$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: D1UqjHy747LXDCNvSWKHO/JP1mx89+ttLz7G4/ugjIA= Subject key identifier: 58:90:20:94:9D:84:B3:BE:F7:A6:CA:17:86:18:57:BB:5C:82:10:FB Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 353FE1F257362D3067700F5E8A45CDA5413B7207 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 16 Signing time: Tue 14 Jul 2026 07:00:38 +0000 Manifest this update: Tue 14 Jul 2026 06:55:38 +0000 Manifest next update: Wed 15 Jul 2026 10:31:38 +0000 Files and hashes: 1: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: oGzF+x6Oy1uFFGlbThxHCILcuYtnm/IGqi+k/yqGTxg=) 2: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3f:e1:f2:57:36:2d:30:67:70:0f:5e:8a:45:cd:a5:41:3b:72:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Jul 14 06:55:38 2026 GMT Not After : Jul 15 10:31:38 2026 GMT Subject: CN=589020949D84B3BEF7A6CA17861857BB5C8210FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:52:9b:03:6d:68:37:b3:d3:27:33:bc:ce: a7:03:85:ab:18:12:3b:79:2f:68:2b:2a:6c:ef:ed: ac:b6:9c:ed:2c:85:97:2a:28:f0:7c:72:4f:50:e9: 2a:90:62:a7:98:99:5c:05:e5:65:73:8c:44:48:90: 64:b6:dd:9b:91:47:8c:45:05:d0:ee:04:b3:d2:f1: f9:08:03:1e:6f:43:5a:98:11:90:0e:1a:82:20:b5: 75:a4:58:02:4e:30:91:1c:90:83:ac:21:8e:9b:3b: 50:8f:e5:de:95:59:d6:21:84:95:5d:29:7f:cc:4c: c2:f0:b1:1a:b7:2a:aa:db:be:71:88:60:b6:3b:78: 2f:f5:f9:22:84:13:8a:cd:8c:69:27:87:0f:5c:91: 4d:bd:99:0b:d4:04:e7:98:a1:fb:56:d0:11:d8:b6: d4:ce:6b:be:7a:39:4e:45:52:67:27:97:55:6a:bf: c4:ce:a8:48:9b:81:77:74:6d:c3:5e:3b:3f:72:88: f6:a0:83:87:9a:76:3d:1f:ac:f8:46:aa:3d:10:0d: 3c:d0:2a:b1:30:44:e1:92:cd:66:81:b2:24:97:69: 23:72:1b:86:46:dc:0a:c5:d7:e6:d0:1e:a7:06:7e: 63:06:f8:c1:03:8c:88:2d:1d:99:52:4b:30:20:41: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:90:20:94:9D:84:B3:BE:F7:A6:CA:17:86:18:57:BB:5C:82:10:FB X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:81:5e:fb:cf:8e:14:55:7f:6b:35:fe:c5:17:fc:d1:c5:de: 6e:77:01:75:28:ca:e9:d1:14:d4:53:35:fd:12:21:8f:95:92: 81:57:90:dc:cc:39:d1:35:d8:3f:b2:6d:b5:ed:57:ce:2a:d6: 4b:6d:2d:ad:2c:ba:24:f4:c1:05:97:b5:8d:ec:44:13:c6:0b: 80:3e:8a:b5:68:54:fe:8d:49:a7:38:18:77:17:7d:5d:3a:69: f5:ae:50:42:93:b2:f5:78:01:fc:c9:74:7b:30:b3:a3:57:e0: 7e:71:dd:8b:23:26:68:aa:53:b3:fa:f0:69:7a:e7:5a:3a:fc: 7a:d0:db:d9:ee:00:e1:96:0c:d1:1c:99:be:c3:fe:80:06:8e: 60:27:56:57:01:c7:cf:a3:6f:90:43:2e:bf:b1:75:05:89:85: 13:08:cd:aa:f3:5d:35:34:9e:3b:eb:d2:1c:e6:aa:ee:25:07: 96:dd:6a:17:dd:0d:f5:59:bf:03:57:66:e1:cc:16:ff:49:cf: 32:e9:df:83:af:18:10:0e:d9:df:29:5c:f8:54:e4:e8:68:5e: 86:e1:4b:a1:1c:2d:c0:c7:98:03:17:8a:71:f1:d8:2b:79:b8: 5a:15:cb:54:9f:00:fe:74:f8:24:3b:43:b2:49:f5:43:f6:38: e5:81:0f:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNT/h8lc2LTBncA9eikXNpUE7cgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjA3MTQwNjU1MzhaFw0yNjA3MTUxMDMxMzhaMDMxMTAvBgNV BAMTKDU4OTAyMDk0OUQ4NEIzQkVGN0E2Q0ExNzg2MTg1N0JCNUM4MjEwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUx1KbA21oN7PTJzO8zqcDhasY Ejt5L2grKmzv7ay2nO0shZcqKPB8ck9Q6SqQYqeYmVwF5WVzjERIkGS23ZuRR4xF BdDuBLPS8fkIAx5vQ1qYEZAOGoIgtXWkWAJOMJEckIOsIY6bO1CP5d6VWdYhhJVd KX/MTMLwsRq3KqrbvnGIYLY7eC/1+SKEE4rNjGknhw9ckU29mQvUBOeYoftW0BHY ttTOa756OU5FUmcnl1Vqv8TOqEibgXd0bcNeOz9yiPagg4eadj0frPhGqj0QDTzQ KrEwROGSzWaBsiSXaSNyG4ZG3ArF1+bQHqcGfmMG+MEDjIgtHZlSSzAgQTPfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWJAglJ2Es773psoXhhhXu1yCEPswHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoFe+8+OFFV/ azX+xRf80cXebncBdSjK6dEU1FM1/RIhj5WSgVeQ3Mw50TXYP7Jtte1XzirWS20t rSy6JPTBBZe1jexEE8YLgD6KtWhU/o1JpzgYdxd9XTpp9a5QQpOy9XgB/Ml0ezCz o1fgfnHdiyMmaKpTs/rwaXrnWjr8etDb2e4A4ZYM0RyZvsP+gAaOYCdWVwHHz6Nv kEMuv7F1BYmFEwjNqvNdNTSeO+vSHOaq7iUHlt1qF90N9Vm/A1dm4cwW/0nPMunf g68YEA7Z3ylc+FTk6GhehuFLoRwtwMeYAxeKcfHYK3m4WhXLVJ8A/nT4JDtDskn1 Q/Y45YEPTQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:56 2026 by rpki-client