$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: 83/wS7GjQX5BBzfHqULE7ON2caFk6CVjumwzB8A66eU= Subject key identifier: C9:C0:E1:9F:EE:61:D3:B2:A7:04:FB:37:AF:F9:87:06:4C:7B:4D:93 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 1BA28493DD26F536B204FD4992150E7271865F30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 12:51:06 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: MOI8oL0w3DxbDR7dnNby0Q8nJ4JvhxJzgky08rS9fII=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a2:84:93:dd:26:f5:36:b2:04:fd:49:92:15:0e:72:71:86:5f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 12:51:06 2026 GMT Subject: CN=C9C0E19FEE61D3B2A704FB37AFF987064C7B4D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:a9:aa:b0:db:80:a3:8d:d2:c5:8a:eb:0d: b8:96:b8:f6:0c:53:c8:53:d7:2f:21:f3:e2:b3:09: a7:3d:4e:bc:a9:b3:74:67:64:ec:b2:b0:6f:88:31: b3:b6:ab:a0:0b:0e:eb:ef:ea:b0:08:7f:5a:d3:c3: 18:19:ee:89:c5:76:d5:c3:7e:36:ce:c9:d8:5a:68: c7:0f:89:54:7d:65:41:13:cc:1d:4e:bb:71:27:50: 5e:ed:a2:6d:9e:c5:6f:cd:6b:8f:ce:cc:08:f2:98: 6c:2c:e6:b0:70:2b:02:7b:12:d6:5e:b3:f6:1c:a4: 5a:36:bf:63:20:35:fa:bf:5c:00:76:13:4b:ff:a8: df:77:89:10:73:45:ea:c1:a5:77:77:93:92:41:1a: 2f:5a:b5:99:77:a8:66:1c:9b:88:99:44:25:9d:d5: 20:2d:f6:91:8f:43:2c:7d:8d:3c:05:8a:f8:bf:1c: 06:67:a4:14:bd:af:b2:04:c7:17:78:f0:c6:1a:23: 4f:c3:58:3d:b8:89:d2:89:38:e7:0d:40:17:ed:a3: 6a:9b:ba:ff:23:38:e8:8f:fc:b3:b1:c0:5f:1d:1d: a9:a1:86:78:b6:a7:3e:92:92:40:47:8e:c7:a4:33: db:91:6a:b8:83:18:7a:55:3d:b3:a6:94:9d:d4:ea: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C0:E1:9F:EE:61:D3:B2:A7:04:FB:37:AF:F9:87:06:4C:7B:4D:93 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5b:33:1a:a3:78:b9:1b:55:49:ba:4b:1c:27:e4:49:3f:77: 6b:90:23:82:57:60:b0:36:d9:1c:58:af:27:78:66:c1:47:c0: 46:7e:d8:d6:63:f9:e4:ed:ed:ae:93:1a:7b:48:60:a0:dc:51: cd:cc:23:8e:77:52:e4:7f:3c:04:d9:5c:2b:91:45:9e:d4:51: c7:99:fb:d0:78:29:85:c2:08:bd:06:c9:1b:28:d8:2f:2b:4e: b3:0b:8b:74:47:55:24:20:b1:60:3e:79:87:b5:ef:3f:ce:17: c1:94:40:ad:ba:fa:31:2f:4a:b0:49:5d:39:af:92:b0:6b:e6: c4:56:fd:f3:80:a6:c3:bd:34:63:6c:57:bd:ae:21:25:e8:a2: 77:2b:5c:c3:e1:c3:b2:55:2c:a3:b4:99:4a:ac:0a:f2:16:64: 08:2b:ca:72:1f:02:30:a4:bb:4f:cc:80:78:84:57:4e:8e:48: e4:bf:a6:55:c6:ac:7f:09:e5:79:de:61:c8:a4:4e:2c:d5:1d: d7:62:50:08:07:cb:df:4a:25:08:b9:fd:14:02:4d:53:6a:a6: 67:ec:21:09:10:89:c7:91:eb:e6:3b:66:87:1c:16:66:8c:f0: ce:e3:47:bd:5c:7e:8d:16:4a:8a:9c:1f:3a:96:31:55:3b:30: 3c:ec:e9:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG6KEk90m9TayBP1JkhUOcnGGXzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzExMjUxMDZaMDMxMTAvBgNV BAMTKEM5QzBFMTlGRUU2MUQzQjJBNzA0RkIzN0FGRjk4NzA2NEM3QjREOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZ6mqsNuAo43SxYrrDbiWuPYM U8hT1y8h8+KzCac9Tryps3RnZOyysG+IMbO2q6ALDuvv6rAIf1rTwxgZ7onFdtXD fjbOydhaaMcPiVR9ZUETzB1Ou3EnUF7tom2exW/Na4/OzAjymGws5rBwKwJ7EtZe s/YcpFo2v2MgNfq/XAB2E0v/qN93iRBzRerBpXd3k5JBGi9atZl3qGYcm4iZRCWd 1SAt9pGPQyx9jTwFivi/HAZnpBS9r7IExxd48MYaI0/DWD24idKJOOcNQBfto2qb uv8jOOiP/LOxwF8dHamhhni2pz6SkkBHjsekM9uRariDGHpVPbOmlJ3U6gjxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUycDhn+5h07KnBPs3r/mHBkx7TZMwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVszGqN4uRtV SbpLHCfkST93a5AjgldgsDbZHFivJ3hmwUfARn7Y1mP55O3trpMae0hgoNxRzcwj jndS5H88BNlcK5FFntRRx5n70HgphcIIvQbJGyjYLytOswuLdEdVJCCxYD55h7Xv P84XwZRArbr6MS9KsEldOa+SsGvmxFb984Cmw700Y2xXva4hJeiidytcw+HDslUs o7SZSqwK8hZkCCvKch8CMKS7T8yAeIRXTo5I5L+mVcasfwnled5hyKROLNUd12JQ CAfL30olCLn9FAJNU2qmZ+whCRCJx5Hr5jtmhxwWZozwzuNHvVx+jRZKipwfOpYx VTswPOzp1A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:10:02 2026 by rpki-client