$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: 0YCFyI78qBLVUjFVDW98IOLTMZguAyPN120/x1s+fNM= Subject key identifier: 0B:54:09:34:1C:AA:CB:8F:57:E1:9F:76:59:40:5A:C0:F5:BF:A9:00 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 76E23F4B4DED6379CBE738D3B18A1EA6266A2349 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 0184 Signing time: Tue 28 Jul 2026 19:17:36 +0000 Manifest this update: Tue 28 Jul 2026 19:12:36 +0000 Manifest next update: Wed 29 Jul 2026 22:54:36 +0000 Files and hashes: 1: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: k3qOwUv1vZJddFQ3B+SieyDk6rfPtfKELYzOuUXpxG4=) 2: AS9808.roa (hash: RAHCjoZiKyNzBq3FMDIaEpR2kH3+XTi1YGQ3vOVwGyk=) 3: AS63567.roa (hash: 3uz+p/aF6FyCjNl25DbP3+KxCjFc79nCAtWo76qvoGk=) 4: AS23650.roa (hash: D9jVg0LLO+giI4vySvty+x8Af/ENhgC630tuamgNdUA=) 5: AS4134.roa (hash: fXejOFdV5eaFcvHgGSKlgpUo37ea48C+DMHePf+GKgA=) 6: AS0.roa (hash: 2whuGFj5CSwsR/pdhiLgE8oiFshD2k+kToFmQb91xT4=) 7: AS13378.roa (hash: OPyi8mTllKWBTmPe21LoqwD2zrSCH/8SJK7Z44pkkFs=) 8: AS4837.roa (hash: SBoAFQfVIbP1sO3DsIywYPHEyoGjeAh2mu8MjJTzvu4=) 9: AS56046.roa (hash: 8MvzYVqIb60aBw7ICs4pxcXONgJRqwTj09zKGBVIEto=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e2:3f:4b:4d:ed:63:79:cb:e7:38:d3:b1:8a:1e:a6:26:6a:23:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 28 19:12:36 2026 GMT Not After : Jul 29 22:54:36 2026 GMT Subject: CN=0B5409341CAACB8F57E19F7659405AC0F5BFA900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:65:01:0e:10:1d:cc:69:bb:7b:05:27:1c: ca:33:34:7d:06:6a:42:d3:01:17:62:5f:ab:06:a2: a4:85:58:db:f2:2b:8f:cf:13:87:7f:2b:49:94:4e: d5:76:f4:d3:a2:c4:2c:2d:3c:59:15:5a:44:60:53: 5a:50:9f:86:a3:09:fa:4d:20:fa:c3:01:79:1c:0f: 9d:ee:3c:9a:f9:d5:df:39:da:47:96:86:d4:7a:1c: 54:56:5f:8d:55:30:c3:d1:09:92:40:25:06:d5:e8: e0:97:89:84:aa:38:05:8f:fb:ea:58:10:e7:42:13: 88:11:5e:21:4d:32:b5:ba:3c:72:db:ce:f9:9a:77: 39:84:ce:c2:b8:3c:95:fb:39:47:6b:4e:0b:f4:c5: 2d:40:bf:a8:ee:15:0d:cc:5b:b7:fd:b2:3a:78:d6: f4:1a:41:b4:e4:e4:2f:1e:af:a2:6e:f5:62:26:eb: e9:68:c9:4e:73:6e:cb:b4:dd:76:4e:bd:b2:00:9a: 1b:e4:9b:0d:e7:d7:9d:04:f3:4c:cf:40:49:8d:d0: 44:1e:81:57:d8:bc:c4:53:65:8b:83:a7:b7:72:b3: 98:cb:89:80:a8:80:61:39:10:52:3b:3b:0c:f6:30: 06:68:dd:52:55:89:1f:ac:e4:a2:c1:36:5e:55:38: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:09:34:1C:AA:CB:8F:57:E1:9F:76:59:40:5A:C0:F5:BF:A9:00 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d1:cd:c4:be:b7:65:b1:cf:26:2d:01:22:94:7a:64:d5:9e: e2:b6:93:ad:28:43:8c:2e:be:5d:88:c2:b9:db:8b:5d:58:84: 65:97:0e:3f:d9:b0:51:3b:0a:e9:10:a8:0d:4a:e2:7f:30:3a: da:b0:32:16:f9:f3:40:c6:3a:e2:53:98:59:e0:ef:10:6f:9b: 60:39:30:49:cc:79:27:80:4e:95:da:77:c8:f0:32:e9:68:36: 54:45:d9:e1:34:96:e3:86:16:c6:2d:1e:9d:e4:94:e5:14:bb: df:1c:f5:d8:58:d7:51:e4:f5:a2:d0:a1:e1:5c:c6:ed:04:a8: 79:c0:1f:f8:14:0e:32:70:f8:c1:ac:e7:67:b0:07:70:e8:42: 2f:e9:bd:c8:5b:f6:70:2b:aa:9c:2f:16:ef:22:82:56:90:94: 5d:2c:05:38:c7:2b:bf:28:75:99:6f:11:7a:6e:39:ab:d0:18: 5a:3b:6e:8e:46:73:69:42:08:6a:12:14:a2:5b:a7:98:88:42: da:6f:d6:5e:0a:f2:2b:ac:2e:be:31:29:07:d2:6b:78:63:09: 9f:15:95:86:00:e8:f4:55:33:35:e7:38:18:75:6a:45:e0:9e: 55:a0:65:c0:a6:05:96:ff:b6:88:9d:5e:3f:25:32:a1:de:c6: b6:10:d5:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUduI/S03tY3nL5zjTsYoepiZqI0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MjgxOTEyMzZaFw0yNjA3MjkyMjU0MzZaMDMxMTAvBgNV BAMTKDBCNTQwOTM0MUNBQUNCOEY1N0UxOUY3NjU5NDA1QUMwRjVCRkE5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM32UBDhAdzGm7ewUnHMozNH0G akLTARdiX6sGoqSFWNvyK4/PE4d/K0mUTtV29NOixCwtPFkVWkRgU1pQn4ajCfpN IPrDAXkcD53uPJr51d852keWhtR6HFRWX41VMMPRCZJAJQbV6OCXiYSqOAWP++pY EOdCE4gRXiFNMrW6PHLbzvmadzmEzsK4PJX7OUdrTgv0xS1Av6juFQ3MW7f9sjp4 1vQaQbTk5C8er6Ju9WIm6+loyU5zbsu03XZOvbIAmhvkmw3n150E80zPQEmN0EQe gVfYvMRTZYuDp7dys5jLiYCogGE5EFI7Owz2MAZo3VJViR+s5KLBNl5VOD+VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC1QJNByqy49X4Z92WUBawPW/qQAwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdHNxL63ZbHP Ji0BIpR6ZNWe4raTrShDjC6+XYjCuduLXViEZZcOP9mwUTsK6RCoDUrifzA62rAy FvnzQMY64lOYWeDvEG+bYDkwScx5J4BOldp3yPAy6Wg2VEXZ4TSW44YWxi0eneSU 5RS73xz12FjXUeT1otCh4VzG7QSoecAf+BQOMnD4waznZ7AHcOhCL+m9yFv2cCuq nC8W7yKCVpCUXSwFOMcrvyh1mW8Rem45q9AYWjtujkZzaUIIahIUolunmIhC2m/W XgryK6wuvjEpB9JreGMJnxWVhgDo9FUzNec4GHVqReCeVaBlwKYFlv+2iJ1ePyUy od7GthDVUA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:17:24 2026 by rpki-client