$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: ZmWZkyEnh3VAiCHEAeOfAEBwyH+KK0XZ4IOkrDmj0uM= Subject key identifier: 89:82:B5:D8:78:F3:7E:93:95:3B:ED:BC:2E:2D:9A:5F:29:87:55:A2 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 39F638FDBD38DA3D61C5E3FBFA2C8FC5C861CCBE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 69 Signing time: Tue 14 Jul 2026 08:15:48 +0000 Manifest this update: Tue 14 Jul 2026 08:10:48 +0000 Manifest next update: Wed 15 Jul 2026 10:58:48 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: HAbuvCEhwGzcrz8jOqPSsZHPcq5aNmrW1KKRkxi1pQg=) 3: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f6:38:fd:bd:38:da:3d:61:c5:e3:fb:fa:2c:8f:c5:c8:61:cc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Jul 14 08:10:48 2026 GMT Not After : Jul 15 10:58:48 2026 GMT Subject: CN=8982B5D878F37E93953BEDBC2E2D9A5F298755A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:68:f0:10:00:ed:51:90:e1:e1:3d:53:84: ff:4c:0b:50:5a:43:1a:5f:7f:a7:a2:d2:24:9d:fa: 35:a2:72:15:95:de:1f:37:b2:85:58:60:ae:fa:d4: d3:13:00:75:65:ef:b8:01:f3:4f:1d:13:91:c7:57: 36:9e:82:e0:49:b7:78:fd:53:e2:a1:26:45:8a:ff: 2e:5c:3b:9b:77:59:0a:79:3e:9a:a1:10:1b:b4:2e: 7a:37:73:8d:b2:4b:49:fa:94:8c:a2:3b:63:c3:6a: 4c:96:ba:09:05:4b:4a:91:5c:43:21:0f:90:f1:02: ff:c2:d7:de:bd:9e:5f:ee:dc:00:84:57:78:54:6d: d3:6f:3b:68:f6:7b:d3:be:7e:14:27:c9:44:82:1c: 4b:e2:c7:00:76:40:eb:ae:d9:28:ec:6e:d2:82:47: fd:62:bb:c6:08:93:70:51:27:e1:84:2a:ae:cf:e6: 91:4b:32:e0:eb:ab:30:b3:53:1f:ff:30:b1:29:98: d6:20:10:2a:3c:5a:7b:21:4a:96:4f:71:2d:16:d1: 74:5f:f8:80:61:b4:8f:8a:1b:3c:85:30:1d:01:5d: b3:1b:b7:c7:ea:98:38:d6:10:03:e8:a3:dc:c8:cc: ad:fb:5f:54:9c:52:da:45:9d:2c:01:be:59:78:45: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:82:B5:D8:78:F3:7E:93:95:3B:ED:BC:2E:2D:9A:5F:29:87:55:A2 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f7:47:c0:a4:a7:66:10:f4:a2:96:ae:08:76:97:ab:8b:d5: 97:fc:9f:35:f9:9c:5f:1d:0a:0a:39:29:b3:0a:68:37:11:2e: 29:27:49:de:ad:7e:f2:e3:5e:e8:62:25:8f:a4:39:c8:83:4b: f5:c8:67:01:b8:c2:26:28:4b:59:5e:6c:08:50:0e:e5:75:f4: 08:0d:0a:38:1b:c9:4c:a5:58:63:04:3b:15:16:3b:8e:dd:83: a4:69:8b:b6:da:2b:2d:a5:95:a3:42:cf:50:a2:10:6f:76:c0: 1c:05:24:41:72:b8:96:0f:c1:45:a9:bf:3f:b4:c5:12:4b:02: 82:a4:a7:d1:04:9d:7a:ec:bd:90:20:e9:0d:6c:0b:7c:10:81: f7:50:52:1e:8d:f0:15:4e:51:a1:e2:1a:af:76:04:ea:32:fd: 62:a1:b5:72:98:5f:d5:1d:94:48:d3:eb:a9:61:d6:0f:b2:21: f3:73:97:57:94:2d:f9:b6:09:d7:f8:9e:90:60:48:61:7f:c0: 92:56:7f:e8:08:11:8a:61:b2:a5:07:8f:bc:50:1a:bf:ea:95: f3:46:bf:7a:71:4a:2f:8b:cf:6c:fc:fc:1e:3d:ab:59:e9:bc: 6a:e1:c2:6d:b2:8e:92:83:0d:6f:4c:e9:3c:7e:c2:4f:8c:b4: 2d:84:d2:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOfY4/b042j1hxeP7+iyPxchhzL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA3MTQwODEwNDhaFw0yNjA3MTUxMDU4NDhaMDMxMTAvBgNV BAMTKDg5ODJCNUQ4NzhGMzdFOTM5NTNCRURCQzJFMkQ5QTVGMjk4NzU1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYWjwEADtUZDh4T1ThP9MC1Ba Qxpff6ei0iSd+jWichWV3h83soVYYK761NMTAHVl77gB808dE5HHVzaeguBJt3j9 U+KhJkWK/y5cO5t3WQp5PpqhEBu0Lno3c42yS0n6lIyiO2PDakyWugkFS0qRXEMh D5DxAv/C1969nl/u3ACEV3hUbdNvO2j2e9O+fhQnyUSCHEvixwB2QOuu2SjsbtKC R/1iu8YIk3BRJ+GEKq7P5pFLMuDrqzCzUx//MLEpmNYgECo8WnshSpZPcS0W0XRf +IBhtI+KGzyFMB0BXbMbt8fqmDjWEAPoo9zIzK37X1ScUtpFnSwBvll4RT3nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiYK12HjzfpOVO+28Li2aXymHVaIwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfdHwKSnZhD0 opauCHaXq4vVl/yfNfmcXx0KCjkpswpoNxEuKSdJ3q1+8uNe6GIlj6Q5yINL9chn AbjCJihLWV5sCFAO5XX0CA0KOBvJTKVYYwQ7FRY7jt2DpGmLttorLaWVo0LPUKIQ b3bAHAUkQXK4lg/BRam/P7TFEksCgqSn0QSdeuy9kCDpDWwLfBCB91BSHo3wFU5R oeIar3YE6jL9YqG1cphf1R2USNPrqWHWD7Ih83OXV5Qt+bYJ1/iekGBIYX/AklZ/ 6AgRimGypQePvFAav+qV80a/enFKL4vPbPz8Hj2rWem8auHCbbKOkoMNb0zpPH7C T4y0LYTS9g== -----END CERTIFICATE-----Generated at Tue Jul 14 20:14:50 2026 by rpki-client