$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: gYSzLQnMbe0eC7Zd+iw0rNLzQlo1JV/eSDSbPVt5K2Q= Subject key identifier: 2A:2A:63:15:61:0B:4D:5F:9E:65:D7:83:24:D5:06:BC:E3:3A:38:83 Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 157ADEFE7F2942811599759B15027C20B92D575F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 4E Signing time: Fri 24 Jul 2026 20:57:07 +0000 Manifest this update: Fri 24 Jul 2026 20:52:07 +0000 Manifest next update: Sat 25 Jul 2026 23:28:07 +0000 Files and hashes: 1: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) 2: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) 3: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: ToL/k1+WLEqHTlk7N7xNts63ZLm8YqnO8SZLQNe/GN4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7a:de:fe:7f:29:42:81:15:99:75:9b:15:02:7c:20:b9:2d:57:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Jul 24 20:52:07 2026 GMT Not After : Jul 25 23:28:07 2026 GMT Subject: CN=2A2A6315610B4D5F9E65D78324D506BCE33A3883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:42:49:ff:41:71:74:2c:d2:8d:6f:8f:e4: ea:7b:48:f8:2d:2a:41:b7:ac:e4:ea:7f:0d:28:8b: 5e:dd:69:9d:0f:bb:6f:f2:ad:6a:70:92:e2:c4:57: d8:a9:3c:56:61:d8:41:fd:5e:20:5a:c3:29:37:69: 71:90:c8:48:86:7b:bb:6e:1a:cc:dc:06:e0:51:3e: c1:f0:d3:79:f6:97:61:bd:65:14:ba:eb:99:3a:f6: ef:f7:77:40:e9:9e:20:e1:5a:0b:ef:65:5e:d1:af: 10:2b:6f:4a:f1:de:5a:e0:48:e4:06:d9:65:1e:fe: 9c:75:c8:e1:f4:9b:3a:12:33:ff:c3:b9:94:e7:e1: da:86:d4:19:12:ad:19:dd:cf:79:39:ff:6f:c4:01: 8f:3d:8b:5e:54:fc:7d:31:81:11:28:16:bf:4f:ad: 67:9e:55:f7:28:77:3c:85:b8:6e:64:66:85:00:21: e4:bd:2e:e8:c5:76:d8:77:af:f5:3e:be:0f:2d:43: ae:56:5e:d8:ef:fc:9f:3c:b4:d4:ba:8b:01:a0:83: ae:84:4a:9c:6b:75:7d:75:1c:72:d4:3e:dc:d6:bb: 33:3c:8f:3b:5d:39:1f:e2:89:27:0a:b8:f7:d1:bd: 69:48:42:ff:80:0a:9f:c4:2b:fa:3a:d9:08:45:c8: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:63:15:61:0B:4D:5F:9E:65:D7:83:24:D5:06:BC:E3:3A:38:83 X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:f6:34:9b:23:71:c6:1e:d4:31:09:0e:2b:92:a0:53:38: d3:62:b1:23:f7:bc:51:13:57:b4:ae:dd:fe:33:37:36:10:24: e9:d8:60:d3:2d:fc:36:6e:f3:58:01:3c:34:7d:6b:1a:d9:f7: b4:23:c6:af:c0:fc:ca:ac:91:a6:c8:e1:be:56:b1:54:14:ff: cf:c8:05:b8:08:e2:b3:3a:f5:59:d3:db:09:76:04:d6:a1:b6: d9:f3:cd:9a:47:45:7b:66:ef:85:0b:18:cc:ac:c0:9c:0d:1b: 47:38:53:7a:49:39:5b:13:10:d7:8b:eb:cb:3d:f2:81:2b:f9: 28:c8:fa:12:94:82:a5:a3:8a:fa:d1:bf:8d:c4:c2:56:cb:f3: 8b:3c:c2:b9:55:74:ef:50:c6:a2:25:4b:d1:16:15:42:ec:57: f7:e1:a3:a3:c7:07:33:bc:77:af:7a:39:46:74:38:44:44:3d: 60:82:ef:09:01:57:86:6e:b6:6d:5f:36:5c:e0:7e:a4:36:4f: d1:24:8a:a9:58:0f:56:4a:ef:98:2e:15:2f:6a:99:95:cf:33: 82:23:19:a8:9a:43:db:7e:db:70:65:77:02:a8:ce:cc:f3:27: 2b:50:1b:ad:04:e7:77:38:43:74:07:b4:f4:33:bf:c5:f7:a1: a7:c7:21:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFXre/n8pQoEVmXWbFQJ8ILktV18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA3MjQyMDUyMDdaFw0yNjA3MjUyMzI4MDdaMDMxMTAvBgNV BAMTKDJBMkE2MzE1NjEwQjRENUY5RTY1RDc4MzI0RDUwNkJDRTMzQTM4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChK0JJ/0FxdCzSjW+P5Op7SPgt KkG3rOTqfw0oi17daZ0Pu2/yrWpwkuLEV9ipPFZh2EH9XiBawyk3aXGQyEiGe7tu GszcBuBRPsHw03n2l2G9ZRS665k69u/3d0DpniDhWgvvZV7RrxArb0rx3lrgSOQG 2WUe/px1yOH0mzoSM//DuZTn4dqG1BkSrRndz3k5/2/EAY89i15U/H0xgREoFr9P rWeeVfcodzyFuG5kZoUAIeS9LujFdth3r/U+vg8tQ65WXtjv/J88tNS6iwGgg66E SpxrdX11HHLUPtzWuzM8jztdOR/iiScKuPfRvWlIQv+ACp/EK/o62QhFyCHPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKipjFWELTV+eZdeDJNUGvOM6OIMwHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL72NJsjccYe 1DEJDiuSoFM402KxI/e8URNXtK7d/jM3NhAk6dhg0y38Nm7zWAE8NH1rGtn3tCPG r8D8yqyRpsjhvlaxVBT/z8gFuAjiszr1WdPbCXYE1qG22fPNmkdFe2bvhQsYzKzA nA0bRzhTekk5WxMQ14vryz3ygSv5KMj6EpSCpaOK+tG/jcTCVsvzizzCuVV071DG oiVL0RYVQuxX9+Gjo8cHM7x3r3o5RnQ4REQ9YILvCQFXhm62bV82XOB+pDZP0SSK qVgPVkrvmC4VL2qZlc8zgiMZqJpD237bcGV3AqjOzPMnK1AbrQTndzhDdAe09DO/ xfehp8chlA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:06:49 2026 by rpki-client