$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: uEKJc+Xh6CZ6zY4yAY5wHIkZQMHJL3LH6lzKorG+/DE= Subject key identifier: 37:46:6B:23:A8:01:9A:7A:E2:9F:91:F7:D0:FA:7B:F0:36:7B:F8:C7 Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 631FA4400BDC41A01046276E8EC45537D8DC70ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 8F Signing time: Mon 27 Jul 2026 11:19:00 +0000 Manifest this update: Mon 27 Jul 2026 11:14:00 +0000 Manifest next update: Tue 28 Jul 2026 12:27:00 +0000 Files and hashes: 1: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 2: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 3: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: 7a0K15yl5QNZgcahjtf+bH9mAJ4++VeUF10w33tSkvc=) 4: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1f:a4:40:0b:dc:41:a0:10:46:27:6e:8e:c4:55:37:d8:dc:70:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Jul 27 11:14:00 2026 GMT Not After : Jul 28 12:27:00 2026 GMT Subject: CN=37466B23A8019A7AE29F91F7D0FA7BF0367BF8C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:25:17:a9:18:dc:86:6f:2a:f3:80:95:bf: 0b:99:7e:57:c9:d2:15:e5:17:70:8f:ff:41:f2:61: 12:f7:e1:89:38:a1:5a:5a:3a:93:6b:15:76:11:f9: 34:00:19:6c:fd:55:f8:38:a5:62:05:d4:4c:8c:b0: d5:33:35:be:d3:02:71:ed:ad:c6:43:7b:70:98:30: b6:01:d4:12:d6:75:02:0d:4d:68:92:a2:4d:3f:23: 3b:71:41:ab:2c:90:e3:90:9a:cc:14:3f:c4:93:5b: 91:83:a1:62:76:ae:2b:30:4d:fa:2b:5b:6c:58:f8: 0d:ae:fd:62:de:1c:93:7d:c4:44:5a:8e:d2:04:74: 2a:bf:ff:82:90:79:e1:d7:40:e1:37:1c:89:b9:54: ae:40:fb:a3:f7:f2:47:2f:54:e7:a7:67:26:0f:44: 95:f7:bd:ab:a7:cf:e0:ff:0f:74:47:f7:31:f6:ef: 0a:1d:17:61:53:4f:80:2e:ec:74:b9:96:91:52:39: aa:da:4a:16:ed:b6:6d:cf:fd:68:12:f0:64:0e:d8: 45:26:9c:b4:2b:04:4a:80:47:16:d9:f6:29:ae:cd: 68:91:b5:29:2d:af:39:80:4c:ab:90:86:1d:76:de: b8:74:be:80:86:da:50:44:4d:8d:42:d8:8f:1d:71: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:6B:23:A8:01:9A:7A:E2:9F:91:F7:D0:FA:7B:F0:36:7B:F8:C7 X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2b:63:5e:24:10:fb:3d:1b:84:38:e9:fb:81:00:55:6c:bb: e4:4d:77:39:51:32:47:5e:35:00:a1:50:b4:ea:8d:21:a0:9c: 55:e5:71:2a:26:63:74:26:4c:00:87:aa:bb:16:df:d2:5b:e5: ce:69:bf:e8:9c:cb:b9:0e:21:e5:76:31:a3:19:83:7a:4d:6b: d9:3c:da:66:44:ff:e0:ff:f0:07:55:9b:fe:35:6e:12:93:72: d3:b3:26:64:ed:26:b8:fe:84:7c:07:9e:c2:ec:e8:4c:08:f4: 7f:69:cc:e6:33:df:66:28:ad:cd:22:6a:77:24:21:51:cc:81: 50:e3:2a:5f:ec:0b:86:44:c3:b1:5e:dc:03:3b:e7:7b:78:fd: e9:0a:40:b8:5c:43:a8:b5:68:62:17:60:37:77:a2:f5:cd:05: 8e:5e:c3:ea:a0:90:84:04:34:2b:d1:4c:be:37:eb:b9:63:90: 38:64:82:e9:da:57:9c:cc:0e:08:c0:8c:48:cb:21:48:9f:2c: 05:45:1c:c3:1f:06:eb:02:72:ff:c8:38:a6:16:95:72:97:01: ed:c3:ea:22:5d:3d:eb:32:2b:31:d7:ab:06:63:45:5b:2a:b1: f6:f1:4c:9c:a6:95:12:c3:a0:d2:33:7b:33:08:68:ae:a8:f5: 33:ef:02:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYx+kQAvcQaAQRidujsRVN9jccO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA3MjcxMTE0MDBaFw0yNjA3MjgxMjI3MDBaMDMxMTAvBgNV BAMTKDM3NDY2QjIzQTgwMTlBN0FFMjlGOTFGN0QwRkE3QkYwMzY3QkY4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOyCUXqRjchm8q84CVvwuZflfJ 0hXlF3CP/0HyYRL34Yk4oVpaOpNrFXYR+TQAGWz9Vfg4pWIF1EyMsNUzNb7TAnHt rcZDe3CYMLYB1BLWdQINTWiSok0/IztxQasskOOQmswUP8STW5GDoWJ2riswTfor W2xY+A2u/WLeHJN9xERajtIEdCq//4KQeeHXQOE3HIm5VK5A+6P38kcvVOenZyYP RJX3vaunz+D/D3RH9zH27wodF2FTT4Au7HS5lpFSOaraShbttm3P/WgS8GQO2EUm nLQrBEqARxbZ9imuzWiRtSktrzmATKuQhh123rh0voCG2lBETY1C2I8dcSEnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN0ZrI6gBmnrin5H30Pp78DZ7+McwHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkStjXiQQ+z0b hDjp+4EAVWy75E13OVEyR141AKFQtOqNIaCcVeVxKiZjdCZMAIequxbf0lvlzmm/ 6JzLuQ4h5XYxoxmDek1r2TzaZkT/4P/wB1Wb/jVuEpNy07MmZO0muP6EfAeewuzo TAj0f2nM5jPfZiitzSJqdyQhUcyBUOMqX+wLhkTDsV7cAzvne3j96QpAuFxDqLVo YhdgN3ei9c0Fjl7D6qCQhAQ0K9FMvjfruWOQOGSC6dpXnMwOCMCMSMshSJ8sBUUc wx8G6wJy/8g4phaVcpcB7cPqIl096zIrMderBmNFWyqx9vFMnKaVEsOg0jN7Mwho rqj1M+8C+w== -----END CERTIFICATE-----Generated at Mon Jul 27 15:44:51 2026 by rpki-client