$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: MqZOfWQfVCFBjvNIBidg1mfY7cboPN+iB9bp6Fxr4sY= Subject key identifier: 9B:8C:27:57:54:64:E5:0D:B2:2C:46:68:80:27:54:B0:3C:52:BB:D9 Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 58318D6DAF12760910778DFEAF3A2BB6ECCD227A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: 011B Signing time: Fri 28 Aug 2026 06:48:01 +0000 Manifest this update: Fri 28 Aug 2026 06:43:01 +0000 Manifest next update: Mon 31 Aug 2026 18:15:01 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: pyFzogqHWOPN8V7Dcp8u3t1b3UIpBc47CTFOMTcESUY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:31:8d:6d:af:12:76:09:10:77:8d:fe:af:3a:2b:b6:ec:cd:22:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: Aug 28 06:43:01 2026 GMT Not After : Aug 31 18:15:01 2026 GMT Subject: CN=9B8C27575464E50DB22C4668802754B03C52BBD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:dd:23:11:13:98:ac:18:2c:f8:6d:fb:a3: 89:27:40:df:39:ae:a7:a3:0a:c1:a9:2f:78:ce:55: 25:ab:62:74:a6:8b:e8:4d:88:9e:22:58:16:0e:36: 61:c2:e2:8c:53:5b:32:aa:01:8f:d1:7e:43:c0:3a: bd:4d:53:5d:91:3e:c6:50:09:c8:41:94:c9:8b:aa: 65:a4:de:c0:1f:7b:d3:35:57:fc:e8:15:12:c2:f2: 1f:30:e8:b7:7a:64:e0:68:05:38:4a:8a:57:05:88: 2c:8e:5e:e8:69:b2:64:5b:3b:30:b5:43:9b:de:84: c6:66:27:2c:84:b4:86:1b:f1:77:53:58:4d:db:a5: 84:b9:7a:5d:10:95:99:dd:0f:06:90:fb:ae:97:ea: e0:09:1f:12:d2:ff:26:a4:56:0a:9f:aa:bb:ae:33: a7:cf:a1:91:da:7d:87:2f:16:ae:68:75:fc:66:15: a2:cb:37:63:0c:1b:17:ae:9f:18:04:f1:33:da:ac: 7f:27:42:ff:54:45:c8:47:3e:57:7f:e8:78:e1:27: 64:96:90:29:fd:16:46:01:15:cb:cf:04:91:11:86: 18:6d:c0:d8:2d:c0:d1:37:7d:cc:1e:ce:c8:6d:ac: 52:0d:ca:53:08:4b:f7:4e:bd:35:23:c0:7f:25:f2: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:27:57:54:64:E5:0D:B2:2C:46:68:80:27:54:B0:3C:52:BB:D9 X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:11:09:76:08:04:e5:b9:bc:c4:e9:76:30:0c:9f:d0:01:79: c5:6f:dd:ab:24:88:2e:01:2c:ce:d2:36:e1:5c:26:88:c0:f7: 30:fe:69:b3:ad:07:1b:4f:03:11:6d:b6:95:62:c0:b6:80:75: 43:e9:66:55:28:54:56:92:88:36:3c:59:48:02:ca:10:f1:69: d1:b5:b6:fe:6e:3b:1b:c7:2c:fd:5a:61:66:d8:3a:09:8d:4d: 48:38:16:32:09:d3:e7:a3:d3:a1:fd:20:77:2e:14:2d:e3:ce: 14:8d:95:79:10:8f:e5:4e:6e:ea:01:d6:89:93:32:5b:29:1f: 32:ca:43:19:8c:23:dc:57:10:2e:d9:f6:2f:60:43:ca:4d:8d: c5:cb:5c:8d:23:ab:1a:a0:7d:ec:a1:c0:65:f1:44:ec:30:2e: f6:c2:86:26:ab:00:f5:65:90:36:ae:2c:f3:84:3c:68:fe:57: 77:2a:8e:1b:f2:81:72:eb:49:0c:eb:0b:49:33:b9:2a:05:e0: cc:83:e2:04:06:f3:b7:2b:a7:a9:e2:5b:53:69:bc:bf:d3:27: 2f:7b:3e:cc:b0:ce:11:fa:59:8a:aa:db:97:cc:30:40:41:2c: cc:ef:1e:fd:2c:82:58:be:58:3d:09:56:34:fe:42:3b:5c:cf: 67:2f:64:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWDGNba8SdgkQd43+rzortuzNInowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjA4MjgwNjQzMDFaFw0yNjA4MzExODE1MDFaMDMxMTAvBgNV BAMTKDlCOEMyNzU3NTQ2NEU1MERCMjJDNDY2ODgwMjc1NEIwM0M1MkJCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRZd0jEROYrBgs+G37o4knQN85 rqejCsGpL3jOVSWrYnSmi+hNiJ4iWBYONmHC4oxTWzKqAY/RfkPAOr1NU12RPsZQ CchBlMmLqmWk3sAfe9M1V/zoFRLC8h8w6Ld6ZOBoBThKilcFiCyOXuhpsmRbOzC1 Q5vehMZmJyyEtIYb8XdTWE3bpYS5el0QlZndDwaQ+66X6uAJHxLS/yakVgqfqruu M6fPoZHafYcvFq5odfxmFaLLN2MMGxeunxgE8TParH8nQv9URchHPld/6HjhJ2SW kCn9FkYBFcvPBJERhhhtwNgtwNE3fcwezshtrFINylMIS/dOvTUjwH8l8h3vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm4wnV1Rk5Q2yLEZogCdUsDxSu9kwHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhEJdggE5bm8 xOl2MAyf0AF5xW/dqySILgEsztI24VwmiMD3MP5ps60HG08DEW22lWLAtoB1Q+lm VShUVpKINjxZSALKEPFp0bW2/m47G8cs/VphZtg6CY1NSDgWMgnT56PTof0gdy4U LePOFI2VeRCP5U5u6gHWiZMyWykfMspDGYwj3FcQLtn2L2BDyk2NxctcjSOrGqB9 7KHAZfFE7DAu9sKGJqsA9WWQNq4s84Q8aP5XdyqOG/KBcutJDOsLSTO5KgXgzIPi BAbztyunqeJbU2m8v9MnL3s+zLDOEfpZiqrbl8wwQEEszO8e/SyCWL5YPQlWNP5C O1zPZy9k1w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:22 2026 by rpki-client