$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: 9fgFCPK/s1ScXLblaus4wY7/nkuJ7yhXJmZIaraumAI= Subject key identifier: 12:99:95:10:38:D5:51:23:65:47:97:F3:6E:33:49:39:63:E0:1E:CF Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 6BFB567F092BCE2F2F2F3C174C5DF767574C4A2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 8D Signing time: Tue 14 Jul 2026 02:55:15 +0000 Manifest this update: Tue 14 Jul 2026 02:50:15 +0000 Manifest next update: Wed 15 Jul 2026 05:29:15 +0000 Files and hashes: 1: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 2: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) 3: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: GIMif4NVWIHyI7YMNeeuKzAExoC17ACSrbjalASilJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fb:56:7f:09:2b:ce:2f:2f:2f:3c:17:4c:5d:f7:67:57:4c:4a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Jul 14 02:50:15 2026 GMT Not After : Jul 15 05:29:15 2026 GMT Subject: CN=1299951038D55123654797F36E33493963E01ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:08:52:09:c0:f1:f2:34:a5:28:19:1b:1b: b5:94:b2:e3:0f:b5:ee:a3:81:a6:e7:df:77:c2:39: 99:1c:b2:81:25:1c:fb:ae:b2:57:77:97:7c:e2:e5: a7:f2:a1:a8:e5:6a:c4:f3:b0:6b:0e:c2:e6:f0:ef: e9:d3:9e:49:a1:67:60:42:c7:1a:68:a4:99:ac:b4: 96:c2:5a:2c:7c:50:e6:98:eb:e9:be:ce:c0:55:9d: 63:01:de:5c:71:88:ce:18:38:fc:b9:8d:fb:b8:2e: 2e:24:56:9a:c9:c0:3d:b9:ca:25:a6:90:62:9b:93: 2e:4b:d2:e7:31:12:7b:4b:24:cb:58:6a:fc:19:2a: e7:8a:b1:67:16:4e:31:61:8f:0f:21:3a:c6:82:c5: b8:89:6d:ac:72:cf:28:76:d8:ae:55:04:1f:52:20: 2a:96:aa:09:2f:6d:70:1d:8e:e3:32:4b:fe:81:55: 60:8e:e8:9d:2d:89:da:39:46:65:4d:04:a9:5a:ad: 62:23:18:ff:bb:2c:c2:b3:e1:da:b2:35:6b:c2:85: 59:e2:c3:55:09:eb:ac:84:9c:ea:8c:ec:8a:54:98: 7f:b0:fb:fc:f0:9a:94:12:40:05:86:21:89:69:02: bc:56:05:0f:cd:3b:a6:47:f5:d6:dc:58:c4:30:2f: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:95:10:38:D5:51:23:65:47:97:F3:6E:33:49:39:63:E0:1E:CF X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:52:36:dc:7a:c0:5e:ab:bf:57:55:82:3a:e2:07:79:52:d1: 82:c5:10:26:6e:23:e7:20:79:81:2f:95:86:1e:91:8c:4c:3e: 02:07:05:0d:1e:9b:09:89:4a:7e:6b:4c:37:c8:81:7e:6b:69: 6e:c3:b1:b8:52:ed:a9:44:49:25:e7:de:de:6d:e3:f6:19:2d: 5c:52:d7:28:f0:35:15:8c:f3:f9:53:2f:f8:8f:f6:4f:34:dd: d1:be:82:99:f4:eb:d6:84:ed:5e:8d:4d:05:52:44:0b:cc:11: 0b:c4:78:00:f9:c3:b1:37:70:2a:74:42:49:36:ec:28:9d:48: 85:a6:1c:3c:38:33:b7:0a:d5:50:06:12:ff:0d:0f:45:51:3b: fd:1d:39:47:75:6a:27:7c:e5:ab:22:ae:8e:ca:3e:f9:1a:63: 08:ea:4f:ac:e1:d3:7e:1f:6f:ce:45:25:01:1d:38:e3:12:f2: d0:00:6e:1a:9f:16:3b:75:3a:d9:d7:23:ba:c9:cf:85:d8:1e: e3:c9:5c:70:5e:2b:27:2d:22:ca:87:b5:90:e8:85:b5:2c:5b: a0:21:89:20:ed:11:a7:a7:f1:b5:21:41:b5:74:6f:2a:a4:ee: b9:81:b7:88:1f:18:b4:39:44:4f:4c:66:0b:a9:58:80:b1:c2: 30:11:b7:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa/tWfwkrzi8vLzwXTF33Z1dMSi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA3MTQwMjUwMTVaFw0yNjA3MTUwNTI5MTVaMDMxMTAvBgNV BAMTKDEyOTk5NTEwMzhENTUxMjM2NTQ3OTdGMzZFMzM0OTM5NjNFMDFFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLwhSCcDx8jSlKBkbG7WUsuMP te6jgabn33fCOZkcsoElHPuusld3l3zi5afyoajlasTzsGsOwubw7+nTnkmhZ2BC xxpopJmstJbCWix8UOaY6+m+zsBVnWMB3lxxiM4YOPy5jfu4Li4kVprJwD25yiWm kGKbky5L0ucxEntLJMtYavwZKueKsWcWTjFhjw8hOsaCxbiJbaxyzyh22K5VBB9S ICqWqgkvbXAdjuMyS/6BVWCO6J0tido5RmVNBKlarWIjGP+7LMKz4dqyNWvChVni w1UJ66yEnOqM7IpUmH+w+/zwmpQSQAWGIYlpArxWBQ/NO6ZH9dbcWMQwL4HfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEpmVEDjVUSNlR5fzbjNJOWPgHs8wHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFI23HrAXqu/ V1WCOuIHeVLRgsUQJm4j5yB5gS+Vhh6RjEw+AgcFDR6bCYlKfmtMN8iBfmtpbsOx uFLtqURJJefe3m3j9hktXFLXKPA1FYzz+VMv+I/2TzTd0b6CmfTr1oTtXo1NBVJE C8wRC8R4APnDsTdwKnRCSTbsKJ1IhaYcPDgztwrVUAYS/w0PRVE7/R05R3VqJ3zl qyKujso++RpjCOpPrOHTfh9vzkUlAR044xLy0ABuGp8WO3U62dcjusnPhdge48lc cF4rJy0iyoe1kOiFtSxboCGJIO0Rp6fxtSFBtXRvKqTuuYG3iB8YtDlET0xmC6lY gLHCMBG32w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:15:07 2026 by rpki-client