$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: nMbfpY0knrRkkRXrICqTfh/tsAgT4rqgnsvco1/Dn6A= Subject key identifier: FB:5B:F7:1A:62:B8:01:6D:34:51:0B:B3:A8:FF:12:DF:93:7C:35:15 Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 16AEC0F920E944181B3CC8260130D896CF67F4FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: BE Signing time: Thu 03 Sep 2026 22:39:15 +0000 Manifest this update: Thu 03 Sep 2026 22:34:15 +0000 Manifest next update: Mon 07 Sep 2026 02:18:15 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: RYo/XZmjTCiEbk9i8GbamJAqYb9pD+k893AMBWCRpI4=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ae:c0:f9:20:e9:44:18:1b:3c:c8:26:01:30:d8:96:cf:67:f4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Sep 3 22:34:15 2026 GMT Not After : Sep 7 02:18:15 2026 GMT Subject: CN=FB5BF71A62B8016D34510BB3A8FF12DF937C3515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:cd:d1:42:15:e1:36:d3:13:b0:bc:6a:2d: 10:53:6a:d1:74:83:e6:b3:52:f1:81:f8:4d:96:9e: ba:f5:60:e7:5c:97:ea:3f:90:ff:73:03:55:aa:8f: 78:05:65:1e:23:ba:ba:ed:1a:70:0e:4f:c9:16:11: 70:ad:32:40:52:49:53:fa:e4:69:d5:c3:4c:5d:90: cf:af:53:81:71:77:84:84:25:03:0f:82:fc:50:8a: 35:25:55:50:c2:92:67:cf:ef:f1:35:d3:c4:5f:e2: 4c:a9:b6:ef:de:d9:c2:56:a7:40:7a:21:d7:55:aa: 21:97:9e:0d:fa:9c:d9:6c:90:ad:ae:1b:80:7a:82: 87:e3:19:0f:d4:63:d4:26:ce:5d:7d:6b:3c:56:28: 97:75:3f:fc:f9:88:89:ab:70:c9:08:09:f8:c1:ca: de:3c:fb:0d:6f:6a:3e:81:11:19:49:94:f6:97:14: 19:25:37:73:33:a2:a3:2c:9f:fa:90:ca:96:79:58: 15:19:5b:43:49:48:6d:4f:1b:25:ef:5f:36:2a:83: ad:da:01:cd:cd:d4:78:83:3e:89:1a:e9:31:48:7f: 90:3e:41:49:d8:d8:f1:1d:18:18:6d:94:b7:76:72: 23:24:ee:fa:78:a9:96:fe:d8:1c:3f:a7:d3:f2:87: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5B:F7:1A:62:B8:01:6D:34:51:0B:B3:A8:FF:12:DF:93:7C:35:15 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:54:86:69:9f:91:1d:a6:66:a9:a9:b0:f2:ce:6f:47:9e: be:b6:8b:44:03:09:d8:be:b6:e1:5e:0b:03:58:54:ee:9a:26: 87:e2:23:92:3f:03:8c:9d:bd:86:2c:a5:5c:c9:b2:08:9f:9c: 05:0d:5e:9f:73:04:cb:61:d4:63:17:57:7f:20:90:80:25:f3: 2b:15:a6:b9:44:0e:93:cd:71:1b:cc:da:d4:49:9b:e0:bf:e4: bc:2e:4f:e8:d8:7e:7c:4f:2d:fd:2d:0e:e9:99:76:8b:d6:e1: 25:23:dc:49:8d:51:a6:3e:d6:1f:cb:c9:95:0d:f9:9b:59:20: dc:39:ca:03:b5:19:7e:ee:d7:85:22:82:a6:11:fd:41:b6:1e: f2:30:ba:0f:4e:14:ad:30:1f:49:6a:d0:cb:8f:b2:e7:c7:f5: 0d:1a:5c:05:e6:2e:13:60:f8:ad:0f:c8:4c:6b:00:54:70:a9: 76:cd:e1:c6:58:c2:7a:83:de:5d:f6:e1:60:50:88:53:cb:ee: 10:6a:69:d8:84:23:b9:3a:c5:62:30:a0:51:6c:9e:93:ec:67: a7:e9:dc:68:ef:5d:98:8a:cd:f2:8e:6d:0a:f6:f0:5a:aa:6d: 0f:59:c2:69:32:65:e5:6a:b3:e7:d3:f9:0c:57:16:cd:a3:31: 20:a1:23:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFq7A+SDpRBgbPMgmATDYls9n9PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA5MDMyMjM0MTVaFw0yNjA5MDcwMjE4MTVaMDMxMTAvBgNV BAMTKEZCNUJGNzFBNjJCODAxNkQzNDUxMEJCM0E4RkYxMkRGOTM3QzM1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmM3RQhXhNtMTsLxqLRBTatF0 g+azUvGB+E2Wnrr1YOdcl+o/kP9zA1Wqj3gFZR4jurrtGnAOT8kWEXCtMkBSSVP6 5GnVw0xdkM+vU4Fxd4SEJQMPgvxQijUlVVDCkmfP7/E108Rf4kyptu/e2cJWp0B6 IddVqiGXng36nNlskK2uG4B6gofjGQ/UY9Qmzl19azxWKJd1P/z5iImrcMkICfjB yt48+w1vaj6BERlJlPaXFBklN3MzoqMsn/qQypZ5WBUZW0NJSG1PGyXvXzYqg63a Ac3N1HiDPoka6TFIf5A+QUnY2PEdGBhtlLd2ciMk7vp4qZb+2Bw/p9Pyh87hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+1v3GmK4AW00UQuzqP8S35N8NRUwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofxUhmmfkR2m ZqmpsPLOb0eevraLRAMJ2L624V4LA1hU7pomh+Ijkj8DjJ29hiylXMmyCJ+cBQ1e n3MEy2HUYxdXfyCQgCXzKxWmuUQOk81xG8za1Emb4L/kvC5P6Nh+fE8t/S0O6Zl2 i9bhJSPcSY1Rpj7WH8vJlQ35m1kg3DnKA7UZfu7XhSKCphH9QbYe8jC6D04UrTAf SWrQy4+y58f1DRpcBeYuE2D4rQ/ITGsAVHCpds3hxljCeoPeXfbhYFCIU8vuEGpp 2IQjuTrFYjCgUWyek+xnp+ncaO9dmIrN8o5tCvbwWqptD1nCaTJl5Wqz59P5DFcW zaMxIKEj4Q== -----END CERTIFICATE-----Generated at Sat Sep 5 08:54:58 2026 by rpki-client