$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft File: 7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft (raw, json) Hash identifier: N5Z1NrnrljeRFyb/m09JciPTF4NS4ZySGo+I1nuB2IE= Subject key identifier: 79:2F:70:E8:44:5A:D3:C1:E2:4E:6C:E1:D5:E7:47:F9:03:29:A2:E1 Authority key identifier: 77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC Certificate issuer: /CN=7701FB8018A76AF302CEF7E0F329A58E9644BADC Certificate serial: 1425FA27BE3D5B2A5AA8EE7F7E8C563CD54C3C92 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft Manifest number: 34 Signing time: Thu 16 Apr 2026 18:24:32 +0000 Manifest this update: Thu 16 Apr 2026 18:19:32 +0000 Manifest next update: Fri 17 Apr 2026 22:14:32 +0000 Files and hashes: 1: 7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl (hash: wCdhMStloXsqSf7W1aCVZYMz0+yI/xhxEYY24O6WmMY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 22:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:25:fa:27:be:3d:5b:2a:5a:a8:ee:7f:7e:8c:56:3c:d5:4c:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701FB8018A76AF302CEF7E0F329A58E9644BADC Validity Not Before: Apr 16 18:19:32 2026 GMT Not After : Apr 17 22:14:32 2026 GMT Subject: CN=792F70E8445AD3C1E24E6CE1D5E747F90329A2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:7a:cf:67:40:eb:99:9f:44:2e:f4:fb:11: 20:30:f0:2e:8a:95:59:11:ea:13:b5:a5:e3:87:5a: 6b:af:8e:ab:bc:44:9c:6c:05:bd:7f:ae:f4:49:0b: 30:be:6d:82:b8:d6:bc:4f:39:17:8c:ad:3b:1c:5b: 8a:9f:d9:25:0e:29:65:65:2b:35:ed:fc:06:f0:70: 6b:8c:26:cd:3c:34:c6:d2:a9:ed:41:e2:a5:57:d4: e7:a3:96:1f:9d:ad:10:a9:a6:6e:35:8e:dc:75:94: ca:20:1e:8c:bd:d0:67:46:74:70:10:34:4c:c6:f4: ea:7a:1e:59:83:59:51:2b:81:92:82:c9:82:38:22: 86:97:0c:b7:90:04:03:5d:97:0f:84:76:0c:ba:5c: c6:79:b5:97:17:c1:e6:09:bd:a3:d1:a0:97:e9:5d: 5e:e7:c6:df:9b:34:7d:47:5b:18:d9:93:e4:d4:e0: d6:7c:34:e6:ec:46:e7:ab:50:08:22:8c:2e:08:9a: 47:9d:2e:70:cf:f4:44:cc:a3:a2:43:45:00:54:14: fe:23:cd:1f:29:b5:44:cd:a4:ba:6f:e6:cc:5a:32: 7c:d0:2c:cd:1b:25:79:a3:35:8e:b5:84:47:3c:2f: 70:47:c7:e4:bc:c0:bf:36:6f:6e:4b:50:c9:b8:1f: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:70:E8:44:5A:D3:C1:E2:4E:6C:E1:D5:E7:47:F9:03:29:A2:E1 X509v3 Authority Key Identifier: keyid:77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:8f:b6:52:e6:fc:f8:3d:b8:3d:94:ed:9f:bc:b8:8f:6b: b2:9f:5f:04:d2:3d:42:dd:28:03:15:34:26:8a:0a:15:41:23: 