$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft File: 379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft (raw, json) Hash identifier: k8J4NgPIboQJjEVH7lUm8MyXRGsUwJDbFPZsZTgY7mw= Subject key identifier: F0:1F:56:9D:F1:99:43:16:0B:80:9A:30:61:C8:CD:69:68:39:F7:04 Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 03A8A68108AAA168C9122F2DF6911344E422A495 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft Manifest number: D9 Signing time: Fri 28 Aug 2026 06:47:48 +0000 Manifest this update: Fri 28 Aug 2026 06:42:48 +0000 Manifest next update: Mon 31 Aug 2026 17:57:48 +0000 Files and hashes: 1: AS23724.roa (hash: Y3qEhB43CJZrmhjZnPqwmuJr8CCGz2Q8BFki4mMZ6IQ=) 2: AS45062.roa (hash: JwpCqLwnstcdpQxihbA4tskKfI5Yknin5rFcdxDti2k=) 3: AS4837.roa (hash: PSrtVxpi26hNqHMhLR1owZy3r9A9ax7WlKodFyCEOUE=) 4: 379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl (hash: bVynK5P2qtBkkDHdoQZvaaEK+oTnzAKlO+csfuKA8Vw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a8:a6:81:08:aa:a1:68:c9:12:2f:2d:f6:91:13:44:e4:22:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Aug 28 06:42:48 2026 GMT Not After : Aug 31 17:57:48 2026 GMT Subject: CN=F01F569DF19943160B809A3061C8CD696839F704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:a5:80:02:3a:08:7f:6e:95:15:44:12:cf: 2b:cf:3d:72:cd:18:12:a7:73:6a:90:73:43:86:66: be:e3:4b:7b:24:77:a2:57:d9:a7:77:2b:f6:72:c7: 4d:82:db:34:d9:a6:1a:05:af:f6:74:ca:ea:37:33: c6:bb:d6:81:78:7e:3d:69:4d:35:15:d1:96:73:18: 4e:c4:9d:94:0b:a0:5f:84:61:f4:d8:7c:06:c0:b9: 44:ed:2b:7e:ee:d2:5f:76:f6:88:fa:01:0c:59:13: 13:7e:bf:cf:e5:61:46:84:dd:ce:a8:0d:50:7a:54: 10:c5:66:79:bc:e6:20:f3:66:f9:86:e9:c3:b8:69: d1:92:3f:45:95:f6:76:e6:8d:25:25:69:48:2d:42: 4f:e8:f1:40:06:17:01:2b:4e:58:5b:ab:26:dc:ff: 96:01:ef:eb:b0:cf:98:dd:e2:46:69:f3:12:bc:5d: 8c:97:c6:25:c0:c8:f7:a6:94:4e:9d:85:ec:5f:1c: 08:71:06:19:36:18:04:58:fe:ec:69:7a:ed:be:cd: 00:da:77:c3:de:0c:82:29:c6:93:5c:7d:ed:32:4b: 63:d7:cf:cc:8b:0f:80:9c:46:50:e1:82:8f:8a:27: 97:3e:5e:6e:47:de:7a:1a:b3:a0:87:15:87:b6:e4: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1F:56:9D:F1:99:43:16:0B:80:9A:30:61:C8:CD:69:68:39:F7:04 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:74:48:f3:01:f3:7e:db:16:b8:7f:9f:8e:05:2a:f0:02:fe: 76:ad:14:88:13:42:cd:02:3d:33:15:d9:71:7d:12:6e:10:3a: ae:8d:bd:2d:45:79:70:b2:aa:e7:0b:7d:02:80:35:05:75:6b: de:ee:6f:55:d1:39:85:0c:ca:cb:33:fd:b3:3c:cb:c8:89:0a: 34:eb:9c:68:c9:ac:9b:8c:99:0c:e2:de:63:57:93:f2:60:fa: 5c:ea:da:7e:4b:f7:0c:a7:81:29:d8:9c:98:d9:43:32:76:82: 40:1e:36:d0:3b:ce:a7:d6:da:7c:04:2c:15:93:43:bf:7a:aa: 97:86:0c:a1:1b:fe:15:bd:fa:f1:73:87:05:1b:b3:bf:73:35: 55:89:a0:7d:c3:f0:0a:96:7f:63:f2:c1:74:c5:db:8c:2b:46: 54:b7:1e:3e:b3:ec:96:e0:1e:1e:60:b1:5c:89:3b:f0:4e:9e: bf:4d:4e:30:7a:ea:50:61:b1:fc:c4:3e:24:63:9b:01:e2:5c: 5e:72:14:37:de:a1:99:ae:6f:10:9b:d3:c4:52:71:fa:11:fc: 9f:4d:e4:d2:8c:bf:44:e5:cf:cb:7b:44:4e:fd:31:10:e9:eb: d8:5e:e3:8f:1b:0e:c5:30:d0:ce:76:b9:50:2e:6a:43:8d:46: 94:54:7d:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA6imgQiqoWjJEi8t9pETROQipJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA4MjgwNjQyNDhaFw0yNjA4MzExNzU3NDhaMDMxMTAvBgNV BAMTKEYwMUY1NjlERjE5OTQzMTYwQjgwOUEzMDYxQzhDRDY5NjgzOUY3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nKWAAjoIf26VFUQSzyvPPXLN GBKnc2qQc0OGZr7jS3skd6JX2ad3K/Zyx02C2zTZphoFr/Z0yuo3M8a71oF4fj1p TTUV0ZZzGE7EnZQLoF+EYfTYfAbAuUTtK37u0l929oj6AQxZExN+v8/lYUaE3c6o DVB6VBDFZnm85iDzZvmG6cO4adGSP0WV9nbmjSUlaUgtQk/o8UAGFwErTlhbqybc /5YB7+uwz5jd4kZp8xK8XYyXxiXAyPemlE6dhexfHAhxBhk2GARY/uxpeu2+zQDa d8PeDIIpxpNcfe0yS2PXz8yLD4CcRlDhgo+KJ5c+Xm5H3noas6CHFYe25CJpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8B9WnfGZQxYLgJowYcjNaWg59wQwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTk1Mjc5MTAyMjc5NzEvMC8zNzk0NjdEOUY5RDJE QkZFRkVCODA5NTc1NTAwNEVERDQyQ0UwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXRI8wHzftsW uH+fjgUq8AL+dq0UiBNCzQI9MxXZcX0SbhA6ro29LUV5cLKq5wt9AoA1BXVr3u5v VdE5hQzKyzP9szzLyIkKNOucaMmsm4yZDOLeY1eT8mD6XOrafkv3DKeBKdicmNlD MnaCQB420DvOp9bafAQsFZNDv3qql4YMoRv+Fb368XOHBRuzv3M1VYmgfcPwCpZ/ Y/LBdMXbjCtGVLcePrPsluAeHmCxXIk78E6ev01OMHrqUGGx/MQ+JGObAeJcXnIU N96hma5vEJvTxFJx+hH8n03k0oy/ROXPy3tETv0xEOnr2F7jjxsOxTDQzna5UC5q Q41GlFR9sA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:06:02 2026 by rpki-client