$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: prXJKNeePoCwIli0ga8NNcKCLAyJ8MGyLfApSwTo2Pk= Subject key identifier: B6:74:59:1D:49:61:E0:27:2F:CC:2F:21:59:27:69:B8:24:5B:87:0C Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 52BBC77178FC34220FD129DBD3662324CAF3D2AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 54 Signing time: Wed 29 Jul 2026 08:53:55 +0000 Manifest this update: Wed 29 Jul 2026 08:48:55 +0000 Manifest next update: Thu 30 Jul 2026 12:44:55 +0000 Files and hashes: 1: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: eFphArB5/h2B08sFBsWziZmtD8QBR7emR0Wxvmzk5es=) 2: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) 3: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:c7:71:78:fc:34:22:0f:d1:29:db:d3:66:23:24:ca:f3:d2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Jul 29 08:48:55 2026 GMT Not After : Jul 30 12:44:55 2026 GMT Subject: CN=B674591D4961E0272FCC2F21592769B8245B870C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:2f:dd:70:39:99:46:8f:fa:36:ee:e0:b8: 96:49:b8:44:ad:2e:97:9f:31:9f:e3:c0:d1:9c:8a: 95:30:5a:f4:b1:b0:32:79:25:92:09:4a:49:74:58: ff:c2:36:e2:72:56:e5:8b:d9:3a:43:e7:b7:10:02: b5:3f:e4:15:49:f3:7c:96:17:da:b3:73:6f:0b:87: 3f:b1:7b:79:22:76:04:2c:9e:4a:f9:29:20:a2:0d: 88:46:7e:06:18:18:10:18:cf:b5:8b:d3:11:68:50: a8:95:f4:ca:bc:4c:ed:f1:8b:9d:32:6b:ed:e5:f2: 5a:6e:54:e9:10:3c:98:9a:85:4a:f1:e2:e7:cc:e3: 58:7c:df:49:18:51:7e:6e:cf:3d:95:b3:bd:27:31: 5f:30:e9:f7:68:79:69:00:96:83:64:c7:12:c9:e0: 95:63:35:f8:1d:50:8c:ed:de:51:9a:c2:41:df:33: 3f:fc:d2:a6:94:b7:2d:89:4c:66:f1:47:3f:e6:6e: 58:f8:6b:75:a6:ed:23:51:d2:fe:dd:f5:ac:d9:10: 7b:55:e5:c4:68:f1:40:44:2d:da:21:68:c4:f2:ad: 4d:be:ff:26:f8:d4:c2:34:57:50:0f:db:72:3e:6e: db:e9:7d:cd:f0:a0:67:fc:63:e2:73:58:b1:cd:02: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:74:59:1D:49:61:E0:27:2F:CC:2F:21:59:27:69:B8:24:5B:87:0C X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:94:3d:0c:f3:1a:01:34:10:aa:51:de:6e:e0:a2:2b:0e:6c: 17:a3:4e:d0:13:fa:ba:f8:62:c1:18:7d:0d:55:0b:65:4d:2f: fc:d4:29:c7:dc:1d:f0:c3:68:2b:17:fa:42:ac:ab:67:4a:e1: 4f:ba:44:8a:fd:a7:01:4a:d0:87:6b:a9:70:74:0a:6e:89:81: 5e:02:05:4d:08:29:ef:e0:5d:62:17:e5:cf:72:c7:a6:ad:37: ea:23:94:40:7c:78:23:fc:5c:e7:36:1e:a6:a6:4d:20:31:e9: f0:28:2e:72:ac:ed:94:46:a8:f6:05:45:4e:01:74:d3:f5:1d: b2:4e:1b:c3:e4:ca:40:53:10:e7:d2:35:f1:bf:2f:34:7a:aa: ca:1b:2d:76:95:9e:78:29:af:72:d3:ff:a3:10:4a:62:35:c3: af:ec:95:5e:67:c5:ac:2f:7e:ee:8f:e6:69:d4:1a:13:6b:02: 4d:83:dc:8d:6a:32:9c:54:ff:47:42:55:88:5f:4a:f5:8c:d6: f4:9e:14:77:bc:84:c1:0d:3e:5d:8d:ca:9c:65:5f:5e:0f:c4: c6:ef:55:48:74:62:de:e7:11:80:64:ed:45:c5:ba:96:d7:2a: d2:26:24:ed:88:8c:34:8a:48:e8:cd:71:ca:c3:93:7b:76:c0: ac:d5:25:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUrvHcXj8NCIP0Snb02YjJMrz0q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA3MjkwODQ4NTVaFw0yNjA3MzAxMjQ0NTVaMDMxMTAvBgNV BAMTKEI2NzQ1OTFENDk2MUUwMjcyRkNDMkYyMTU5Mjc2OUI4MjQ1Qjg3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFS/dcDmZRo/6Nu7guJZJuESt LpefMZ/jwNGcipUwWvSxsDJ5JZIJSkl0WP/CNuJyVuWL2TpD57cQArU/5BVJ83yW F9qzc28Lhz+xe3kidgQsnkr5KSCiDYhGfgYYGBAYz7WL0xFoUKiV9Mq8TO3xi50y a+3l8lpuVOkQPJiahUrx4ufM41h830kYUX5uzz2Vs70nMV8w6fdoeWkAloNkxxLJ 4JVjNfgdUIzt3lGawkHfMz/80qaUty2JTGbxRz/mblj4a3Wm7SNR0v7d9azZEHtV 5cRo8UBELdohaMTyrU2+/yb41MI0V1AP23I+btvpfc3woGf8Y+JzWLHNAlEFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtnRZHUlh4CcvzC8hWSdpuCRbhwwwHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJQ9DPMaATQQ qlHebuCiKw5sF6NO0BP6uvhiwRh9DVULZU0v/NQpx9wd8MNoKxf6QqyrZ0rhT7pE iv2nAUrQh2upcHQKbomBXgIFTQgp7+BdYhflz3LHpq036iOUQHx4I/xc5zYepqZN IDHp8CgucqztlEao9gVFTgF00/Udsk4bw+TKQFMQ59I18b8vNHqqyhstdpWeeCmv ctP/oxBKYjXDr+yVXmfFrC9+7o/madQaE2sCTYPcjWoynFT/R0JViF9K9YzW9J4U d7yEwQ0+XY3KnGVfXg/Exu9VSHRi3ucRgGTtRcW6ltcq0iYk7YiMNIpI6M1xysOT e3bArNUl9w== -----END CERTIFICATE-----Generated at Wed Jul 29 10:17:12 2026 by rpki-client