40:98:6f:a7:5e:32:c5:e7:8e:53:1d:ff:11:1f:06:29:b9:4c: 86:7f:d3:16:e7:e6:70:10:53:63:e6:b8:1a:f5:a9:1b:40:7a: 70:59:3c:9c:60:60:0e:68:be:ad:8a:aa:06:e3:d8:51:64:f1: b2:91:9a:1b:9e:ca:11:41:6c:3f:c5:90:b1:3b:6e:db:b4:e9: 10:b6:6f:5e:cf:86:c8:85:0c:f4:1d:3e:c3:81:9a:30:bd:01: 1c:bf:0e:b4:38:01:a1:f8:68:b8:f8:1b:fd:c6:da:0a:93:ac: 26:c5:36:68:f0:8c:01:d6:54:da:98:93:a3:7e:de:ca:35:7f: cd:f0:99:ab:1c:ea:6c:cc:87:0d:7b:c9:eb:36:a5:98:84:38: c1:af:42:d1:24:56:5b:b4:f2:6d:8c:21:6f:a0:10:3e:32:4c: 70:ff:0f:21:d1:3c:be:f4:a4:6f:d6:56:39:23:8b:3f:5f:39: 15:ac:42:1c:66:12:df:be:df:7e:e7:8a:d6:53:11:bc:58:63: a4:20:f3:e0:c7:5d:67:ce:90:26:c9:5c:2b:6e:30:ad:3c:ad: 5c:0d:6a:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFCX6J749WypaqO5/foxWPNVMPJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwMUZCODAxOEE3NkFGMzAyQ0VGN0UwRjMyOUE1OEU5 NjQ0QkFEQzAeFw0yNjA0MTYxODE5MzJaFw0yNjA0MTcyMjE0MzJaMDMxMTAvBgNV BAMTKDc5MkY3MEU4NDQ1QUQzQzFFMjRFNkNFMUQ1RTc0N0Y5MDMyOUEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3nrPZ0DrmZ9ELvT7ESAw8C6K lVkR6hO1peOHWmuvjqu8RJxsBb1/rvRJCzC+bYK41rxPOReMrTscW4qf2SUOKWVl KzXt/AbwcGuMJs08NMbSqe1B4qVX1Oejlh+drRCppm41jtx1lMogHoy90GdGdHAQ NEzG9Op6HlmDWVErgZKCyYI4IoaXDLeQBANdlw+Edgy6XMZ5tZcXweYJvaPRoJfp XV7nxt+bNH1HWxjZk+TU4NZ8NObsRuerUAgijC4ImkedLnDP9ETMo6JDRQBUFP4j zR8ptUTNpLpv5sxaMnzQLM0bJXmjNY61hEc8L3BHx+S8wL82b25LUMm4H791AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeS9w6ERa08HiTmzh1edH+QMpouEwHwYDVR0j BBgwFoAUdwH7gBinavMCzvfg8ymljpZEutwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzIxMTQyOTIxMDc1MDk3Ny8wLzc3MDFGQjgwMThBNzZBRjMwMkNFRjdFMEYzMjlB NThFOTY0NEJBREMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzcwMUZCODAxOEE3NkFGMzAyQ0VGN0UwRjMyOUE1OEU5NjQ0QkFEQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODMyMTE0MjkyMTA3NTA5NzcvMC83NzAxRkI4MDE4QTc2 QUYzMDJDRUY3RTBGMzI5QTU4RTk2NDRCQURDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhCPtlLm/Pg9 uD2U7Z+8uI9rsp9fBNI9Qt0oAxU0JooKFUEjQJhvp14yxeeOUx3/ER8GKblMhn/T FufmcBBTY+a4GvWpG0B6cFk8nGBgDmi+rYqqBuPYUWTxspGaG57KEUFsP8WQsTtu 27TpELZvXs+GyIUM9B0+w4GaML0BHL8OtDgBofhouPgb/cbaCpOsJsU2aPCMAdZU 2piTo37eyjV/zfCZqxzqbMyHDXvJ6zalmIQ4wa9C0SRWW7TybYwhb6AQPjJMcP8P IdE8vvSkb9ZWOSOLP185FaxCHGYS377ffueK1lMRvFhjpCDz4MddZ86QJslcK24w rTytXA1qag== -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:27 2026 by rpki-client