$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json) Hash identifier: O1tf6gcRPzd1ytxSuEfzUyxLKaiixApejTTkEX6wQAA= Subject key identifier: FE:41:BB:B0:5B:4E:66:BA:78:58:A3:5F:B9:76:22:05:AF:B1:C3:2D Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 24BD058DEFFEC741A8FF72367FA144F619FD07D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft Manifest number: 4B Signing time: Mon 27 Jul 2026 01:53:04 +0000 Manifest this update: Mon 27 Jul 2026 01:48:04 +0000 Manifest next update: Tue 28 Jul 2026 05:47:04 +0000 Files and hashes: 1: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=) 2: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=) 3: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=) 4: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=) 5: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=) 6: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=) 7: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=) 8: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=) 9: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: /tEiXL+PD8cCrUc6K0PqVV4xmvwqmIgjqJftVz+meV0=) 10: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=) 11: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bd:05:8d:ef:fe:c7:41:a8:ff:72:36:7f:a1:44:f6:19:fd:07:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jul 27 01:48:04 2026 GMT Not After : Jul 28 05:47:04 2026 GMT Subject: CN=FE41BBB05B4E66BA7858A35FB9762205AFB1C32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:87:c2:a6:e3:7d:85:99:7d:f2:e2:78:09: 3a:d8:0d:65:d6:07:8c:84:a6:7a:e1:1f:0c:db:dc: 5c:39:14:67:8a:68:71:1c:42:5f:03:0b:c2:88:07: e3:90:81:3d:ae:fb:33:38:fc:5a:f8:80:71:79:4d: 1c:33:cf:10:2f:6b:e4:97:ea:76:96:0c:7b:fa:02: 43:65:90:a1:3a:7f:08:de:42:9e:79:2f:da:4a:83: 9d:65:08:30:44:18:fa:d8:f2:03:4d:3e:a4:3a:cb: 1a:25:a9:ec:a4:f5:57:19:60:2e:d4:69:98:d1:12: 43:c8:26:b8:7c:a4:36:7b:a2:2d:46:bf:f9:a0:ea: f1:d0:b9:82:e8:3c:00:e5:27:0c:ee:6d:dc:e9:1f: d5:f0:92:f6:f5:7a:9f:0b:7c:44:fa:03:c6:b3:60: b4:09:01:f3:9f:7c:48:79:7e:ec:1c:18:d9:9a:73: 4c:e2:e5:ce:7e:11:7d:9e:7c:c9:86:6d:b5:1b:f9: 01:a3:56:b6:29:69:49:72:44:17:57:91:6b:6d:87: b8:8f:06:4b:ec:a7:bf:29:ff:1c:17:25:a1:2e:4d: 98:39:d3:70:fb:96:10:57:11:93:a1:73:4c:89:64: e8:68:f6:2e:10:c7:ea:9a:06:7f:6e:15:a7:ec:aa: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:41:BB:B0:5B:4E:66:BA:78:58:A3:5F:B9:76:22:05:AF:B1:C3:2D X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d3:28:26:e0:30:a2:d9:57:2d:94:f5:43:b7:1c:30:8a:8e: 6d:59:c1:b4:d5:e4:e1:ce:fe:df:18:1c:ef:9a:a7:46:6b:d1: a5:71:85:5c:65:38:e3:f5:c5:9e:ba:a3:4f:ab:31:ff:84:6a: 33:92:ae:ea:f3:f0:f0:1f:a4:c2:d8:e3:41:ab:f8:08:06:7d: 00:10:08:cd:be:f0:19:e4:04:54:45:a5:82:01:e6:4d:70:03: 26:53:57:af:14:ca:e8:d5:1a:d4:99:c8:f5:8b:41:e8:6f:3c: 5d:b5:e1:5c:ea:32:3b:95:fa:c0:a3:94:66:59:a1:1c:21:b9: f5:8a:6b:7f:a9:e8:06:3c:aa:2f:c1:66:a1:8a:fe:50:64:d3: 58:c1:f1:01:01:96:cd:d0:61:0a:71:99:63:9d:45:8b:10:2c: 33:81:96:76:bb:5a:30:74:69:a2:f0:e7:e3:58:a4:b4:ba:fe: c1:fe:56:aa:3c:30:c6:fb:b1:b8:2c:dd:0c:7a:e7:66:3c:7b: 80:0b:2c:0f:7e:97:3d:b7:ae:69:0e:a9:c6:e8:40:22:43:9a: 3a:e1:01:96:9f:96:be:5b:00:82:2f:e8:1d:ea:c2:81:06:81: 85:3b:cc:15:1b:c4:85:60:f6:0a:84:cf:7f:16:8e:ec:10:ab: 7c:78:6b:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJL0Fje/+x0Go/3I2f6FE9hn9B9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA3MjcwMTQ4MDRaFw0yNjA3MjgwNTQ3MDRaMDMxMTAvBgNV BAMTKEZFNDFCQkIwNUI0RTY2QkE3ODU4QTM1RkI5NzYyMjA1QUZCMUMzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArYfCpuN9hZl98uJ4CTrYDWXW B4yEpnrhHwzb3Fw5FGeKaHEcQl8DC8KIB+OQgT2u+zM4/Fr4gHF5TRwzzxAva+SX 6naWDHv6AkNlkKE6fwjeQp55L9pKg51lCDBEGPrY8gNNPqQ6yxolqeyk9VcZYC7U aZjREkPIJrh8pDZ7oi1Gv/mg6vHQuYLoPADlJwzubdzpH9Xwkvb1ep8LfET6A8az YLQJAfOffEh5fuwcGNmac0zi5c5+EX2efMmGbbUb+QGjVrYpaUlyRBdXkWtth7iP Bkvsp78p/xwXJaEuTZg503D7lhBXEZOhc0yJZOho9i4Qx+qaBn9uFafsqpo3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/kG7sFtOZrp4WKNfuXYiBa+xwy0wHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMDg1ODA2NjA3NzI4ODMvMC9BQjcwRDM2RENFODcx N0QyMzg5RkZGQjlCQURDQzYwRUNEQzExN0I1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9MoJuAwotlX LZT1Q7ccMIqObVnBtNXk4c7+3xgc75qnRmvRpXGFXGU44/XFnrqjT6sx/4RqM5Ku 6vPw8B+kwtjjQav4CAZ9ABAIzb7wGeQEVEWlggHmTXADJlNXrxTK6NUa1JnI9YtB 6G88XbXhXOoyO5X6wKOUZlmhHCG59Yprf6noBjyqL8FmoYr+UGTTWMHxAQGWzdBh CnGZY51FixAsM4GWdrtaMHRpovDn41iktLr+wf5WqjwwxvuxuCzdDHrnZjx7gAss D36XPbeuaQ6pxuhAIkOaOuEBlp+WvlsAgi/oHerCgQaBhTvMFRvEhWD2CoTPfxaO 7BCrfHhrHg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:14:21 2026 by rpki-client