$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: m2MTzR45ZtaOymwQlHhOu9+/UleHh/CkC8hajBkjAi0= Subject key identifier: 34:C2:C5:FC:52:25:79:4B:25:6E:BB:47:79:C5:74:98:A1:42:53:6B Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 1147261AA9EE25AC7C9B9B6F3938945D93151A09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 91 Signing time: Tue 28 Jul 2026 21:07:46 +0000 Manifest this update: Tue 28 Jul 2026 21:02:46 +0000 Manifest next update: Wed 29 Jul 2026 23:03:46 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 2: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 3: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: 14ldc7oWXztta9CLx0l4rUbyqEeUaSZaBdWuSDv1slY=) 4: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:47:26:1a:a9:ee:25:ac:7c:9b:9b:6f:39:38:94:5d:93:15:1a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Jul 28 21:02:46 2026 GMT Not After : Jul 29 23:03:46 2026 GMT Subject: CN=34C2C5FC5225794B256EBB4779C57498A142536B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:26:f9:27:ec:98:6e:4d:e0:bc:b4:64:d5: 01:a1:fe:46:27:33:90:13:17:bf:42:7c:6b:4f:74: db:0c:4b:4b:cc:4f:02:95:1d:7a:a8:e7:3b:dd:0a: 50:6e:fc:76:57:4c:29:dd:fa:fa:cb:f6:41:e2:53: 0e:7a:5a:9d:02:89:46:2e:30:64:f2:5f:bf:48:87: f4:5c:e5:b3:36:85:3f:17:c0:cb:d3:81:f3:54:50: 65:6e:2a:05:6b:b8:18:2d:fa:6e:c3:41:95:f5:ec: 40:ce:e6:90:e6:66:5c:3c:ce:61:49:69:cc:73:19: 6b:9f:8e:c5:76:27:6a:d8:fb:86:1c:e5:7c:04:a7: 49:c9:b7:22:98:9f:66:d5:0e:fe:5c:41:16:69:12: 4e:41:81:30:02:3c:8b:d6:eb:a8:8e:61:c8:36:e6: 8f:4b:9a:ac:bb:2a:37:b8:b8:18:7b:2f:00:77:65: e5:fa:ca:17:25:c5:44:da:ac:5b:ad:3d:04:45:2d: 70:7d:1f:53:73:1f:c6:60:4e:11:73:81:63:de:80: 84:ce:d5:7e:19:77:a5:80:58:76:b9:83:ab:c5:e5: 2d:4d:b4:69:49:27:b8:44:f3:a6:15:79:c8:a9:e6: a9:4a:4b:03:73:f0:ba:28:8b:ee:2c:fe:4c:21:e0: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C2:C5:FC:52:25:79:4B:25:6E:BB:47:79:C5:74:98:A1:42:53:6B X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:4d:ee:4c:7f:71:1b:d0:c1:88:53:d2:07:48:5c:2c:75:0c: 5c:05:8f:10:ce:90:aa:b9:be:22:8c:73:fb:91:51:5e:b5:0c: c1:3d:03:90:76:83:08:49:b6:67:f5:17:5b:4b:37:c9:65:0a: 00:bf:c7:51:af:d9:ca:44:e5:ad:ef:45:fe:24:7c:00:14:ad: aa:64:cc:66:ac:52:26:57:30:27:34:d9:09:29:17:d4:5e:ec: 26:b2:b5:b3:e0:16:34:c5:27:bb:16:e2:4b:f8:88:30:80:79: 1f:ab:14:57:94:70:47:48:07:a0:62:96:28:9b:a7:cb:45:99: a1:2f:70:85:18:69:44:f4:b1:d2:5e:15:10:a0:ee:89:38:1d: b9:80:3d:5c:6f:f5:67:e0:1a:7d:cb:c6:fe:c8:2f:9f:32:a0: 4c:1b:44:b2:65:54:e8:d6:d5:86:bb:36:64:a9:2d:1d:e7:85: e9:65:f9:72:1a:df:bf:fc:06:4e:84:54:da:c3:e6:b8:ed:76: d5:01:3c:ee:ca:1f:57:0a:61:26:2b:ba:18:26:4f:bf:7d:4e: 5d:84:c8:33:07:89:53:39:85:33:5b:fb:b7:2c:10:00:f8:2b: d9:ab:a1:23:c5:c7:60:17:e1:08:42:9e:40:a3:2d:67:7b:b1: f6:ac:b4:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEUcmGqnuJax8m5tvOTiUXZMVGgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA3MjgyMTAyNDZaFw0yNjA3MjkyMzAzNDZaMDMxMTAvBgNV BAMTKDM0QzJDNUZDNTIyNTc5NEIyNTZFQkI0Nzc5QzU3NDk4QTE0MjUzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxyb5J+yYbk3gvLRk1QGh/kYn M5ATF79CfGtPdNsMS0vMTwKVHXqo5zvdClBu/HZXTCnd+vrL9kHiUw56Wp0CiUYu MGTyX79Ih/Rc5bM2hT8XwMvTgfNUUGVuKgVruBgt+m7DQZX17EDO5pDmZlw8zmFJ acxzGWufjsV2J2rY+4Yc5XwEp0nJtyKYn2bVDv5cQRZpEk5BgTACPIvW66iOYcg2 5o9Lmqy7Kje4uBh7LwB3ZeX6yhclxUTarFutPQRFLXB9H1NzH8ZgThFzgWPegITO 1X4Zd6WAWHa5g6vF5S1NtGlJJ7hE86YVecip5qlKSwNz8Looi+4s/kwh4EA5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNMLF/FIleUslbrtHecV0mKFCU2swHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtU3uTH9xG9DB iFPSB0hcLHUMXAWPEM6Qqrm+Ioxz+5FRXrUMwT0DkHaDCEm2Z/UXW0s3yWUKAL/H Ua/ZykTlre9F/iR8ABStqmTMZqxSJlcwJzTZCSkX1F7sJrK1s+AWNMUnuxbiS/iI MIB5H6sUV5RwR0gHoGKWKJuny0WZoS9whRhpRPSx0l4VEKDuiTgduYA9XG/1Z+Aa fcvG/sgvnzKgTBtEsmVU6NbVhrs2ZKktHeeF6WX5chrfv/wGToRU2sPmuO121QE8 7sofVwphJiu6GCZPv31OXYTIMweJUzmFM1v7tywQAPgr2auhI8XHYBfhCEKeQKMt Z3ux9qy0Pg== -----END CERTIFICATE-----Generated at Wed Jul 29 08:39:27 2026 by rpki-client