$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: 1dshHM0/1EVavnFdyJ3qzik3rpkPlUH6NeacDaSnggk= Subject key identifier: AA:89:3F:1F:98:B7:81:B1:43:28:48:7C:38:A1:93:9E:5E:77:55:22 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 148EF8BC212660E94C8DA128DFA335246DAD319A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 69 Signing time: Fri 24 Jul 2026 00:24:55 +0000 Manifest this update: Fri 24 Jul 2026 00:19:55 +0000 Manifest next update: Sat 25 Jul 2026 01:56:55 +0000 Files and hashes: 1: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 2: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) 3: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: BjGyy/qtx4pVRB2S2tc/9UQn92Co1YgdeBkmTR1cDv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8e:f8:bc:21:26:60:e9:4c:8d:a1:28:df:a3:35:24:6d:ad:31:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Jul 24 00:19:55 2026 GMT Not After : Jul 25 01:56:55 2026 GMT Subject: CN=AA893F1F98B781B14328487C38A1939E5E775522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:6f:2f:8b:57:c9:44:4c:05:57:b5:5b:c6: 5b:0b:3c:52:e8:2c:f7:80:1b:68:7d:e4:66:dc:4b: 5f:40:16:75:4c:ff:e0:30:c7:a6:3c:bd:32:ee:b4: e3:29:93:c7:6f:a9:a0:c6:c3:8e:5a:6f:1f:f1:0e: 41:25:03:8f:b2:bd:db:26:0e:74:9d:24:c6:ad:c1: 52:b8:1a:91:e0:57:c1:8a:fa:ec:80:7a:39:c5:97: 4b:75:7c:9b:31:cc:66:20:7b:7c:73:1a:47:71:fb: ea:01:64:a7:b7:ad:42:fd:4f:f2:ec:c3:92:27:cf: 7b:d9:92:62:05:f6:68:34:e1:1c:42:77:94:24:1b: 0c:a7:91:2b:ab:20:c8:95:e1:cc:35:0f:3f:24:07: 81:ef:d4:90:a6:7b:89:ce:cf:fb:24:d9:4d:0d:87: c7:4f:7c:36:ed:54:c3:6a:c1:2a:b7:46:a9:b4:cb: 4b:50:35:64:2b:d5:b5:c5:ca:8e:35:19:96:9a:ef: a5:c9:4e:39:8a:a2:75:d5:1f:e4:98:e6:92:87:67: 2c:92:3c:60:10:32:ad:55:07:46:ac:e4:1f:0c:5b: f1:09:fb:28:72:d0:ec:38:aa:8b:ad:b8:89:5b:0b: 95:f4:83:dc:87:24:70:54:a4:d4:63:46:86:89:73: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:3F:1F:98:B7:81:B1:43:28:48:7C:38:A1:93:9E:5E:77:55:22 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e9:17:f5:5e:ac:ad:f2:9a:d1:b9:1d:30:68:ab:58:e2:8f: 44:7c:73:21:74:a2:1a:71:6b:17:94:e2:89:bf:6b:10:5d:56: a2:ab:b1:5b:02:a6:c7:47:89:5b:b9:7d:33:a8:ef:31:d5:21: 9a:b2:43:76:c6:cb:8c:93:d2:c2:f2:dc:70:3d:21:67:8c:15: f0:75:c9:1c:17:f4:f8:a6:f2:40:b7:42:96:27:e2:2e:44:ec: a3:6d:fc:5b:e1:af:41:3b:4a:74:9d:36:ca:62:5e:c2:18:1f: 2a:05:93:60:e8:2c:b3:e7:c0:8f:17:5e:bf:35:36:57:86:fb: dc:63:66:1a:15:87:79:26:eb:eb:8c:35:a5:57:37:b8:e2:1a: ef:49:4c:a6:2e:d7:10:f5:3d:5e:45:fd:da:1c:c8:4e:65:cb: 10:7e:11:07:a7:f7:dd:fc:d3:dc:38:39:b7:5e:53:ef:83:74: ed:71:47:ad:7e:48:a8:4b:2a:86:22:a9:e0:e7:91:69:73:82: 1f:72:f4:59:4b:cb:61:e7:35:ec:c5:62:59:2b:0f:99:60:55: 50:e0:35:28:b6:1b:b3:63:7b:d1:a1:25:d4:cc:dd:d8:ae:69: ef:ee:07:6e:b5:7e:78:6c:b0:f9:2b:83:45:eb:e2:46:41:87: 12:a9:7d:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFI74vCEmYOlMjaEo36M1JG2tMZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA3MjQwMDE5NTVaFw0yNjA3MjUwMTU2NTVaMDMxMTAvBgNV BAMTKEFBODkzRjFGOThCNzgxQjE0MzI4NDg3QzM4QTE5MzlFNUU3NzU1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxG8vi1fJREwFV7VbxlsLPFLo LPeAG2h95GbcS19AFnVM/+Awx6Y8vTLutOMpk8dvqaDGw45abx/xDkElA4+yvdsm DnSdJMatwVK4GpHgV8GK+uyAejnFl0t1fJsxzGYge3xzGkdx++oBZKe3rUL9T/Ls w5Inz3vZkmIF9mg04RxCd5QkGwynkSurIMiV4cw1Dz8kB4Hv1JCme4nOz/sk2U0N h8dPfDbtVMNqwSq3Rqm0y0tQNWQr1bXFyo41GZaa76XJTjmKonXVH+SY5pKHZyyS PGAQMq1VB0as5B8MW/EJ+yhy0Ow4qoutuIlbC5X0g9yHJHBUpNRjRoaJc4YhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqok/H5i3gbFDKEh8OKGTnl53VSIwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+kX9V6srfKa 0bkdMGirWOKPRHxzIXSiGnFrF5Tiib9rEF1WoquxWwKmx0eJW7l9M6jvMdUhmrJD dsbLjJPSwvLccD0hZ4wV8HXJHBf0+KbyQLdClifiLkTso238W+GvQTtKdJ02ymJe whgfKgWTYOgss+fAjxdevzU2V4b73GNmGhWHeSbr64w1pVc3uOIa70lMpi7XEPU9 XkX92hzITmXLEH4RB6f33fzT3Dg5t15T74N07XFHrX5IqEsqhiKp4OeRaXOCH3L0 WUvLYec17MViWSsPmWBVUOA1KLYbs2N70aEl1Mzd2K5p7+4HbrV+eGyw+SuDRevi RkGHEql9HA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:15 2026 by rpki-client