$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: hNmnfr/8P7p0lUMdK5gURXam3OTW36veSnlK2gCVeU0= Subject key identifier: 2F:7E:FE:58:FB:24:41:6E:BD:62:47:F9:CB:9C:26:AC:D7:49:69:34 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 2F65539BC7B36FB06E7900EFF2179AE308BCD88C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: BA Signing time: Fri 28 Aug 2026 06:48:15 +0000 Manifest this update: Fri 28 Aug 2026 06:43:14 +0000 Manifest next update: Mon 31 Aug 2026 10:00:14 +0000 Files and hashes: 1: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: HD/oIcWEbhQxESjQ2IfLZnxk3a/zNOWAQ5cY92ZzXSk=) 2: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:65:53:9b:c7:b3:6f:b0:6e:79:00:ef:f2:17:9a:e3:08:bc:d8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Aug 28 06:43:14 2026 GMT Not After : Aug 31 10:00:14 2026 GMT Subject: CN=2F7EFE58FB24416EBD6247F9CB9C26ACD7496934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:3e:3e:9c:a9:9b:3f:e4:61:2d:d9:2a:08: 33:d7:59:3f:96:3c:8c:e2:44:be:97:f1:da:8d:17: 5d:5b:ad:dd:40:5b:9a:25:16:f6:b4:28:2a:9d:b6: c9:de:19:0a:f1:4a:a8:d0:27:7a:81:e7:a8:b1:82: 78:69:86:d7:6b:08:ea:ac:21:ca:45:64:47:58:7b: bf:fc:f3:30:1f:db:02:9f:f4:23:8d:dc:04:7e:e3: b8:67:15:50:d5:eb:70:3d:95:1b:8a:18:41:0c:ec: c7:b5:56:89:4f:a2:77:e1:07:ce:4e:c0:b7:24:94: 01:08:cf:b4:e8:45:a7:da:e3:79:36:2b:b7:46:19: ee:df:22:26:8f:0b:2e:e3:bb:1f:4b:d6:b4:2b:41: c5:75:0d:b4:56:bb:1e:cd:76:1a:42:da:9c:fe:5d: d4:7b:8f:b2:fe:7a:e5:71:b9:45:fb:47:01:11:3b: 4b:d1:99:3e:c4:b4:2e:80:7d:8b:9f:a8:2d:7e:21: 69:38:2f:3f:da:53:36:d4:9d:9d:8d:a0:26:22:c3: 42:36:bb:d7:1c:a3:0b:d4:f6:6f:22:6b:9a:d9:aa: 60:7a:73:10:44:c8:48:2e:96:42:5b:20:dd:a2:be: 28:c9:9e:61:8b:e6:70:06:20:15:38:ad:6a:84:ed: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7E:FE:58:FB:24:41:6E:BD:62:47:F9:CB:9C:26:AC:D7:49:69:34 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b6:72:e2:bc:e2:ac:2e:89:df:be:ba:02:67:14:d5:2e:e2: 87:4c:c1:0d:3f:75:e1:13:09:4e:fe:69:6f:0e:6d:22:13:00: a1:af:5f:09:6f:ba:ea:fc:3b:01:27:56:36:56:0d:ce:e7:76: fc:6f:5f:0a:d8:b9:d2:f8:5a:05:29:49:d8:22:90:77:a9:f2: 84:44:42:23:37:ae:75:4b:c5:12:8a:64:5c:4c:79:92:18:d6: d1:f4:6b:18:38:42:74:ba:bb:c9:0d:03:2e:4e:33:8a:b3:9c: 61:0a:6a:9d:0f:67:bc:d6:ff:1a:16:a8:d2:30:cd:4a:0a:6e: f1:71:4b:09:03:d9:00:7e:32:9d:d0:03:05:19:ae:93:87:10: c0:65:4e:57:dd:98:4c:d0:b0:07:b8:9a:e8:f8:ec:9e:ba:ad: 5b:dd:5f:c7:12:7a:9b:96:41:17:a8:04:9a:8d:33:67:81:60: 27:f2:30:91:d8:6c:f8:bc:05:1f:c0:ab:f8:0f:52:3d:49:57: f6:3f:4a:08:4a:48:9a:10:cd:ce:c8:53:74:10:48:1e:2d:29: 35:3a:b5:a3:80:ed:5d:0d:43:9c:82:be:73:74:5d:af:ad:36: c4:82:da:00:12:e4:1e:7e:26:15:93:3f:5b:e9:25:bb:3a:7b: 50:34:b4:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL2VTm8ezb7BueQDv8hea4wi82IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA4MjgwNjQzMTRaFw0yNjA4MzExMDAwMTRaMDMxMTAvBgNV BAMTKDJGN0VGRTU4RkIyNDQxNkVCRDYyNDdGOUNCOUMyNkFDRDc0OTY5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lj4+nKmbP+RhLdkqCDPXWT+W PIziRL6X8dqNF11brd1AW5olFva0KCqdtsneGQrxSqjQJ3qB56ixgnhphtdrCOqs IcpFZEdYe7/88zAf2wKf9CON3AR+47hnFVDV63A9lRuKGEEM7Me1VolPonfhB85O wLcklAEIz7ToRafa43k2K7dGGe7fIiaPCy7jux9L1rQrQcV1DbRWux7NdhpC2pz+ XdR7j7L+euVxuUX7RwERO0vRmT7EtC6AfYufqC1+IWk4Lz/aUzbUnZ2NoCYiw0I2 u9ccowvU9m8ia5rZqmB6cxBEyEgulkJbIN2ivijJnmGL5nAGIBU4rWqE7Zo/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL37+WPskQW69Ykf5y5wmrNdJaTQwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrZy4rzirC6J 3766AmcU1S7ih0zBDT914RMJTv5pbw5tIhMAoa9fCW+66vw7ASdWNlYNzud2/G9f Cti50vhaBSlJ2CKQd6nyhERCIzeudUvFEopkXEx5khjW0fRrGDhCdLq7yQ0DLk4z irOcYQpqnQ9nvNb/Ghao0jDNSgpu8XFLCQPZAH4yndADBRmuk4cQwGVOV92YTNCw B7ia6PjsnrqtW91fxxJ6m5ZBF6gEmo0zZ4FgJ/Iwkdhs+LwFH8Cr+A9SPUlX9j9K CEpImhDNzshTdBBIHi0pNTq1o4DtXQ1DnIK+c3Rdr602xILaABLkHn4mFZM/W+kl uzp7UDS05w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:32:46 2026 by rpki-client