$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: hLF6mI3nzNCPfXHs5A6EEXT4Xys5RWIEWBL97THCwBg= Subject key identifier: E7:AF:CD:D8:17:8E:77:ED:94:F7:CC:DD:7B:8F:72:63:F5:50:8F:01 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 74DCC8FFD6BBF77D0D10CCC5941D72BA8C6CFEA5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 01EB Signing time: Thu 10 Sep 2026 10:16:17 +0000 Manifest this update: Thu 10 Sep 2026 10:11:17 +0000 Manifest next update: Sun 13 Sep 2026 20:42:17 +0000 Files and hashes: 1: AS63567.roa (hash: HXIBAbJioMxKItc/6BQG3swrCpfiZ/fSDPm1ZIJKC6g=) 2: AS4837.roa (hash: A9Zzjr+UWgeME4/aHYMJhqdMP9Q3j/UGHBJKg1fH4tA=) 3: AS13378.roa (hash: nWHxMWTssd43uMZ38m8/ZjpkTkKrm4c3p8GzUfS+7yY=) 4: AS23650.roa (hash: a6e3iKp3WkOKYd/8+EXMYxWrZB8Ge5Bj1sNbOYWzTeU=) 5: AS0.roa (hash: 2whuGFj5CSwsR/pdhiLgE8oiFshD2k+kToFmQb91xT4=) 6: AS56046.roa (hash: KEbqMidhadUY5jA0UfsNlvzMY2zR8IPeYHFTl06GyuY=) 7: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: RLSCjYY/pN+uHGFmHmfZdRCF0f98A4o3oVxHnrk1qjQ=) 8: AS4134.roa (hash: qJmaYUSzzl1e7DrOLsrw65l02TjwTX3YXEESbotuPNo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dc:c8:ff:d6:bb:f7:7d:0d:10:cc:c5:94:1d:72:ba:8c:6c:fe:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 10 10:11:17 2026 GMT Not After : Sep 13 20:42:17 2026 GMT Subject: CN=E7AFCDD8178E77ED94F7CCDD7B8F7263F5508F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:29:47:f0:17:19:8b:95:1b:58:71:14:1c: bb:a7:ff:a9:47:fe:45:7a:8a:32:3d:eb:3e:61:0a: 64:f9:5f:d4:bd:a8:96:44:46:32:92:f5:0b:35:68: 74:a5:f7:93:e5:94:c2:19:c6:2a:1f:d4:4f:28:4a: fb:d7:2f:38:50:3d:00:b0:f4:66:d7:fc:69:1b:3a: 92:d0:46:d9:9c:af:3c:68:b3:51:5c:52:c4:26:7b: bf:c4:fe:67:18:64:58:f4:9c:1a:a2:27:f4:aa:36: 46:52:6b:b8:c0:7f:db:72:10:52:87:bf:e9:65:7a: 07:e4:f7:62:38:97:89:14:2d:08:c4:8c:4d:b5:a8: c4:df:a1:8d:aa:ea:86:08:d5:ae:b5:47:d6:73:b2: c0:24:8e:76:e2:3c:4b:f8:f1:5b:6d:7b:c0:92:b6: 17:bc:51:8f:0c:e7:c2:95:7f:8c:1b:ce:ab:cb:ed: db:79:a3:ea:9a:0e:76:6b:27:6a:fe:75:3b:96:07: f6:c1:c4:8c:e0:c3:55:e3:09:05:e6:af:ec:8b:49: f4:d2:5a:b0:bf:d0:64:48:84:ca:81:b7:6e:ec:3a: 48:cd:64:e3:ae:15:a5:9d:80:20:5a:32:fd:d7:ed: 34:75:ff:d9:27:ef:c2:b1:b0:1c:cb:4a:b0:e1:4b: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:CD:D8:17:8E:77:ED:94:F7:CC:DD:7B:8F:72:63:F5:50:8F:01 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3d:64:fc:c4:fd:f0:d2:91:1e:19:60:14:2f:50:30:f9:7a: df:fc:8f:ba:31:65:9e:09:34:3a:8c:b5:8f:31:21:c0:b9:a1: 47:02:59:dd:2f:d0:65:93:90:10:0e:ed:26:4e:15:3e:68:a2: a7:e2:9e:db:24:fc:f5:ac:ce:7d:d2:8e:e7:2b:9c:14:10:80: 18:80:14:f1:ef:85:31:16:e3:43:7d:a7:76:6e:37:f9:f2:69: cb:b5:a9:bd:b0:c8:ca:90:82:c9:cb:7e:74:f0:e5:bc:23:94: 65:c4:56:dd:a4:c7:8e:f1:00:79:fe:cb:3a:e8:e3:c6:c4:12: 8a:51:c7:48:ac:37:9c:74:b7:f4:1f:b3:58:c2:a4:9b:53:47: e6:a6:36:dc:76:da:2b:fa:72:70:f0:9d:7b:ac:f3:22:ef:4b: f5:f3:30:bb:e1:fa:63:cd:62:bd:66:6d:53:ab:c3:f6:3a:29: 3e:2f:cc:6d:89:f2:c3:93:7c:23:b8:cc:1f:f1:77:1b:58:db: d4:69:a5:59:02:34:8d:36:ae:2e:c7:dd:70:e2:91:d7:f3:59: 38:33:9f:b2:2f:8c:60:69:57:4f:54:a1:04:7a:a7:15:69:a0: 5e:47:1c:04:fd:b8:f7:d4:c0:fd:56:67:e4:79:5f:1e:93:2d: 78:f6:e8:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdNzI/9a7930NEMzFlB1yuoxs/qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MTAxMDExMTdaFw0yNjA5MTMyMDQyMTdaMDMxMTAvBgNV BAMTKEU3QUZDREQ4MTc4RTc3RUQ5NEY3Q0NERDdCOEY3MjYzRjU1MDhGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xClH8BcZi5UbWHEUHLun/6lH /kV6ijI96z5hCmT5X9S9qJZERjKS9Qs1aHSl95PllMIZxiof1E8oSvvXLzhQPQCw 9GbX/GkbOpLQRtmcrzxos1FcUsQme7/E/mcYZFj0nBqiJ/SqNkZSa7jAf9tyEFKH v+llegfk92I4l4kULQjEjE21qMTfoY2q6oYI1a61R9ZzssAkjnbiPEv48Vtte8CS the8UY8M58KVf4wbzqvL7dt5o+qaDnZrJ2r+dTuWB/bBxIzgw1XjCQXmr+yLSfTS WrC/0GRIhMqBt27sOkjNZOOuFaWdgCBaMv3X7TR1/9kn78KxsBzLSrDhS0xDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU56/N2BeOd+2U98zde49yY/VQjwEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT1k/MT98NKR HhlgFC9QMPl63/yPujFlngk0Ooy1jzEhwLmhRwJZ3S/QZZOQEA7tJk4VPmiip+Ke 2yT89azOfdKO5yucFBCAGIAU8e+FMRbjQ32ndm43+fJpy7WpvbDIypCCyct+dPDl vCOUZcRW3aTHjvEAef7LOujjxsQSilHHSKw3nHS39B+zWMKkm1NH5qY23HbaK/py cPCde6zzIu9L9fMwu+H6Y81ivWZtU6vD9jopPi/MbYnyw5N8I7jMH/F3G1jb1Gml WQI0jTauLsfdcOKR1/NZODOfsi+MYGlXT1ShBHqnFWmgXkccBP2499TA/VZn5Hlf HpMtePbojQ== -----END CERTIFICATE-----Generated at Thu Sep 10 17:37:53 2026 by rpki-client