$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: VhctUsvWiKxg80uON65x1E8fFmyKc885PJO7UmBETmA= Subject key identifier: 26:9C:57:93:6E:50:76:BD:0D:6B:9A:23:95:AF:2F:47:4A:88:20:AF Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 183DF9D276973EE7CA12CC842D41B2CE5373BE63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:19 +0000 Manifest this update: Fri 28 Aug 2026 06:43:19 +0000 Manifest next update: Mon 31 Aug 2026 15:43:19 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: CHaH2zqNNqzvjyDp/i5SBGaIr2HWIraOtzFNP/2YiEA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3d:f9:d2:76:97:3e:e7:ca:12:cc:84:2d:41:b2:ce:53:73:be:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Aug 28 06:43:19 2026 GMT Not After : Aug 31 15:43:19 2026 GMT Subject: CN=269C57936E5076BD0D6B9A2395AF2F474A8820AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:cd:25:e1:84:9a:ee:3b:87:a0:f5:e8:62: 23:03:58:54:f3:11:a6:bf:1d:1f:59:ba:4f:b5:fc: 8a:df:ce:09:74:37:4b:ab:72:9c:27:03:78:8b:ac: 7b:b3:0f:46:de:a0:ca:bc:10:78:c8:0b:bf:fe:b9: 8d:d3:dd:22:59:47:d1:c2:3c:43:f3:c4:db:67:df: 9f:77:d1:fa:4d:9b:76:da:7b:b4:8e:ff:e5:c0:56: 8a:4d:84:24:0c:63:f7:cb:e4:9b:cd:ae:67:1e:88: b9:2e:d4:98:c8:dd:27:73:c6:0d:69:e3:53:4d:d8: 5d:32:4b:c9:05:fe:e0:eb:19:70:a9:ad:ba:5a:53: 41:d9:6f:65:5f:1e:25:c4:9b:10:d9:93:69:d7:12: 66:54:78:81:c6:46:22:01:a6:84:7f:f6:ba:5a:f1: 58:6e:a4:90:fe:c6:89:5e:32:e8:3d:eb:41:19:7a: 28:63:df:79:51:a8:e4:e0:66:29:9b:11:41:27:21: e1:50:28:bd:fd:b8:c7:02:14:ed:1b:4f:4a:42:f9: 80:e4:7b:f8:24:bc:1a:5d:95:5c:95:e9:f6:2f:c4: 44:cf:b8:f4:ed:ff:58:ae:66:f0:fd:9a:f8:c1:e4: bc:96:bb:db:16:55:e9:b8:d5:b5:41:bd:0f:41:76: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:57:93:6E:50:76:BD:0D:6B:9A:23:95:AF:2F:47:4A:88:20:AF X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c6:d4:70:50:a6:7b:8a:cc:42:a5:31:f5:2a:8e:03:4d:88: 8a:aa:bb:fa:70:60:8d:e8:31:1a:aa:47:17:91:57:4c:a0:30: 31:49:02:11:6d:b0:18:77:ee:82:1c:3c:be:93:60:e3:98:a2: 3e:14:d9:3f:b8:46:b4:10:11:c2:78:43:76:14:2c:35:d2:5e: ef:59:bd:7b:ee:5b:73:bb:5a:1f:1e:97:89:da:52:58:c6:51: d9:26:2e:d4:09:62:95:02:20:9a:a2:da:79:cd:41:31:f3:37: 9f:f7:b3:32:d0:1e:e0:55:48:53:f9:87:52:09:23:d0:22:71: 7c:ef:d6:62:25:4f:43:ee:90:84:9c:ec:3f:85:c3:14:2c:6e: 6d:42:f7:da:dc:71:5a:3e:7d:22:a5:57:d1:05:23:c6:ba:32: bc:0f:95:be:cd:be:6a:bc:ba:80:ca:f5:12:8b:10:5a:c2:0c: ab:3c:42:71:79:a0:ae:d4:6a:8d:12:e6:a9:02:02:5d:ca:45: ca:32:5b:c5:11:2a:47:d1:8c:6e:c5:e0:63:38:26:bd:93:22: f3:67:59:ca:f0:63:33:5d:62:e0:46:69:60:f1:8b:75:15:be: a4:6f:4b:88:f0:f4:f7:61:dd:49:d2:e4:ce:2e:d3:d5:8a:5f: 5c:f5:35:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGD350naXPufKEsyELUGyzlNzvmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA4MjgwNjQzMTlaFw0yNjA4MzExNTQzMTlaMDMxMTAvBgNV BAMTKDI2OUM1NzkzNkU1MDc2QkQwRDZCOUEyMzk1QUYyRjQ3NEE4ODIwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnc80l4YSa7juHoPXoYiMDWFTz Eaa/HR9Zuk+1/Irfzgl0N0urcpwnA3iLrHuzD0beoMq8EHjIC7/+uY3T3SJZR9HC PEPzxNtn35930fpNm3bae7SO/+XAVopNhCQMY/fL5JvNrmceiLku1JjI3Sdzxg1p 41NN2F0yS8kF/uDrGXCprbpaU0HZb2VfHiXEmxDZk2nXEmZUeIHGRiIBpoR/9rpa 8VhupJD+xoleMug960EZeihj33lRqOTgZimbEUEnIeFQKL39uMcCFO0bT0pC+YDk e/gkvBpdlVyV6fYvxETPuPTt/1iuZvD9mvjB5LyWu9sWVem41bVBvQ9Bdgb3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJpxXk25Qdr0Na5ojla8vR0qIIK8wHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsbUcFCme4rM QqUx9SqOA02Iiqq7+nBgjegxGqpHF5FXTKAwMUkCEW2wGHfughw8vpNg45iiPhTZ P7hGtBARwnhDdhQsNdJe71m9e+5bc7taHx6XidpSWMZR2SYu1AlilQIgmqLaec1B MfM3n/ezMtAe4FVIU/mHUgkj0CJxfO/WYiVPQ+6QhJzsP4XDFCxubUL32txxWj59 IqVX0QUjxroyvA+Vvs2+ary6gMr1EosQWsIMqzxCcXmgrtRqjRLmqQICXcpFyjJb xREqR9GMbsXgYzgmvZMi82dZyvBjM11i4EZpYPGLdRW+pG9LiPD092HdSdLkzi7T 1YpfXPU1zA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:51 2026 by rpki-client