$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: 2AiccA5Z3uM68kAxfKln3bHYcslW7Uls/V033okYEZg= Subject key identifier: 77:75:8A:A3:31:BA:FF:4E:EE:9E:73:FC:35:8B:D4:E5:3C:30:FE:BE Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 0E2A1B777A9EC7FD286C0B0A988EC8A59720A773 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 52 Signing time: Thu 11 Jun 2026 23:29:33 +0000 Manifest this update: Thu 11 Jun 2026 23:24:33 +0000 Manifest next update: Sat 13 Jun 2026 01:52:33 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 2: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: R8gb26MMwwlxp7+2xK8o5hqR43NG0Bv9SENohb8fQ20=) 3: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 4: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 01:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2a:1b:77:7a:9e:c7:fd:28:6c:0b:0a:98:8e:c8:a5:97:20:a7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Jun 11 23:24:33 2026 GMT Not After : Jun 13 01:52:33 2026 GMT Subject: CN=77758AA331BAFF4EEE9E73FC358BD4E53C30FEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:2b:9a:fc:ee:0c:c5:43:60:43:fe:d6:9a: 08:13:7f:2f:5d:9d:dd:0b:e7:71:14:70:d7:64:d5: 86:c9:0c:91:a5:d9:a2:9f:f4:1d:cf:c8:79:15:95: 59:4f:e9:81:d4:6f:45:fa:61:f3:8c:18:81:35:09: 43:a5:fe:ea:97:44:01:94:77:f0:5f:12:96:7e:3f: c3:85:66:f7:b6:fe:e2:ab:c6:bc:94:30:c3:01:f7: 64:5a:2d:74:a0:ae:3d:9b:11:8c:d1:5a:3f:69:a1: 6d:fd:d2:33:f1:0d:2e:05:5d:2a:20:d6:34:6f:f2: 6e:80:91:cf:d2:a3:53:29:dd:ba:9f:2b:c2:03:43: 8c:81:d8:57:d4:c1:a0:61:fc:d9:56:7d:a5:53:0e: b9:dd:52:d3:50:fa:ed:6c:69:d9:1e:2f:18:32:2d: 71:80:f2:1d:c2:54:81:39:bc:f5:74:6c:4d:3e:13: 75:c1:ec:62:81:4f:bd:e0:ba:3a:eb:ae:01:4d:9a: 81:db:cb:91:07:ce:66:2f:a0:02:d7:f8:d8:22:14: bf:26:ff:76:05:ad:f0:20:0e:eb:da:9e:5c:b3:1d: 77:bc:a6:9a:48:fb:e6:b1:04:37:2c:62:f4:99:0f: 5a:1f:da:a9:d0:9e:33:ee:c6:6c:39:f4:45:53:ba: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:75:8A:A3:31:BA:FF:4E:EE:9E:73:FC:35:8B:D4:E5:3C:30:FE:BE X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f8:0e:38:2e:99:4d:b6:90:2a:27:03:ff:17:c7:da:fe:ae: b4:b8:a7:00:8d:a4:3b:9b:61:7c:b0:76:e7:e1:d2:fe:48:44: af:a8:13:27:a2:91:04:90:d2:f5:86:7b:26:62:83:f8:d8:b9: 0d:7a:15:52:d3:94:9d:d0:72:aa:2b:b1:0c:0c:80:c4:4a:57: ae:55:60:f3:59:27:82:c4:ee:c4:3f:c4:4c:5a:35:1f:2a:b1: 5a:23:46:42:35:e1:3d:a9:de:f9:d0:33:c2:ab:78:d6:c8:ac: d0:e6:d8:ae:0b:75:8e:a7:e0:85:50:c4:7d:34:4c:64:42:75: 43:b7:cd:43:b5:07:3c:43:bc:65:3c:9f:36:11:09:39:65:f1: 34:37:d2:3b:00:2b:c2:fd:af:5b:e4:a8:bc:28:99:33:ec:5a: 7c:6f:71:4c:0f:c0:43:ce:72:56:93:43:f9:bb:b9:15:e4:ab: 45:16:34:eb:68:4d:06:86:22:9f:7e:58:f2:f7:7a:37:82:e9: 16:c2:07:30:5a:de:82:69:70:c3:45:98:3b:4b:11:8a:39:be: 4e:22:df:82:51:fd:d5:34:03:be:96:4c:8d:b4:32:d6:31:b9: 32:46:3b:59:be:63:e6:e0:9a:b3:7f:4d:a5:73:02:2a:6d:77: 49:03:0b:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDiobd3qex/0obAsKmI7IpZcgp3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA2MTEyMzI0MzNaFw0yNjA2MTMwMTUyMzNaMDMxMTAvBgNV BAMTKDc3NzU4QUEzMzFCQUZGNEVFRTlFNzNGQzM1OEJENEU1M0MzMEZFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4iua/O4MxUNgQ/7WmggTfy9d nd0L53EUcNdk1YbJDJGl2aKf9B3PyHkVlVlP6YHUb0X6YfOMGIE1CUOl/uqXRAGU d/BfEpZ+P8OFZve2/uKrxryUMMMB92RaLXSgrj2bEYzRWj9poW390jPxDS4FXSog 1jRv8m6Akc/So1Mp3bqfK8IDQ4yB2FfUwaBh/NlWfaVTDrndUtNQ+u1sadkeLxgy LXGA8h3CVIE5vPV0bE0+E3XB7GKBT73gujrrrgFNmoHby5EHzmYvoALX+NgiFL8m /3YFrfAgDuvanlyzHXe8pppI++axBDcsYvSZD1of2qnQnjPuxmw59EVTutjtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd3WKozG6/07unnP8NYvU5Tww/r4wHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPgOOC6ZTbaQ KicD/xfH2v6utLinAI2kO5thfLB25+HS/khEr6gTJ6KRBJDS9YZ7JmKD+Ni5DXoV UtOUndByqiuxDAyAxEpXrlVg81kngsTuxD/ETFo1HyqxWiNGQjXhPane+dAzwqt4 1sis0ObYrgt1jqfghVDEfTRMZEJ1Q7fNQ7UHPEO8ZTyfNhEJOWXxNDfSOwArwv2v W+SovCiZM+xafG9xTA/AQ85yVpND+bu5FeSrRRY062hNBoYin35Y8vd6N4LpFsIH MFregmlww0WYO0sRijm+TiLfglH91TQDvpZMjbQy1jG5MkY7Wb5j5uCas39NpXMC Km13SQMLZQ== -----END CERTIFICATE-----Generated at Fri Jun 12 07:54:29 2026 by rpki-client