$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json) Hash identifier: Sj0q2Lwhsz4PlA0uNw+qWqsk6hWJbzncTBT/RMMTD/8= Subject key identifier: B8:EB:94:61:BD:99:77:27:90:51:DC:EA:C6:28:58:BC:4C:75:D7:9A Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036 Certificate serial: 52A32A229A0B35062C31901B5D9CC7908AB736D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:08 +0000 Manifest this update: Fri 28 Aug 2026 06:43:08 +0000 Manifest next update: Mon 31 Aug 2026 12:30:08 +0000 Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: p16Wn6Ydrpex/LmfVkArsBsxqrGfCm/RGz/rGHIioxc=) 2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a3:2a:22:9a:0b:35:06:2c:31:90:1b:5d:9c:c7:90:8a:b7:36:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036 Validity Not Before: Aug 28 06:43:08 2026 GMT Not After : Aug 31 12:30:08 2026 GMT Subject: CN=B8EB9461BD9977279051DCEAC62858BC4C75D79A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:96:15:c9:2e:b2:e3:a5:5a:0e:c8:97:7b: e9:b9:2a:4d:9d:e1:9f:89:bb:5c:db:6c:da:5b:24: 52:65:20:21:2e:8c:8c:b0:a2:eb:b2:ff:6c:af:31: 32:02:45:f0:a9:b7:91:17:a0:9a:65:9b:09:63:ad: 70:7a:bb:64:d4:9d:32:c9:bc:c0:6a:9a:61:63:65: 5b:4e:c9:88:4c:df:4f:a4:af:f1:b0:b4:aa:82:b7: 0c:ed:1d:db:5f:9b:6b:81:3b:9a:74:47:14:79:a4: d7:2b:44:16:95:d6:31:45:7b:60:e1:9a:fd:60:e1: 61:04:86:4f:fa:70:e0:33:65:a1:0c:18:ff:73:af: 53:96:c4:66:fa:cd:06:c0:cd:d0:da:12:04:96:c2: 40:47:db:a2:52:c0:48:a0:57:7f:f8:a9:87:59:87: e7:58:80:aa:2f:80:e2:97:8b:70:b4:72:b8:f0:18: 15:be:32:2c:17:82:e5:e4:59:f4:59:c7:d7:0f:52: a0:43:21:21:fe:84:d5:2b:a6:98:33:56:67:b4:85: 03:5d:35:9f:dd:50:2b:10:99:90:7c:7c:a6:a9:af: 3a:16:17:0d:46:13:54:0d:13:29:45:60:bb:f0:54: b9:76:e0:58:06:61:74:f0:e7:61:d1:01:95:21:0c: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:94:61:BD:99:77:27:90:51:DC:EA:C6:28:58:BC:4C:75:D7:9A X509v3 Authority Key Identifier: keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:87:1e:cb:31:21:ff:e1:5e:20:21:bd:4c:fe:d5:e9:76: 67:a9:d8:06:1f:42:e3:db:64:3f:7a:17:d4:a2:b9:19:ec:36: f9:62:a9:4b:09:71:2a:01:fa:1a:a9:72:72:e9:35:4d:36:01: aa:e9:0d:ff:f5:c6:d9:7a:c6:b0:eb:82:de:72:ed:fc:9b:e9: 73:0b:b5:a0:4b:2e:d1:aa:ae:ce:0e:e5:5c:2e:18:46:6d:9e: 8f:19:40:1d:be:44:7c:6b:80:40:fa:ca:c1:b6:f9:30:32:92: 33:a4:62:1f:ff:57:82:7d:cf:af:22:d4:a0:ec:fa:ee:e4:8d: 0c:5c:75:b0:29:61:1b:e2:86:64:33:f9:15:94:e6:5e:03:94: 13:fc:06:72:04:c2:dd:1f:7d:0e:be:79:b8:6a:01:7c:b6:1a: 73:95:45:b0:98:02:1b:6e:66:61:49:97:a0:dc:dd:7f:a5:24: b1:75:0b:14:95:cf:16:3a:30:fd:58:ca:e8:33:d0:d0:55:90: fa:a4:d9:18:b8:8d:41:b6:bc:77:3f:9c:45:32:64:b5:c7:da: 72:e2:23:23:27:34:7f:55:fe:7e:fb:3b:fa:49:a7:11:93:34: 29:7b:83:89:27:25:ee:e9:1e:0f:b3:08:31:38:a4:05:4d:cb: 3b:2b:fb:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUqMqIpoLNQYsMZAbXZzHkIq3NtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2 ODc3NjAzNjAeFw0yNjA4MjgwNjQzMDhaFw0yNjA4MzExMjMwMDhaMDMxMTAvBgNV BAMTKEI4RUI5NDYxQkQ5OTc3Mjc5MDUxRENFQUM2Mjg1OEJDNEM3NUQ3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwZYVyS6y46VaDsiXe+m5Kk2d 4Z+Ju1zbbNpbJFJlICEujIywouuy/2yvMTICRfCpt5EXoJplmwljrXB6u2TUnTLJ vMBqmmFjZVtOyYhM30+kr/GwtKqCtwztHdtfm2uBO5p0RxR5pNcrRBaV1jFFe2Dh mv1g4WEEhk/6cOAzZaEMGP9zr1OWxGb6zQbAzdDaEgSWwkBH26JSwEigV3/4qYdZ h+dYgKovgOKXi3C0crjwGBW+MiwXguXkWfRZx9cPUqBDISH+hNUrppgzVme0hQNd NZ/dUCsQmZB8fKaprzoWFw1GE1QNEylFYLvwVLl24FgGYXTw52HRAZUhDJ6bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuOuUYb2ZdyeQUdzqxihYvEx115owHwYDVR0j BBgwFoAUlOcQ7L0raZSYx1+pJZNHrGh3YDYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDYxODg4MS8wLzk0RTcxMEVDQkQyQjY5OTQ5OEM3NUZBOTI1OTM0 N0FDNjg3NzYwMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2ODc3NjAzNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2MTg4ODEvMC85NEU3MTBFQ0JEMkI2 OTk0OThDNzVGQTkyNTkzNDdBQzY4Nzc2MDM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfiHHssxIf/h XiAhvUz+1el2Z6nYBh9C49tkP3oX1KK5Gew2+WKpSwlxKgH6Gqlycuk1TTYBqukN //XG2XrGsOuC3nLt/Jvpcwu1oEsu0aquzg7lXC4YRm2ejxlAHb5EfGuAQPrKwbb5 MDKSM6RiH/9Xgn3PryLUoOz67uSNDFx1sClhG+KGZDP5FZTmXgOUE/wGcgTC3R99 Dr55uGoBfLYac5VFsJgCG25mYUmXoNzdf6UksXULFJXPFjow/VjK6DPQ0FWQ+qTZ GLiNQba8dz+cRTJktcfacuIjIyc0f1X+fvs7+kmnEZM0KXuDiScl7ukeD7MIMTik BU3LOyv7Ig== -----END CERTIFICATE-----Generated at Sat Aug 29 07:19:45 2026 by rpki-client