$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json) Hash identifier: yVTdxlr1kfPx0dRSKLzthRbnK47DxkUlkJhAIhH2C9E= Subject key identifier: 8A:03:4C:53:8F:90:87:93:DC:B4:9B:19:3C:6D:F5:E9:48:54:CF:6E Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 Certificate issuer: /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Certificate serial: 50A111821F8064512A062AC36330EC4B06F50958 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft Manifest number: C7 Signing time: Fri 28 Aug 2026 06:47:39 +0000 Manifest this update: Fri 28 Aug 2026 06:42:39 +0000 Manifest next update: Mon 31 Aug 2026 17:17:39 +0000 Files and hashes: 1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: Niz1ERHQd/wu0x+oUkgj1glw7QWaaKYA/F1cz5A3vmY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a1:11:82:1f:80:64:51:2a:06:2a:c3:63:30:ec:4b:06:f5:09:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Validity Not Before: Aug 28 06:42:39 2026 GMT Not After : Aug 31 17:17:39 2026 GMT Subject: CN=8A034C538F908793DCB49B193C6DF5E94854CF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:ec:37:c0:8d:13:b0:b9:9c:09:b4:f4:cd: a6:83:98:31:b6:13:1e:ba:0e:0a:9d:5e:77:7b:8a: 17:c7:c9:0a:65:11:1e:56:be:c5:d0:a0:f9:b0:88: 25:e6:fa:2f:b3:3b:99:28:b6:7a:68:9b:8f:ec:50: e5:69:cd:0a:59:02:45:e3:ed:4b:50:78:7d:29:32: 5f:fb:ac:01:b3:e9:67:82:38:1b:85:66:80:79:0a: 40:75:14:aa:16:af:dd:d2:84:87:0e:c5:10:9b:6d: 86:00:4c:b3:37:84:5c:98:b1:84:37:b7:0c:21:a6: 39:a9:b4:ce:ee:01:85:9b:8f:3a:6f:f6:d7:46:5d: 22:69:bb:4e:ee:66:fe:5f:b5:ee:9a:46:fb:c9:78: b5:2c:9f:9e:3a:27:ac:64:81:b5:92:2a:46:a6:29: e3:e4:c0:bc:e5:84:ad:d2:d3:1d:ec:bd:cb:4d:18: 4c:de:05:35:0d:bc:d8:f3:39:f8:37:ac:21:d7:6a: e4:23:95:f8:cf:b5:21:ba:2e:09:17:9b:b1:d9:5b: d5:7c:d5:6b:d3:4b:9a:d4:78:94:7c:f4:e2:28:0b: 55:a3:df:d3:e2:21:68:26:e4:7b:89:d0:50:1e:b8: 10:fd:43:b9:6b:aa:8c:b8:3c:57:db:d4:a0:a3:a4: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:4C:53:8F:90:87:93:DC:B4:9B:19:3C:6D:F5:E9:48:54:CF:6E X509v3 Authority Key Identifier: keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:28:88:a2:26:1e:3c:1b:2c:43:ed:bb:55:c6:a5:6c:4b:be: 3d:7d:c1:07:1b:cd:bd:87:21:10:81:61:9f:25:d4:6a:69:f4: 76:e3:f1:8e:3d:7c:fd:4c:7a:58:f3:b3:ea:0b:c6:b2:1b:06: 7b:65:da:f3:27:1b:93:15:c8:b4:b4:80:0d:01:61:99:68:69: fd:7e:44:05:c4:b3:5f:8c:1a:bd:3e:3f:b9:94:d4:0c:39:e4: c8:87:e4:07:1f:3a:27:eb:b7:a4:4e:7b:a9:cf:4e:08:c8:99: 81:1c:c9:45:76:4c:02:6c:65:80:3f:28:e1:3a:79:a3:fc:d6: f5:a7:90:f7:57:b3:7f:01:ad:4e:fe:eb:42:11:54:da:46:27: fa:24:4f:6a:6e:0d:db:c2:e5:e0:e4:2c:52:68:6e:02:03:a9: d3:db:3e:84:83:e1:5e:1c:3e:c3:d5:8a:1e:3e:c2:fe:9c:49: 0d:af:e2:22:70:d1:21:15:ca:23:d2:e6:80:61:eb:47:09:48: 40:af:2c:74:e5:c1:b6:42:a1:5d:26:04:00:40:a8:67:51:ee: c8:50:bd:2f:a6:50:7e:00:32:f1:66:3e:5e:74:ef:d8:d0:bb: 11:cc:65:26:06:b4:52:4f:ec:38:eb:81:76:7d:d0:0a:f7:35: 79:78:a2:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUKERgh+AZFEqBirDYzDsSwb1CVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlE ODZFMjhBNTAeFw0yNjA4MjgwNjQyMzlaFw0yNjA4MzExNzE3MzlaMDMxMTAvBgNV BAMTKDhBMDM0QzUzOEY5MDg3OTNEQ0I0OUIxOTNDNkRGNUU5NDg1NENGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjU+w3wI0TsLmcCbT0zaaDmDG2 Ex66DgqdXnd7ihfHyQplER5WvsXQoPmwiCXm+i+zO5kotnpom4/sUOVpzQpZAkXj 7UtQeH0pMl/7rAGz6WeCOBuFZoB5CkB1FKoWr93ShIcOxRCbbYYATLM3hFyYsYQ3 twwhpjmptM7uAYWbjzpv9tdGXSJpu07uZv5fte6aRvvJeLUsn546J6xkgbWSKkam KePkwLzlhK3S0x3svctNGEzeBTUNvNjzOfg3rCHXauQjlfjPtSG6LgkXm7HZW9V8 1WvTS5rUeJR89OIoC1Wj39PiIWgm5HuJ0FAeuBD9Q7lrqoy4PFfb1KCjpE3nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUigNMU4+Qh5PctJsZPG316UhUz24wHwYDVR0j BBgwFoAU8xgpf34rHJSEmku2ehDwKdhuKKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjE3NDk3Ny8wL0YzMTgyOTdGN0UyQjFDOTQ4NDlBNEJCNjdBMTBG MDI5RDg2RTI4QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlEODZFMjhBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIxNzQ5NzcvMC9GMzE4Mjk3RjdFMkIx Qzk0ODQ5QTRCQjY3QTEwRjAyOUQ4NkUyOEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiiIoiYePBss Q+27VcalbEu+PX3BBxvNvYchEIFhnyXUamn0duPxjj18/Ux6WPOz6gvGshsGe2Xa 8ycbkxXItLSADQFhmWhp/X5EBcSzX4wavT4/uZTUDDnkyIfkBx86J+u3pE57qc9O CMiZgRzJRXZMAmxlgD8o4Tp5o/zW9aeQ91ezfwGtTv7rQhFU2kYn+iRPam4N28Ll 4OQsUmhuAgOp09s+hIPhXhw+w9WKHj7C/pxJDa/iInDRIRXKI9LmgGHrRwlIQK8s dOXBtkKhXSYEAECoZ1HuyFC9L6ZQfgAy8WY+XnTv2NC7EcxlJga0Uk/sOOuBdn3Q Cvc1eXiiHA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:56 2026 by rpki-client