$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: KwpY3gPjp3u0mmZoPTzkWLNvCgoWWO4ZNwiVY3kExsg= Subject key identifier: F4:CF:06:F3:8A:92:EF:B3:3B:94:93:1E:10:E7:F6:AF:EB:CB:25:1B Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 6CCD5CB5D020FC77F83D1AC6965B59D78477F7C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: 7A Signing time: Sat 13 Jun 2026 13:21:49 +0000 Manifest this update: Sat 13 Jun 2026 13:16:49 +0000 Manifest next update: Sun 14 Jun 2026 13:52:49 +0000 Files and hashes: 1: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=) 2: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: a4p/0xF62BV1kubWJQ9Lx1Pfgkei/VnSzA5+XE42MAE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cd:5c:b5:d0:20:fc:77:f8:3d:1a:c6:96:5b:59:d7:84:77:f7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Jun 13 13:16:49 2026 GMT Not After : Jun 14 13:52:49 2026 GMT Subject: CN=F4CF06F38A92EFB33B94931E10E7F6AFEBCB251B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:29:64:6c:8e:01:6f:c5:f5:01:c1:70:32: 21:d9:d9:c3:b9:6a:62:93:49:a5:31:b4:52:57:c2: 3d:2a:b2:b9:50:39:15:0c:53:d6:3e:98:0d:f8:2e: 33:f6:14:de:d8:1d:a9:bc:4d:79:54:e4:48:6f:37: ab:a5:e9:0a:b5:c8:1c:22:ab:e3:31:e5:31:fc:43: 07:4f:8a:63:82:a5:0c:df:98:16:16:28:c0:9d:a6: 6c:28:f1:2e:5e:a3:50:27:1f:fb:5b:02:c5:d5:02: cc:e9:03:49:17:b9:2b:cd:e8:ab:26:d8:e1:11:59: f4:22:6d:09:9b:50:92:aa:dd:13:c6:67:0e:00:6e: 0a:f7:e7:51:10:2e:18:c5:d0:28:e1:de:c7:30:f5: 7d:a4:4b:6e:31:8f:04:3d:59:cd:1b:68:31:a1:0d: 17:53:63:0d:43:4b:48:5a:bc:2e:4a:5b:c9:95:ed: 98:05:c4:cb:e2:b5:c8:a0:cc:da:73:bc:f5:64:bf: 96:79:bf:a1:98:be:d6:23:d1:a2:87:23:8c:bd:38: fa:ea:0c:d8:ae:71:05:3d:f4:0b:c6:97:a4:c6:2d: f4:ba:35:3a:83:9b:0b:d8:ab:8f:25:dc:5a:51:c8: f6:52:46:9f:86:72:85:a3:e0:32:08:11:d3:2a:4e: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:06:F3:8A:92:EF:B3:3B:94:93:1E:10:E7:F6:AF:EB:CB:25:1B X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:13:fb:94:33:eb:95:0d:95:55:61:ab:e5:45:0e:67:a9:6b: 89:80:e7:22:94:88:22:3b:38:25:e2:05:63:09:30:ae:25:21: 79:7b:e9:2a:8c:0f:27:db:46:30:f8:47:d0:79:ab:b2:bb:ed: 07:05:8c:7c:c6:00:f9:d9:e1:9c:77:68:f5:e6:7b:a7:25:01: b8:21:53:02:b4:41:93:ea:73:dc:2a:03:2d:64:f6:f3:73:48: a2:4f:1a:1b:ce:96:c5:7c:8a:5b:2b:d6:21:46:1e:4c:59:f0: 8b:22:df:c2:71:55:b1:5b:65:78:08:25:3e:68:55:1c:71:91: 0b:26:49:98:97:a6:68:ae:a5:db:ec:a5:a9:30:3b:ef:fc:7a: 02:ab:4f:8f:7b:41:af:3a:35:3d:ac:7a:85:6b:62:11:08:b7: fc:c7:15:2b:8a:26:37:5f:d8:74:2d:48:fb:ff:3d:a1:73:9c: 9a:7f:5f:24:b2:3a:c8:c2:cb:d5:df:51:82:eb:9e:df:c3:1e: a5:9f:ae:f2:d6:26:9a:72:35:c2:0e:a8:5d:e2:aa:9c:6a:03: 7a:3a:2f:96:ab:1e:ae:2c:f6:3e:d3:84:72:fc:09:45:20:ba: 16:31:d7:9f:f4:75:85:a7:55:3f:3d:9c:b3:2a:01:f1:1c:88: 1e:70:91:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbM1ctdAg/Hf4PRrGlltZ14R398IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA2MTMxMzE2NDlaFw0yNjA2MTQxMzUyNDlaMDMxMTAvBgNV BAMTKEY0Q0YwNkYzOEE5MkVGQjMzQjk0OTMxRTEwRTdGNkFGRUJDQjI1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOylkbI4Bb8X1AcFwMiHZ2cO5 amKTSaUxtFJXwj0qsrlQORUMU9Y+mA34LjP2FN7YHam8TXlU5EhvN6ul6Qq1yBwi q+Mx5TH8QwdPimOCpQzfmBYWKMCdpmwo8S5eo1AnH/tbAsXVAszpA0kXuSvN6Ksm 2OERWfQibQmbUJKq3RPGZw4Abgr351EQLhjF0Cjh3scw9X2kS24xjwQ9Wc0baDGh DRdTYw1DS0havC5KW8mV7ZgFxMvitcigzNpzvPVkv5Z5v6GYvtYj0aKHI4y9OPrq DNiucQU99AvGl6TGLfS6NTqDmwvYq48l3FpRyPZSRp+GcoWj4DIIEdMqTukNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9M8G84qS77M7lJMeEOf2r+vLJRswHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixP7lDPrlQ2V VWGr5UUOZ6lriYDnIpSIIjs4JeIFYwkwriUheXvpKowPJ9tGMPhH0HmrsrvtBwWM fMYA+dnhnHdo9eZ7pyUBuCFTArRBk+pz3CoDLWT283NIok8aG86WxXyKWyvWIUYe TFnwiyLfwnFVsVtleAglPmhVHHGRCyZJmJemaK6l2+ylqTA77/x6AqtPj3tBrzo1 Pax6hWtiEQi3/McVK4omN1/YdC1I+/89oXOcmn9fJLI6yMLL1d9Rguue38MepZ+u 8tYmmnI1wg6oXeKqnGoDejovlqseriz2PtOEcvwJRSC6FjHXn/R1hadVPz2csyoB 8RyIHnCR9A== -----END CERTIFICATE-----Generated at Sat Jun 13 17:34:31 2026 by rpki-client