$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: V8w+wdLFSbOBr0Jn7D8BTgityWX+jFjGYnJqHRk4NF4= Subject key identifier: F6:0E:65:1F:AA:44:EB:7F:D1:C4:AE:6B:EC:85:22:BC:86:77:E7:1C Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 7C77A0310BFC645E73C00D79A2F4668D022FB1D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 23 Signing time: Fri 24 Jul 2026 02:15:06 +0000 Manifest this update: Fri 24 Jul 2026 02:10:06 +0000 Manifest next update: Sat 25 Jul 2026 03:42:06 +0000 Files and hashes: 1: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) 2: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: NLrd7zUyV7SK7JJtDfMSY1Wzax9wMaq7lNCXItjvOng=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:77:a0:31:0b:fc:64:5e:73:c0:0d:79:a2:f4:66:8d:02:2f:b1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Jul 24 02:10:06 2026 GMT Not After : Jul 25 03:42:06 2026 GMT Subject: CN=F60E651FAA44EB7FD1C4AE6BEC8522BC8677E71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:fb:4b:f7:8c:fd:8d:6c:c9:b9:fa:75:89: 3c:46:6c:db:71:b7:47:ae:7b:a1:3d:36:19:2e:03: 1a:6a:fb:d6:18:50:3f:7d:7c:3a:a5:95:c4:7b:72: a7:66:fa:7e:d0:d9:19:1d:cb:59:34:2c:50:f1:26: 8d:8e:94:12:73:13:69:d9:3f:81:00:62:ed:5e:44: 1f:86:cf:b7:21:f5:72:39:01:b6:f4:88:09:fb:7c: e2:c1:b3:65:a3:e5:1f:58:95:21:f2:bd:c4:6e:03: 92:51:79:e5:f6:62:77:d4:42:68:60:b4:c0:13:c8: 0f:9d:a7:19:05:2c:35:ce:67:4a:4e:bc:33:12:14: 97:e2:98:61:cd:8b:83:84:80:f7:0f:dc:85:64:70: 89:60:5c:1b:82:0d:bb:16:8f:9e:bf:7c:04:51:7f: c4:d0:9e:db:5a:1e:73:18:1c:db:09:7d:63:1a:58: 2e:48:16:62:81:f9:e0:95:56:23:f0:b1:14:cb:62: 4b:89:f6:3f:30:62:de:4a:b8:f9:7c:46:d7:c6:6c: bb:b4:18:bc:1b:c9:b2:b4:3c:a8:b1:10:7e:e5:76: 5b:2c:17:ff:30:7e:18:29:f9:e8:0e:b0:09:b3:1e: af:7b:13:3e:ce:af:a9:6e:ab:2d:12:20:4b:ca:e8: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0E:65:1F:AA:44:EB:7F:D1:C4:AE:6B:EC:85:22:BC:86:77:E7:1C X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:07:36:fe:18:77:28:d4:78:cb:27:af:02:33:5a:ab:e8: 07:3c:d5:e6:c2:32:c2:cf:50:bc:33:29:f4:d4:84:24:b0:ff: d8:10:b8:c4:19:09:75:e9:d9:02:a7:52:e1:93:89:ae:37:3e: 23:bc:95:db:2a:b6:20:ba:25:aa:47:ff:9d:ac:ee:89:45:e7: 35:50:3b:c5:bf:15:a2:99:a7:4a:60:19:ab:66:17:af:59:52: 1a:00:4d:0a:ea:47:28:41:06:cf:2d:89:90:68:de:04:01:2d: c4:42:93:d7:63:24:56:fa:e4:ae:5b:ed:b1:85:a0:86:5c:e8: 6a:e1:e2:c1:77:21:7e:12:81:15:7c:d5:ce:b0:36:4e:68:ed: 4a:4b:bf:cb:d3:83:4c:7f:22:b0:ed:74:f9:d3:14:36:02:12: 68:16:4f:f4:2a:41:05:90:6b:7a:8f:77:5e:ef:0d:7e:ea:ce: c3:bf:4d:3a:2b:b3:ca:21:9f:22:b0:c6:29:9f:49:b1:64:35: ed:97:20:bf:54:91:7e:6b:ab:e1:68:c0:7a:d7:c6:de:27:50: ba:93:b3:ba:98:53:26:27:ee:4c:82:50:84:d3:4e:74:cb:d4: 0a:ca:3a:26:8f:a4:1c:7f:37:91:3c:7b:39:66:11:67:53:b2: db:b8:66:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfHegMQv8ZF5zwA15ovRmjQIvsdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjA3MjQwMjEwMDZaFw0yNjA3MjUwMzQyMDZaMDMxMTAvBgNV BAMTKEY2MEU2NTFGQUE0NEVCN0ZEMUM0QUU2QkVDODUyMkJDODY3N0U3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQftL94z9jWzJufp1iTxGbNtx t0eue6E9NhkuAxpq+9YYUD99fDqllcR7cqdm+n7Q2Rkdy1k0LFDxJo2OlBJzE2nZ P4EAYu1eRB+Gz7ch9XI5Abb0iAn7fOLBs2Wj5R9YlSHyvcRuA5JReeX2YnfUQmhg tMATyA+dpxkFLDXOZ0pOvDMSFJfimGHNi4OEgPcP3IVkcIlgXBuCDbsWj56/fARR f8TQnttaHnMYHNsJfWMaWC5IFmKB+eCVViPwsRTLYkuJ9j8wYt5KuPl8RtfGbLu0 GLwbybK0PKixEH7ldlssF/8wfhgp+egOsAmzHq97Ez7Or6luqy0SIEvK6FwbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9g5lH6pE63/RxK5r7IUivIZ35xwwHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYwHNv4YdyjU eMsnrwIzWqvoBzzV5sIyws9QvDMp9NSEJLD/2BC4xBkJdenZAqdS4ZOJrjc+I7yV 2yq2ILolqkf/nazuiUXnNVA7xb8VopmnSmAZq2YXr1lSGgBNCupHKEEGzy2JkGje BAEtxEKT12MkVvrkrlvtsYWghlzoauHiwXchfhKBFXzVzrA2TmjtSku/y9ODTH8i sO10+dMUNgISaBZP9CpBBZBreo93Xu8NfurOw79NOiuzyiGfIrDGKZ9JsWQ17Zcg v1SRfmur4WjAetfG3idQupOzuphTJifuTIJQhNNOdMvUCso6Jo+kHH83kTx7OWYR Z1Oy27hmbA== -----END CERTIFICATE-----Generated at Fri Jul 24 20:20:37 2026 by rpki-client