$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: GKxFK3q+kJ7xyoS5G02yZDunTafDbe+xLVcjg3cYx9U= Subject key identifier: F4:97:F7:EE:8A:4D:A9:05:A2:89:1C:C9:F9:32:00:8B:4A:6B:B9:6D Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 5C2727EF147CB32F00E48988214D7EFE48A67C6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: BF Signing time: Tue 08 Sep 2026 12:34:13 +0000 Manifest this update: Tue 08 Sep 2026 12:29:13 +0000 Manifest next update: Fri 11 Sep 2026 18:00:13 +0000 Files and hashes: 1: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: fE5gFAhIt1kvLUWI/wOZIKFHWVkQ82wHH1MtFfRzFFU=) 2: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 3: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) 4: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:27:27:ef:14:7c:b3:2f:00:e4:89:88:21:4d:7e:fe:48:a6:7c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Sep 8 12:29:13 2026 GMT Not After : Sep 11 18:00:13 2026 GMT Subject: CN=F497F7EE8A4DA905A2891CC9F932008B4A6BB96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:e4:4f:e1:1b:46:02:9d:ba:1c:35:a3:af: 7a:76:13:db:8d:4a:9b:12:03:c6:bf:38:ba:b0:6b: 1d:c6:fb:4f:82:db:5a:9b:0b:18:63:b4:6c:ce:1a: 4f:08:c6:93:4e:36:40:00:17:0f:4f:44:de:c5:48: 30:e7:0b:83:52:86:42:b2:5b:95:2c:be:97:8b:bb: c8:19:52:07:fb:65:d5:c8:4c:69:52:9b:e2:98:b0: c3:2e:81:bd:98:d3:e6:cc:bc:e9:7f:1b:39:49:b3: 17:47:f4:e8:b4:a8:e4:81:ee:a5:60:df:52:dd:35: a7:2e:c2:a5:ec:d6:64:87:ad:4f:c0:b4:b1:2d:bb: ea:3c:0e:26:df:12:42:8a:e1:a0:a6:5c:b0:09:dc: 02:87:d4:6c:9e:91:9a:d3:d0:d5:67:8b:7c:0e:aa: b4:52:70:08:8a:51:24:7c:cd:43:f1:26:b4:69:8c: 65:0f:7d:55:82:de:e8:07:79:35:8f:7a:6b:91:19: ba:ac:d8:a2:d3:b1:f0:51:0b:4b:76:67:5a:f5:84: 3f:49:c6:de:9a:75:6c:b8:be:a4:50:31:71:85:9e: 44:36:23:1c:01:da:35:e3:d5:9a:89:9f:af:7c:cc: e9:10:91:90:8c:08:95:be:ed:2a:02:02:64:9d:63: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:F7:EE:8A:4D:A9:05:A2:89:1C:C9:F9:32:00:8B:4A:6B:B9:6D X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:81:42:fa:80:50:93:87:e4:82:85:ee:c9:04:5c:d4:e4: 4b:b4:a4:5f:6d:01:46:d3:59:57:4a:44:f4:05:57:b8:e0:1d: 2a:00:a0:86:3d:ec:be:e3:44:9f:0d:da:da:12:77:08:6f:a2: af:f9:91:78:19:9e:4b:71:e6:a1:f7:79:f9:73:8b:75:b4:8b: 8b:79:ac:77:5c:01:46:2b:ba:b0:b1:50:b5:a3:3b:fa:27:62: 17:fe:73:5b:53:b7:5a:6c:6b:72:20:1e:06:b7:9f:0f:e9:96: 31:98:c7:7b:d3:7c:88:f3:52:3b:7c:11:58:7d:13:00:c4:0c: f9:29:9b:f8:f4:33:d3:02:f6:3b:07:f3:d8:97:56:1e:55:92: c4:1e:85:38:45:58:ec:63:28:be:fe:2c:d7:49:50:92:3f:87: 61:ee:8c:f6:f2:4c:b6:07:b2:f2:bc:63:cb:e9:c9:76:23:3b: f3:90:5f:61:e1:93:27:5e:65:74:1d:9b:9e:b7:00:bf:25:6c: ce:ae:a0:bf:2c:8b:4c:51:f0:c4:9b:da:dc:1f:ce:7b:4e:76: 6f:c6:a4:5b:12:5e:97:c0:35:44:6d:58:b4:ec:31:f6:24:ea: 01:34:df:a0:f8:7c:ae:c0:1e:c4:e9:84:42:52:01:75:23:e4: eb:a1:51:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXCcn7xR8sy8A5ImIIU1+/kimfGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA5MDgxMjI5MTNaFw0yNjA5MTExODAwMTNaMDMxMTAvBgNV BAMTKEY0OTdGN0VFOEE0REE5MDVBMjg5MUNDOUY5MzIwMDhCNEE2QkI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTouRP4RtGAp26HDWjr3p2E9uN SpsSA8a/OLqwax3G+0+C21qbCxhjtGzOGk8IxpNONkAAFw9PRN7FSDDnC4NShkKy W5UsvpeLu8gZUgf7ZdXITGlSm+KYsMMugb2Y0+bMvOl/GzlJsxdH9Oi0qOSB7qVg 31LdNacuwqXs1mSHrU/AtLEtu+o8DibfEkKK4aCmXLAJ3AKH1GyekZrT0NVni3wO qrRScAiKUSR8zUPxJrRpjGUPfVWC3ugHeTWPemuRGbqs2KLTsfBRC0t2Z1r1hD9J xt6adWy4vqRQMXGFnkQ2IxwB2jXj1ZqJn698zOkQkZCMCJW+7SoCAmSdY2CfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9Jf37opNqQWiiRzJ+TIAi0pruW0wHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdveBQvqAUJOH 5IKF7skEXNTkS7SkX20BRtNZV0pE9AVXuOAdKgCghj3svuNEnw3a2hJ3CG+ir/mR eBmeS3Hmofd5+XOLdbSLi3msd1wBRiu6sLFQtaM7+idiF/5zW1O3WmxrciAeBref D+mWMZjHe9N8iPNSO3wRWH0TAMQM+Smb+PQz0wL2Owfz2JdWHlWSxB6FOEVY7GMo vv4s10lQkj+HYe6M9vJMtgey8rxjy+nJdiM785BfYeGTJ15ldB2bnrcAvyVszq6g vyyLTFHwxJva3B/Oe052b8akWxJel8A1RG1YtOwx9iTqATTfoPh8rsAexOmEQlIB dSPk66FRaA== -----END CERTIFICATE-----Generated at Thu Sep 10 19:19:22 2026 by rpki-client