$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: 0J/QPYsoDmBsPMLNhBbkBsBjzfaX6Z5k2cdgI+Rc37w= Subject key identifier: 24:C2:B8:FD:D6:A9:A5:46:FF:78:78:54:4C:38:D1:19:D9:C9:0C:3C Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 78F5D22B6243C98F0DC9AB0D48A4C8F69397E375 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: C7 Signing time: Sat 26 Sep 2026 20:04:19 +0000 Manifest this update: Sat 26 Sep 2026 19:59:19 +0000 Manifest next update: Tue 29 Sep 2026 22:42:19 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 2: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: xzFozy50zr5Cuc8H1BPKvvkzInGKPUqlLMe1FlwbAPw=) 3: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 4: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f5:d2:2b:62:43:c9:8f:0d:c9:ab:0d:48:a4:c8:f6:93:97:e3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Sep 26 19:59:19 2026 GMT Not After : Sep 29 22:42:19 2026 GMT Subject: CN=24C2B8FDD6A9A546FF7878544C38D119D9C90C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:23:1f:9c:0f:d8:ce:a9:9d:40:5c:73:1c: 06:8c:8f:67:83:2b:64:c7:98:75:a4:eb:3d:98:39: 77:99:96:16:6e:2a:3d:04:9f:3e:43:06:57:32:59: 5c:78:fb:90:3f:97:60:54:f1:4c:88:c9:42:dd:0a: f5:9c:05:33:3a:fa:9e:c2:3d:39:8c:38:86:54:96: 9b:21:3d:88:01:34:ba:bd:ae:1d:37:2b:fc:50:57: 8c:3e:b0:c5:0d:30:1c:74:cd:4a:ad:2c:e3:1e:e7: 6f:04:21:ab:74:da:72:b6:83:38:a6:2d:58:90:6e: 6e:09:f3:09:87:44:01:ec:12:c3:38:4b:f0:c0:39: 2f:b9:6c:4e:4f:e2:24:ee:46:84:c6:f1:c2:dd:b2: 59:28:1a:d8:87:19:35:ed:18:97:05:4a:64:ba:a3: 46:bf:5a:5c:0f:b8:5a:2f:88:dd:33:bf:9c:f7:25: bf:0f:dd:30:35:e3:8b:36:31:ae:39:88:37:58:f1: 44:41:28:f0:8e:ea:ab:2c:d5:c3:f3:71:6c:5e:f2: e8:62:c3:22:ce:25:d7:ec:f0:d1:bb:9c:67:1b:df: ba:a7:2f:ec:6d:aa:7d:0a:88:95:72:04:a9:13:af: e2:eb:18:52:39:85:b7:86:e4:69:7b:4b:24:38:da: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C2:B8:FD:D6:A9:A5:46:FF:78:78:54:4C:38:D1:19:D9:C9:0C:3C X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fe:9f:1f:2d:22:4e:59:c7:5a:12:2b:33:a8:e0:4f:07:33: 6f:e4:05:4a:85:d3:ed:48:f4:5e:14:a5:96:c1:05:6a:f6:0c: f7:48:3e:2c:6a:08:9c:d3:fb:ac:c7:65:2e:8c:07:ac:63:61: 49:c0:7a:b8:9d:98:5f:43:11:99:f7:f3:12:11:e4:23:8e:6e: 14:9b:8f:a8:04:4d:d0:22:ce:98:23:c5:92:b2:a6:65:a9:7a: 0e:7b:88:50:76:20:21:34:f5:71:6f:12:80:c9:7f:87:f1:a4: be:20:4e:2e:ef:6a:85:d7:75:51:ac:36:25:8e:02:ca:7a:b5: 76:09:ff:25:65:04:fb:c6:05:be:b3:e3:f3:ed:ff:54:c9:bd: 0b:7f:b0:72:b2:1d:b2:e6:3d:c4:1e:35:01:d3:a4:8b:d4:15: 09:bb:49:db:ef:e8:e6:8e:6f:0a:09:f4:75:e6:f6:57:f5:e0: dd:71:c7:ca:49:dd:79:28:98:37:c7:ce:f2:60:a9:cd:b0:b4: 41:75:fc:dc:25:c6:4d:51:2a:9c:80:0f:b1:64:a5:27:67:06: df:cd:e7:a1:34:52:34:3a:c1:8b:53:1a:c8:f9:90:d3:c7:78: 20:27:c7:10:b7:bd:a7:5e:ed:08:ae:09:84:a6:1b:32:6c:ee: f8:91:9b:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUePXSK2JDyY8NyasNSKTI9pOX43UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA5MjYxOTU5MTlaFw0yNjA5MjkyMjQyMTlaMDMxMTAvBgNV BAMTKDI0QzJCOEZERDZBOUE1NDZGRjc4Nzg1NDRDMzhEMTE5RDlDOTBDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLJyMfnA/YzqmdQFxzHAaMj2eD K2THmHWk6z2YOXeZlhZuKj0Enz5DBlcyWVx4+5A/l2BU8UyIyULdCvWcBTM6+p7C PTmMOIZUlpshPYgBNLq9rh03K/xQV4w+sMUNMBx0zUqtLOMe528EIat02nK2gzim LViQbm4J8wmHRAHsEsM4S/DAOS+5bE5P4iTuRoTG8cLdslkoGtiHGTXtGJcFSmS6 o0a/WlwPuFoviN0zv5z3Jb8P3TA144s2Ma45iDdY8URBKPCO6qss1cPzcWxe8uhi wyLOJdfs8NG7nGcb37qnL+xtqn0KiJVyBKkTr+LrGFI5hbeG5Gl7SyQ42ui3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJMK4/dappUb/eHhUTDjRGdnJDDwwHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/6fHy0iTlnH WhIrM6jgTwczb+QFSoXT7Uj0XhSllsEFavYM90g+LGoInNP7rMdlLowHrGNhScB6 uJ2YX0MRmffzEhHkI45uFJuPqARN0CLOmCPFkrKmZal6DnuIUHYgITT1cW8SgMl/ h/GkviBOLu9qhdd1Uaw2JY4Cynq1dgn/JWUE+8YFvrPj8+3/VMm9C3+wcrIdsuY9 xB41AdOki9QVCbtJ2+/o5o5vCgn0deb2V/Xg3XHHykndeSiYN8fO8mCpzbC0QXX8 3CXGTVEqnIAPsWSlJ2cG383noTRSNDrBi1MayPmQ08d4ICfHELe9p17tCK4JhKYb Mmzu+JGbDg== -----END CERTIFICATE-----Generated at Sun Sep 27 00:15:13 2026 by rpki-client