$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: PIom2jTaWbgJ6n0sC+5Tw50s1JdQ93AqjlQ9ED2JUcc= Subject key identifier: 1B:12:D7:DE:1D:27:CE:D7:9E:91:BD:3F:7C:C6:F7:1B:02:6E:C4:1D Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 3EED166D7AC42172C93AF62A0EE0DB57EAA26F91 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: B8 Signing time: Tue 28 Jul 2026 08:26:23 +0000 Manifest this update: Tue 28 Jul 2026 08:21:23 +0000 Manifest next update: Wed 29 Jul 2026 11:45:23 +0000 Files and hashes: 1: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=) 2: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: cmqqtBWA4EKF4UeIKK0AZghc5MfqOiENxOhMLYlXtwc=) 3: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ed:16:6d:7a:c4:21:72:c9:3a:f6:2a:0e:e0:db:57:ea:a2:6f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Jul 28 08:21:23 2026 GMT Not After : Jul 29 11:45:23 2026 GMT Subject: CN=1B12D7DE1D27CED79E91BD3F7CC6F71B026EC41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:f6:c1:bf:b1:ce:f3:7c:89:7f:35:f6:b6: 6f:80:36:75:25:2c:9f:98:6b:4f:13:20:2f:18:85: c0:12:27:40:b1:a6:f2:97:c8:aa:10:7d:37:37:9d: ad:e3:9f:a5:3d:05:70:c0:14:2f:7e:f4:55:5e:49: db:b7:5d:d9:28:2b:ac:37:be:2a:61:68:eb:82:dc: ba:b6:57:d0:27:ea:04:d7:ca:6d:db:fe:70:9e:ac: b0:e3:42:9c:03:c7:a5:95:36:04:44:c8:e7:4a:60: c4:d0:05:80:55:6f:68:4e:07:b5:bc:0d:c1:a8:7d: 8f:ad:64:14:88:38:c2:6e:09:9c:2c:64:05:85:c5: 81:0e:4c:77:1a:39:f7:95:ba:0f:33:ea:2f:3e:03: 48:4f:79:e2:76:97:c4:c0:95:ab:40:b1:50:57:b2: 1f:37:71:65:9e:44:ec:b5:01:8e:63:7d:1e:85:0e: 7f:fb:cb:1a:fe:61:32:9f:ca:64:c9:10:4a:f4:cb: 33:af:ec:cf:50:06:f9:52:72:c4:fd:ca:21:fc:a6: f4:80:de:6d:47:eb:d9:41:43:61:c1:97:1c:6e:81: 25:dd:28:dd:1b:fc:17:03:e7:32:1b:ad:fd:4b:2b: e3:8f:93:7f:4f:ba:60:6f:3e:cd:ac:ff:cb:40:c0: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:12:D7:DE:1D:27:CE:D7:9E:91:BD:3F:7C:C6:F7:1B:02:6E:C4:1D X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:48:06:8a:e4:a2:9a:44:2d:f2:8b:d1:3a:ac:b5:14:42:e9: 98:6a:c1:10:0e:78:04:9a:82:bf:47:dc:79:3d:1c:9c:e5:45: 2f:d3:f3:0f:df:1a:8e:86:34:26:82:91:5c:c4:9f:bc:4b:9d: 27:49:f5:b7:da:61:90:fb:b6:26:04:51:68:8c:1d:d4:b7:0d: af:c1:38:a8:31:09:5b:be:7e:95:b4:ec:7e:87:0b:17:2a:17: 39:65:4d:4b:7c:ac:be:4d:93:67:0d:b9:43:6d:44:06:de:db: a0:3f:08:e0:8b:b8:fe:dd:20:36:43:d5:67:ec:5a:f6:72:07: b7:dc:fe:7b:1f:2c:be:d2:48:3a:9f:c6:84:e0:9b:cc:57:2b: 4c:a1:7b:96:ad:b9:68:75:50:e1:a5:c4:ac:58:d9:99:70:28: 5c:44:eb:dd:8e:37:5a:35:74:a6:01:7c:87:f4:72:fc:11:3e: 86:23:eb:c9:77:69:a2:8f:06:a0:64:13:1e:ee:22:4b:8b:48: da:02:08:6c:c9:b0:9c:19:ca:ef:a9:cd:39:b8:de:51:9f:1f: cf:fe:97:77:e0:ed:8c:14:7a:78:a0:cf:a6:39:44:45:a0:37: f8:c5:33:21:f0:e0:b2:2c:a5:a1:c6:0f:3e:9c:84:b4:73:c6: 47:b3:79:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPu0WbXrEIXLJOvYqDuDbV+qib5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA3MjgwODIxMjNaFw0yNjA3MjkxMTQ1MjNaMDMxMTAvBgNV BAMTKDFCMTJEN0RFMUQyN0NFRDc5RTkxQkQzRjdDQzZGNzFCMDI2RUM0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniPbBv7HO83yJfzX2tm+ANnUl LJ+Ya08TIC8YhcASJ0CxpvKXyKoQfTc3na3jn6U9BXDAFC9+9FVeSdu3XdkoK6w3 viphaOuC3Lq2V9An6gTXym3b/nCerLDjQpwDx6WVNgREyOdKYMTQBYBVb2hOB7W8 DcGofY+tZBSIOMJuCZwsZAWFxYEOTHcaOfeVug8z6i8+A0hPeeJ2l8TAlatAsVBX sh83cWWeROy1AY5jfR6FDn/7yxr+YTKfymTJEEr0yzOv7M9QBvlScsT9yiH8pvSA 3m1H69lBQ2HBlxxugSXdKN0b/BcD5zIbrf1LK+OPk39PumBvPs2s/8tAwHBpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGxLX3h0nzteekb0/fMb3GwJuxB0wHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkgGiuSimkQt 8ovROqy1FELpmGrBEA54BJqCv0fceT0cnOVFL9PzD98ajoY0JoKRXMSfvEudJ0n1 t9phkPu2JgRRaIwd1LcNr8E4qDEJW75+lbTsfocLFyoXOWVNS3ysvk2TZw25Q21E Bt7boD8I4Iu4/t0gNkPVZ+xa9nIHt9z+ex8svtJIOp/GhOCbzFcrTKF7lq25aHVQ 4aXErFjZmXAoXETr3Y43WjV0pgF8h/Ry/BE+hiPryXdpoo8GoGQTHu4iS4tI2gII bMmwnBnK76nNObjeUZ8fz/6Xd+DtjBR6eKDPpjlERaA3+MUzIfDgsiylocYPPpyE tHPGR7N5KA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:07:50 2026 by rpki-client