$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: b4okzFWRkAeCX5QbLoRGHvH/923xQMshypaIYLbiazk= Subject key identifier: AF:AA:F9:77:47:4B:31:4B:83:B9:09:57:57:4B:A0:AC:24:63:1D:00 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 59F38D1B98210EB8F5D891E2F4CA276F2E00688A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: BC Signing time: Tue 08 Sep 2026 19:39:57 +0000 Manifest this update: Tue 08 Sep 2026 19:34:57 +0000 Manifest next update: Fri 11 Sep 2026 20:10:57 +0000 Files and hashes: 1: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: xEm5n3nEKuL4d3IU8u3/WMpzoTUPcuRIp3xP4oyZFpc=) 2: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 3: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 4: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f3:8d:1b:98:21:0e:b8:f5:d8:91:e2:f4:ca:27:6f:2e:00:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Sep 8 19:34:57 2026 GMT Not After : Sep 11 20:10:57 2026 GMT Subject: CN=AFAAF977474B314B83B90957574BA0AC24631D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:65:de:dd:4e:e6:a6:38:a2:d1:d2:7d:a9:ae: 07:b0:32:29:bd:9f:83:30:f6:45:22:4a:48:ba:d6: c2:0a:6a:74:a8:9c:42:ab:38:14:94:9f:43:c8:5f: 6b:45:d6:b5:7f:00:1a:ce:2d:71:71:ec:41:b2:93: 20:c6:38:3d:65:e5:59:4a:9f:b4:1d:6d:d8:9c:f2: 30:0f:62:6d:46:7d:46:35:42:f6:ae:bf:4a:44:e1: 47:27:b9:9f:2e:0c:23:fc:7e:bd:74:e0:8f:9c:7d: 31:bc:34:eb:f0:74:8e:c1:cb:e3:b5:43:df:1a:3d: b7:c5:f6:4b:1d:75:97:b1:6d:b2:db:92:ac:40:18: ac:68:ce:6b:a0:c6:f5:20:a7:67:ec:91:70:6e:8c: de:7f:0f:12:a1:40:d0:c2:4c:77:34:5d:48:73:36: 82:c0:f4:a9:74:ad:bf:85:cb:7e:28:3b:31:45:8d: b0:51:16:a1:a0:9a:f0:52:2f:b7:65:8c:5b:f9:17: 2f:62:bb:67:5e:3a:fd:ed:0a:72:58:8c:d5:74:33: 46:95:51:d3:15:c8:66:f0:0f:72:46:20:1f:27:5d: 27:95:cc:12:8b:53:85:36:55:e1:83:94:33:49:d9: 37:37:a4:96:a7:20:d7:3b:36:4b:ff:83:81:90:85: 0e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AA:F9:77:47:4B:31:4B:83:B9:09:57:57:4B:A0:AC:24:63:1D:00 X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5a:2a:46:ec:3f:f8:31:73:95:c3:cb:6e:30:52:c0:27:f4: 02:93:28:54:cf:00:17:ca:53:94:cc:34:85:90:84:35:f1:9c: a7:03:b6:3f:cd:c1:f3:61:25:84:a0:46:2e:e2:a5:0f:b6:73: 3d:05:ef:ec:0b:bd:c6:06:91:a5:49:a0:6b:44:fa:b7:a7:28: 3f:57:2c:bd:44:f9:5c:97:86:5d:b1:14:5f:07:7e:a9:85:58: f3:c2:00:bf:a1:ef:3b:61:15:4e:d7:1e:bf:42:f2:5e:3c:7d: b7:97:6d:5b:1a:82:7f:00:9e:5a:8e:a5:00:31:61:aa:f3:d6: ae:58:04:1a:a2:96:32:58:0e:3e:fe:5e:92:dc:45:49:e9:f5: b6:77:25:95:a8:bc:ab:00:a9:49:65:29:1d:2b:f9:f7:7b:4f: 09:9c:84:0c:98:e3:07:f1:0d:00:d3:65:ee:06:e9:6c:cf:4a: bf:f4:80:59:aa:f4:fc:69:42:f3:2b:36:4a:4c:b9:60:b4:9c: 48:49:b0:00:84:0d:16:05:01:43:5c:c6:a3:04:e7:4b:2c:a0: 9f:c1:50:55:2b:5f:b8:38:88:2e:ec:23:75:c7:c8:53:84:7f: be:68:8c:71:44:c5:70:ca:48:64:8c:ff:7b:f2:6a:74:b6:6e: 0c:f2:a5:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWfONG5ghDrj12JHi9Monby4AaIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA5MDgxOTM0NTdaFw0yNjA5MTEyMDEwNTdaMDMxMTAvBgNV BAMTKEFGQUFGOTc3NDc0QjMxNEI4M0I5MDk1NzU3NEJBMEFDMjQ2MzFEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZd7dTuamOKLR0n2prgewMim9 n4Mw9kUiSki61sIKanSonEKrOBSUn0PIX2tF1rV/ABrOLXFx7EGykyDGOD1l5VlK n7Qdbdic8jAPYm1GfUY1Qvauv0pE4UcnuZ8uDCP8fr104I+cfTG8NOvwdI7By+O1 Q98aPbfF9ksddZexbbLbkqxAGKxozmugxvUgp2fskXBujN5/DxKhQNDCTHc0XUhz NoLA9Kl0rb+Fy34oOzFFjbBRFqGgmvBSL7dljFv5Fy9iu2deOv3tCnJYjNV0M0aV UdMVyGbwD3JGIB8nXSeVzBKLU4U2VeGDlDNJ2Tc3pJanINc7Nkv/g4GQhQ51AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr6r5d0dLMUuDuQlXV0ugrCRjHQAwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVoqRuw/+DFz lcPLbjBSwCf0ApMoVM8AF8pTlMw0hZCENfGcpwO2P83B82ElhKBGLuKlD7ZzPQXv 7Au9xgaRpUmga0T6t6coP1csvUT5XJeGXbEUXwd+qYVY88IAv6HvO2EVTtcev0Ly Xjx9t5dtWxqCfwCeWo6lADFhqvPWrlgEGqKWMlgOPv5ektxFSen1tncllai8qwCp SWUpHSv593tPCZyEDJjjB/ENANNl7gbpbM9Kv/SAWar0/GlC8ys2Sky5YLScSEmw AIQNFgUBQ1zGowTnSyygn8FQVStfuDiILuwjdcfIU4R/vmiMcUTFcMpIZIz/e/Jq dLZuDPKlcg== -----END CERTIFICATE-----Generated at Thu Sep 10 17:45:35 2026 by rpki-client