$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: zmJiyKvTpwftcPW3E1vt6Q7evEqRGeKGtM/bjpyhYZY= Subject key identifier: E5:73:C3:03:5E:65:E7:C3:F6:04:79:2C:14:86:3E:82:B1:CF:A6:AC Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 478A580051CC1EA2FF489B43A4067D897338A80F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: B9 Signing time: Fri 28 Aug 2026 08:03:36 +0000 Manifest this update: Fri 28 Aug 2026 07:58:36 +0000 Manifest next update: Mon 31 Aug 2026 10:39:36 +0000 Files and hashes: 1: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=) 2: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=) 3: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: ewH5aC6WVPu7s489SvWDX5sZT8GICKQacUBx0VIEQIM=) 4: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=) 5: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8a:58:00:51:cc:1e:a2:ff:48:9b:43:a4:06:7d:89:73:38:a8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: Aug 28 07:58:36 2026 GMT Not After : Aug 31 10:39:36 2026 GMT Subject: CN=E573C3035E65E7C3F604792C14863E82B1CFA6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:17:5b:8d:8e:d3:b6:08:41:36:d2:f4:3a:90: 5d:f3:d3:e8:29:67:d8:3c:56:be:03:6d:15:90:61: ad:3b:15:d6:d3:aa:f2:34:58:e8:11:ff:58:c5:ba: 82:2c:52:42:2e:f7:d3:b4:93:53:88:e3:95:8e:19: d0:55:ee:0c:3f:01:db:96:2f:f2:83:ef:3b:52:0c: 69:46:7a:6a:56:94:d9:9e:96:bc:96:8e:e1:77:b6: cb:29:75:b0:d5:b7:81:8f:98:d4:cf:63:4f:fa:0b: 51:34:ad:bd:c9:f8:a9:c4:0c:7e:c8:19:e8:dd:2c: 7f:f0:bb:98:ef:13:7c:7f:b9:ca:d9:9f:9c:e7:4b: b0:30:5f:98:f4:00:de:2f:d4:71:bf:9d:93:e9:1a: bf:ea:cc:a2:53:ab:5b:d5:80:88:7a:51:5e:0e:fc: b9:2f:2b:5b:19:10:3e:28:d8:49:15:b7:2b:71:a8: ac:b2:22:09:94:b7:49:19:2b:d4:fb:04:08:6c:07: 9d:57:2b:64:ec:e2:5f:68:88:87:11:ef:2c:91:1c: a6:81:89:40:3e:fb:da:f9:a0:6f:25:cb:16:95:3c: 68:22:67:8b:02:21:8d:89:92:07:1a:50:db:ad:03: 0e:19:f0:a3:61:8b:0e:7d:11:17:88:18:3f:87:86: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:C3:03:5E:65:E7:C3:F6:04:79:2C:14:86:3E:82:B1:CF:A6:AC X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ac:67:d6:ce:2b:f1:9e:86:f3:c8:87:fd:5c:3a:b2:9b:de: bf:82:70:e7:30:26:e9:99:e2:46:73:7d:d5:66:eb:2d:7f:2b: 01:2b:3f:b6:50:9a:d0:41:40:d5:85:50:71:7f:b2:54:45:89: c1:d6:93:98:7e:d5:1a:73:8a:99:9f:c4:4d:bf:61:77:fd:7d: c6:3b:83:7a:d7:07:05:5d:b5:f0:a8:35:82:da:b0:bb:0d:64: f9:45:24:3d:5a:7f:f6:cc:65:c1:be:07:fa:80:0d:0e:c5:f5: 71:19:44:10:c9:d2:80:6c:9e:0a:49:2c:d7:bf:1e:83:a8:de: 47:b6:b4:7e:31:4f:82:d0:d8:23:dc:54:7a:2a:39:ba:bf:e2: 66:a9:30:a0:cb:38:fd:a2:1d:38:ce:47:5b:d2:2c:de:29:5e: c0:ea:ef:ab:b9:d7:88:e4:90:3e:3d:53:0a:f0:52:c0:2d:d4: a7:d8:94:f8:fb:95:f1:f1:f2:1a:e3:d3:25:61:9e:98:70:4e: 16:7d:0c:38:45:c7:b7:80:0d:93:43:7d:82:63:e6:ce:53:f5: bd:03:3c:06:c4:2e:99:1c:37:e7:4c:15:a1:95:64:85:59:b3: 14:5a:3a:23:6d:86:b1:e1:1a:36:67:41:e9:27:43:0a:40:13: 0d:d0:b6:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR4pYAFHMHqL/SJtDpAZ9iXM4qA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjA4MjgwNzU4MzZaFw0yNjA4MzExMDM5MzZaMDMxMTAvBgNV BAMTKEU1NzNDMzAzNUU2NUU3QzNGNjA0NzkyQzE0ODYzRTgyQjFDRkE2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKF1uNjtO2CEE20vQ6kF3z0+gp Z9g8Vr4DbRWQYa07FdbTqvI0WOgR/1jFuoIsUkIu99O0k1OI45WOGdBV7gw/AduW L/KD7ztSDGlGempWlNmelryWjuF3tsspdbDVt4GPmNTPY0/6C1E0rb3J+KnEDH7I GejdLH/wu5jvE3x/ucrZn5znS7AwX5j0AN4v1HG/nZPpGr/qzKJTq1vVgIh6UV4O /LkvK1sZED4o2EkVtytxqKyyIgmUt0kZK9T7BAhsB51XK2Ts4l9oiIcR7yyRHKaB iUA++9r5oG8lyxaVPGgiZ4sCIY2JkgcaUNutAw4Z8KNhiw59EReIGD+HhjvJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5XPDA15l58P2BHksFIY+grHPpqwwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKxn1s4r8Z6G 88iH/Vw6spvev4Jw5zAm6ZniRnN91WbrLX8rASs/tlCa0EFA1YVQcX+yVEWJwdaT mH7VGnOKmZ/ETb9hd/19xjuDetcHBV218Kg1gtqwuw1k+UUkPVp/9sxlwb4H+oAN DsX1cRlEEMnSgGyeCkks178eg6jeR7a0fjFPgtDYI9xUeio5ur/iZqkwoMs4/aId OM5HW9Is3ilewOrvq7nXiOSQPj1TCvBSwC3Up9iU+PuV8fHyGuPTJWGemHBOFn0M OEXHt4ANk0N9gmPmzlP1vQM8BsQumRw350wVoZVkhVmzFFo6I22GseEaNmdB6SdD CkATDdC2mA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:09:37 2026 by rpki-client