$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: xw3pKR58o80eq8fHpTfe2MO+6Ju7iZHla5uyZa7jrZM= Subject key identifier: 4C:2F:1E:C5:9F:E3:AA:80:8C:26:C7:E8:F5:9D:0A:0F:7B:53:BB:8E Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 4F506D114E1F626DADB08EB3A7491A70591A2D74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: C4 Signing time: Fri 04 Sep 2026 07:05:07 +0000 Manifest this update: Fri 04 Sep 2026 07:00:07 +0000 Manifest next update: Mon 07 Sep 2026 14:01:07 +0000 Files and hashes: 1: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: W9Y+jTjSUiW0ce1X0yHBA+abVkIuJ3AJ65gyeJHCjEI=) 2: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:50:6d:11:4e:1f:62:6d:ad:b0:8e:b3:a7:49:1a:70:59:1a:2d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Sep 4 07:00:07 2026 GMT Not After : Sep 7 14:01:07 2026 GMT Subject: CN=4C2F1EC59FE3AA808C26C7E8F59D0A0F7B53BB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:c0:cb:2b:fc:11:4e:0d:d5:11:bd:85:08: ef:db:18:50:63:56:5b:0f:bf:5d:7c:c6:21:e3:50: 46:55:dd:6e:33:39:00:a0:f4:d9:3b:4a:6e:8d:14: ca:fe:b6:02:62:a0:c0:23:e2:88:f2:1d:8f:86:fe: fe:5c:20:69:77:3d:2e:8d:a6:ec:85:10:dd:ed:d0: ac:3c:27:e7:35:db:56:27:00:b7:75:c6:58:27:d8: d6:f2:7c:d9:40:46:d7:cc:7f:da:c3:6f:d3:d2:0b: ae:8f:67:cb:57:a3:55:8f:51:7e:95:fa:7f:d7:ed: 48:b1:30:d0:ed:e2:9f:db:53:7f:6b:3d:e8:04:c4: 75:4d:e3:46:56:1e:a7:bd:d3:18:9d:80:e9:6e:36: a5:ca:d7:c4:48:37:f8:c3:9c:f4:ec:64:b7:a0:9c: 58:43:fd:f2:ef:ac:b8:31:69:c1:b8:f1:23:9e:ef: c7:e3:09:a0:e9:3b:db:7a:3b:e1:c6:54:1d:4d:5a: 49:18:18:13:b3:60:e7:1e:61:ac:a6:6a:a3:79:ad: 0d:0d:75:74:74:7e:81:a1:43:3e:66:f0:62:2c:8d: 87:3b:5a:96:3c:4c:97:0a:23:d5:1b:e5:9d:bc:0d: 0a:c4:0e:4c:3d:3e:76:1b:e1:d9:c4:8c:92:75:3b: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:1E:C5:9F:E3:AA:80:8C:26:C7:E8:F5:9D:0A:0F:7B:53:BB:8E X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fd:ad:b6:9e:84:21:ae:ae:0e:65:fe:53:32:a4:f7:31:ce: d7:04:55:e2:e6:3c:d9:d8:ba:fa:47:9b:88:0d:2c:13:ec:a5: 39:45:20:d7:8a:6d:bc:8a:24:f4:4b:85:e3:28:d0:ab:ca:37: 41:64:52:e4:61:5b:05:4c:cf:8c:38:b5:a0:a1:82:e4:89:a3: de:0d:42:8b:e4:bb:6e:1d:cd:be:bc:eb:4f:8d:d6:94:7e:78: 02:14:ef:23:65:86:25:9b:0f:6e:88:98:1a:ed:bf:6f:59:60: 4e:91:85:e5:e1:7d:05:cf:19:82:62:53:d0:1a:ad:fc:a3:df: 88:0b:5e:75:a6:88:6d:b7:b9:9f:30:fa:b8:3a:aa:a1:bb:0f: ca:45:aa:21:4f:b1:b1:2c:d6:6b:60:a7:3b:8e:1d:58:88:24: ed:d6:54:4e:4b:94:84:72:70:ff:58:bd:b4:e8:d9:4a:cf:bb: 4d:17:c1:20:1e:52:7f:75:36:98:64:f4:e5:a9:81:45:93:e3: 4c:f4:1c:8a:80:d3:7e:4f:94:1f:25:6c:9a:68:48:b8:cd:3c: f3:b2:52:d7:03:e4:64:12:fd:0d:34:da:1a:b4:01:e0:0c:0b: 4c:cf:62:9a:24:9a:87:8d:86:b2:ac:5b:84:b6:c9:12:65:c1: bd:57:56:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT1BtEU4fYm2tsI6zp0kacFkaLXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA5MDQwNzAwMDdaFw0yNjA5MDcxNDAxMDdaMDMxMTAvBgNV BAMTKDRDMkYxRUM1OUZFM0FBODA4QzI2QzdFOEY1OUQwQTBGN0I1M0JCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOMDLK/wRTg3VEb2FCO/bGFBj VlsPv118xiHjUEZV3W4zOQCg9Nk7Sm6NFMr+tgJioMAj4ojyHY+G/v5cIGl3PS6N puyFEN3t0Kw8J+c121YnALd1xlgn2NbyfNlARtfMf9rDb9PSC66PZ8tXo1WPUX6V +n/X7UixMNDt4p/bU39rPegExHVN40ZWHqe90xidgOluNqXK18RIN/jDnPTsZLeg nFhD/fLvrLgxacG48SOe78fjCaDpO9t6O+HGVB1NWkkYGBOzYOceYaymaqN5rQ0N dXR0foGhQz5m8GIsjYc7WpY8TJcKI9Ub5Z28DQrEDkw9PnYb4dnEjJJ1O8MDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTC8exZ/jqoCMJsfo9Z0KD3tTu44wHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf2ttp6EIa6u DmX+UzKk9zHO1wRV4uY82di6+kebiA0sE+ylOUUg14ptvIok9EuF4yjQq8o3QWRS 5GFbBUzPjDi1oKGC5Imj3g1Ci+S7bh3NvrzrT43WlH54AhTvI2WGJZsPboiYGu2/ b1lgTpGF5eF9Bc8ZgmJT0Bqt/KPfiAtedaaIbbe5nzD6uDqqobsPykWqIU+xsSzW a2CnO44dWIgk7dZUTkuUhHJw/1i9tOjZSs+7TRfBIB5Sf3U2mGT05amBRZPjTPQc ioDTfk+UHyVsmmhIuM0887JS1wPkZBL9DTTaGrQB4AwLTM9imiSah42GsqxbhLbJ EmXBvVdWnA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:53:12 2026 by rpki-client