$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: Z+dMyUF6C6ydAAOLiptnDvuwoKgOD/OVXkNZa4LnZd8= Subject key identifier: FA:7D:68:14:B3:96:EE:38:EB:B1:DC:AE:8B:DC:BC:DD:C6:3E:8D:16 Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 6C6BD1D27B5BEEB3062B8A40F49FC838490E176F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: CA Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 10:34:53 +0000 Files and hashes: 1: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 2: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) 3: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: e+mXzbmYf8Eq73Xz0YjPWSOIojueAUlMeJGTjr+0W6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6b:d1:d2:7b:5b:ee:b3:06:2b:8a:40:f4:9f:c8:38:49:0e:17:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 10:34:53 2026 GMT Subject: CN=FA7D6814B396EE38EBB1DCAE8BDCBCDDC63E8D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:ed:70:4b:83:f4:66:c4:38:ba:5c:67:7c: f9:c5:6b:40:42:e9:24:5c:3c:c9:af:a9:4e:13:f8: 08:b4:96:80:03:50:4d:99:eb:97:35:e8:05:0e:a7: 69:7b:3f:dc:8b:9d:02:f3:c9:61:26:49:4b:a7:18: 69:8e:79:9e:63:1a:bb:71:5b:b9:e1:b1:cd:ef:74: 7e:0a:59:cf:95:75:39:bf:97:ee:8c:d0:b3:f9:23: 1f:a8:29:a2:c2:6b:bd:96:de:62:fa:ee:fd:e5:d6: 44:87:9b:ba:46:7a:13:72:1f:7e:e0:e1:2b:53:04: 81:8a:26:a3:b8:98:ea:4c:79:92:7b:c3:b8:fc:84: 7c:29:f9:d6:66:aa:ab:e2:b5:f5:48:4a:24:ef:b6: 73:43:a5:bd:b9:15:c6:ff:8e:9a:50:b1:9a:2d:b9: b6:79:57:9b:e3:e8:2a:65:b6:25:de:1c:61:f3:1f: 38:37:48:c0:5a:99:a5:57:51:e4:1d:06:9a:38:16: 4f:37:40:84:54:ab:04:28:65:80:d6:7b:77:ab:44: 88:b4:34:d3:d1:bc:17:de:73:73:88:f5:93:a8:f4: 07:02:28:cf:b1:f9:ca:d8:b3:2b:1f:58:0f:16:a0: cc:c9:0f:4d:b1:18:c9:7a:55:ca:fe:97:68:8f:c2: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7D:68:14:B3:96:EE:38:EB:B1:DC:AE:8B:DC:BC:DD:C6:3E:8D:16 X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:82:aa:94:7f:39:63:07:9d:6a:54:22:6b:2f:07:9a:b6: e9:88:be:5a:42:1f:4f:92:c6:f0:31:4e:b3:de:00:47:58:50: ac:58:77:5c:79:04:57:4d:89:e7:3b:da:7a:89:bc:e1:d0:81: ed:8e:74:a1:e8:0d:4e:35:78:e5:94:27:d2:bd:e9:97:6e:d0: 8f:ae:0f:a0:aa:d2:ca:bd:51:93:e8:30:a3:8f:62:28:f2:34: 6b:55:b6:56:b0:26:c9:fe:99:c6:c9:76:b0:e3:4c:83:9d:ff: 7f:60:4c:2d:4f:39:5a:0f:06:ed:c9:03:ec:5f:1f:f6:63:49: 5e:09:fe:98:82:79:4c:63:3b:f4:d6:ae:d1:d6:e1:df:66:a1: 6c:3a:08:34:0e:ee:9a:cc:0f:54:72:e8:ea:d1:cb:12:ad:da: b3:17:20:c8:60:8c:f9:d6:a7:46:4f:cf:1b:39:06:d8:7a:c2: 6c:05:32:c5:53:46:55:e3:94:5f:d8:54:c8:f7:c2:49:ea:32: 73:5c:60:5d:13:08:d3:35:89:45:86:50:5e:7e:0f:75:55:a1: 26:60:2c:fb:ca:d3:5d:83:73:c4:1a:cb:b0:53:f1:d8:b4:dd: 37:1d:63:f2:0a:4c:28:10:2e:7a:4c:e3:19:0c:9a:57:ff:d3: 87:af:8b:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbGvR0ntb7rMGK4pA9J/IOEkOF28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzExMDM0NTNaMDMxMTAvBgNV BAMTKEZBN0Q2ODE0QjM5NkVFMzhFQkIxRENBRThCRENCQ0REQzYzRThEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+O1wS4P0ZsQ4ulxnfPnFa0BC 6SRcPMmvqU4T+Ai0loADUE2Z65c16AUOp2l7P9yLnQLzyWEmSUunGGmOeZ5jGrtx W7nhsc3vdH4KWc+VdTm/l+6M0LP5Ix+oKaLCa72W3mL67v3l1kSHm7pGehNyH37g 4StTBIGKJqO4mOpMeZJ7w7j8hHwp+dZmqqvitfVISiTvtnNDpb25Fcb/jppQsZot ubZ5V5vj6CpltiXeHGHzHzg3SMBamaVXUeQdBpo4Fk83QIRUqwQoZYDWe3erRIi0 NNPRvBfec3OI9ZOo9AcCKM+x+crYsysfWA8WoMzJD02xGMl6Vcr+l2iPwvPVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+n1oFLOW7jjrsdyui9y83cY+jRYwHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxSCqpR/OWMH nWpUImsvB5q26Yi+WkIfT5LG8DFOs94AR1hQrFh3XHkEV02J5zvaeom84dCB7Y50 oegNTjV45ZQn0r3pl27Qj64PoKrSyr1Rk+gwo49iKPI0a1W2VrAmyf6Zxsl2sONM g53/f2BMLU85Wg8G7ckD7F8f9mNJXgn+mIJ5TGM79Nau0dbh32ahbDoINA7umswP VHLo6tHLEq3asxcgyGCM+danRk/PGzkG2HrCbAUyxVNGVeOUX9hUyPfCSeoyc1xg XRMI0zWJRYZQXn4PdVWhJmAs+8rTXYNzxBrLsFPx2LTdNx1j8gpMKBAuekzjGQya V//Th6+LvA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:57 2026 by rpki-client