$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json) Hash identifier: aXbyXuIxjRoE4DX+YtbEdkuL4IcnzU6xd6ywvS+AG7A= Subject key identifier: 23:6B:74:40:7A:7E:7B:F7:57:5F:A4:D0:FA:A1:EC:3B:1D:2D:96:C5 Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D Certificate serial: 668E776B237AD2979BA7660B8383F85F84F8CD99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft Manifest number: 3D Signing time: Fri 29 May 2026 14:52:58 +0000 Manifest this update: Fri 29 May 2026 14:47:58 +0000 Manifest next update: Sat 30 May 2026 16:11:58 +0000 Files and hashes: 1: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=) 2: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=) 3: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=) 4: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: TksPdDXw2+horrdXMtLlyZ5xwzZ9G0BRFyL1B5ttXog=) 5: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8e:77:6b:23:7a:d2:97:9b:a7:66:0b:83:83:f8:5f:84:f8:cd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D Validity Not Before: May 29 14:47:58 2026 GMT Not After : May 30 16:11:58 2026 GMT Subject: CN=236B74407A7E7BF7575FA4D0FAA1EC3B1D2D96C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:2f:76:a5:70:5b:fa:5c:8c:8a:66:c6:75: 5f:f3:2f:43:e7:e7:18:af:55:2c:79:43:75:1e:39: 71:d6:13:02:f9:5d:8b:74:79:15:68:38:6e:9e:83: 6b:46:2e:de:fd:c0:8b:53:df:fc:48:93:f2:e9:36: 7d:81:7d:8e:74:71:6e:f9:8f:bb:00:65:5d:70:09: 72:60:8b:3e:a0:ad:4c:96:ab:1a:df:57:17:9c:92: 4c:0c:e1:0d:38:31:9d:a8:0f:d0:d4:ff:f2:4d:46: b9:d6:a8:06:9e:3f:ca:91:75:ec:2d:d1:29:53:7e: 84:8a:38:07:36:fd:45:73:f7:ab:ac:28:4a:c6:62: 57:1a:7b:84:bc:7e:7a:77:40:ef:df:18:2c:96:8c: 60:02:9d:57:ef:a5:fd:0d:7f:75:7f:4f:09:f0:0a: 6f:64:57:26:bb:56:90:b2:b6:3c:97:ac:42:6b:62: 7f:04:01:ac:23:7b:b9:50:30:ee:c6:be:34:b3:15: 31:c8:93:14:ca:e0:3c:b1:3f:b0:1c:ea:a3:2f:fe: 80:0e:6c:b7:5a:77:ab:9d:81:79:74:9a:cc:b2:6f: 0f:34:f7:b1:b5:9a:c6:44:20:31:e4:d9:53:8d:9b: 46:28:8f:f6:a6:36:cf:46:ef:26:60:3c:a1:3f:8b: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6B:74:40:7A:7E:7B:F7:57:5F:A4:D0:FA:A1:EC:3B:1D:2D:96:C5 X509v3 Authority Key Identifier: keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:95:41:c3:4d:a2:bf:42:58:0e:de:93:fe:9c:a8:c9:d5:fa: f0:88:f4:be:9e:87:2c:33:d0:75:c0:f1:83:cc:63:ce:8f:1d: 8d:58:f7:9c:d9:4a:7c:0e:ac:49:53:dc:91:dc:c4:20:1a:f9: ff:77:a0:20:4d:13:e6:58:3c:b6:08:a8:33:2d:51:e3:31:b1: 04:7b:19:ef:c5:f3:74:70:dd:0d:5a:fa:d0:67:75:76:1d:db: 73:fb:66:46:25:df:13:fc:bf:80:39:51:6b:a3:87:e8:91:8b: 79:e9:42:59:7f:2f:3c:22:fa:21:c3:83:0f:9b:28:a9:56:17: 49:ea:4c:42:88:2d:db:16:86:8e:5d:27:64:a6:0f:6d:c0:0f: b8:db:f1:ed:36:ce:94:82:b3:37:c9:a5:be:dd:e2:96:81:56: 37:98:84:7f:b3:4e:aa:f6:19:95:ab:c7:e0:69:d3:b8:57:64: be:13:28:4e:25:0d:36:99:8f:1a:cd:e7:9e:24:0b:13:67:e7: b7:a4:4e:3b:7a:24:9d:9d:4f:32:30:3c:f2:bd:b1:77:9a:e8: c7:4a:33:9c:fc:93:73:f7:e3:55:a8:f5:48:24:25:db:88:78: 3a:23:9a:5b:68:90:e0:89:eb:35:00:0d:65:85:c4:6f:a2:f0: 6f:90:41:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZo53ayN60pebp2YLg4P4X4T4zZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1 MUQzMTM1RDAeFw0yNjA1MjkxNDQ3NThaFw0yNjA1MzAxNjExNThaMDMxMTAvBgNV BAMTKDIzNkI3NDQwN0E3RTdCRjc1NzVGQTREMEZBQTFFQzNCMUQyRDk2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZC92pXBb+lyMimbGdV/zL0Pn 5xivVSx5Q3UeOXHWEwL5XYt0eRVoOG6eg2tGLt79wItT3/xIk/LpNn2BfY50cW75 j7sAZV1wCXJgiz6grUyWqxrfVxeckkwM4Q04MZ2oD9DU//JNRrnWqAaeP8qRdewt 0SlTfoSKOAc2/UVz96usKErGYlcae4S8fnp3QO/fGCyWjGACnVfvpf0Nf3V/Twnw Cm9kVya7VpCytjyXrEJrYn8EAawje7lQMO7GvjSzFTHIkxTK4DyxP7Ac6qMv/oAO bLdad6udgXl0msyybw8097G1msZEIDHk2VONm0Yoj/amNs9G7yZgPKE/i7a5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI2t0QHp+e/dXX6TQ+qHsOx0tlsUwHwYDVR0j BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MDMyMDQ0MjQxMDU5ODYvMC83RjA0RjZGQ0UyMjc1 MDYwN0U1NEU1NThFMDM5RTBGNTUxRDMxMzVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5VBw02iv0JY Dt6T/pyoydX68Ij0vp6HLDPQdcDxg8xjzo8djVj3nNlKfA6sSVPckdzEIBr5/3eg IE0T5lg8tgioMy1R4zGxBHsZ78XzdHDdDVr60Gd1dh3bc/tmRiXfE/y/gDlRa6OH 6JGLeelCWX8vPCL6IcODD5soqVYXSepMQogt2xaGjl0nZKYPbcAPuNvx7TbOlIKz N8mlvt3iloFWN5iEf7NOqvYZlavH4GnTuFdkvhMoTiUNNpmPGs3nniQLE2fnt6RO O3oknZ1PMjA88r2xd5rox0oznPyTc/fjVaj1SCQl24h4OiOaW2iQ4InrNQANZYXE b6Lwb5BBnw== -----END CERTIFICATE-----Generated at Fri May 29 22:02:54 2026 by rpki-client