$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: 5UnqbWw7TfXt8SO1mzU3xyOA13BU8Dhn+WWaVAyGhko= Subject key identifier: 45:DD:81:E5:F4:C9:3D:23:6F:24:F6:7B:63:DA:D1:55:D8:67:6D:E0 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 33024DEA45E51D2898D18363924F08B48E84F0FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: BE Signing time: Fri 28 Aug 2026 06:48:09 +0000 Manifest this update: Fri 28 Aug 2026 06:43:09 +0000 Manifest next update: Mon 31 Aug 2026 09:41:09 +0000 Files and hashes: 1: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) 2: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: fhqhB2ihPg2CRvPeYSyFLa/fBbTqfbndY/8u6rA01+U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:4d:ea:45:e5:1d:28:98:d1:83:63:92:4f:08:b4:8e:84:f0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Aug 28 06:43:09 2026 GMT Not After : Aug 31 09:41:09 2026 GMT Subject: CN=45DD81E5F4C93D236F24F67B63DAD155D8676DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:28:f8:26:bf:f0:8a:fb:45:c9:db:02:76: 6a:5f:c8:72:e7:0d:4d:a7:8c:aa:62:60:0e:86:c4: 55:72:99:2c:5a:1f:d6:b9:a8:66:09:d5:0a:32:85: 28:43:6f:81:b4:d5:db:a4:a3:a2:66:c1:9a:25:fc: 9c:80:cf:29:34:f4:b1:0d:e7:24:6c:4a:5e:08:1a: fd:19:b1:5a:5b:d8:70:b2:b9:78:c8:67:8b:b9:37: 9b:d7:6a:68:d8:b4:0e:e9:6a:97:cf:fe:7b:78:62: bf:44:a4:19:a3:18:88:27:0e:e5:dd:0c:d8:36:d3: 0d:61:ec:df:9d:ea:be:7d:58:3c:77:74:8e:bd:c4: b6:ad:81:9e:82:bd:77:b5:f3:5d:68:17:f6:a1:db: eb:93:eb:55:b0:0e:f3:fb:4c:ba:7c:ab:b0:0e:1d: ea:28:0f:b6:7a:6a:9d:42:45:79:1a:fc:4e:93:2f: 60:f9:66:3c:92:f1:97:54:4d:f4:c6:0f:a4:97:48: 84:b8:90:b0:fb:21:2e:d3:16:79:6c:3f:60:6b:31: 04:b3:fa:6f:6e:31:a9:f7:75:68:34:e4:b3:ee:2d: 83:ef:ea:83:14:6b:0b:10:59:b0:81:6a:f0:00:ec: 88:05:6d:50:12:4a:39:c8:b6:bf:49:01:f6:7c:c3: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DD:81:E5:F4:C9:3D:23:6F:24:F6:7B:63:DA:D1:55:D8:67:6D:E0 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f2:af:2e:cf:5f:19:a2:0c:05:ae:3f:06:83:b4:a3:19:a4: 66:55:a1:5e:3b:62:d1:2d:d8:20:86:0d:cf:b9:f1:ad:cf:29: ad:26:0c:35:27:d0:d2:59:d2:eb:bb:c1:ae:70:77:d3:a1:8c: 36:85:87:11:1e:8b:32:18:d6:4f:21:e3:f6:4e:ab:50:a2:30: 95:f9:c6:15:34:40:8d:23:0e:ed:46:4e:99:ca:23:16:c3:c9: 30:78:06:ec:8e:5b:64:f8:b2:02:5d:0a:fc:d2:87:86:ce:bc: 2f:bc:a0:3d:53:79:cc:c3:7c:44:e0:c8:81:fe:b1:db:ab:a1: 64:3a:99:e8:b5:4c:46:ea:a5:9d:8a:5b:65:81:56:8e:77:6c: 0b:22:bd:58:b5:c3:1b:a1:92:c0:86:8c:47:0f:83:b2:38:09: 90:32:b4:f8:5a:33:92:cb:ae:23:b4:00:ef:66:91:12:ad:43: 42:1e:00:0d:44:93:67:51:e2:11:28:c3:02:61:53:a0:38:37: 50:61:08:6b:39:01:dc:8b:dc:8a:14:48:22:e4:fd:54:61:80: 79:36:a5:50:1d:39:bd:9c:d7:11:f6:bd:89:4e:d2:48:ce:53: 07:7b:89:fc:02:81:ce:03:56:c1:d7:2d:a1:07:d7:f9:dd:5a: 48:54:f5:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMwJN6kXlHSiY0YNjkk8ItI6E8P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA4MjgwNjQzMDlaFw0yNjA4MzEwOTQxMDlaMDMxMTAvBgNV BAMTKDQ1REQ4MUU1RjRDOTNEMjM2RjI0RjY3QjYzREFEMTU1RDg2NzZERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/Sj4Jr/wivtFydsCdmpfyHLn DU2njKpiYA6GxFVymSxaH9a5qGYJ1QoyhShDb4G01duko6JmwZol/JyAzyk09LEN 5yRsSl4IGv0ZsVpb2HCyuXjIZ4u5N5vXamjYtA7papfP/nt4Yr9EpBmjGIgnDuXd DNg20w1h7N+d6r59WDx3dI69xLatgZ6CvXe1811oF/ah2+uT61WwDvP7TLp8q7AO HeooD7Z6ap1CRXka/E6TL2D5ZjyS8ZdUTfTGD6SXSIS4kLD7IS7TFnlsP2BrMQSz +m9uMan3dWg05LPuLYPv6oMUawsQWbCBavAA7IgFbVASSjnItr9JAfZ8w/hTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURd2B5fTJPSNvJPZ7Y9rRVdhnbeAwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/KvLs9fGaIM Ba4/BoO0oxmkZlWhXjti0S3YIIYNz7nxrc8prSYMNSfQ0lnS67vBrnB306GMNoWH ER6LMhjWTyHj9k6rUKIwlfnGFTRAjSMO7UZOmcojFsPJMHgG7I5bZPiyAl0K/NKH hs68L7ygPVN5zMN8RODIgf6x26uhZDqZ6LVMRuqlnYpbZYFWjndsCyK9WLXDG6GS wIaMRw+DsjgJkDK0+FozksuuI7QA72aREq1DQh4ADUSTZ1HiESjDAmFToDg3UGEI azkB3IvcihRIIuT9VGGAeTalUB05vZzXEfa9iU7SSM5TB3uJ/AKBzgNWwdctoQfX +d1aSFT1dA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:32:41 2026 by rpki-client