$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: Jri+GnJDu4bZBtu/38RcgkKbaGxx917nLYZWySCoOfM= Subject key identifier: FA:83:32:56:A1:60:A6:2D:DA:CD:B9:C1:A5:81:68:80:19:3B:05:8F Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 65CA72F56140D183F2237A8466EF7A70B3140D0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 40 Signing time: Tue 14 Jul 2026 07:40:43 +0000 Manifest this update: Tue 14 Jul 2026 07:35:43 +0000 Manifest next update: Wed 15 Jul 2026 08:49:43 +0000 Files and hashes: 1: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) 2: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) 3: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: lbyQEyQKHahqSkXcSRgU/9sto0fLMvQQptnlmfKlD0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ca:72:f5:61:40:d1:83:f2:23:7a:84:66:ef:7a:70:b3:14:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Jul 14 07:35:43 2026 GMT Not After : Jul 15 08:49:43 2026 GMT Subject: CN=FA833256A160A62DDACDB9C1A5816880193B058F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:c4:e1:c4:8c:b6:0a:d8:e4:fc:5f:67:0c: 08:90:6c:2b:be:d8:8a:5b:d2:6c:11:be:cc:6a:14: 70:38:07:83:d5:2f:cf:d9:d8:e1:90:e8:9d:70:74: 49:d8:52:7e:3c:21:c4:ab:49:61:4e:ad:0b:44:34: c7:e9:df:20:e6:1c:56:b3:48:d5:87:0c:16:9a:5e: 40:b3:82:68:3d:56:eb:e7:8c:41:6d:72:c9:c4:94: 08:58:56:7d:3a:3e:ec:b4:03:09:f2:2b:c8:57:58: 8c:55:0d:92:d1:59:57:d2:58:4d:ca:47:48:b9:4c: 46:20:a1:92:d4:20:40:9d:e5:5b:69:82:1f:e8:d0: 09:3d:52:fc:fc:3e:ff:58:0c:b2:d9:cc:de:ad:d8: af:29:d7:ee:80:12:a8:b0:b8:19:e9:d0:ff:bf:03: cb:20:87:d4:09:3e:c5:9f:de:11:60:78:51:61:f8: 99:a1:28:ce:bb:9d:91:72:e2:fe:95:f1:22:d2:0f: f3:a8:02:a7:d4:7f:47:84:fb:79:d7:fc:15:24:47: ca:18:af:23:e2:03:f1:44:c5:10:02:28:d2:c3:ed: 63:00:ba:39:25:08:5b:a5:fc:a8:63:e7:86:f7:5c: 20:2a:4d:3c:3e:06:a5:62:53:16:2e:33:b5:6c:aa: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:32:56:A1:60:A6:2D:DA:CD:B9:C1:A5:81:68:80:19:3B:05:8F X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:e2:a7:eb:ab:e8:33:31:ef:e1:89:98:6f:d2:db:03:f7:b0: 9b:13:8f:85:3a:7a:a7:b0:fd:b9:9f:15:ec:d7:cb:b8:86:94: 1c:14:02:8f:e6:d8:e0:95:28:5b:8a:cd:a7:f5:c5:ac:5b:7f: de:b7:78:55:c9:80:68:56:b5:8f:32:2e:13:f2:12:99:de:91: bf:e4:1d:4e:72:b7:17:c2:bc:72:e5:47:f0:73:a8:bf:ed:d8: fe:6e:c9:b1:59:7a:37:55:b4:49:56:d8:de:90:40:fa:2a:57: 53:bf:f4:e6:a1:cb:23:bc:92:3f:17:61:5b:30:5f:33:10:5b: 64:59:6f:22:05:45:c2:f6:0a:3a:0a:8e:92:b9:27:97:c8:63: ac:5d:67:37:6b:ab:e4:36:d9:d0:c0:e1:bd:84:b8:9e:ec:9a: 3f:ff:bd:a6:d7:14:cd:7c:e1:45:47:63:83:27:59:c5:45:aa: f6:2f:c8:1f:fa:9e:ae:9e:2a:15:35:88:74:7b:76:aa:10:a5: 40:90:a7:24:da:b5:9a:ec:76:3f:ac:02:1c:31:c3:3b:f6:2b: 45:9a:91:ab:34:7a:94:76:cf:20:30:b3:0c:d2:b4:90:c7:7d: bf:4f:e3:44:58:3d:a7:b7:23:63:d8:96:f1:38:e4:c8:59:3c: bf:e5:66:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZcpy9WFA0YPyI3qEZu96cLMUDQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA3MTQwNzM1NDNaFw0yNjA3MTUwODQ5NDNaMDMxMTAvBgNV BAMTKEZBODMzMjU2QTE2MEE2MkREQUNEQjlDMUE1ODE2ODgwMTkzQjA1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX08ThxIy2Ctjk/F9nDAiQbCu+ 2Ipb0mwRvsxqFHA4B4PVL8/Z2OGQ6J1wdEnYUn48IcSrSWFOrQtENMfp3yDmHFaz SNWHDBaaXkCzgmg9VuvnjEFtcsnElAhYVn06Puy0AwnyK8hXWIxVDZLRWVfSWE3K R0i5TEYgoZLUIECd5Vtpgh/o0Ak9Uvz8Pv9YDLLZzN6t2K8p1+6AEqiwuBnp0P+/ A8sgh9QJPsWf3hFgeFFh+JmhKM67nZFy4v6V8SLSD/OoAqfUf0eE+3nX/BUkR8oY ryPiA/FExRACKNLD7WMAujklCFul/Khj54b3XCAqTTw+BqViUxYuM7Vsqn/bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+oMyVqFgpi3azbnBpYFogBk7BY8wHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweKn66voMzHv 4YmYb9LbA/ewmxOPhTp6p7D9uZ8V7NfLuIaUHBQCj+bY4JUoW4rNp/XFrFt/3rd4 VcmAaFa1jzIuE/ISmd6Rv+QdTnK3F8K8cuVH8HOov+3Y/m7JsVl6N1W0SVbY3pBA +ipXU7/05qHLI7ySPxdhWzBfMxBbZFlvIgVFwvYKOgqOkrknl8hjrF1nN2ur5DbZ 0MDhvYS4nuyaP/+9ptcUzXzhRUdjgydZxUWq9i/IH/qerp4qFTWIdHt2qhClQJCn JNq1mux2P6wCHDHDO/YrRZqRqzR6lHbPIDCzDNK0kMd9v0/jRFg9p7cjY9iW8Tjk yFk8v+Vmrg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:38 2026 by rpki-client