$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: SyRt1OZEEgFA3rdsD4hqYPXSvb2gcvl1bIgJRR2r++0= Subject key identifier: 88:7F:BF:E3:B6:DB:3B:48:F2:B0:FB:F4:FA:E5:D4:92:B9:5B:7A:2F Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 0862E0254D83A476962DA087A7D9DE6C9EF35799 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: 6A Signing time: Tue 14 Jul 2026 02:30:11 +0000 Manifest this update: Tue 14 Jul 2026 02:25:11 +0000 Manifest next update: Wed 15 Jul 2026 05:13:11 +0000 Files and hashes: 1: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 2: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 3: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: aFgqKzhAc2DVjACCi2bL07ZxeA1HnPv4jNqhNSB7RP8=) 4: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) 5: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:62:e0:25:4d:83:a4:76:96:2d:a0:87:a7:d9:de:6c:9e:f3:57:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Jul 14 02:25:11 2026 GMT Not After : Jul 15 05:13:11 2026 GMT Subject: CN=887FBFE3B6DB3B48F2B0FBF4FAE5D492B95B7A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:2b:52:74:de:db:42:c1:32:64:c9:f7:8c: aa:89:64:8d:53:45:70:43:d6:f0:59:26:ca:e8:2c: 8b:3b:70:15:19:7f:4e:31:6e:42:0f:9c:bd:c2:40: 99:96:bd:6c:18:f7:ce:04:32:ec:c1:f7:78:ad:92: 4f:38:58:ae:c8:41:bf:f0:fd:42:c8:52:23:c6:de: 6e:b9:6e:e4:81:e9:f2:a0:92:ed:20:b5:6b:2e:7a: 50:ac:c4:d1:22:13:7b:dd:41:65:f9:5d:94:7b:67: 0d:7e:05:2a:7e:c4:4a:ee:03:59:6f:34:48:49:72: 1f:8b:a7:01:ec:6d:48:11:95:5d:2e:ea:16:95:14: 4a:45:51:9b:2a:5c:5a:5b:76:ad:34:58:48:d1:51: 12:e5:df:20:8f:1b:06:73:81:58:f9:55:d1:2e:6a: 62:33:d3:8b:e4:ac:53:e4:10:a6:69:77:54:8d:61: ef:35:fd:8b:c3:8f:50:b0:4e:fe:cb:a9:fb:31:d1: 3a:92:ac:2b:78:c2:79:cb:f2:67:2a:b8:47:d4:a4: 5f:53:91:aa:d6:4e:f2:21:36:2d:76:e5:68:e8:3d: e1:fe:28:3a:ca:2f:94:04:5c:01:2d:cf:fe:0b:86: d3:35:97:9d:2e:5d:35:1b:b6:5b:19:8e:5e:2b:75: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7F:BF:E3:B6:DB:3B:48:F2:B0:FB:F4:FA:E5:D4:92:B9:5B:7A:2F X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:34:5a:86:81:9c:12:77:01:78:7d:ac:e9:ae:42:4d:a9:4a: ca:25:58:79:38:5a:3f:f6:04:5c:b9:3e:f3:e2:9f:98:60:ac: 57:1f:8a:77:a5:ec:d6:d4:a1:b0:31:02:e7:39:77:01:c9:ff: ea:fc:32:05:18:bf:10:1b:77:93:4c:40:20:27:51:db:4c:f0: 6c:3c:c7:ae:e3:2e:b2:b9:ed:a1:bb:03:5b:90:c5:78:d3:2e: fe:a3:66:1d:b1:ca:24:68:3c:87:65:39:33:ab:2a:c4:fb:f0: 67:b7:97:a7:b1:c4:04:ba:b4:79:e4:f6:98:08:18:14:e5:b8: 47:f0:bd:be:72:81:13:3d:27:b5:50:2f:d2:2b:b3:4e:04:2e: ce:0f:4c:0c:a6:14:dc:cf:de:fa:6b:9e:e5:1c:ed:70:e1:94: 21:cd:89:d7:35:f1:19:3d:ad:53:ce:e1:02:b1:ad:2e:67:72: 86:8c:71:e0:ff:aa:51:96:fd:cc:09:e8:ca:5a:63:74:4c:a9: c0:46:da:5e:bc:20:ae:05:8f:4f:b9:f5:c6:83:d6:7d:2c:1d: 58:c9:d7:a4:40:32:62:a1:57:b9:f6:6c:01:45:95:b3:64:c1: 3e:ad:70:2f:fb:dc:1d:59:dc:40:d3:09:82:d2:d9:11:89:c3: 06:04:13:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGLgJU2DpHaWLaCHp9nebJ7zV5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA3MTQwMjI1MTFaFw0yNjA3MTUwNTEzMTFaMDMxMTAvBgNV BAMTKDg4N0ZCRkUzQjZEQjNCNDhGMkIwRkJGNEZBRTVENDkyQjk1QjdBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmStSdN7bQsEyZMn3jKqJZI1T RXBD1vBZJsroLIs7cBUZf04xbkIPnL3CQJmWvWwY984EMuzB93itkk84WK7IQb/w /ULIUiPG3m65buSB6fKgku0gtWsuelCsxNEiE3vdQWX5XZR7Zw1+BSp+xEruA1lv NEhJch+LpwHsbUgRlV0u6haVFEpFUZsqXFpbdq00WEjRURLl3yCPGwZzgVj5VdEu amIz04vkrFPkEKZpd1SNYe81/YvDj1CwTv7Lqfsx0TqSrCt4wnnL8mcquEfUpF9T karWTvIhNi125WjoPeH+KDrKL5QEXAEtz/4LhtM1l50uXTUbtlsZjl4rdcaBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiH+/47bbO0jysPv0+uXUkrlbei8wHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjRahoGcEncB eH2s6a5CTalKyiVYeThaP/YEXLk+8+KfmGCsVx+Kd6Xs1tShsDEC5zl3Acn/6vwy BRi/EBt3k0xAICdR20zwbDzHruMusrntobsDW5DFeNMu/qNmHbHKJGg8h2U5M6sq xPvwZ7eXp7HEBLq0eeT2mAgYFOW4R/C9vnKBEz0ntVAv0iuzTgQuzg9MDKYU3M/e +mue5RztcOGUIc2J1zXxGT2tU87hArGtLmdyhoxx4P+qUZb9zAnoylpjdEypwEba XrwgrgWPT7n1xoPWfSwdWMnXpEAyYqFXufZsAUWVs2TBPq1wL/vcHVncQNMJgtLZ EYnDBgQTUQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:18:06 2026 by rpki-client