$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: M+SPiUj36AoX7YW7e+fhV2DBnfql7DbgI6pe2Igzk4o= Subject key identifier: 59:4B:34:34:88:2E:FF:8D:9D:F0:C6:41:C8:5D:22:59:81:63:37:C5 Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 68E552493D986788B7010152799E56D723C2B511 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: F7 Signing time: Tue 21 Jul 2026 19:14:22 +0000 Manifest this update: Tue 21 Jul 2026 19:09:22 +0000 Manifest next update: Wed 22 Jul 2026 21:43:22 +0000 Files and hashes: 1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: 6dQ1jAGAWSlMYNxZ24hWIpzY1IUO2bTRvOYCgtjZEd4=) 2: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) 3: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e5:52:49:3d:98:67:88:b7:01:01:52:79:9e:56:d7:23:c2:b5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Jul 21 19:09:22 2026 GMT Not After : Jul 22 21:43:22 2026 GMT Subject: CN=594B3434882EFF8D9DF0C641C85D2259816337C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:23:25:42:08:45:b0:f4:18:23:1f:c9:3d: 2d:85:09:52:53:dc:70:18:66:9f:23:cc:3e:bb:3c: 96:d7:c2:37:3a:8b:12:1b:2b:63:09:5b:9d:99:c0: 63:a5:6e:86:fc:de:98:38:76:e5:6b:2d:36:32:88: 9e:9e:65:a1:c8:38:83:b6:93:ba:9d:0a:cc:e2:53: 16:4d:3c:45:9f:9f:b2:b9:22:5f:4a:42:53:d2:24: e5:78:95:05:e0:c5:dc:00:da:26:ee:25:db:98:fe: 23:cf:ca:5d:0d:5c:ce:79:2a:6d:19:7b:b3:08:be: d7:d9:63:d9:fe:77:c9:6f:d6:11:2e:42:ee:ff:97: 2d:d6:95:43:fd:d4:56:bc:7f:9f:fa:ea:57:04:47: 1a:e3:ac:c6:a6:93:77:f6:aa:5a:f7:ec:95:89:76: 76:15:e6:99:53:df:4f:63:6b:ed:85:dd:ef:a2:fc: 5b:24:ff:1f:53:ee:aa:25:9c:aa:9f:cb:3f:4c:67: a5:08:d8:e5:86:fd:af:bf:7b:58:d2:44:fa:bf:6a: eb:57:1b:61:b6:6b:7b:93:07:03:2a:e2:e5:25:58: 35:d0:ac:d5:db:ac:fb:9d:bd:f8:2f:7e:f9:92:a3: f7:39:85:90:e1:8d:5f:6b:01:3f:e9:c7:31:e6:15: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4B:34:34:88:2E:FF:8D:9D:F0:C6:41:C8:5D:22:59:81:63:37:C5 X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:be:c4:0a:3c:68:61:f4:15:83:87:8e:c1:07:c8:3a:f6:00: d5:c7:dc:85:ae:27:14:69:60:d8:38:44:52:d9:a9:3d:d0:8b: 7e:c4:8d:9c:26:02:c7:dd:cc:56:c2:f1:9f:1e:95:41:47:cb: 59:40:b0:7c:eb:0a:a3:a4:a1:02:99:cb:a8:10:d5:fa:53:4c: c6:68:e0:6d:b7:2d:f5:7f:04:60:4e:bb:ac:bf:5d:7b:c9:27: 6b:9d:ad:91:60:57:81:56:a6:b5:ee:2f:5a:65:c4:c2:f4:2c: 64:22:4a:70:8b:cc:c9:d9:77:49:c2:ff:61:a9:62:15:f7:f6: 8f:2f:92:a8:d5:29:4e:71:ac:6a:6b:33:d9:4f:c8:1f:62:0f: 1e:2c:ad:af:c1:5a:ae:bf:49:ce:58:54:23:58:ee:bf:cc:b1: 55:79:dd:80:ba:22:74:e2:bb:bc:75:e3:92:94:58:04:e1:a4: 91:2e:ff:e0:cb:36:b5:06:3e:b8:a2:6a:4a:3c:49:f6:fc:9a: f7:94:34:85:ec:b9:25:f8:42:27:3c:59:bb:96:bd:72:65:67: ac:84:57:a0:f2:99:db:ae:37:3f:1e:d6:fb:b3:92:31:a1:7c: 20:7e:42:ca:73:d3:5b:f9:e4:fa:c6:32:3d:8f:b0:5b:1a:9e: 4c:b1:5d:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaOVSST2YZ4i3AQFSeZ5W1yPCtREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA3MjExOTA5MjJaFw0yNjA3MjIyMTQzMjJaMDMxMTAvBgNV BAMTKDU5NEIzNDM0ODgyRUZGOEQ5REYwQzY0MUM4NUQyMjU5ODE2MzM3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbSMlQghFsPQYIx/JPS2FCVJT 3HAYZp8jzD67PJbXwjc6ixIbK2MJW52ZwGOlbob83pg4duVrLTYyiJ6eZaHIOIO2 k7qdCsziUxZNPEWfn7K5Il9KQlPSJOV4lQXgxdwA2ibuJduY/iPPyl0NXM55Km0Z e7MIvtfZY9n+d8lv1hEuQu7/ly3WlUP91Fa8f5/66lcERxrjrMamk3f2qlr37JWJ dnYV5plT309ja+2F3e+i/Fsk/x9T7qolnKqfyz9MZ6UI2OWG/a+/e1jSRPq/autX G2G2a3uTBwMq4uUlWDXQrNXbrPudvfgvfvmSo/c5hZDhjV9rAT/pxzHmFRGZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWUs0NIgu/42d8MZByF0iWYFjN8UwHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL7ECjxoYfQV g4eOwQfIOvYA1cfcha4nFGlg2DhEUtmpPdCLfsSNnCYCx93MVsLxnx6VQUfLWUCw fOsKo6ShApnLqBDV+lNMxmjgbbct9X8EYE67rL9de8kna52tkWBXgVamte4vWmXE wvQsZCJKcIvMydl3ScL/YaliFff2jy+SqNUpTnGsamsz2U/IH2IPHiytr8Farr9J zlhUI1juv8yxVXndgLoidOK7vHXjkpRYBOGkkS7/4Ms2tQY+uKJqSjxJ9vya95Q0 hey5JfhCJzxZu5a9cmVnrIRXoPKZ2643Px7W+7OSMaF8IH5CynPTW/nk+sYyPY+w WxqeTLFddA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:48 2026 by rpki-client