$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: Emdme0NIE1PAv8XjRjJcWkbhzy9Y/38RHKnZnVvP+Os= Subject key identifier: B3:08:8E:98:D8:CF:F7:54:F4:49:F7:AA:61:E6:82:B5:6B:44:9D:5A Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 05C06F49D984270F8C004AF0892F89B6103154C7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 012C Signing time: Thu 03 Sep 2026 14:58:36 +0000 Manifest this update: Thu 03 Sep 2026 14:53:36 +0000 Manifest next update: Sun 06 Sep 2026 17:45:36 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: LARKrga7NFZo2G6smeyjlvI0bXrJqJWx4KErdQvKsJ4=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c0:6f:49:d9:84:27:0f:8c:00:4a:f0:89:2f:89:b6:10:31:54:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Sep 3 14:53:36 2026 GMT Not After : Sep 6 17:45:36 2026 GMT Subject: CN=B3088E98D8CFF754F449F7AA61E682B56B449D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:41:80:21:9d:21:2d:86:d9:6a:65:33:de: c5:be:64:13:6f:18:2a:f0:39:7c:9b:1a:7e:d3:ff: b5:3c:04:c4:f0:88:27:df:53:85:a5:0b:f5:4b:4c: 0d:e8:ae:a9:6b:3e:6b:af:eb:5b:0d:c3:cd:5b:c2: 0d:be:1f:43:66:78:4e:6d:a7:c8:38:5e:34:6e:13: 9f:c7:41:c0:e5:31:ea:6d:f8:15:44:10:48:7e:78: 10:31:3d:9f:ec:f2:a1:40:af:f8:1d:ad:24:58:bc: 4e:b4:93:6c:93:ea:b7:81:ff:1e:af:cc:92:5a:df: 5f:ba:e0:dd:07:d6:aa:fe:44:4b:a3:fe:52:ed:d9: 3b:cb:62:82:a0:eb:0e:6e:a4:c0:f2:bd:50:f1:2a: b1:3e:99:2a:fb:0a:eb:41:64:38:ee:fd:e9:91:c6: c6:8c:4e:f0:8f:8d:f3:12:d7:38:d7:92:64:1a:b2: c4:9b:c3:2d:d5:95:3f:4f:0d:cd:fb:3b:90:13:dd: df:7a:54:b4:25:aa:c9:d7:9d:67:7d:c3:dd:49:fb: 6c:b2:a4:d1:df:e7:ac:7b:39:2d:3f:ca:77:0c:bc: af:58:7f:5a:60:6f:6f:54:25:e5:c4:87:fe:74:fa: 61:df:f8:1c:87:6b:c4:a8:77:f3:29:52:9c:5e:df: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:08:8E:98:D8:CF:F7:54:F4:49:F7:AA:61:E6:82:B5:6B:44:9D:5A X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:82:7e:4f:e5:1b:20:ef:78:7e:6a:bb:93:7b:c4:8a:37:01: d6:7a:8b:30:f5:d4:cb:9b:27:9f:e9:a6:84:61:a6:31:af:1d: 54:ce:f1:91:0b:e3:e7:73:0b:b7:e9:5d:7a:78:3c:1e:2f:cf: f8:85:a8:4b:bf:85:40:67:21:f1:b1:ab:0f:a1:3f:7a:18:44: 16:e6:73:04:99:2e:58:f1:a8:4a:9a:c1:c0:b8:95:3f:6e:8d: 06:0e:69:19:4e:72:69:07:da:8f:f5:e1:d2:8f:1f:1f:b9:71: df:4c:f7:8d:6f:3c:90:62:71:44:cb:f0:7b:28:b4:be:36:ed: 9c:62:af:fa:25:9f:3d:40:7e:7c:c8:77:b1:94:b5:84:d7:1b: a5:80:ec:07:14:d2:3b:94:6c:ba:c2:2b:6f:c7:30:21:fc:c6: 7f:80:0e:bb:e2:d2:a9:e6:62:02:c2:c5:5a:39:85:15:a4:81: c4:39:8c:72:54:ff:ef:41:81:a7:ae:7c:70:5d:79:f1:57:73: fb:54:cb:53:de:94:d2:79:36:3f:71:8e:f1:47:2c:3e:28:fc: b3:e0:e2:74:14:db:d5:19:ea:47:37:85:f5:bf:9d:3f:df:15: 7b:77:ff:01:ec:ee:b3:a0:a4:4f:9c:4c:9a:72:8e:bc:33:b8: f3:3c:db:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBcBvSdmEJw+MAErwiS+JthAxVMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA5MDMxNDUzMzZaFw0yNjA5MDYxNzQ1MzZaMDMxMTAvBgNV BAMTKEIzMDg4RTk4RDhDRkY3NTRGNDQ5RjdBQTYxRTY4MkI1NkI0NDlENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6UGAIZ0hLYbZamUz3sW+ZBNv GCrwOXybGn7T/7U8BMTwiCffU4WlC/VLTA3orqlrPmuv61sNw81bwg2+H0NmeE5t p8g4XjRuE5/HQcDlMept+BVEEEh+eBAxPZ/s8qFAr/gdrSRYvE60k2yT6reB/x6v zJJa31+64N0H1qr+REuj/lLt2TvLYoKg6w5upMDyvVDxKrE+mSr7CutBZDju/emR xsaMTvCPjfMS1zjXkmQassSbwy3VlT9PDc37O5AT3d96VLQlqsnXnWd9w91J+2yy pNHf56x7OS0/yncMvK9Yf1pgb29UJeXEh/50+mHf+ByHa8Sod/MpUpxe3z6NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUswiOmNjP91T0SfeqYeaCtWtEnVowHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIJ+T+UbIO94 fmq7k3vEijcB1nqLMPXUy5snn+mmhGGmMa8dVM7xkQvj53MLt+ldeng8Hi/P+IWo S7+FQGch8bGrD6E/ehhEFuZzBJkuWPGoSprBwLiVP26NBg5pGU5yaQfaj/Xh0o8f H7lx30z3jW88kGJxRMvweyi0vjbtnGKv+iWfPUB+fMh3sZS1hNcbpYDsBxTSO5Rs usIrb8cwIfzGf4AOu+LSqeZiAsLFWjmFFaSBxDmMclT/70GBp658cF158Vdz+1TL U96U0nk2P3GO8UcsPij8s+DidBTb1RnqRzeF9b+dP98Ve3f/Aezus6CkT5xMmnKO vDO48zzbiQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:57:39 2026 by rpki-client