$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: BkLmG7Di7qfI8tY3nlmOJTQonbRILgxGvcUWB+YUXv0= Subject key identifier: 16:74:03:7D:DB:02:B5:5C:24:90:0B:F7:3C:F3:DC:A3:E6:76:4F:D7 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 197119D818A50156DD667FD7F7F4227B21F721CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: BC Signing time: Fri 04 Sep 2026 02:24:40 +0000 Manifest this update: Fri 04 Sep 2026 02:19:40 +0000 Manifest next update: Mon 07 Sep 2026 10:44:40 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 662iSf1fTcFp8HAda+pw9kFfiYYhGWksoOGPDMJdb9Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:71:19:d8:18:a5:01:56:dd:66:7f:d7:f7:f4:22:7b:21:f7:21:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Sep 4 02:19:40 2026 GMT Not After : Sep 7 10:44:40 2026 GMT Subject: CN=1674037DDB02B55C24900BF73CF3DCA3E6764FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:62:6b:9a:9f:94:32:65:e7:ce:f6:e5:24: da:31:71:23:17:67:fa:df:b7:21:36:04:bb:b1:2f: 0d:9d:4d:cc:7c:44:41:a4:60:0b:19:5e:63:da:a2: 77:a3:eb:a5:ff:ca:ea:25:0a:e7:6e:0d:46:f9:da: 4e:50:d7:80:bf:da:c1:94:63:d1:43:19:af:c6:89: 0e:6b:84:65:85:09:c1:1d:83:90:3c:68:6b:eb:37: eb:86:81:96:01:0c:da:28:e4:7a:79:29:47:d8:b1: 2c:2c:5e:b4:11:e0:bc:19:f2:79:f2:1f:d5:b0:b6: 1b:dc:e9:c5:77:9e:32:41:8f:bd:0f:9b:be:3b:a5: 93:b8:47:4a:2c:81:4a:3f:9f:ba:f4:f9:75:3b:a4: 1d:63:8b:ab:c3:43:87:9e:21:79:43:49:4f:72:a7: 85:5b:82:9e:77:9b:10:09:02:40:76:09:b5:36:c2: fe:13:ca:0e:d3:f9:bc:2b:2b:15:4d:4a:e7:0a:78: 5d:23:12:b2:36:92:b3:a0:67:f2:89:d1:17:b1:80: ec:59:7d:b9:07:ee:46:7f:c9:31:7d:d8:b1:1a:d6: 76:16:90:55:f1:a6:e0:5a:c1:70:5a:17:ef:79:de: 30:68:fe:0c:d0:63:63:64:ed:a0:63:b2:92:01:f1: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:74:03:7D:DB:02:B5:5C:24:90:0B:F7:3C:F3:DC:A3:E6:76:4F:D7 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:fc:00:b0:4b:0a:b0:a2:65:88:27:f5:33:ee:70:ff:3b:cf: 3b:c6:16:75:5a:75:e7:23:49:07:1a:75:df:a6:09:ee:0a:b3: 9c:f2:8b:10:df:e8:30:e2:44:ce:17:c1:63:56:bd:11:c4:82: 08:c1:da:18:57:f0:85:65:9a:e4:99:4f:3e:db:63:90:42:4f: c8:df:e4:37:31:85:87:30:17:4e:8c:70:1a:62:d9:03:9f:d3: 24:2d:bb:24:d0:c2:26:0d:88:30:e3:d3:08:d5:dc:d1:68:06: 5e:fd:e2:f9:1b:49:cf:b4:68:35:71:84:fa:1b:fc:ca:8d:6c: dd:21:c7:d3:73:2d:cd:70:d1:f5:b6:22:72:63:01:76:9d:11: be:5a:54:16:27:62:b0:9f:b5:0d:f2:22:7b:1c:b3:52:90:c2: ca:07:d1:95:64:30:db:53:8d:72:37:52:21:a1:a2:08:c8:38: 5b:eb:ed:58:43:f5:a2:b0:83:5d:ea:1b:6c:34:d5:fc:67:e3: 42:22:9a:db:9b:db:71:f0:a0:06:10:fc:19:14:98:4c:ef:9c: a2:f1:80:1c:09:d2:cc:af:91:76:2a:93:7a:0f:e1:43:51:36: 97:84:02:22:0b:83:05:65:bf:91:e0:34:49:10:b6:e2:9c:24: 4b:e0:f5:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGXEZ2BilAVbdZn/X9/QieyH3Ic8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA5MDQwMjE5NDBaFw0yNjA5MDcxMDQ0NDBaMDMxMTAvBgNV BAMTKDE2NzQwMzdEREIwMkI1NUMyNDkwMEJGNzNDRjNEQ0EzRTY3NjRGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU3WJrmp+UMmXnzvblJNoxcSMX Z/rftyE2BLuxLw2dTcx8REGkYAsZXmPaonej66X/yuolCuduDUb52k5Q14C/2sGU Y9FDGa/GiQ5rhGWFCcEdg5A8aGvrN+uGgZYBDNoo5Hp5KUfYsSwsXrQR4LwZ8nny H9Wwthvc6cV3njJBj70Pm747pZO4R0osgUo/n7r0+XU7pB1ji6vDQ4eeIXlDSU9y p4Vbgp53mxAJAkB2CbU2wv4Tyg7T+bwrKxVNSucKeF0jErI2krOgZ/KJ0RexgOxZ fbkH7kZ/yTF92LEa1nYWkFXxpuBawXBaF+953jBo/gzQY2Nk7aBjspIB8a6jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFnQDfdsCtVwkkAv3PPPco+Z2T9cwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvwAsEsKsKJl iCf1M+5w/zvPO8YWdVp15yNJBxp136YJ7gqznPKLEN/oMOJEzhfBY1a9EcSCCMHa GFfwhWWa5JlPPttjkEJPyN/kNzGFhzAXToxwGmLZA5/TJC27JNDCJg2IMOPTCNXc 0WgGXv3i+RtJz7RoNXGE+hv8yo1s3SHH03MtzXDR9bYicmMBdp0RvlpUFidisJ+1 DfIiexyzUpDCygfRlWQw21ONcjdSIaGiCMg4W+vtWEP1orCDXeobbDTV/GfjQiKa 25vbcfCgBhD8GRSYTO+covGAHAnSzK+RdiqTeg/hQ1E2l4QCIguDBWW/keA0SRC2 4pwkS+D16w== -----END CERTIFICATE-----Generated at Sat Sep 5 06:45:27 2026 by rpki-client