$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: Y87XJ29yG654SYpA1n31NuAId9/TyVro8OhS6jTz4Z8= Subject key identifier: A5:1E:4B:CE:DE:C9:20:26:87:22:13:7C:FE:FF:92:6C:79:36:01:6C Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 59DAC067977809D46F477EC033D5AC03734DA870 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: A2 Signing time: Wed 29 Jul 2026 10:59:13 +0000 Manifest this update: Wed 29 Jul 2026 10:54:13 +0000 Manifest next update: Thu 30 Jul 2026 12:00:13 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: JjAJw4JJJS/xpeUd+lpw8v8q41lHjD6udS6U9wsYogM=) 2: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 3: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:da:c0:67:97:78:09:d4:6f:47:7e:c0:33:d5:ac:03:73:4d:a8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Jul 29 10:54:13 2026 GMT Not After : Jul 30 12:00:13 2026 GMT Subject: CN=A51E4BCEDEC920268722137CFEFF926C7936016C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:fb:c5:36:51:73:4b:4f:6f:55:62:29:42: ad:2a:5a:cd:d3:43:7c:2b:d3:28:be:96:82:22:6c: ff:35:45:3d:20:fe:f4:7c:f9:59:9f:70:ce:02:a9: 64:06:7a:8e:c5:79:a1:45:83:f3:93:a2:7b:e5:d4: 46:9e:ee:b0:3e:7f:2d:9b:56:a8:30:6c:03:ed:58: 43:cd:7c:9f:72:6a:33:10:e5:ad:12:c1:6c:28:2a: 1f:dd:da:e5:4a:a7:9b:bd:b1:35:a4:f0:01:e6:41: e1:f1:37:a1:50:f4:43:00:9c:a4:1f:91:7a:a0:c1: 67:46:1e:fa:f2:3a:79:d2:57:8d:69:4d:26:9e:69: 09:6a:dd:ce:29:b9:3e:ca:80:46:69:fb:c6:6d:2e: 11:bf:92:ee:85:3a:53:9f:2c:32:8c:0e:cd:f4:d7: 96:8c:c0:e5:cd:b7:18:71:30:51:24:5f:19:68:09: 0c:12:41:c4:9e:ee:d1:87:11:7c:20:4b:2e:a0:c2: ea:92:56:6a:af:4b:1b:83:ec:b5:5b:42:4a:1b:e9: 62:a4:4c:2f:dc:94:b9:69:3a:ab:f4:f4:e6:2f:d1: 2c:01:2c:62:1e:ff:56:86:3c:f1:09:52:3f:d9:62: df:b2:5c:32:1c:e6:70:ca:17:46:0b:dd:71:c1:39: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:4B:CE:DE:C9:20:26:87:22:13:7C:FE:FF:92:6C:79:36:01:6C X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:16:6f:15:78:15:6e:c1:2e:b7:f2:5a:87:85:d9:15:73:02: 4a:d5:0d:3e:fa:ac:66:09:df:a7:e5:28:53:4f:d2:a3:26:d5: 9c:72:18:37:7b:4f:1a:51:f3:34:e3:51:f2:4c:2a:cf:00:13: cd:3f:04:3c:96:bf:6b:da:9b:9f:ee:d2:1d:3b:49:ad:87:6a: e9:0a:ce:a8:94:71:f9:41:34:6e:04:a1:73:e5:69:20:19:38: c0:7b:d5:e9:44:6b:12:75:9f:54:20:69:ba:58:cc:e3:67:1b: 7d:3e:28:5e:9e:f7:dd:ac:fc:95:4f:d6:cd:77:bc:6c:0c:f1: 08:c3:a1:ea:fe:55:ec:0b:ac:51:4d:28:d8:98:c0:8f:69:81: 23:eb:1e:0e:91:d9:7f:e4:b9:f1:33:2c:a6:ff:f3:29:23:8f: 75:ee:70:6f:e1:de:29:7a:00:75:e6:06:91:d2:70:5b:fc:43: 26:4b:03:00:f6:2c:86:69:de:cd:97:1b:53:d7:58:ec:79:9f: 3e:b8:59:97:29:39:c9:c9:26:65:45:4e:07:ca:07:89:4b:4f: 6b:9e:88:46:82:12:7b:ad:c1:95:73:bb:ac:37:fb:aa:ff:6c: 72:60:5c:6f:2a:6e:16:80:81:6e:24:d4:80:9b:da:bb:1d:cf: 23:df:83:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWdrAZ5d4CdRvR37AM9WsA3NNqHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA3MjkxMDU0MTNaFw0yNjA3MzAxMjAwMTNaMDMxMTAvBgNV BAMTKEE1MUU0QkNFREVDOTIwMjY4NzIyMTM3Q0ZFRkY5MjZDNzkzNjAxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H/vFNlFzS09vVWIpQq0qWs3T Q3wr0yi+loIibP81RT0g/vR8+VmfcM4CqWQGeo7FeaFFg/OTonvl1Eae7rA+fy2b VqgwbAPtWEPNfJ9yajMQ5a0SwWwoKh/d2uVKp5u9sTWk8AHmQeHxN6FQ9EMAnKQf kXqgwWdGHvryOnnSV41pTSaeaQlq3c4puT7KgEZp+8ZtLhG/ku6FOlOfLDKMDs30 15aMwOXNtxhxMFEkXxloCQwSQcSe7tGHEXwgSy6gwuqSVmqvSxuD7LVbQkob6WKk TC/clLlpOqv09OYv0SwBLGIe/1aGPPEJUj/ZYt+yXDIc5nDKF0YL3XHBOcQpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpR5Lzt7JICaHIhN8/v+SbHk2AWwwHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhZvFXgVbsEu t/Jah4XZFXMCStUNPvqsZgnfp+UoU0/SoybVnHIYN3tPGlHzNONR8kwqzwATzT8E PJa/a9qbn+7SHTtJrYdq6QrOqJRx+UE0bgShc+VpIBk4wHvV6URrEnWfVCBpuljM 42cbfT4oXp733az8lU/WzXe8bAzxCMOh6v5V7AusUU0o2JjAj2mBI+seDpHZf+S5 8TMspv/zKSOPde5wb+HeKXoAdeYGkdJwW/xDJksDAPYshmnezZcbU9dY7HmfPrhZ lyk5yckmZUVOB8oHiUtPa56IRoISe63BlXO7rDf7qv9scmBcbypuFoCBbiTUgJva ux3PI9+D9Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:08:19 2026 by rpki-client