$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: Ybo1SVxYGVueLHbNfGtLnKoKiS22CZ9f76guYJV3A/Y= Subject key identifier: 3C:B4:0D:93:28:6C:1C:71:63:69:4A:1B:26:43:D8:F0:36:EB:DB:88 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 5F00FBFD261664D94E3FC2A963729F5925C844D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 7D Signing time: Wed 29 Jul 2026 06:33:43 +0000 Manifest this update: Wed 29 Jul 2026 06:28:43 +0000 Manifest next update: Thu 30 Jul 2026 10:05:43 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: eRlfUfB+dbL7KY/lRjerwhvHC2AA8JIYjbsiR8+Tk3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:00:fb:fd:26:16:64:d9:4e:3f:c2:a9:63:72:9f:59:25:c8:44:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Jul 29 06:28:43 2026 GMT Not After : Jul 30 10:05:43 2026 GMT Subject: CN=3CB40D93286C1C7163694A1B2643D8F036EBDB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:78:1f:64:4b:90:88:f8:24:45:d2:ae:9b: 4e:0d:9c:e9:10:16:72:88:ef:ee:f9:29:e8:d6:2c: af:69:67:3a:08:04:b5:a3:26:6d:16:91:9a:e0:61: cf:6d:c1:41:dd:61:06:5a:5a:d7:b8:d3:51:21:c0: ff:9d:d1:07:e2:c2:c3:ab:7f:fd:77:a0:5a:e7:ce: 8c:de:d5:63:13:44:d3:f5:68:0a:63:f0:fc:82:ff: 87:0f:7f:c8:a1:f1:1e:1a:3d:04:18:27:4e:7b:4f: 7e:0d:af:41:66:5f:b0:7c:5b:36:5b:5f:98:50:e6: 9c:3a:da:bf:d0:00:97:0c:9f:40:0c:e4:00:16:9b: 16:05:b4:32:15:78:b5:6c:69:b9:80:09:07:15:64: 11:58:1c:6e:f6:40:d8:70:92:45:55:3f:91:ee:3c: 5b:56:7e:af:a4:c7:bb:89:67:04:01:c7:fb:cf:53: 85:ba:70:ef:ee:84:b0:e9:1e:fe:2c:7b:2e:e6:d9: e2:40:4c:95:5b:61:8d:07:a1:8e:d2:bd:1a:53:c6: ef:ca:15:76:a7:20:e9:1e:78:9b:d0:ef:45:05:d5: d9:bb:22:31:c1:a7:8e:14:d2:2b:1f:f6:10:75:98: 84:33:c4:80:f4:b2:92:fa:5d:2e:4f:4f:ee:97:7b: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:0D:93:28:6C:1C:71:63:69:4A:1B:26:43:D8:F0:36:EB:DB:88 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4f:13:c8:36:04:0c:d0:b6:7f:af:11:3b:a0:46:ec:b0:3e: 8e:38:21:06:53:08:4f:08:77:5b:65:d9:44:0c:c4:46:1d:cf: f0:12:eb:31:0c:ed:0a:7f:8b:d1:ec:b8:15:2c:2d:49:57:e0: ab:db:e7:18:9c:a0:c0:b0:36:7f:25:fc:8d:ed:a2:cb:98:a9: 93:df:5b:03:e1:50:ee:0e:85:5d:dc:9e:41:59:ca:ea:15:bc: 8a:00:e2:91:ce:03:55:2a:51:fa:35:96:4a:2f:cf:8b:7d:fb: f3:3a:0b:03:3f:18:a7:4c:e5:04:10:9a:44:b4:85:1f:24:9f: 9a:72:50:ee:03:f5:19:65:b4:e0:0c:92:d4:ab:57:38:74:78: 80:9a:8c:a0:52:a0:91:3a:02:de:d1:60:ad:e9:6a:85:d4:02: b6:fe:d2:a6:e0:9d:4f:40:94:1f:c0:71:62:9a:b6:81:10:61: 09:9a:ef:85:80:d4:ee:04:35:9d:78:7d:a0:a9:08:0e:a4:d2: 90:67:22:83:b2:a3:14:d9:f0:7e:00:3b:16:69:62:c4:c2:81: c6:a4:e6:ea:46:fc:cf:5f:6e:9f:80:81:f2:2e:19:8d:bc:13: 76:f6:ad:f5:db:ce:cf:df:aa:1e:46:dd:86:d4:55:16:d3:da: c5:4d:26:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXwD7/SYWZNlOP8KpY3KfWSXIRNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA3MjkwNjI4NDNaFw0yNjA3MzAxMDA1NDNaMDMxMTAvBgNV BAMTKDNDQjQwRDkzMjg2QzFDNzE2MzY5NEExQjI2NDNEOEYwMzZFQkRCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeH3gfZEuQiPgkRdKum04NnOkQ FnKI7+75KejWLK9pZzoIBLWjJm0WkZrgYc9twUHdYQZaWte401EhwP+d0QfiwsOr f/13oFrnzoze1WMTRNP1aApj8PyC/4cPf8ih8R4aPQQYJ057T34Nr0FmX7B8WzZb X5hQ5pw62r/QAJcMn0AM5AAWmxYFtDIVeLVsabmACQcVZBFYHG72QNhwkkVVP5Hu PFtWfq+kx7uJZwQBx/vPU4W6cO/uhLDpHv4sey7m2eJATJVbYY0HoY7SvRpTxu/K FXanIOkeeJvQ70UF1dm7IjHBp44U0isf9hB1mIQzxID0spL6XS5PT+6XexnDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPLQNkyhsHHFjaUobJkPY8Dbr24gwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU8TyDYEDNC2 f68RO6BG7LA+jjghBlMITwh3W2XZRAzERh3P8BLrMQztCn+L0ey4FSwtSVfgq9vn GJygwLA2fyX8je2iy5ipk99bA+FQ7g6FXdyeQVnK6hW8igDikc4DVSpR+jWWSi/P i3378zoLAz8Yp0zlBBCaRLSFHySfmnJQ7gP1GWW04AyS1KtXOHR4gJqMoFKgkToC 3tFgrelqhdQCtv7SpuCdT0CUH8BxYpq2gRBhCZrvhYDU7gQ1nXh9oKkIDqTSkGci g7KjFNnwfgA7FmlixMKBxqTm6kb8z19un4CB8i4ZjbwTdvat9dvOz9+qHkbdhtRV FtPaxU0mVw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:39:25 2026 by rpki-client