu6SNdSZ G4AJT3y3k3nMRtTcWEfIrCA6627nbuHqxwONkEOqnVEsqWfhQlBGBvGrVCUk3ZcV Od7DeODG52SvNg4Ekrr/AELAX3iYULm0GSSC7FRLoDtB4N6TioIzfQ5KP5vYpKzS /vLZcoHFWA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:02:16 2026 by rpki-client