$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: AlNkNJMKJ9uVhD3tghW9BjlQnwZyLnBfokT/BwCIRTM= Subject key identifier: 47:73:12:8E:B4:FE:53:5D:E8:B1:54:29:0C:29:2D:55:DA:9F:58:D8 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 31DC90C7B7C769A0F1EF037C571AD13A37A8EC72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 5C Signing time: Tue 14 Jul 2026 08:35:51 +0000 Manifest this update: Tue 14 Jul 2026 08:30:51 +0000 Manifest next update: Wed 15 Jul 2026 11:19:51 +0000 Files and hashes: 1: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) 2: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: R+4TF27GzpcOYHKTK2dNvMwG3qIfAfPNkyiFNSK1dRM=) 3: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dc:90:c7:b7:c7:69:a0:f1:ef:03:7c:57:1a:d1:3a:37:a8:ec:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Jul 14 08:30:51 2026 GMT Not After : Jul 15 11:19:51 2026 GMT Subject: CN=4773128EB4FE535DE8B154290C292D55DA9F58D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:22:b8:db:44:02:66:16:7b:ad:85:c2:d5: 23:16:8a:10:b3:98:ad:f7:0e:d2:9c:82:4f:ba:be: 36:ab:8c:36:92:c5:ea:3d:78:ba:7e:63:d4:3d:76: 95:3e:26:16:78:da:95:fd:c0:18:21:8b:c4:7d:11: 17:1c:73:ef:e4:88:a8:f0:92:18:f0:01:19:93:3d: 12:b9:fb:55:fe:d4:a6:32:c7:1d:62:3b:bb:9f:a3: 5b:5c:54:f6:7f:3e:d5:96:a3:7a:44:61:fa:4f:d2: 62:8a:75:71:13:97:3c:1d:63:f6:4c:49:05:b7:cc: 5d:3a:55:b6:a0:09:a8:20:87:d1:8c:c0:1c:7b:56: 68:bb:01:b1:bd:e3:31:c3:6f:61:4c:c4:0a:f1:f2: 68:fe:00:5c:71:06:7d:5d:a5:cf:15:48:6e:88:0c: 17:1a:ab:38:d8:0c:75:91:85:ff:f3:1c:b9:8c:e7: 64:4f:ca:a8:c0:ac:12:11:cc:aa:dd:0f:09:56:3d: a6:de:13:25:76:fe:c0:ae:3e:8e:27:05:13:b7:41: b5:80:bb:20:b8:83:aa:9f:a5:29:89:72:99:a8:4f: a9:88:2a:eb:35:d9:d5:99:26:b6:be:3d:f0:e2:ed: a0:c1:d9:a6:b3:d1:29:e4:86:f1:8f:a5:f3:a9:55: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:12:8E:B4:FE:53:5D:E8:B1:54:29:0C:29:2D:55:DA:9F:58:D8 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:c6:05:c9:4e:72:bb:77:8e:f7:ec:61:95:16:cf:82:cf: df:f9:53:f4:e1:9f:7e:f9:a2:5b:7f:49:05:93:3f:cc:26:52: fd:8b:54:62:e7:59:ed:b6:bc:9d:d1:7b:f1:cc:fb:25:41:f1: cd:91:10:81:45:1f:da:e5:b7:49:59:e2:5a:fa:f1:1f:df:3a: 3c:98:6d:2f:a5:1d:1a:9c:40:19:de:1c:26:46:22:fb:36:f3: 8b:2a:91:e1:02:62:32:5c:a6:7a:1a:ab:f8:2e:95:e0:68:b3: 89:03:6c:da:62:44:0d:8b:74:9d:61:87:f0:c7:23:68:8c:24: 14:a8:8a:38:29:3a:a3:3f:09:ab:21:94:bf:2c:f5:9c:64:84: 1b:a6:a3:ef:6c:ff:7c:3a:cf:27:96:16:ac:94:39:44:55:9a: 1b:e0:55:f4:46:72:75:37:56:74:b6:74:ce:2f:bc:64:4a:f2: df:b3:d5:c3:4a:56:d1:c3:7f:c1:19:28:85:1d:3e:fb:02:8b: dc:ea:85:2f:09:19:24:bd:22:ff:96:27:22:ad:52:4d:0c:7a: 97:0a:a9:c8:9d:f0:a0:6f:dd:9b:3d:87:8a:67:61:af:30:13: 00:aa:ba:fc:10:b6:73:fc:10:46:0b:84:3a:95:5f:9a:6f:2b: ae:f4:66:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMdyQx7fHaaDx7wN8VxrROjeo7HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA3MTQwODMwNTFaFw0yNjA3MTUxMTE5NTFaMDMxMTAvBgNV BAMTKDQ3NzMxMjhFQjRGRTUzNURFOEIxNTQyOTBDMjkyRDU1REE5RjU4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLSK420QCZhZ7rYXC1SMWihCz mK33DtKcgk+6vjarjDaSxeo9eLp+Y9Q9dpU+JhZ42pX9wBghi8R9ERccc+/kiKjw khjwARmTPRK5+1X+1KYyxx1iO7ufo1tcVPZ/PtWWo3pEYfpP0mKKdXETlzwdY/ZM SQW3zF06VbagCaggh9GMwBx7Vmi7AbG94zHDb2FMxArx8mj+AFxxBn1dpc8VSG6I DBcaqzjYDHWRhf/zHLmM52RPyqjArBIRzKrdDwlWPabeEyV2/sCuPo4nBRO3QbWA uyC4g6qfpSmJcpmoT6mIKus12dWZJra+PfDi7aDB2aaz0SnkhvGPpfOpVY8LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR3MSjrT+U13osVQpDCktVdqfWNgwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNrGBclOcrt3 jvfsYZUWz4LP3/lT9OGffvmiW39JBZM/zCZS/YtUYudZ7ba8ndF78cz7JUHxzZEQ gUUf2uW3SVniWvrxH986PJhtL6UdGpxAGd4cJkYi+zbziyqR4QJiMlymehqr+C6V 4GiziQNs2mJEDYt0nWGH8McjaIwkFKiKOCk6oz8JqyGUvyz1nGSEG6aj72z/fDrP J5YWrJQ5RFWaG+BV9EZydTdWdLZ0zi+8ZEry37PVw0pW0cN/wRkohR0++wKL3OqF LwkZJL0i/5YnIq1STQx6lwqpyJ3woG/dmz2HimdhrzATAKq6/BC2c/wQRguEOpVf mm8rrvRmLg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:12:36 2026 by rpki-client