$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: 7odqlY/x0M72tQh8jcWBqY8zTsKeVFCSvYTHXYo6KZo= Subject key identifier: 09:21:18:B8:80:CD:99:72:18:96:66:FF:73:AE:A6:56:E7:E9:81:3B Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 798498E18F7F7A6A145CE60FE25FBF9DD39E39EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 013B Signing time: Fri 28 Aug 2026 06:47:52 +0000 Manifest this update: Fri 28 Aug 2026 06:42:52 +0000 Manifest next update: Mon 31 Aug 2026 08:50:52 +0000 Files and hashes: 1: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 2: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 2NCZPaBUI9UrIRf05tvstgKbMNOPzghs4irxUUQ15cw=) 3: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:84:98:e1:8f:7f:7a:6a:14:5c:e6:0f:e2:5f:bf:9d:d3:9e:39:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Aug 28 06:42:52 2026 GMT Not After : Aug 31 08:50:52 2026 GMT Subject: CN=092118B880CD9972189666FF73AEA656E7E9813B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:cb:bc:2b:8a:c5:d1:06:30:7f:f8:bc:3d: b9:e4:0a:43:df:4e:51:3e:c1:d3:8b:0a:bc:9f:e1: e4:62:f7:6c:55:3f:2b:64:91:dc:0b:24:77:1d:9f: 9a:9e:46:66:6b:f9:da:12:e5:a0:b7:6f:68:ad:9a: c6:00:28:07:6e:34:cd:fe:e5:35:0e:2b:7a:d8:82: 7e:87:27:ad:a0:d7:24:73:a1:e0:9d:6c:9a:82:f3: ab:67:ac:11:72:bb:e3:6a:6a:a4:56:48:96:2c:35: 97:c3:8e:44:ac:26:0b:73:87:1d:2d:91:47:1e:75: 5c:73:7b:9e:21:d9:80:e1:1e:36:2e:96:fc:51:33: e8:76:ab:9d:41:94:48:d1:b5:eb:bc:3b:ce:80:69: 41:33:c1:1f:27:2e:18:a7:97:fb:25:78:e4:4e:9f: 80:92:ac:db:37:0b:40:a1:f6:1a:48:ed:8b:94:73: 20:19:94:4d:7c:86:c8:89:79:7d:99:00:b6:b6:66: 9c:d2:0c:c5:5b:02:ce:ae:f0:62:d3:25:9b:25:67: c7:8c:20:86:cc:e3:34:1d:5c:9a:aa:b3:8d:1a:0d: d9:9e:fc:31:05:8d:be:a6:98:93:f6:db:1f:a7:54: d3:51:ee:46:df:e3:fa:75:0f:0e:11:94:6e:41:90: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:21:18:B8:80:CD:99:72:18:96:66:FF:73:AE:A6:56:E7:E9:81:3B X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:12:24:39:d2:bc:ea:25:a2:fc:74:6b:5f:8f:de:6c:0a: 54:5b:b6:e9:db:c7:45:53:c1:0e:17:a0:4d:2e:0f:40:ce:4f: e6:79:dc:e4:d7:03:47:cf:f5:79:d7:11:7f:04:a6:fa:73:cd: da:8e:04:e7:7b:14:a7:87:07:fe:6a:7a:5d:02:73:a3:2c:23: 1a:9d:79:22:21:f5:45:e2:c5:53:19:20:d7:a9:af:68:81:64: 9c:7e:41:c1:07:ee:11:7f:d5:1b:58:87:39:70:32:85:c3:99: 96:73:7d:9e:df:d0:61:16:10:26:56:91:bb:78:f3:38:dc:d6: 21:9d:c6:e6:9b:a4:f5:17:17:64:8f:37:d4:80:1a:41:1d:c2: 1f:97:c2:00:00:eb:09:5f:72:2f:ea:76:18:bb:d8:a1:a5:5a: 0f:72:c8:33:90:37:a0:4c:f2:45:ca:42:80:c6:19:1e:42:62: ff:cf:a8:d6:c0:3b:1f:e4:c6:bd:e7:f8:f6:42:79:c1:af:23: 8e:db:cb:b9:7a:f7:8b:86:17:68:cd:dc:b3:15:48:00:61:35: 50:85:30:0a:12:47:a2:d9:c6:bd:06:7c:69:1f:b8:f6:49:27: ea:37:e4:0e:7e:63:d3:15:58:08:2f:64:d8:69:ea:f9:6d:d9: a3:b8:ac:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeYSY4Y9/emoUXOYP4l+/ndOeOe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA4MjgwNjQyNTJaFw0yNjA4MzEwODUwNTJaMDMxMTAvBgNV BAMTKDA5MjExOEI4ODBDRDk5NzIxODk2NjZGRjczQUVBNjU2RTdFOTgxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGj8u8K4rF0QYwf/i8PbnkCkPf TlE+wdOLCryf4eRi92xVPytkkdwLJHcdn5qeRmZr+doS5aC3b2itmsYAKAduNM3+ 5TUOK3rYgn6HJ62g1yRzoeCdbJqC86tnrBFyu+NqaqRWSJYsNZfDjkSsJgtzhx0t kUcedVxze54h2YDhHjYulvxRM+h2q51BlEjRteu8O86AaUEzwR8nLhinl/sleORO n4CSrNs3C0Ch9hpI7YuUcyAZlE18hsiJeX2ZALa2ZpzSDMVbAs6u8GLTJZslZ8eM IIbM4zQdXJqqs40aDdme/DEFjb6mmJP22x+nVNNR7kbf4/p1Dw4RlG5BkBH/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCSEYuIDNmXIYlmb/c66mVufpgTswHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFwSJDnSvOol ovx0a1+P3mwKVFu26dvHRVPBDhegTS4PQM5P5nnc5NcDR8/1edcRfwSm+nPN2o4E 53sUp4cH/mp6XQJzoywjGp15IiH1ReLFUxkg16mvaIFknH5BwQfuEX/VG1iHOXAy hcOZlnN9nt/QYRYQJlaRu3jzONzWIZ3G5puk9RcXZI831IAaQR3CH5fCAADrCV9y L+p2GLvYoaVaD3LIM5A3oEzyRcpCgMYZHkJi/8+o1sA7H+TGvef49kJ5wa8jjtvL uXr3i4YXaM3csxVIAGE1UIUwChJHotnGvQZ8aR+49kkn6jfkDn5j0xVYCC9k2Gnq +W3Zo7isUw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:51 2026 by rpki-client