$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: NxvjLPBApwy7Kp5W1a+389zTc889/dwbX/58m3a15DE= Subject key identifier: 59:18:E7:46:CE:65:0C:9A:A5:29:B2:0D:84:F4:BA:E0:06:A1:73:B5 Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 6ABC8D6467EA33D5B9807D233DA3960437FF8AFC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: 7D Signing time: Tue 14 Jul 2026 11:41:09 +0000 Manifest this update: Tue 14 Jul 2026 11:36:09 +0000 Manifest next update: Wed 15 Jul 2026 15:04:09 +0000 Files and hashes: 1: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=) 2: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=) 3: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: Ruhm8gyPM6gcaoN7BGZBXYw0crolBcY9T0PCrpFPOtw=) 4: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=) 5: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bc:8d:64:67:ea:33:d5:b9:80:7d:23:3d:a3:96:04:37:ff:8a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: Jul 14 11:36:09 2026 GMT Not After : Jul 15 15:04:09 2026 GMT Subject: CN=5918E746CE650C9AA529B20D84F4BAE006A173B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:b3:72:d1:3c:a7:11:63:d0:5b:f8:ab:b4: 2c:f1:1e:d2:59:f3:93:71:11:5d:05:a5:e8:63:66: 9e:1f:ec:08:17:9f:cd:60:fe:07:5c:1a:78:77:95: fb:52:40:6d:ab:b4:30:f9:13:a4:7b:0a:be:b1:19: 24:71:de:0f:7c:f2:6b:64:aa:8b:d1:49:d3:f8:04: 8e:e4:19:52:15:61:8b:80:ae:9e:bf:05:57:30:35: b8:3f:b5:09:8d:fe:1c:82:07:63:ab:f2:a7:e4:3a: 5e:a9:84:25:f1:87:ae:1b:b5:cf:52:0c:f0:86:41: 11:f6:b4:fa:a3:0c:04:cc:01:ec:d8:3e:19:e3:32: c9:7d:c1:76:91:86:61:91:9c:b5:03:e9:c6:3f:42: 09:8e:7f:8c:6b:a2:5a:35:72:92:d8:fc:80:99:55: 36:23:ef:89:23:13:fd:fb:c3:8b:63:84:7a:f2:9a: 30:c2:ba:8b:59:bc:d6:50:77:95:b5:2f:3d:e0:6d: 6a:53:74:3a:8a:ba:b5:f9:3d:a3:a9:5a:40:8a:83: d3:9d:bd:b1:bb:c8:50:01:58:1e:91:7b:a3:5e:b2: ff:03:a3:4c:b0:c2:a6:59:3d:c4:a9:78:78:84:60: ec:28:5c:97:32:5c:f3:61:df:93:82:1b:2c:54:96: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:18:E7:46:CE:65:0C:9A:A5:29:B2:0D:84:F4:BA:E0:06:A1:73:B5 X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:47:d3:3b:ef:72:7e:81:37:d4:fa:e7:55:54:95:65:38: 25:4c:48:00:c8:d7:6c:c7:88:3f:1a:71:46:d4:e4:b2:d5:52: a3:44:dd:db:89:0c:93:bd:63:97:2d:cb:97:d5:28:51:18:77: 2c:15:3f:46:36:74:d3:e1:c9:cf:53:9c:b9:d9:7c:d3:cf:dd: 2a:43:7c:d2:d3:85:f3:a9:07:bb:c8:33:55:d6:92:11:7c:f1: f7:b5:94:c4:9b:a7:0e:ab:b5:1b:31:e6:17:52:73:a8:92:89: 34:1c:bc:13:2f:d9:5b:65:83:e3:8a:5d:7c:bc:eb:8f:aa:06: 77:71:97:23:20:41:bc:0e:f0:43:96:c2:9d:4e:67:67:66:6b: 5a:3e:4e:4b:f2:7f:bf:a1:c3:6b:ad:b9:a2:5d:7d:ee:7f:7a: 36:f7:65:95:10:35:ae:ec:ea:96:5a:a1:a6:18:16:14:d1:7a: 31:90:ad:97:3a:73:29:f9:6b:b2:29:20:4e:63:13:21:fe:35: cc:b4:b2:8a:0e:7d:c0:c3:b1:dd:55:b1:14:96:40:fb:b3:da: 80:c2:76:6d:a7:f4:4b:18:bd:df:b4:4f:8a:3f:d6:0e:dd:15: 83:c4:25:1e:f7:e4:f4:a9:c0:60:ea:f2:c8:d0:85:62:72:11: ad:4b:33:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaryNZGfqM9W5gH0jPaOWBDf/ivwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjA3MTQxMTM2MDlaFw0yNjA3MTUxNTA0MDlaMDMxMTAvBgNV BAMTKDU5MThFNzQ2Q0U2NTBDOUFBNTI5QjIwRDg0RjRCQUUwMDZBMTczQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0orNy0TynEWPQW/irtCzxHtJZ 85NxEV0FpehjZp4f7AgXn81g/gdcGnh3lftSQG2rtDD5E6R7Cr6xGSRx3g988mtk qovRSdP4BI7kGVIVYYuArp6/BVcwNbg/tQmN/hyCB2Or8qfkOl6phCXxh64btc9S DPCGQRH2tPqjDATMAezYPhnjMsl9wXaRhmGRnLUD6cY/QgmOf4xrolo1cpLY/ICZ VTYj74kjE/37w4tjhHrymjDCuotZvNZQd5W1Lz3gbWpTdDqKurX5PaOpWkCKg9Od vbG7yFABWB6Re6Nesv8Do0ywwqZZPcSpeHiEYOwoXJcyXPNh35OCGyxUlj9PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWRjnRs5lDJqlKbINhPS64Aahc7UwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2xH0zvvcn6B N9T651VUlWU4JUxIAMjXbMeIPxpxRtTkstVSo0Td24kMk71jly3Ll9UoURh3LBU/ RjZ00+HJz1Ocudl808/dKkN80tOF86kHu8gzVdaSEXzx97WUxJunDqu1GzHmF1Jz qJKJNBy8Ey/ZW2WD44pdfLzrj6oGd3GXIyBBvA7wQ5bCnU5nZ2ZrWj5OS/J/v6HD a625ol197n96NvdllRA1ruzqllqhphgWFNF6MZCtlzpzKflrsikgTmMTIf41zLSy ig59wMOx3VWxFJZA+7PagMJ2baf0Sxi937RPij/WDt0Vg8QlHvfk9KnAYOryyNCF YnIRrUszcg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:40 2026 by rpki-client