$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: XQTKkNdMzMouOEPR0jMM5SGLLSDzQOTR2U6rHDa1kbk= Subject key identifier: 49:0B:C4:C9:6E:45:80:82:26:0B:FD:EA:4C:B1:1E:A4:31:3F:A3:B7 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 4C6F05E0963836750B6527BE2E03B8FDFBE32663 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: B8 Signing time: Thu 03 Sep 2026 21:29:09 +0000 Manifest this update: Thu 03 Sep 2026 21:24:09 +0000 Manifest next update: Mon 07 Sep 2026 02:02:09 +0000 Files and hashes: 1: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: IZvNhmSRA8dY47i21DFmkGpcM3O/Tq10TPCSL9gqVDw=) 2: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 3: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 4: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6f:05:e0:96:38:36:75:0b:65:27:be:2e:03:b8:fd:fb:e3:26:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Sep 3 21:24:09 2026 GMT Not After : Sep 7 02:02:09 2026 GMT Subject: CN=490BC4C96E458082260BFDEA4CB11EA4313FA3B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:e0:e7:5a:69:2d:af:32:ee:39:c7:16:7c: 40:db:cf:0e:0d:c1:1e:cf:6c:27:de:ff:30:53:2b: 21:68:44:c8:3e:5d:3c:26:2a:87:76:1d:0c:48:6c: 6d:4a:b7:13:35:ce:ce:0d:12:37:4b:21:05:17:73: 11:3d:f2:f2:27:03:8f:c5:c4:e3:b9:10:92:b7:e6: 83:0b:2b:d0:c1:83:5b:88:30:61:49:1e:be:4e:27: 97:c6:ba:bb:cb:44:25:89:a8:7b:97:9d:a0:5c:ea: f3:45:c9:9e:51:a3:53:b7:6a:a2:12:fd:05:06:b9: 7c:b5:b1:d9:84:9e:32:8c:4b:2c:94:45:ed:fa:0d: 16:00:14:2f:6d:62:40:fb:5f:52:d3:91:1f:42:ec: 16:ab:f9:a6:0a:f2:b6:fc:e2:b9:e4:88:03:ca:c4: ea:c0:e5:bd:94:bc:99:1f:24:b5:1c:61:34:3a:68: d2:0c:0a:a9:98:e1:f3:b0:f8:9f:db:92:bb:e6:cb: 28:ba:0b:a7:57:25:6d:c7:45:a2:7d:2d:b1:88:06: 93:f0:1e:12:22:2e:79:99:b1:b6:ea:5e:1f:d7:05: c2:a1:a1:cb:1f:3e:30:95:d9:6a:bb:f3:86:e8:28: 38:b6:d8:64:25:7e:37:51:93:5d:3b:0a:cb:8b:2d: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:C4:C9:6E:45:80:82:26:0B:FD:EA:4C:B1:1E:A4:31:3F:A3:B7 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c6:41:54:1b:00:28:45:13:a5:49:8f:cb:33:37:8b:8a:9b: b0:d6:a0:a4:87:bc:a0:d0:d8:c2:d6:13:b3:49:78:7c:e0:00: 6c:0f:29:73:85:94:76:05:1a:95:82:9e:64:46:84:56:67:ea: e0:48:d6:0f:d8:e5:d5:03:cd:a9:cb:c8:a9:ee:57:3c:a5:79: 09:32:44:5f:c4:f5:d2:f0:bb:b6:94:64:61:23:8c:b5:ce:79: e3:e6:86:2b:08:fd:be:3d:3c:5d:b3:49:3f:27:68:50:d8:60: 66:fc:f5:22:6a:2f:fe:ef:09:9f:0d:14:18:bb:fd:1c:9e:60: b4:32:2f:e5:b1:91:4a:f5:e1:b7:45:62:71:8f:92:98:93:f8: a2:6f:a8:f6:d4:bd:fe:e1:67:20:c5:58:ac:c6:0c:6a:43:f4: 75:5d:44:bb:1f:03:cd:ba:91:5e:de:0c:c6:67:18:b7:7c:48: b3:78:d3:bb:42:26:f6:23:66:b2:53:2f:a4:1c:09:b8:62:a9: 52:28:35:e0:8f:0e:95:de:98:13:b3:61:3b:a9:c9:e6:86:21: b7:48:1c:cd:9e:f4:e0:9a:d8:2b:0e:3f:ba:9a:bd:ff:80:27: 03:c0:fa:58:e6:51:e0:7d:2d:97:67:cd:48:f3:88:e8:6d:dd: 0b:d5:65:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTG8F4JY4NnULZSe+LgO4/fvjJmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA5MDMyMTI0MDlaFw0yNjA5MDcwMjAyMDlaMDMxMTAvBgNV BAMTKDQ5MEJDNEM5NkU0NTgwODIyNjBCRkRFQTRDQjExRUE0MzEzRkEzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7uDnWmktrzLuOccWfEDbzw4N wR7PbCfe/zBTKyFoRMg+XTwmKod2HQxIbG1KtxM1zs4NEjdLIQUXcxE98vInA4/F xOO5EJK35oMLK9DBg1uIMGFJHr5OJ5fGurvLRCWJqHuXnaBc6vNFyZ5Ro1O3aqIS /QUGuXy1sdmEnjKMSyyURe36DRYAFC9tYkD7X1LTkR9C7Bar+aYK8rb84rnkiAPK xOrA5b2UvJkfJLUcYTQ6aNIMCqmY4fOw+J/bkrvmyyi6C6dXJW3HRaJ9LbGIBpPw HhIiLnmZsbbqXh/XBcKhocsfPjCV2Wq784boKDi22GQlfjdRk107CsuLLdxJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSQvEyW5FgIImC/3qTLEepDE/o7cwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsZBVBsAKEUT pUmPyzM3i4qbsNagpIe8oNDYwtYTs0l4fOAAbA8pc4WUdgUalYKeZEaEVmfq4EjW D9jl1QPNqcvIqe5XPKV5CTJEX8T10vC7tpRkYSOMtc554+aGKwj9vj08XbNJPydo UNhgZvz1Imov/u8Jnw0UGLv9HJ5gtDIv5bGRSvXht0VicY+SmJP4om+o9tS9/uFn IMVYrMYMakP0dV1Eux8DzbqRXt4MxmcYt3xIs3jTu0Im9iNmslMvpBwJuGKpUig1 4I8Old6YE7NhO6nJ5oYht0gczZ704JrYKw4/upq9/4AnA8D6WOZR4H0tl2fNSPOI 6G3dC9Vl4w== -----END CERTIFICATE-----Generated at Sat Sep 5 08:20:04 2026 by rpki-client