$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: phzFZcTtNCR+j/pobPdgZgQXagS85kXuZYOoqODiaus= Subject key identifier: 3A:45:8F:7A:E6:AF:9D:39:B9:64:4C:43:33:E2:AB:65:1A:E5:A9:C6 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 45B8083F04BEE93E3A4FF66BAB3DFE98D1D7DC2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 71 Signing time: Wed 29 Jul 2026 18:39:57 +0000 Manifest this update: Wed 29 Jul 2026 18:34:57 +0000 Manifest next update: Thu 30 Jul 2026 21:32:57 +0000 Files and hashes: 1: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: 1SSdUkKqUHu87IVFAsgXAbUEl+eSyI2HwYmejWx1kXg=) 2: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 3: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 21:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b8:08:3f:04:be:e9:3e:3a:4f:f6:6b:ab:3d:fe:98:d1:d7:dc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Jul 29 18:34:57 2026 GMT Not After : Jul 30 21:32:57 2026 GMT Subject: CN=3A458F7AE6AF9D39B9644C4333E2AB651AE5A9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:bf:12:f2:f8:1f:29:fa:fa:2d:3a:42:fd: c9:9d:3d:3f:fd:8d:a9:5e:1b:3f:be:88:6c:c3:23: de:61:a5:39:30:d6:2d:9f:2f:f9:9b:39:5a:2b:5f: 9e:a2:84:f0:ff:89:3d:ee:5a:2a:ad:c3:72:68:db: 4e:d4:22:6a:2a:06:ff:4a:32:9d:6f:9c:a6:62:88: f1:11:30:97:83:b3:a5:57:db:bc:1e:f2:db:59:b4: dd:a1:93:fc:d2:12:bd:60:24:92:9b:5a:70:7b:28: 9e:21:e0:6e:82:e2:73:e2:a6:02:89:55:30:17:72: 2e:1d:33:6b:ef:d3:fa:8b:0f:da:37:60:65:62:30: a4:ff:28:e7:ea:87:fd:b3:9e:e2:73:4c:6b:53:b9: f7:9e:56:17:89:1a:84:36:81:5b:ef:70:86:3e:be: 02:41:96:d7:8f:f8:4a:53:8e:0d:d3:05:7e:e7:de: 1b:b2:90:74:c6:d0:e3:e7:e6:cc:b5:ec:11:e1:b7: 88:fc:b3:63:c0:9b:e2:6a:7f:84:10:b4:ea:62:25: d5:48:21:da:98:da:fe:17:69:ee:8f:35:c9:84:11: 43:88:71:ff:31:e8:0c:ef:2b:ca:76:d8:cf:7e:9d: d6:0e:78:06:e0:8d:6c:bd:6b:3e:1a:13:ab:68:85: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:8F:7A:E6:AF:9D:39:B9:64:4C:43:33:E2:AB:65:1A:E5:A9:C6 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:20:d4:65:84:bf:0f:a8:ff:fa:35:fc:c4:0f:28:8c:4b:2f: 14:c8:18:8b:98:82:2d:7b:09:40:15:71:0d:56:ec:0c:2d:df: 2f:f3:43:3a:31:a6:4c:ef:c2:4b:52:32:ec:cf:d2:3c:cc:ea: f5:4d:1e:c3:90:c5:a1:06:a0:8a:a0:a4:fd:64:cd:cb:d6:d2: 94:27:36:a9:f4:8b:16:9a:68:94:26:26:b5:94:60:27:ad:ac: 6a:98:e1:ce:ce:60:7a:ea:b9:dd:df:5e:79:c9:0e:db:40:f3: 46:ea:7d:a1:a8:98:9a:c6:81:c8:12:b1:fd:d5:ef:4d:06:a5: 29:a5:5c:91:eb:68:9e:63:6c:b0:11:57:56:a7:93:5e:43:e4: 4c:f8:48:bf:6d:c5:0e:13:7a:ec:8c:41:24:0f:43:a0:4d:6a: 87:e9:da:bf:d5:eb:ae:c2:71:81:b9:25:40:a5:c3:b5:95:7e: c9:59:5b:7d:82:23:3f:a9:89:8f:d1:21:48:ab:42:d2:4b:02: 67:13:ea:b5:08:47:d3:6b:fa:4f:a1:86:10:84:2e:08:3f:3c: c7:75:ec:d9:00:46:8e:ff:e4:81:b9:fd:14:e1:83:45:40:19: e5:fd:dc:e4:b7:df:f7:84:15:76:14:a7:64:69:e2:7a:18:17: 25:66:f3:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURbgIPwS+6T46T/Zrqz3+mNHX3CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA3MjkxODM0NTdaFw0yNjA3MzAyMTMyNTdaMDMxMTAvBgNV BAMTKDNBNDU4RjdBRTZBRjlEMzlCOTY0NEM0MzMzRTJBQjY1MUFFNUE5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRx78S8vgfKfr6LTpC/cmdPT/9 jaleGz++iGzDI95hpTkw1i2fL/mbOVorX56ihPD/iT3uWiqtw3Jo207UImoqBv9K Mp1vnKZiiPERMJeDs6VX27we8ttZtN2hk/zSEr1gJJKbWnB7KJ4h4G6C4nPipgKJ VTAXci4dM2vv0/qLD9o3YGViMKT/KOfqh/2znuJzTGtTufeeVheJGoQ2gVvvcIY+ vgJBlteP+EpTjg3TBX7n3huykHTG0OPn5sy17BHht4j8s2PAm+Jqf4QQtOpiJdVI IdqY2v4Xae6PNcmEEUOIcf8x6AzvK8p22M9+ndYOeAbgjWy9az4aE6tohb59AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOkWPeuavnTm5ZExDM+KrZRrlqcYwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyDUZYS/D6j/ +jX8xA8ojEsvFMgYi5iCLXsJQBVxDVbsDC3fL/NDOjGmTO/CS1Iy7M/SPMzq9U0e w5DFoQagiqCk/WTNy9bSlCc2qfSLFppolCYmtZRgJ62sapjhzs5geuq53d9eeckO 20DzRup9oaiYmsaByBKx/dXvTQalKaVcketonmNssBFXVqeTXkPkTPhIv23FDhN6 7IxBJA9DoE1qh+nav9XrrsJxgbklQKXDtZV+yVlbfYIjP6mJj9EhSKtC0ksCZxPq tQhH02v6T6GGEIQuCD88x3Xs2QBGjv/kgbn9FOGDRUAZ5f3c5Lff94QVdhSnZGni ehgXJWbzxA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:54 2026 by rpki-client