$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: Hip6kwV4CG+yb+5pI+YMoEQDYTOJL9oryDP7PZ1ATsQ= Subject key identifier: E6:2E:51:51:6D:EE:9C:B5:CF:E4:BD:DA:50:59:46:15:B2:90:67:A6 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 15780B640A94EA0797799B69D661880F9B3D0AA9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: BF Signing time: Tue 08 Sep 2026 10:04:01 +0000 Manifest this update: Tue 08 Sep 2026 09:59:01 +0000 Manifest next update: Fri 11 Sep 2026 15:56:01 +0000 Files and hashes: 1: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 2: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 3: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 4: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: wnmUjkho8OngCJoG+FvF2MYHaPvHZO89w2G0zactwaM=) 5: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 6: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:78:0b:64:0a:94:ea:07:97:79:9b:69:d6:61:88:0f:9b:3d:0a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Sep 8 09:59:01 2026 GMT Not After : Sep 11 15:56:01 2026 GMT Subject: CN=E62E51516DEE9CB5CFE4BDDA50594615B29067A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:07:e1:b0:93:e7:f8:1e:5e:87:45:8c:e9: 8f:4c:bf:b6:39:0d:15:c7:11:06:84:5a:27:26:a4: ce:e2:bc:e8:e5:22:3d:7b:35:54:5b:bc:93:6e:a2: 74:90:4d:3b:c7:0a:6e:6f:75:dc:1e:de:85:2c:04: a2:ec:8a:44:af:5d:63:60:4d:54:04:23:f0:2a:bf: 7d:dd:77:52:a4:e4:07:64:0f:2c:9b:98:a5:25:fe: d5:18:1e:93:96:3a:c9:d2:46:c0:6b:c3:01:b8:9f: 5d:e4:f0:df:9a:f4:df:c6:f4:82:25:86:07:ac:0d: 51:0e:77:55:6e:db:ad:60:99:af:76:c6:f1:c2:68: 78:df:dc:f3:a0:a7:1f:97:ea:09:2e:0f:80:c9:a3: ee:be:56:87:e0:ef:45:85:48:de:5d:4f:24:be:c9: b3:a9:e0:74:99:c0:66:98:46:4c:bb:a8:09:1f:b0: c8:e7:7a:ab:ab:da:d2:23:ff:55:76:d6:9c:c3:01: e0:14:47:69:e5:8b:d7:c5:27:56:6f:3a:67:01:0d: 06:8e:47:61:e4:e4:50:f2:54:d9:c8:53:82:03:94: c0:a6:27:e8:9c:f5:a2:e5:62:a5:bf:f2:bf:4c:68: c9:fb:5f:2f:fb:e8:52:dd:37:c9:e5:ed:cd:14:9b: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2E:51:51:6D:EE:9C:B5:CF:E4:BD:DA:50:59:46:15:B2:90:67:A6 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:02:ef:6f:71:15:3c:8a:57:24:b9:a2:87:a2:8e:f1:91:58: 86:6d:5c:64:5b:9c:73:b4:59:9b:23:02:c1:5e:82:10:a6:a2: 39:be:15:5e:36:40:f9:35:18:2c:5f:93:d5:2c:4f:9d:0a:9c: 87:01:ab:17:85:56:c7:c8:d6:1d:e7:35:b8:0c:17:eb:fe:39: 84:33:c2:e1:f5:59:ab:95:e3:fc:cd:f1:4b:17:d5:22:d3:af: b4:d3:df:9b:54:4b:27:84:b6:39:81:c1:16:51:e6:3e:de:8f: be:b0:14:d2:ac:33:5e:52:c6:c6:a2:33:be:b4:fa:21:b2:eb: 32:26:ed:5e:60:a8:c9:99:0b:eb:49:b0:af:e6:24:f0:7e:da: c6:34:11:18:ff:02:ed:72:bd:80:9b:67:91:d3:6f:ca:f9:6a: e5:5e:f0:fd:4d:62:e8:51:65:1c:69:f7:18:4a:34:0c:66:31: bd:a0:ee:37:11:fd:16:7c:4c:48:4b:40:67:e5:9d:96:fc:9c: 79:72:c0:38:51:9d:2e:73:96:5e:77:e9:c7:d2:79:23:4b:68: fa:c4:e2:19:19:a9:d8:d2:e8:b0:fd:92:64:fb:92:ae:ce:ed: b3:71:01:7c:81:3b:3a:b4:f9:bb:62:63:53:74:73:75:07:2c: fd:f9:9e:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFXgLZAqU6geXeZtp1mGID5s9CqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA5MDgwOTU5MDFaFw0yNjA5MTExNTU2MDFaMDMxMTAvBgNV BAMTKEU2MkU1MTUxNkRFRTlDQjVDRkU0QkREQTUwNTk0NjE1QjI5MDY3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MQfhsJPn+B5eh0WM6Y9Mv7Y5 DRXHEQaEWicmpM7ivOjlIj17NVRbvJNuonSQTTvHCm5vddwe3oUsBKLsikSvXWNg TVQEI/Aqv33dd1Kk5AdkDyybmKUl/tUYHpOWOsnSRsBrwwG4n13k8N+a9N/G9IIl hgesDVEOd1Vu261gma92xvHCaHjf3POgpx+X6gkuD4DJo+6+Vofg70WFSN5dTyS+ ybOp4HSZwGaYRky7qAkfsMjnequr2tIj/1V21pzDAeAUR2nli9fFJ1ZvOmcBDQaO R2Hk5FDyVNnIU4IDlMCmJ+ic9aLlYqW/8r9MaMn7Xy/76FLdN8nl7c0Um+0hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5i5RUW3unLXP5L3aUFlGFbKQZ6YwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ALvb3EVPIpX JLmih6KO8ZFYhm1cZFucc7RZmyMCwV6CEKaiOb4VXjZA+TUYLF+T1SxPnQqchwGr F4VWx8jWHec1uAwX6/45hDPC4fVZq5Xj/M3xSxfVItOvtNPfm1RLJ4S2OYHBFlHm Pt6PvrAU0qwzXlLGxqIzvrT6IbLrMibtXmCoyZkL60mwr+Yk8H7axjQRGP8C7XK9 gJtnkdNvyvlq5V7w/U1i6FFlHGn3GEo0DGYxvaDuNxH9FnxMSEtAZ+WdlvyceXLA OFGdLnOWXnfpx9J5I0to+sTiGRmp2NLosP2SZPuSrs7ts3EBfIE7OrT5u2JjU3Rz dQcs/fmeew== -----END CERTIFICATE-----Generated at Thu Sep 10 17:37:04 2026 by rpki-client