$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json) Hash identifier: 2sUmcL+r8NO3eDyonvuYe7SUq0Mlpx/y9SsxoD99mt4= Subject key identifier: B5:D1:77:CB:67:21:BF:82:4C:78:23:5F:A9:49:0C:FA:86:F7:A0:80 Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Certificate serial: 06585B485CD6A6185F1142B5E4E776826D6C0330 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft Manifest number: 79 Signing time: Tue 28 Jul 2026 10:11:38 +0000 Manifest this update: Tue 28 Jul 2026 10:06:38 +0000 Manifest next update: Wed 29 Jul 2026 12:55:38 +0000 Files and hashes: 1: AS131562.roa (hash: lyeaZzzsA1wNSTES7Ho+HHZ+RzXLaE47z3sSRZstjus=) 2: AS56047.roa (hash: sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=) 3: AS0.roa (hash: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE=) 4: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: 9oJ8EnPzclF6T9CX5W/pSt75FyqZmSv97LC4szwzKvM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:58:5b:48:5c:d6:a6:18:5f:11:42:b5:e4:e7:76:82:6d:6c:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Validity Not Before: Jul 28 10:06:38 2026 GMT Not After : Jul 29 12:55:38 2026 GMT Subject: CN=B5D177CB6721BF824C78235FA9490CFA86F7A080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:9c:ef:a9:f7:e3:de:73:de:01:87:8e:c5: b7:47:db:e2:d6:62:5f:0b:00:4f:6b:8b:4b:02:07: e1:ef:99:f2:f1:9c:7a:50:51:ad:04:66:28:38:c1: 27:e8:dc:5c:e3:22:43:a3:62:f8:f8:b4:2c:c4:98: 1b:7d:9d:21:c3:e8:c8:18:1e:3c:a9:be:42:50:57: e9:b2:b5:d3:e5:94:74:cd:b9:1c:e5:09:a1:e9:49: c9:7e:e0:96:7b:19:e3:16:60:e6:0d:32:4b:cb:5d: e9:7c:da:1c:b1:c5:fa:6e:81:47:f3:0a:99:87:74: 13:b7:3e:d4:91:86:a8:23:bc:7c:3c:6d:4a:56:64: 50:ee:82:4e:74:05:17:c9:db:d6:d6:65:38:79:ab: b0:a7:0a:fc:f3:c4:a3:f2:d9:72:a6:cb:b0:e6:4f: 70:21:ab:bb:97:81:2b:e0:04:f4:b4:70:bc:2f:05: bc:7a:76:79:3e:6d:10:d7:4f:dd:4a:69:ab:4c:54: bc:b4:a9:e2:b3:46:dd:d8:25:e0:fb:7a:1c:e9:84: ab:37:24:95:4f:6f:6e:c4:86:73:57:30:bb:3e:95: 8a:77:b5:a8:21:17:32:13:62:17:81:76:1b:1b:1a: d4:97:8b:b1:68:7d:65:fb:28:96:17:e8:b5:d1:71: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D1:77:CB:67:21:BF:82:4C:78:23:5F:A9:49:0C:FA:86:F7:A0:80 X509v3 Authority Key Identifier: keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a6:7d:b1:ad:99:48:b6:e9:7c:b6:e3:e2:8e:e1:f7:b2:b8: 70:b8:ab:df:4e:2c:a1:7c:82:d5:51:c6:77:28:ea:62:05:38: 88:36:3a:74:f3:0f:63:99:8b:7c:eb:2a:a7:88:62:55:e5:2a: 33:2a:a9:5b:1f:f9:b7:bb:c3:fb:c7:f0:bf:16:1a:64:85:45: 3c:db:85:85:1f:c6:96:19:45:c6:08:62:ba:6e:e0:a5:b0:29: f2:99:c8:9b:b7:19:6b:bc:62:9e:3a:69:cc:a3:62:18:ea:3f: 5c:bf:46:9d:92:11:4f:34:a0:ed:d0:4c:9c:35:c3:2b:f9:ec: 4f:96:46:18:d5:61:5b:d7:ee:e8:b3:90:23:e8:89:ae:4a:52: 29:4c:b7:52:b8:03:e8:10:55:e0:d6:8c:99:84:31:84:cf:9b: 17:7d:55:f8:43:f1:39:c9:14:a9:72:1a:99:9a:c3:2d:10:8b: 4c:87:4e:e8:fc:91:a2:b6:03:ff:7f:34:a7:6f:ed:6b:73:7e: 07:74:5c:a9:1b:76:8b:d8:51:6c:39:5c:d8:aa:f4:3c:4e:bd: 82:40:b2:fc:01:f4:af:b1:b4:1a:81:b7:e5:20:50:d7:2a:a1: 58:a9:49:fa:0e:2d:fe:18:c8:6c:71:03:3c:85:9c:09:83:b8: 2c:c7:74:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBlhbSFzWphhfEUK15Od2gm1sAzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzND MzNBMEI4RDAeFw0yNjA3MjgxMDA2MzhaFw0yNjA3MjkxMjU1MzhaMDMxMTAvBgNV BAMTKEI1RDE3N0NCNjcyMUJGODI0Qzc4MjM1RkE5NDkwQ0ZBODZGN0EwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc35zvqffj3nPeAYeOxbdH2+LW Yl8LAE9ri0sCB+HvmfLxnHpQUa0EZig4wSfo3FzjIkOjYvj4tCzEmBt9nSHD6MgY HjypvkJQV+mytdPllHTNuRzlCaHpScl+4JZ7GeMWYOYNMkvLXel82hyxxfpugUfz CpmHdBO3PtSRhqgjvHw8bUpWZFDugk50BRfJ29bWZTh5q7CnCvzzxKPy2XKmy7Dm T3Ahq7uXgSvgBPS0cLwvBbx6dnk+bRDXT91KaatMVLy0qeKzRt3YJeD7ehzphKs3 JJVPb27EhnNXMLs+lYp3taghFzITYheBdhsbGtSXi7FofWX7KJYX6LXRceTPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtdF3y2chv4JMeCNfqUkM+ob3oIAwHwYDVR0j BBgwFoAU8HG9z9APF7DSy3oE459/w8M6C40wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTQ2OTI0MjIxMDg0NDY5My8wL0YwNzFCRENGRDAwRjE3QjBEMkNCN0EwNEUzOUY3 RkMzQzMzQTBCOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE0NjkyNDIyMTA4NDQ2OTMvMC9GMDcxQkRDRkQwMEYx N0IwRDJDQjdBMDRFMzlGN0ZDM0MzM0EwQjhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKZ9sa2ZSLbp fLbj4o7h97K4cLir304soXyC1VHGdyjqYgU4iDY6dPMPY5mLfOsqp4hiVeUqMyqp Wx/5t7vD+8fwvxYaZIVFPNuFhR/GlhlFxghium7gpbAp8pnIm7cZa7xinjppzKNi GOo/XL9GnZIRTzSg7dBMnDXDK/nsT5ZGGNVhW9fu6LOQI+iJrkpSKUy3UrgD6BBV 4NaMmYQxhM+bF31V+EPxOckUqXIamZrDLRCLTIdO6PyRorYD/380p2/ta3N+B3Rc qRt2i9hRbDlc2Kr0PE69gkCy/AH0r7G0GoG35SBQ1yqhWKlJ+g4t/hjIbHEDPIWc CYO4LMd07w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:15 2026 by rpki-client