$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: KovLDSFEbXl4zZqdSnXr8luxt9RsA4NrvVJLjdcUaO4= Subject key identifier: AD:9D:9C:B4:7C:6F:00:65:AE:85:44:C2:01:A4:52:CE:7A:AF:E4:54 Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 7BB6F9F6EFEC2F5CF4077DC1897A015841345770 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: BC Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 10:28:54 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: RTY/CPUAKA+r4t+IwGAFULGxswsFl8Gh0+QsYIevda8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b6:f9:f6:ef:ec:2f:5c:f4:07:7d:c1:89:7a:01:58:41:34:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 10:28:54 2026 GMT Subject: CN=AD9D9CB47C6F0065AE8544C201A452CE7AAFE454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:34:1c:a3:ee:0f:1b:31:7f:ac:e7:9a:8f: ef:8d:33:6b:7f:59:29:ee:9d:e9:c5:b1:ad:ad:7d: 5c:d2:3a:5b:7d:d2:5d:96:71:75:e5:2d:ed:b4:0d: b4:9f:2a:aa:66:f7:a5:ad:d8:d5:2a:55:32:06:e3: a9:b5:4c:a5:03:77:30:3b:69:36:81:85:d2:f5:92: 59:67:89:61:48:6f:dc:66:5c:df:be:e0:3a:c7:a6: 42:ad:77:23:7f:72:be:16:6d:5a:21:d9:11:b9:9a: 22:1d:14:c3:01:c6:7b:0c:65:09:4e:01:c9:9e:b2: 00:ed:44:8e:e1:ce:38:93:9c:8e:3a:7b:58:db:8c: 1b:07:12:fc:eb:31:4f:d4:88:c0:dc:a0:af:26:f1: 7b:32:47:d5:90:b8:d0:6b:8e:fd:3b:95:e0:82:b4: 61:02:da:40:93:52:2a:d3:bb:e7:73:33:af:23:ce: f1:51:c0:bc:34:de:ef:8d:ff:e4:73:44:73:38:38: 74:38:d2:d2:07:84:e0:68:cc:5a:5d:99:40:ad:93: c6:94:35:ed:d3:ed:fe:86:53:85:03:79:5f:87:ed: a2:fc:7f:b6:d9:9c:2b:25:1f:c6:22:99:5a:40:c9: 71:4d:ec:5a:07:40:61:ec:9e:32:7e:ac:9c:3f:3f: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:9C:B4:7C:6F:00:65:AE:85:44:C2:01:A4:52:CE:7A:AF:E4:54 X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:2b:5b:93:63:a2:6d:ff:38:57:bd:cc:f8:83:91:79:4f: e6:c0:d7:b4:3d:4f:d7:8d:d5:d0:6f:9b:73:f8:1d:63:d6:1d: de:42:01:b8:3e:4f:9f:ae:7f:7f:85:cb:68:5f:75:68:12:5f: 7e:64:78:fd:95:80:fc:f3:65:47:6b:f5:a7:4e:95:87:cc:8e: 60:05:21:45:25:0f:9e:ef:64:23:75:a1:32:8a:f0:b2:e8:60: aa:1c:52:dd:c3:42:bd:38:e8:90:ad:d1:c6:c7:3f:4f:73:bc: 79:4a:1b:31:10:8d:98:6e:0b:d8:02:3b:c3:4b:2a:42:9d:a9: 79:56:28:96:5c:34:d2:30:72:d4:77:ee:e0:34:c0:63:49:74: 6d:52:00:19:4c:a3:f7:c4:0e:34:bf:92:83:a8:01:bf:0f:81: 9f:50:96:c2:d8:74:db:3a:2d:6c:b2:b4:38:e3:87:26:d7:99: 55:a4:bf:dc:e4:a6:dd:3b:4b:72:14:e2:d6:5e:b0:c6:fa:a6: f3:cc:ec:38:47:ba:e5:d5:5a:70:ed:7a:a7:00:ee:d3:a8:ba: c1:a1:c8:f7:53:02:ac:24:56:0f:78:62:24:a1:c4:87:e1:7e: 9e:c5:f7:e1:77:d7:b7:e2:37:cb:1b:a3:79:6f:52:3b:27:e6: 42:14:b4:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe7b59u/sL1z0B33BiXoBWEE0V3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA4MjgwNjQyNTRaFw0yNjA4MzExMDI4NTRaMDMxMTAvBgNV BAMTKEFEOUQ5Q0I0N0M2RjAwNjVBRTg1NDRDMjAxQTQ1MkNFN0FBRkU0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoTQco+4PGzF/rOeaj++NM2t/ WSnunenFsa2tfVzSOlt90l2WcXXlLe20DbSfKqpm96Wt2NUqVTIG46m1TKUDdzA7 aTaBhdL1kllniWFIb9xmXN++4DrHpkKtdyN/cr4WbVoh2RG5miIdFMMBxnsMZQlO AcmesgDtRI7hzjiTnI46e1jbjBsHEvzrMU/UiMDcoK8m8XsyR9WQuNBrjv07leCC tGEC2kCTUirTu+dzM68jzvFRwLw03u+N/+RzRHM4OHQ40tIHhOBozFpdmUCtk8aU Ne3T7f6GU4UDeV+H7aL8f7bZnCslH8YimVpAyXFN7FoHQGHsnjJ+rJw/PzZnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrZ2ctHxvAGWuhUTCAaRSznqv5FQwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYQrW5Njom3/ OFe9zPiDkXlP5sDXtD1P143V0G+bc/gdY9Yd3kIBuD5Pn65/f4XLaF91aBJffmR4 /ZWA/PNlR2v1p06Vh8yOYAUhRSUPnu9kI3WhMorwsuhgqhxS3cNCvTjokK3Rxsc/ T3O8eUobMRCNmG4L2AI7w0sqQp2peVYollw00jBy1Hfu4DTAY0l0bVIAGUyj98QO NL+Sg6gBvw+Bn1CWwth02zotbLK0OOOHJteZVaS/3OSm3TtLchTi1l6wxvqm88zs OEe65dVacO16pwDu06i6waHI91MCrCRWD3hiJKHEh+F+nsX34XfXt+I3yxujeW9S OyfmQhS0Mw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:33 2026 by rpki-client