$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: WHFCc0jEgCOoDEeBLzT9AOik6eaHKa9PMP9TFJEBNlU= Subject key identifier: 7B:8F:87:76:59:D9:EC:B2:09:28:09:4F:EF:51:1B:6D:8F:3F:5C:5F Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 1BCE0D4938416C8E9C8B120E2D8D2D64CEE4FFD1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: 93 Signing time: Wed 29 Jul 2026 06:48:44 +0000 Manifest this update: Wed 29 Jul 2026 06:43:44 +0000 Manifest next update: Thu 30 Jul 2026 07:42:44 +0000 Files and hashes: 1: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 2: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) 3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) 4: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: BX+TTTwpyaEPAMSlXrcGrqq9XgBjZTK2sl2WPJMGQrc=) 5: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ce:0d:49:38:41:6c:8e:9c:8b:12:0e:2d:8d:2d:64:ce:e4:ff:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Jul 29 06:43:44 2026 GMT Not After : Jul 30 07:42:44 2026 GMT Subject: CN=7B8F877659D9ECB20928094FEF511B6D8F3F5C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:e1:bf:d1:ce:bb:3d:be:f5:ee:4a:08:eb: 7a:e1:f9:1e:86:70:9d:95:da:e8:64:f9:3b:0d:2f: f6:0f:84:79:94:72:74:14:b3:b9:f8:32:57:34:02: 14:a7:53:ae:9f:e4:ec:b2:bc:b1:9a:48:99:8c:aa: bc:a1:0a:61:0a:5d:71:52:98:b9:28:fd:1e:94:59: 84:56:d9:90:7a:be:20:e8:f8:e9:a5:4d:ee:aa:6a: c6:66:49:e9:ce:8d:b7:32:9b:7a:a5:d7:d8:20:5f: b8:09:4a:5e:ad:e6:8b:93:d9:9d:0b:05:d3:14:e8: 81:7d:87:b1:26:9f:18:5d:6b:b7:03:b7:c4:28:00: a4:53:91:f3:71:c8:7f:d1:2b:8e:b7:ea:14:8d:e5: c1:66:c6:a6:b8:12:28:ca:69:c8:87:4e:c8:10:be: 92:1c:2f:dc:58:83:f5:cf:f1:0a:91:3f:58:13:b8: fb:c1:03:da:fa:9e:5f:2a:38:c7:fa:c0:48:a2:69: 9b:60:95:da:07:c5:1b:ca:23:42:e9:2b:bf:c8:bd: 80:1e:2c:54:de:55:9f:f0:d0:16:fe:f7:d5:b8:6e: 56:8b:3b:a9:a0:fa:ab:00:29:b4:ce:9f:9d:2f:5a: 73:3f:3a:26:22:d9:b5:82:e7:df:45:a2:72:bf:cf: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:87:76:59:D9:EC:B2:09:28:09:4F:EF:51:1B:6D:8F:3F:5C:5F X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:a3:d6:82:07:47:ae:54:39:53:4e:6f:f7:2e:58:a0:03: d8:d4:7b:81:45:5a:11:c8:6d:09:46:63:3f:5b:1d:70:b5:27: 3a:34:c4:c9:29:51:04:04:a1:82:43:17:d4:ed:c8:e7:38:d1: f7:33:a8:34:ea:c2:59:8d:cc:9a:6a:91:c5:a5:d3:ba:cc:1d: f4:eb:7b:da:ea:f2:ac:18:87:94:12:de:f5:f2:a2:da:b2:5d: fd:f8:49:55:97:72:aa:50:c6:9e:27:63:db:3f:a1:8e:e2:69: 06:e5:6b:e3:2c:c9:2a:e9:93:8b:31:b4:66:81:86:ed:b1:f8: 19:c1:41:92:ee:5e:53:12:f2:a9:e7:d7:2d:0e:84:8a:51:ce: 1e:cd:97:eb:7f:dc:29:33:e9:84:73:6e:b7:64:fa:ba:f8:d6: fe:62:21:a3:77:ef:9a:c2:00:b4:cd:6a:97:7f:06:bb:33:15: 68:c0:60:e2:34:40:fd:25:7a:7a:3e:4b:d3:b7:4d:db:f2:06: 5c:23:57:68:53:d2:ea:e5:90:fe:bf:5e:34:7f:2a:46:14:d2: 0d:51:a9:f0:5b:ae:d0:86:08:80:ee:37:a4:43:3e:54:96:fc: e5:d4:45:73:e6:ab:d0:5e:3c:a7:78:b3:59:3e:3f:db:c0:96: a5:b3:28:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG84NSThBbI6cixIOLY0tZM7k/9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjA3MjkwNjQzNDRaFw0yNjA3MzAwNzQyNDRaMDMxMTAvBgNV BAMTKDdCOEY4Nzc2NTlEOUVDQjIwOTI4MDk0RkVGNTExQjZEOEYzRjVDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXH+G/0c67Pb717koI63rh+R6G cJ2V2uhk+TsNL/YPhHmUcnQUs7n4Mlc0AhSnU66f5OyyvLGaSJmMqryhCmEKXXFS mLko/R6UWYRW2ZB6viDo+OmlTe6qasZmSenOjbcym3ql19ggX7gJSl6t5ouT2Z0L BdMU6IF9h7Emnxhda7cDt8QoAKRTkfNxyH/RK4636hSN5cFmxqa4EijKaciHTsgQ vpIcL9xYg/XP8QqRP1gTuPvBA9r6nl8qOMf6wEiiaZtgldoHxRvKI0LpK7/IvYAe LFTeVZ/w0Bb+99W4blaLO6mg+qsAKbTOn50vWnM/OiYi2bWC599FonK/zztbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe4+HdlnZ7LIJKAlP71EbbY8/XF8wHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9Oj1oIHR65U OVNOb/cuWKAD2NR7gUVaEchtCUZjP1sdcLUnOjTEySlRBAShgkMX1O3I5zjR9zOo NOrCWY3MmmqRxaXTuswd9Ot72uryrBiHlBLe9fKi2rJd/fhJVZdyqlDGnidj2z+h juJpBuVr4yzJKumTizG0ZoGG7bH4GcFBku5eUxLyqefXLQ6EilHOHs2X63/cKTPp hHNut2T6uvjW/mIho3fvmsIAtM1ql38GuzMVaMBg4jRA/SV6ej5L07dN2/IGXCNX aFPS6uWQ/r9eNH8qRhTSDVGp8Fuu0IYIgO43pEM+VJb85dRFc+ar0F48p3izWT4/ 28CWpbMo0Q== -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:14 2026 by rpki-client