$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: Gzuap8jzg1ZPcAEXfBI3c9DWQCo+1NvFB905QDgoxJM= Subject key identifier: E9:89:07:3F:CC:18:2E:1A:1D:09:84:FF:CF:81:55:29:2B:2C:37:3A Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 7E4DD0BAEA878BABEEA6DAD36E8575456011C459 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: B8 Signing time: Fri 28 Aug 2026 06:48:08 +0000 Manifest this update: Fri 28 Aug 2026 06:43:08 +0000 Manifest next update: Mon 31 Aug 2026 09:04:08 +0000 Files and hashes: 1: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) 2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: Zw2B9XHAnD+6rvSPBzzlI/cgA4xSInOT/trMk7xzero=) 3: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4d:d0:ba:ea:87:8b:ab:ee:a6:da:d3:6e:85:75:45:60:11:c4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: Aug 28 06:43:08 2026 GMT Not After : Aug 31 09:04:08 2026 GMT Subject: CN=E989073FCC182E1A1D0984FFCF8155292B2C373A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:f3:d9:0e:42:11:d0:a9:b6:9e:c0:1c:95: ff:42:94:6c:29:58:8b:24:84:93:8e:e7:9d:20:5d: 2e:5d:d2:96:26:72:10:c0:5a:70:71:ff:bd:46:60: e7:9e:e6:6b:10:38:51:a0:92:af:b0:d6:5d:5c:3e: 28:bf:8c:87:e0:a9:9d:e8:3b:fa:e6:9a:e7:89:91: 85:64:a4:ed:e4:1f:b4:c1:a9:0f:e0:80:ad:af:c4: a1:39:16:98:26:9b:e9:c1:4e:a1:e2:f5:4e:5a:61: db:09:e1:1b:9a:43:c3:5c:90:70:29:73:b1:07:a7: 48:84:f0:fa:ac:a3:74:fc:6d:05:30:a7:a6:23:66: 52:7e:f9:61:f5:d6:27:9f:07:5f:82:4e:ce:53:b4: cf:93:61:5c:70:49:c1:4c:d6:7a:ae:76:23:ed:a8: de:e2:68:08:f8:c5:36:11:6e:36:ca:28:9d:43:89: e2:5c:6c:f3:ac:2f:c7:d6:49:0b:6f:09:86:b8:f8: ed:18:eb:ed:11:65:8e:a7:88:bd:e9:8a:4a:16:18: 3b:b6:83:58:84:a0:1a:02:a9:ff:8d:35:c4:8a:04: 69:fc:2e:98:65:e8:3c:89:e0:1f:98:4a:9f:1e:21: 4b:7c:2b:10:a0:36:59:7c:3d:a1:f1:94:3b:f6:4e: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:89:07:3F:CC:18:2E:1A:1D:09:84:FF:CF:81:55:29:2B:2C:37:3A X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9a:e5:c7:99:05:c6:2e:1b:47:58:54:28:81:95:e8:81:d0: 14:aa:d2:d8:5f:96:6d:e5:e1:38:5e:74:46:c9:bb:5c:be:69: 92:4d:ee:b6:60:02:3f:8d:c2:f8:f5:a1:98:c2:38:5e:51:3a: bb:2d:f1:9b:7c:10:c9:3e:30:ee:29:00:3e:c5:60:44:4c:62: 1f:4a:67:bc:46:b8:2c:ab:4a:26:27:a3:5a:e6:e9:e5:28:c6: 52:4d:81:18:fd:86:b7:a1:49:5e:3f:be:fe:d9:91:80:56:5c: 35:ce:59:e8:aa:b2:3d:ad:b2:fc:96:91:62:8c:a7:3a:0e:0c: 46:26:a3:6c:6c:f3:37:f3:ab:71:b2:81:35:70:e4:28:b3:6c: 17:96:1d:12:15:10:70:bf:52:51:4d:83:b8:c7:58:e0:b7:c7: e0:b5:b1:b8:8b:3a:bf:c1:7f:ba:0e:42:aa:4d:7b:72:57:c1: 33:14:3d:5c:79:17:62:b7:d9:50:a2:69:09:35:24:3d:dc:56: a8:64:e8:c6:df:ed:7a:d1:80:5b:8a:89:e5:21:9f:8c:26:94: e3:2b:74:f3:0c:2f:e9:bf:a8:f4:f4:74:bb:c7:ef:2f:0d:71: 89:e3:90:f6:e1:22:00:cd:b6:5b:ec:cf:f2:59:88:cc:4e:ea: 7e:27:34:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfk3QuuqHi6vuptrTboV1RWARxFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjA4MjgwNjQzMDhaFw0yNjA4MzEwOTA0MDhaMDMxMTAvBgNV BAMTKEU5ODkwNzNGQ0MxODJFMUExRDA5ODRGRkNGODE1NTI5MkIyQzM3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXufPZDkIR0Km2nsAclf9ClGwp WIskhJOO550gXS5d0pYmchDAWnBx/71GYOee5msQOFGgkq+w1l1cPii/jIfgqZ3o O/rmmueJkYVkpO3kH7TBqQ/ggK2vxKE5Fpgmm+nBTqHi9U5aYdsJ4RuaQ8NckHAp c7EHp0iE8Pqso3T8bQUwp6YjZlJ++WH11iefB1+CTs5TtM+TYVxwScFM1nqudiPt qN7iaAj4xTYRbjbKKJ1DieJcbPOsL8fWSQtvCYa4+O0Y6+0RZY6niL3pikoWGDu2 g1iEoBoCqf+NNcSKBGn8Lphl6DyJ4B+YSp8eIUt8KxCgNll8PaHxlDv2TrKvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6YkHP8wYLhodCYT/z4FVKSssNzowHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5rlx5kFxi4b R1hUKIGV6IHQFKrS2F+WbeXhOF50Rsm7XL5pkk3utmACP43C+PWhmMI4XlE6uy3x m3wQyT4w7ikAPsVgRExiH0pnvEa4LKtKJiejWubp5SjGUk2BGP2Gt6FJXj++/tmR gFZcNc5Z6KqyPa2y/JaRYoynOg4MRiajbGzzN/OrcbKBNXDkKLNsF5YdEhUQcL9S UU2DuMdY4LfH4LWxuIs6v8F/ug5Cqk17clfBMxQ9XHkXYrfZUKJpCTUkPdxWqGTo xt/tetGAW4qJ5SGfjCaU4yt08wwv6b+o9PR0u8fvLw1xieOQ9uEiAM22W+zP8lmI zE7qfic0rQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:20:05 2026 by rpki-client