$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: /UsjZWS0YzZ2xtUt68pfQ1cBCKbzYcGQCRmyv+spTlE= Subject key identifier: 25:20:68:79:88:55:9B:93:4A:DF:7E:D6:B3:33:21:30:E5:29:72:7D Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 4F05CFA6A574E1BA6B6924C20CD79AB12F3ACBA1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: BB Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 10:20:16 +0000 Files and hashes: 1: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 2: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) 3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) 4: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: 3yU6pE9aik7xKn/1/hleqmN4v9kzjhzYdlSqgJF24i4=) 5: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:05:cf:a6:a5:74:e1:ba:6b:69:24:c2:0c:d7:9a:b1:2f:3a:cb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 10:20:16 2026 GMT Subject: CN=2520687988559B934ADF7ED6B3332130E529727D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:86:84:21:45:83:5a:20:68:ba:ab:13:09: 13:20:43:82:13:7f:13:7a:45:71:f2:49:4a:af:d3: 60:eb:1b:11:0e:b9:37:af:d4:dc:29:f8:a0:16:50: cb:6f:8b:0f:2f:69:a4:a6:67:de:0d:0f:96:c1:3a: b0:d4:c0:97:bd:e1:62:bb:a0:59:2c:d7:08:ad:18: 22:e7:2e:04:c0:e3:dd:b4:e9:d1:fc:5a:ea:ad:66: 55:e0:b5:ff:ad:17:e9:e3:6f:d2:41:cf:53:d2:b4: e9:94:d8:46:c6:98:16:83:91:83:51:56:a0:ee:d0: d6:10:6d:53:7c:e8:39:30:92:ee:8c:16:55:0c:a8: 8b:50:95:92:cf:2b:7b:7a:8f:33:15:bc:2e:d9:cd: 4b:cc:77:b1:e4:b7:a8:ce:8d:4c:94:f7:a3:ea:5b: b7:93:76:bb:8e:48:73:45:fa:a7:09:22:7f:37:4c: c5:0f:81:a5:f4:e7:e9:2d:35:3a:bd:31:16:0e:fc: 18:c7:31:6f:46:82:21:58:c7:99:7f:23:e9:09:c9: 24:83:de:49:37:f5:32:ed:d6:a2:78:4b:61:96:f1: 1f:1f:5b:84:23:2e:f0:7f:be:81:18:fd:a7:04:76: d2:50:53:ad:07:44:dc:f6:0f:19:56:5a:23:d7:85: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:68:79:88:55:9B:93:4A:DF:7E:D6:B3:33:21:30:E5:29:72:7D X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b4:22:b2:4e:d7:9b:91:e6:e0:b2:9b:f3:6b:31:0f:65:3c: e0:7a:01:e7:83:16:dc:94:2d:b0:69:ec:df:29:8b:92:d1:32: e5:9f:0a:d0:a3:e7:49:16:30:f1:72:36:cf:4d:26:74:af:2b: d1:ad:95:45:12:7a:01:20:6b:d9:0f:59:0c:1a:25:93:37:b8: 5d:59:69:fc:d9:c4:b4:2f:d1:d1:69:4b:e0:e0:11:82:d5:78: 19:e6:02:86:58:76:75:dd:93:45:ed:35:79:bf:0f:1b:ac:31: d2:ee:d0:67:fa:f8:dd:a3:00:39:f5:6b:39:3e:ab:c5:4f:b0: 02:6d:07:9f:6c:93:35:1f:42:23:75:6d:b2:22:eb:27:95:04: 36:d8:94:02:36:56:bc:7b:74:bf:7e:09:8f:d0:e3:5c:b4:fd: 94:0a:5d:58:bf:ab:f5:b3:58:14:d7:b4:69:d7:b5:6e:3e:ab: b3:27:a6:29:a3:13:e1:31:e3:0d:53:63:84:b4:07:66:74:83: 45:11:cf:7a:80:6b:ec:9b:2d:bf:cf:32:6a:b3:ac:9d:85:3a: 68:a4:5b:b1:83:88:7c:f4:be:3f:db:ee:3b:6f:1a:78:5e:7c: 5e:b0:9b:59:2d:e0:65:c9:69:cc:fb:a8:a6:4d:03:a3:cb:90: c5:bd:5f:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTwXPpqV04bpraSTCDNeasS86y6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzExMDIwMTZaMDMxMTAvBgNV BAMTKDI1MjA2ODc5ODg1NTlCOTM0QURGN0VENkIzMzMyMTMwRTUyOTcyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsoaEIUWDWiBouqsTCRMgQ4IT fxN6RXHySUqv02DrGxEOuTev1Nwp+KAWUMtviw8vaaSmZ94ND5bBOrDUwJe94WK7 oFks1witGCLnLgTA49206dH8WuqtZlXgtf+tF+njb9JBz1PStOmU2EbGmBaDkYNR VqDu0NYQbVN86Dkwku6MFlUMqItQlZLPK3t6jzMVvC7ZzUvMd7Hkt6jOjUyU96Pq W7eTdruOSHNF+qcJIn83TMUPgaX05+ktNTq9MRYO/BjHMW9GgiFYx5l/I+kJySSD 3kk39TLt1qJ4S2GW8R8fW4QjLvB/voEY/acEdtJQU60HRNz2DxlWWiPXhd7rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJSBoeYhVm5NK337WszMhMOUpcn0wHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrQisk7Xm5Hm 4LKb82sxD2U84HoB54MW3JQtsGns3ymLktEy5Z8K0KPnSRYw8XI2z00mdK8r0a2V RRJ6ASBr2Q9ZDBolkze4XVlp/NnEtC/R0WlL4OARgtV4GeYChlh2dd2TRe01eb8P G6wx0u7QZ/r43aMAOfVrOT6rxU+wAm0Hn2yTNR9CI3VtsiLrJ5UENtiUAjZWvHt0 v34Jj9DjXLT9lApdWL+r9bNYFNe0ade1bj6rsyemKaMT4THjDVNjhLQHZnSDRRHP eoBr7Jstv88yarOsnYU6aKRbsYOIfPS+P9vuO28aeF58XrCbWS3gZclpzPuopk0D o8uQxb1foQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:56 2026 by rpki-client