$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: /kIWP76J57Ug6rkiz/PjPMAvNMnYj0Zb/3BE2C+SQtQ= Subject key identifier: 78:6C:8C:0E:5B:4B:D1:D7:EE:CA:5D:D4:28:2E:1F:3D:03:42:9A:23 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 56E3C6860CD37CA28FE8EF0B479D898684BDC4D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 011E Signing time: Wed 29 Jul 2026 11:34:16 +0000 Manifest this update: Wed 29 Jul 2026 11:29:16 +0000 Manifest next update: Thu 30 Jul 2026 14:32:16 +0000 Files and hashes: 1: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) 2: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: eCb826yUHi9uyii6ZRKs+Pcdw+QpSGm9+WBXomee81E=) 3: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e3:c6:86:0c:d3:7c:a2:8f:e8:ef:0b:47:9d:89:86:84:bd:c4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Jul 29 11:29:16 2026 GMT Not After : Jul 30 14:32:16 2026 GMT Subject: CN=786C8C0E5B4BD1D7EECA5DD4282E1F3D03429A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:44:73:eb:00:d0:a3:9e:eb:8b:02:d2:f3: 29:a2:1a:5c:90:a9:f0:af:2e:0b:b8:73:46:3a:3c: 6a:c8:41:c6:5c:dd:c1:d0:f9:24:02:97:34:04:99: 00:bc:59:09:0e:00:b5:9d:1e:57:b4:7c:9f:3b:bc: 94:05:3c:0a:4a:ba:b9:4b:95:80:a8:cc:53:16:6d: c4:70:0b:f7:a9:d8:4e:6c:c6:be:b9:ce:03:0a:61: 04:9b:e8:45:54:50:73:a5:e2:5a:aa:7c:69:01:6c: 17:5f:08:15:84:fc:9b:7e:f5:7a:1f:5e:ee:b7:7c: 44:0c:36:1b:27:63:b4:4f:e6:65:7a:b6:22:2d:b8: 4c:c2:70:18:d6:df:5d:e6:92:31:23:0b:44:5c:b9: 0f:53:00:b3:73:77:c3:9b:2d:bc:50:e7:d2:58:ab: 10:64:3f:55:1c:c7:fc:bf:76:ed:b3:5f:74:c5:8b: d9:9d:ea:8d:c3:bd:5a:16:24:45:23:27:db:35:34: c9:01:7d:d3:22:8d:e2:9c:02:36:75:f2:e1:1c:ae: fa:d2:66:08:98:68:9f:6f:0e:b7:b1:da:60:50:c4: f0:b0:be:03:86:7c:ec:b7:1a:2f:bc:af:aa:3d:86: 30:3f:ea:1c:6b:4a:6c:15:46:1f:72:1e:ec:9f:56: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:8C:0E:5B:4B:D1:D7:EE:CA:5D:D4:28:2E:1F:3D:03:42:9A:23 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e0:1c:4b:f9:3f:ca:c0:9f:86:ad:e6:d8:fc:ce:77:40:34: 43:92:c0:56:28:2d:2c:22:ac:c6:07:bc:21:05:92:ba:e2:9e: c2:26:d1:99:39:6b:58:90:cf:87:9d:72:5d:4e:ae:33:7a:6e: 59:a9:8e:c9:8a:17:e5:7d:36:5a:5c:98:3c:83:65:26:98:81: 66:ee:36:a5:44:c9:46:dc:31:d1:e5:76:71:0a:94:04:64:a1: 9a:6d:4c:72:1b:d0:d4:a8:e7:9c:ab:e2:f3:88:5f:ac:3e:15: 78:10:db:0c:0d:e2:91:0f:02:73:f7:8d:20:19:fe:f5:c8:67: 86:b4:4a:71:4c:27:52:a1:7f:aa:2b:1f:de:b6:35:ff:ec:ca: 65:89:18:5b:05:bb:df:3c:80:a1:f0:3e:92:e1:75:74:99:d7: bc:32:f8:e3:52:a5:ad:3a:15:0a:cc:20:81:46:41:df:cb:ae: 24:72:9e:cf:14:01:e8:96:29:72:0f:14:21:51:cd:a1:dd:c0: c9:91:f6:96:ac:c2:74:16:b4:30:e9:eb:77:bc:04:eb:05:cc: 31:e3:66:2a:da:c4:af:76:80:04:c2:40:92:fc:3a:10:bf:3b: 17:06:59:c8:65:85:ff:b2:fb:3b:61:41:72:ed:b5:ff:4a:10: a2:b4:79:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVuPGhgzTfKKP6O8LR52JhoS9xNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA3MjkxMTI5MTZaFw0yNjA3MzAxNDMyMTZaMDMxMTAvBgNV BAMTKDc4NkM4QzBFNUI0QkQxRDdFRUNBNURENDI4MkUxRjNEMDM0MjlBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0ERz6wDQo57riwLS8ymiGlyQ qfCvLgu4c0Y6PGrIQcZc3cHQ+SQClzQEmQC8WQkOALWdHle0fJ87vJQFPApKurlL lYCozFMWbcRwC/ep2E5sxr65zgMKYQSb6EVUUHOl4lqqfGkBbBdfCBWE/Jt+9Xof Xu63fEQMNhsnY7RP5mV6tiItuEzCcBjW313mkjEjC0RcuQ9TALNzd8ObLbxQ59JY qxBkP1Ucx/y/du2zX3TFi9md6o3DvVoWJEUjJ9s1NMkBfdMijeKcAjZ18uEcrvrS ZgiYaJ9vDrex2mBQxPCwvgOGfOy3Gi+8r6o9hjA/6hxrSmwVRh9yHuyfVsRzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeGyMDltL0dfuyl3UKC4fPQNCmiMwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeAcS/k/ysCf hq3m2PzOd0A0Q5LAVigtLCKsxge8IQWSuuKewibRmTlrWJDPh51yXU6uM3puWamO yYoX5X02WlyYPINlJpiBZu42pUTJRtwx0eV2cQqUBGShmm1MchvQ1KjnnKvi84hf rD4VeBDbDA3ikQ8Cc/eNIBn+9chnhrRKcUwnUqF/qisf3rY1/+zKZYkYWwW73zyA ofA+kuF1dJnXvDL441KlrToVCswggUZB38uuJHKezxQB6JYpcg8UIVHNod3AyZH2 lqzCdBa0MOnrd7wE6wXMMeNmKtrEr3aABMJAkvw6EL87FwZZyGWF/7L7O2FBcu21 /0oQorR5WA== -----END CERTIFICATE-----Generated at Wed Jul 29 17:23:11 2026 by rpki-client