$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: V7YimfoTaAziYlWXtdiCin+IjQLrhGthZVnz3KPig70= Subject key identifier: 72:C9:F4:DA:F2:54:63:3C:AD:28:FC:E1:C6:82:CC:F5:DA:B3:74:94 Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 56CCE340F8FA61F793EA3C8407CA082E1C6792C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: 9C Signing time: Wed 05 Aug 2026 12:42:52 +0000 Manifest this update: Wed 05 Aug 2026 12:37:52 +0000 Manifest next update: Thu 06 Aug 2026 14:40:52 +0000 Files and hashes: 1: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) 2: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: BpAWmzjvpgxTlynB/SiwSMpxD0KfdDupJUHN8yOWtz0=) 3: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=) 4: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Aug 2026 07:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cc:e3:40:f8:fa:61:f7:93:ea:3c:84:07:ca:08:2e:1c:67:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: Aug 5 12:37:52 2026 GMT Not After : Aug 6 14:40:52 2026 GMT Subject: CN=72C9F4DAF254633CAD28FCE1C682CCF5DAB37494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:b5:b8:a4:40:b5:fd:15:48:d1:28:c4:76: 11:9f:06:2f:be:9d:a0:21:87:5c:82:49:1f:3a:f5: f2:74:ba:a3:fe:4a:07:ff:60:01:38:13:3b:96:fb: fa:c7:67:43:32:f2:ed:b7:b6:e0:df:ef:5a:88:6f: 05:57:22:24:58:bc:75:25:ab:80:5c:ea:62:37:1a: ae:10:ae:ca:e1:26:96:96:1e:d6:58:6f:42:92:9b: 4e:dd:5f:0a:4a:53:2e:f2:86:a7:38:88:9b:d2:f8: f2:53:29:ca:f7:c6:af:c5:28:63:69:5d:1f:87:bf: d0:27:74:f3:3b:75:b0:8f:45:4a:88:95:fb:6f:33: 42:ce:51:45:98:48:ce:13:e5:e4:d5:4e:c2:c6:2c: 00:ee:d1:9c:c1:64:c1:f3:fa:20:69:59:c9:c3:33: e7:37:46:c7:a4:54:ab:75:25:22:c0:f9:db:2e:82: 65:3d:8b:b0:fa:cb:fe:0b:05:9a:71:f6:f7:ca:bc: b2:c2:41:e0:3e:63:9b:14:34:60:15:34:14:92:eb: c6:f1:94:51:cc:b7:c0:6a:bd:9b:ed:29:f6:c2:77: 01:02:31:84:3a:fa:5d:58:71:28:0b:c0:48:75:7d: 98:89:3e:b8:79:2f:a0:f6:d5:83:cc:60:10:48:50: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:F4:DA:F2:54:63:3C:AD:28:FC:E1:C6:82:CC:F5:DA:B3:74:94 X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e6:00:02:38:42:5a:29:54:4f:16:f1:5e:53:61:f0:f7:a8: dc:df:2c:36:0c:68:bd:3e:64:ca:39:49:bd:bc:e4:cb:82:38: 46:21:37:ae:10:f5:8a:0f:85:a1:bc:81:8e:67:d5:f7:4b:cb: 17:c7:6c:ea:a3:33:20:55:f6:96:0d:d6:50:01:46:bd:94:84: f9:68:1d:69:4c:9a:0c:ae:a9:9b:2b:0c:12:a1:60:e1:4e:c1: 01:da:35:c8:55:5d:45:48:7d:5e:4d:bd:5f:81:df:29:45:9f: 7b:d0:6c:6a:ff:41:d4:31:2d:ed:bb:07:d5:89:1c:b3:56:c9: 71:37:5d:c0:97:76:45:9c:8d:c4:78:3a:7f:76:6b:d4:60:dc: 94:2f:a5:4a:50:15:39:e6:7f:74:60:9d:75:a5:46:1e:58:7c: 2e:cd:b1:51:00:1c:fe:c0:78:88:f3:5e:5a:5f:95:ac:76:b5: 25:0d:57:bc:72:87:b2:7c:00:55:ed:7b:47:49:e8:10:08:75: 9f:a3:ff:16:8d:23:39:ea:6b:82:63:a2:fc:c1:2b:4d:5e:4c: 43:7c:05:78:57:ab:4c:dd:35:dc:a3:91:02:33:d9:54:37:d7: a3:8c:22:d4:30:b2:a8:65:6a:e8:f3:bf:08:b5:f4:f0:3b:54: 45:a2:96:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVszjQPj6YfeT6jyEB8oILhxnksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjA4MDUxMjM3NTJaFw0yNjA4MDYxNDQwNTJaMDMxMTAvBgNV BAMTKDcyQzlGNERBRjI1NDYzM0NBRDI4RkNFMUM2ODJDQ0Y1REFCMzc0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfbW4pEC1/RVI0SjEdhGfBi++ naAhh1yCSR869fJ0uqP+Sgf/YAE4EzuW+/rHZ0My8u23tuDf71qIbwVXIiRYvHUl q4Bc6mI3Gq4QrsrhJpaWHtZYb0KSm07dXwpKUy7yhqc4iJvS+PJTKcr3xq/FKGNp XR+Hv9AndPM7dbCPRUqIlftvM0LOUUWYSM4T5eTVTsLGLADu0ZzBZMHz+iBpWcnD M+c3RsekVKt1JSLA+dsugmU9i7D6y/4LBZpx9vfKvLLCQeA+Y5sUNGAVNBSS68bx lFHMt8BqvZvtKfbCdwECMYQ6+l1YcSgLwEh1fZiJPrh5L6D21YPMYBBIUFBbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcsn02vJUYzytKPzhxoLM9dqzdJQwHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+YAAjhCWilU TxbxXlNh8Peo3N8sNgxovT5kyjlJvbzky4I4RiE3rhD1ig+FobyBjmfV90vLF8ds 6qMzIFX2lg3WUAFGvZSE+WgdaUyaDK6pmysMEqFg4U7BAdo1yFVdRUh9Xk29X4Hf KUWfe9Bsav9B1DEt7bsH1Ykcs1bJcTddwJd2RZyNxHg6f3Zr1GDclC+lSlAVOeZ/ dGCddaVGHlh8Ls2xUQAc/sB4iPNeWl+VrHa1JQ1XvHKHsnwAVe17R0noEAh1n6P/ Fo0jOeprgmOi/MErTV5MQ3wFeFerTN013KORAjPZVDfXo4wi1DCyqGVq6PO/CLX0 8DtURaKW3w== -----END CERTIFICATE-----Generated at Wed Aug 5 19:02:37 2026 by rpki-client