$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: JTtLf5k5HkOlHYuno6wt/2A/++g0Aeg9NQbnn7qshAw= Subject key identifier: 04:DA:9D:C5:2A:34:9D:DE:0B:F2:BC:43:59:A0:10:0D:00:D6:2A:01 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 16C43D36A92D3A66CA5491D2FD0F2F501C75B02C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 0182 Signing time: Mon 27 Jul 2026 09:43:49 +0000 Manifest this update: Mon 27 Jul 2026 09:38:49 +0000 Manifest next update: Tue 28 Jul 2026 10:18:49 +0000 Files and hashes: 1: AS56046.roa (hash: 8MvzYVqIb60aBw7ICs4pxcXONgJRqwTj09zKGBVIEto=) 2: AS4837.roa (hash: SBoAFQfVIbP1sO3DsIywYPHEyoGjeAh2mu8MjJTzvu4=) 3: AS9808.roa (hash: RAHCjoZiKyNzBq3FMDIaEpR2kH3+XTi1YGQ3vOVwGyk=) 4: AS0.roa (hash: 2whuGFj5CSwsR/pdhiLgE8oiFshD2k+kToFmQb91xT4=) 5: AS13378.roa (hash: OPyi8mTllKWBTmPe21LoqwD2zrSCH/8SJK7Z44pkkFs=) 6: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: xRj5xVf6R4jS9gowa/NqAe1OX1pPCwfCYItuk7ueE2E=) 7: AS23650.roa (hash: D9jVg0LLO+giI4vySvty+x8Af/ENhgC630tuamgNdUA=) 8: AS63567.roa (hash: 3uz+p/aF6FyCjNl25DbP3+KxCjFc79nCAtWo76qvoGk=) 9: AS4134.roa (hash: fXejOFdV5eaFcvHgGSKlgpUo37ea48C+DMHePf+GKgA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c4:3d:36:a9:2d:3a:66:ca:54:91:d2:fd:0f:2f:50:1c:75:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Jul 27 09:38:49 2026 GMT Not After : Jul 28 10:18:49 2026 GMT Subject: CN=04DA9DC52A349DDE0BF2BC4359A0100D00D62A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:53:73:3d:8e:35:5a:80:f3:a6:4e:fc:38: e8:8f:a8:39:00:b9:e6:88:72:6d:72:01:8e:e5:33: 8f:bf:6a:a5:3b:93:0a:87:98:15:0c:7e:0c:30:07: 8f:67:51:47:50:a2:c8:24:b6:15:0f:79:0b:51:9a: 7c:0d:67:f8:36:cd:eb:b7:7e:c4:f1:05:6e:a3:df: 07:31:ad:a8:6f:2a:17:6d:2b:64:5a:0a:c0:73:17: d5:12:a1:fd:d2:1f:bb:01:b7:29:02:68:cd:f1:f2: f4:d4:81:56:b1:73:16:d2:77:4c:b0:5c:96:1b:23: 99:f0:32:b2:a8:cc:67:91:35:2b:68:1b:2c:3e:93: 5e:2f:8d:8c:59:c0:02:41:1f:ef:91:af:b6:70:10: ec:d8:80:58:10:bd:ca:49:2c:4f:ab:a4:54:b9:27: 96:a6:85:d3:0e:c2:21:40:12:97:55:07:2e:64:78: 2c:45:5d:2c:3a:ce:ac:dd:34:08:90:33:93:66:ad: 89:0d:c3:d3:72:e1:84:df:18:25:5c:c3:6e:e1:3c: 39:ce:9e:a6:61:56:82:98:fe:88:95:84:0c:e7:13: 06:e8:9a:fe:51:78:4d:1e:13:40:3d:61:9d:c1:f9: 4b:f5:ba:c4:83:59:8f:98:7b:1b:c5:09:fe:30:3a: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DA:9D:C5:2A:34:9D:DE:0B:F2:BC:43:59:A0:10:0D:00:D6:2A:01 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1e:47:e3:c1:44:2f:97:9c:de:6f:94:ff:8d:2a:5c:81:e4: 38:8c:bf:58:ea:14:37:d2:3d:55:d8:95:e2:06:f3:f2:ed:46: 60:2d:a8:da:38:2a:86:ec:3d:46:14:7c:5e:2d:88:f1:66:e6: 66:5b:c1:2d:37:75:87:91:fb:95:7d:45:ec:4a:32:da:f0:79: 5d:a0:2d:7e:01:23:db:d9:92:14:81:82:4e:b4:e6:28:04:32: 4d:96:fb:da:b6:14:ad:b2:35:89:95:48:3d:fb:fd:ce:72:07: db:1a:fe:6a:a4:2e:72:06:df:7f:d5:d7:2f:6a:1b:63:34:22: de:c6:f8:b2:3a:39:a4:8d:b1:1b:22:bb:ec:f0:9b:79:af:e8: 8e:a5:08:4c:25:b1:88:14:76:28:9b:22:9d:2b:bf:a2:c1:6d: 24:6d:43:3c:20:91:25:be:f7:aa:c1:ec:53:4c:0c:7e:26:ae: c4:4d:97:3c:67:0f:64:90:69:d6:e0:fe:bd:3b:ed:61:1a:e4: 57:97:df:c8:3e:a0:04:67:5e:83:87:bc:22:2e:3c:53:fd:89: db:b2:6b:fa:c1:2a:49:4f:87:fb:fe:ca:f1:98:b0:63:c9:06: d0:4c:3f:e3:54:50:bf:0e:1c:8f:53:a5:42:b1:9a:50:b9:c3: 77:3b:0e:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFsQ9NqktOmbKVJHS/Q8vUBx1sCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA3MjcwOTM4NDlaFw0yNjA3MjgxMDE4NDlaMDMxMTAvBgNV BAMTKDA0REE5REM1MkEzNDlEREUwQkYyQkM0MzU5QTAxMDBEMDBENjJBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVVNzPY41WoDzpk78OOiPqDkA ueaIcm1yAY7lM4+/aqU7kwqHmBUMfgwwB49nUUdQosgkthUPeQtRmnwNZ/g2zeu3 fsTxBW6j3wcxrahvKhdtK2RaCsBzF9USof3SH7sBtykCaM3x8vTUgVaxcxbSd0yw XJYbI5nwMrKozGeRNStoGyw+k14vjYxZwAJBH++Rr7ZwEOzYgFgQvcpJLE+rpFS5 J5amhdMOwiFAEpdVBy5keCxFXSw6zqzdNAiQM5NmrYkNw9Ny4YTfGCVcw27hPDnO nqZhVoKY/oiVhAznEwbomv5ReE0eE0A9YZ3B+Uv1usSDWY+YexvFCf4wOgyxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBNqdxSo0nd4L8rxDWaAQDQDWKgEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB5H48FEL5ec 3m+U/40qXIHkOIy/WOoUN9I9VdiV4gbz8u1GYC2o2jgqhuw9RhR8Xi2I8WbmZlvB LTd1h5H7lX1F7Eoy2vB5XaAtfgEj29mSFIGCTrTmKAQyTZb72rYUrbI1iZVIPfv9 znIH2xr+aqQucgbff9XXL2obYzQi3sb4sjo5pI2xGyK77PCbea/ojqUITCWxiBR2 KJsinSu/osFtJG1DPCCRJb73qsHsU0wMfiauxE2XPGcPZJBp1uD+vTvtYRrkV5ff yD6gBGdeg4e8Ii48U/2J27Jr+sEqSU+H+/7K8ZiwY8kG0Ew/41RQvw4cj1OlQrGa ULnDdzsOaw== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:10 2026 by rpki-client