$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: rgwMHutDL9KfRxCycusFdT1FftD3hOHUG0+/aT0lh9I= Subject key identifier: 8F:9E:E8:1C:93:AC:E6:D5:6C:85:6D:39:DD:E3:E8:44:D7:CE:9F:2E Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 41CDE2DAFD512969F52D92EBC78AB84187F56A09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 7D Signing time: Fri 28 Aug 2026 09:23:39 +0000 Manifest this update: Fri 28 Aug 2026 09:18:39 +0000 Manifest next update: Mon 31 Aug 2026 16:09:39 +0000 Files and hashes: 1: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: j9C+54fXJzVXiGiPrk/rRvAU/ds2fFtPLQpEc8yHKsY=) 2: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) 3: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cd:e2:da:fd:51:29:69:f5:2d:92:eb:c7:8a:b8:41:87:f5:6a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Aug 28 09:18:39 2026 GMT Not After : Aug 31 16:09:39 2026 GMT Subject: CN=8F9EE81C93ACE6D56C856D39DDE3E844D7CE9F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:31:b5:5f:80:ef:f0:bc:bf:6f:a8:d0:61: 85:7e:41:ab:60:96:5a:d2:31:54:29:45:11:b7:4c: a7:2a:56:56:f5:20:98:01:c7:55:76:b8:91:3f:f5: 89:a0:3a:7b:1d:76:0c:7c:eb:53:56:a7:8d:5e:da: 4c:18:20:46:d8:cb:37:31:ef:50:22:29:9a:e0:97: fb:c4:b8:14:0c:97:03:b9:91:f9:85:cf:c2:00:00: 5e:23:5a:1e:3d:cb:9c:89:e2:d1:8b:d7:b3:fd:bf: 24:f7:72:26:69:c2:3c:7a:f6:e3:e0:e5:a8:ad:a8: ef:0f:33:5f:09:d1:66:75:81:f7:78:32:1c:0c:44: d0:4e:1c:67:39:c7:5d:a2:90:1c:e1:f7:d5:ea:9b: dd:cf:11:8a:ae:01:4a:23:8e:e5:5a:4e:c4:d2:68: c9:b1:b7:3a:b7:4d:6a:62:07:d8:3f:7f:a4:d5:c7: a5:42:7b:fc:f9:ff:9c:5a:c0:1c:17:27:fc:81:12: 04:8c:6e:1f:14:81:13:26:9b:df:ea:5f:7c:f1:bc: df:b6:7f:91:4e:8c:35:b2:ec:2f:87:dc:1b:7f:ac: da:34:20:c2:ba:bf:8d:fe:84:bd:75:38:0d:70:d9: 82:d2:ec:fb:de:ed:4a:09:e8:4f:ab:c4:93:b9:0a: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:E8:1C:93:AC:E6:D5:6C:85:6D:39:DD:E3:E8:44:D7:CE:9F:2E X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:36:df:47:aa:67:d9:38:d6:be:55:df:1f:0d:b5:2d:b0:e3: f2:cf:93:1e:8e:91:fe:f1:34:d3:83:6f:c7:71:56:50:94:22: 0e:3d:ce:2d:68:53:15:07:11:08:00:75:77:90:93:d9:7b:cf: 60:3d:63:17:0b:b3:72:80:76:8b:b1:f6:24:18:13:e2:b7:7e: 25:14:ab:d9:ba:41:cd:b0:d5:5e:47:50:9a:4f:ec:dc:ca:5f: c8:37:f0:0b:46:67:30:d7:6f:d3:4a:f9:5d:df:47:41:f5:c7: 8b:75:8d:b5:ba:1c:88:e3:fe:ed:76:64:56:ae:1d:f7:51:8b: e4:db:21:e3:74:71:b2:77:52:24:b6:71:a3:b3:bb:aa:f2:d9: 48:fb:60:28:8a:8d:e9:4d:29:25:98:02:5d:41:50:7f:e4:70: e6:88:29:bf:ef:7c:99:16:af:f2:c2:e6:06:4a:c2:18:11:29: 2c:be:16:fd:c1:8b:35:4b:6f:56:06:91:a4:36:e0:bd:f9:bf: 5d:b1:1c:90:1a:e2:35:51:fa:0d:3b:01:a6:49:57:70:3f:ae: e0:aa:c0:f0:e9:6d:cd:73:34:3d:65:f7:29:54:cc:8b:65:0c: 15:f1:1c:37:78:29:a3:cc:ed:e4:11:1f:e5:f8:6a:fa:73:be: 1d:21:07:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQc3i2v1RKWn1LZLrx4q4QYf1agkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA4MjgwOTE4MzlaFw0yNjA4MzExNjA5MzlaMDMxMTAvBgNV BAMTKDhGOUVFODFDOTNBQ0U2RDU2Qzg1NkQzOURERTNFODQ0RDdDRTlGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QTG1X4Dv8Ly/b6jQYYV+Qatg llrSMVQpRRG3TKcqVlb1IJgBx1V2uJE/9YmgOnsddgx861NWp41e2kwYIEbYyzcx 71AiKZrgl/vEuBQMlwO5kfmFz8IAAF4jWh49y5yJ4tGL17P9vyT3ciZpwjx69uPg 5aitqO8PM18J0WZ1gfd4MhwMRNBOHGc5x12ikBzh99Xqm93PEYquAUojjuVaTsTS aMmxtzq3TWpiB9g/f6TVx6VCe/z5/5xawBwXJ/yBEgSMbh8UgRMmm9/qX3zxvN+2 f5FOjDWy7C+H3Bt/rNo0IMK6v43+hL11OA1w2YLS7Pve7UoJ6E+rxJO5ChGPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj57oHJOs5tVshW053ePoRNfOny4wHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTbfR6pn2TjW vlXfHw21LbDj8s+THo6R/vE004Nvx3FWUJQiDj3OLWhTFQcRCAB1d5CT2XvPYD1j FwuzcoB2i7H2JBgT4rd+JRSr2bpBzbDVXkdQmk/s3MpfyDfwC0ZnMNdv00r5Xd9H QfXHi3WNtbociOP+7XZkVq4d91GL5Nsh43RxsndSJLZxo7O7qvLZSPtgKIqN6U0p JZgCXUFQf+Rw5ogpv+98mRav8sLmBkrCGBEpLL4W/cGLNUtvVgaRpDbgvfm/XbEc kBriNVH6DTsBpklXcD+u4KrA8OltzXM0PWX3KVTMi2UMFfEcN3gpo8zt5BEf5fhq +nO+HSEH6g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:24:03 2026 by rpki-client