$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: qGs1cbcbvvJnODtzsoneelmlrMAENhZsCzaZs4/nqq0= Subject key identifier: 2F:86:71:41:E4:DC:E7:84:F1:68:DD:F0:25:86:EC:60:60:DF:24:DA Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 4C28960FFF588A64855F32F660F401404C505A30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: 7A Signing time: Tue 14 Jul 2026 16:46:42 +0000 Manifest this update: Tue 14 Jul 2026 16:41:42 +0000 Manifest next update: Wed 15 Jul 2026 19:22:42 +0000 Files and hashes: 1: 3231312e3135382e302e302f31362d3136203d3e2034383337.roa (hash: i9hECE3kOB5KCZJDOyjFbCvXCgNoN/LRN4pG0/aZL80=) 2: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (hash: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=) 3: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (hash: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y=) 4: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: VSoirGAHreEXq1NGk+VwwFi1p0HK9j299T3oiVB9L8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:96:0f:ff:58:8a:64:85:5f:32:f6:60:f4:01:40:4c:50:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: Jul 14 16:41:42 2026 GMT Not After : Jul 15 19:22:42 2026 GMT Subject: CN=2F867141E4DCE784F168DDF02586EC6060DF24DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:d7:d0:2e:13:1b:af:19:48:ec:b5:c2:5f: ac:6e:19:02:44:b6:27:45:32:98:07:67:f1:e3:1e: 0b:42:a7:46:35:f9:9e:78:a5:ea:bc:71:c6:04:7d: 0f:ae:6d:0f:30:25:49:47:22:c0:23:44:80:06:5e: c5:a8:1e:67:60:e6:de:03:4f:cf:78:d3:dd:2d:33: 7c:eb:ac:bd:d9:be:48:48:05:75:e4:81:22:1a:7c: b3:66:f1:3c:e7:4c:ae:fc:41:fb:86:a0:39:c7:15: 80:93:14:d3:ec:59:fa:a8:eb:ec:64:c8:36:f8:f4: ba:ed:b7:2b:90:b7:20:75:a9:d1:44:b0:b8:85:b5: 8c:23:03:99:d1:c2:40:11:03:05:5e:3e:ec:55:d2: e8:e0:5b:e0:6b:cf:c3:13:b0:8b:7a:52:4f:15:0c: bc:18:4c:a3:aa:fd:b3:93:76:8d:ac:99:ac:63:83: 29:b1:6a:f8:68:cd:bf:f3:a2:d2:8e:59:7d:45:3d: fd:17:7f:13:36:a3:c4:1f:89:e0:6b:c7:c1:62:f6: 18:5f:22:d3:76:44:b3:17:7c:3c:89:58:23:2e:6c: 88:0b:c4:22:d0:43:44:5f:b2:e6:2e:aa:e0:ec:08: 32:64:22:41:a0:c1:c5:f9:93:1f:10:a9:f2:17:c2: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:71:41:E4:DC:E7:84:F1:68:DD:F0:25:86:EC:60:60:DF:24:DA X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:74:af:bf:51:3f:70:cd:86:ee:4c:bd:70:f2:13:ee:9f:65: dd:35:b5:f7:6e:44:82:ff:ce:17:af:40:5e:e5:6b:50:10:11: 00:aa:79:59:d7:18:dc:7e:d8:06:97:64:ac:ea:75:c1:a6:a9: f0:1f:ca:6a:aa:2e:ca:09:df:0a:3e:f3:f2:2e:10:37:78:50: 1b:2d:36:54:73:22:d8:0a:e7:70:aa:37:de:b3:5b:e5:fc:ec: c7:07:3c:34:82:1f:4b:7c:71:24:fb:09:66:5d:d0:32:ff:b2: fb:80:d5:56:bd:17:f2:3d:98:ac:d5:d5:5f:5b:81:ec:98:41: e9:e2:67:b2:a7:dc:38:9a:a7:4b:2c:83:3e:a3:45:6c:10:5b: f3:a7:5a:ab:65:50:63:65:e0:ab:40:95:6d:7a:ed:29:51:79: 9a:85:5f:fe:9a:88:be:e0:64:4d:f0:fe:97:c0:10:ab:51:22: ff:5e:8c:0a:47:5a:0a:c9:8a:c0:e5:cc:d2:cf:52:f8:93:e7: 94:bc:9c:58:8d:a7:14:6a:bd:4e:b7:95:87:b7:53:0c:81:51: 75:24:ed:25:8f:42:18:68:ea:e7:73:01:84:59:e0:62:24:fc: 27:b9:f2:39:1f:1f:76:86:da:9d:1f:63:b4:9e:e9:3d:26:13: 51:84:96:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTCiWD/9YimSFXzL2YPQBQExQWjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA3MTQxNjQxNDJaFw0yNjA3MTUxOTIyNDJaMDMxMTAvBgNV BAMTKDJGODY3MTQxRTREQ0U3ODRGMTY4RERGMDI1ODZFQzYwNjBERjI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXB9fQLhMbrxlI7LXCX6xuGQJE tidFMpgHZ/HjHgtCp0Y1+Z54peq8ccYEfQ+ubQ8wJUlHIsAjRIAGXsWoHmdg5t4D T894090tM3zrrL3ZvkhIBXXkgSIafLNm8TznTK78QfuGoDnHFYCTFNPsWfqo6+xk yDb49LrttyuQtyB1qdFEsLiFtYwjA5nRwkARAwVePuxV0ujgW+Brz8MTsIt6Uk8V DLwYTKOq/bOTdo2smaxjgymxavhozb/zotKOWX1FPf0XfxM2o8QfieBrx8Fi9hhf ItN2RLMXfDyJWCMubIgLxCLQQ0RfsuYuquDsCDJkIkGgwcX5kx8QqfIXwpR/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL4ZxQeTc54TxaN3wJYbsYGDfJNowHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXSvv1E/cM2G 7ky9cPIT7p9l3TW1925Egv/OF69AXuVrUBARAKp5WdcY3H7YBpdkrOp1waap8B/K aqouygnfCj7z8i4QN3hQGy02VHMi2ArncKo33rNb5fzsxwc8NIIfS3xxJPsJZl3Q Mv+y+4DVVr0X8j2YrNXVX1uB7JhB6eJnsqfcOJqnSyyDPqNFbBBb86daq2VQY2Xg q0CVbXrtKVF5moVf/pqIvuBkTfD+l8AQq1Ei/16MCkdaCsmKwOXM0s9S+JPnlLyc WI2nFGq9TreVh7dTDIFRdSTtJY9CGGjq53MBhFngYiT8J7nyOR8fdobanR9jtJ7p PSYTUYSWYw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:51 2026 by rpki-client