$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: 9Ng5Ur0htb7YhS0ZJsE7evgWu5BFAxKJzrASVBdz6rY= Subject key identifier: 68:9F:91:91:DD:55:28:68:F8:FE:D9:DA:86:E1:4A:7B:B0:5A:C8:9C Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 74521905BCD9FAFBB86838A952CC23C106DA050D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 70 Signing time: Wed 29 Jul 2026 00:12:58 +0000 Manifest this update: Wed 29 Jul 2026 00:07:58 +0000 Manifest next update: Thu 30 Jul 2026 02:30:58 +0000 Files and hashes: 1: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 2: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: AWvw7CQw+76yqShO6YEz7CuSA/Y10RjPYQpPGj52iMU=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:52:19:05:bc:d9:fa:fb:b8:68:38:a9:52:cc:23:c1:06:da:05:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: Jul 29 00:07:58 2026 GMT Not After : Jul 30 02:30:58 2026 GMT Subject: CN=689F9191DD552868F8FED9DA86E14A7BB05AC89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:47:9c:e0:0f:79:44:74:6d:7b:08:10:48: db:a0:8a:96:af:ff:93:86:71:29:38:f5:5f:30:20: a5:18:86:d9:08:c9:8f:10:f5:4b:27:0c:0b:6e:44: 15:2a:51:c7:b2:56:64:9c:77:9f:e3:d5:33:71:bd: a5:ee:06:63:cc:05:52:43:e0:51:8d:1f:87:e1:72: fb:3b:2b:e2:56:d2:3a:e1:07:36:cc:83:87:1e:d1: b5:2a:09:93:e4:d9:ae:b4:35:58:05:53:2a:ff:fe: 2e:88:bd:1b:93:f1:f8:d9:86:1c:96:61:61:73:58: c6:cf:f8:ec:45:9a:cd:be:a2:23:9b:a1:30:1d:31: 63:c9:4f:05:e1:7d:41:58:fb:e1:c1:0e:d1:b9:63: b1:23:d7:48:ce:26:0b:af:a7:64:23:34:13:bb:e1: 2d:73:04:e5:a4:eb:78:8a:0f:c5:9a:b8:33:7f:fa: 70:47:e0:22:0a:4c:46:f7:e7:f5:4b:85:69:a3:28: 14:a2:c0:99:f6:77:ba:64:0d:af:c5:30:74:71:f2: 60:de:c5:92:68:fc:57:31:d4:7f:c8:a6:26:8a:86: e3:00:65:cf:62:3d:17:c1:d4:70:dd:27:12:df:c3: bc:36:17:17:d8:d2:d0:0a:10:ca:5c:7a:91:4b:df: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:91:91:DD:55:28:68:F8:FE:D9:DA:86:E1:4A:7B:B0:5A:C8:9C X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f5:60:b2:bc:ca:2c:be:2c:e7:98:f9:8c:28:de:2c:69:a1: 60:c3:f8:67:68:9e:a9:42:ab:a9:07:d9:cb:0c:f7:5d:29:db: 80:09:36:26:59:31:bd:89:eb:67:24:3f:cb:d2:af:5d:6d:58: be:26:ff:da:26:84:b5:ec:c3:74:16:80:a1:00:ba:72:03:6a: 5c:52:9a:f5:1d:a2:93:db:20:27:bc:fa:5c:47:26:c8:53:f2: 47:72:d6:24:02:d2:9a:ce:ce:cc:e6:f0:a7:67:0a:6a:d5:b7: 22:3b:f5:d6:6b:8d:49:0c:fe:7e:d1:93:fd:e3:44:91:6a:9b: 4a:68:55:20:d9:72:80:e5:eb:b8:19:6f:de:6b:06:ef:00:a8: 4f:4a:67:f9:f0:50:46:70:e0:5f:dc:75:fe:92:54:90:ef:fd: 80:09:5b:ec:6e:2d:d7:bd:7c:49:9f:9b:9a:51:e4:70:3c:04: 13:05:cd:58:46:f5:e0:90:6c:de:f8:84:10:10:28:52:a4:f1: bf:a1:a2:48:0b:b8:59:eb:65:5d:7c:7a:38:c8:ca:4c:89:c7: 5c:a8:e4:65:a1:05:33:46:7a:4e:82:5a:9e:56:73:da:06:74: 6d:6d:e4:9f:bd:86:d8:4e:70:a5:ce:95:a7:83:2f:d0:fa:c0: 2d:05:64:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdFIZBbzZ+vu4aDipUswjwQbaBQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA3MjkwMDA3NThaFw0yNjA3MzAwMjMwNThaMDMxMTAvBgNV BAMTKDY4OUY5MTkxREQ1NTI4NjhGOEZFRDlEQTg2RTE0QTdCQjA1QUM4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzUec4A95RHRtewgQSNugipav /5OGcSk49V8wIKUYhtkIyY8Q9UsnDAtuRBUqUceyVmScd5/j1TNxvaXuBmPMBVJD 4FGNH4fhcvs7K+JW0jrhBzbMg4ce0bUqCZPk2a60NVgFUyr//i6IvRuT8fjZhhyW YWFzWMbP+OxFms2+oiOboTAdMWPJTwXhfUFY++HBDtG5Y7Ej10jOJguvp2QjNBO7 4S1zBOWk63iKD8WauDN/+nBH4CIKTEb35/VLhWmjKBSiwJn2d7pkDa/FMHRx8mDe xZJo/Fcx1H/IpiaKhuMAZc9iPRfB1HDdJxLfw7w2FxfY0tAKEMpcepFL3w7/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaJ+Rkd1VKGj4/tnahuFKe7BayJwwHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPVgsrzKLL4s 55j5jCjeLGmhYMP4Z2ieqUKrqQfZywz3XSnbgAk2JlkxvYnrZyQ/y9KvXW1Yvib/ 2iaEtezDdBaAoQC6cgNqXFKa9R2ik9sgJ7z6XEcmyFPyR3LWJALSms7OzObwp2cK atW3Ijv11muNSQz+ftGT/eNEkWqbSmhVINlygOXruBlv3msG7wCoT0pn+fBQRnDg X9x1/pJUkO/9gAlb7G4t1718SZ+bmlHkcDwEEwXNWEb14JBs3viEEBAoUqTxv6Gi SAu4WetlXXx6OMjKTInHXKjkZaEFM0Z6ToJanlZz2gZ0bW3kn72G2E5wpc6Vp4Mv 0PrALQVkNQ== -----END CERTIFICATE-----Generated at Wed Jul 29 05:34:06 2026 by rpki-client