$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: 6DL/syyxU/GE9sLDzAmfRpmCLg4xyoOxG+pIVjpdUTQ= Subject key identifier: EF:95:B4:A7:B7:1E:B1:FD:79:A8:99:DE:94:DE:D3:CE:25:C3:29:AA Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 1E9B308E4DC74CF79D815D971D938D75B52FE0F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: B9 Signing time: Fri 28 Aug 2026 06:48:03 +0000 Manifest this update: Fri 28 Aug 2026 06:43:03 +0000 Manifest next update: Mon 31 Aug 2026 07:29:03 +0000 Files and hashes: 1: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=) 2: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=) 3: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=) 4: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=) 5: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: GtaH0DZyrn35QKF0JqtYr1sPPZyjcYUhxFbvEXnsWjY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9b:30:8e:4d:c7:4c:f7:9d:81:5d:97:1d:93:8d:75:b5:2f:e0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: Aug 28 06:43:03 2026 GMT Not After : Aug 31 07:29:03 2026 GMT Subject: CN=EF95B4A7B71EB1FD79A899DE94DED3CE25C329AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:9b:b4:f6:d6:a3:2f:22:7d:2e:b0:a5:3f: 8e:ff:1f:37:44:73:ba:45:a6:f8:32:65:f6:c1:64: cb:7b:fe:0e:b7:b8:f9:0e:31:6c:32:f8:d7:39:28: e1:c1:79:f5:df:24:b2:96:b8:60:94:d4:7b:3c:f1: 49:ed:27:a6:50:0e:b3:29:c1:ca:34:40:7e:13:6b: b5:91:1c:47:79:5f:80:e9:63:01:8f:49:61:b1:40: 6c:78:a7:8d:27:5a:88:2f:d0:5f:24:ff:2d:81:00: ce:6e:99:29:71:68:b2:65:81:98:ba:06:7b:0d:a3: 99:32:31:83:fb:76:06:c5:33:aa:f7:e8:7d:67:4c: 34:65:69:d0:92:bf:9a:50:8a:d3:b8:b5:9d:0c:6c: 7c:60:b5:11:7f:81:4f:9a:0f:6e:5e:1f:32:f8:78: 78:90:40:b9:7b:f3:40:da:79:38:34:bb:06:bc:c4: 89:14:51:c5:17:15:3f:02:ab:c7:05:01:2e:5f:a7: 9c:10:4c:87:8e:a6:0c:e8:0c:b4:95:a0:e9:14:29: 7c:47:67:1d:53:4c:77:6c:76:fd:e5:d2:70:13:af: 1e:18:d1:d3:9d:80:aa:d4:5b:8b:51:a8:10:27:db: 17:3c:36:d4:32:03:45:9d:25:82:ce:96:0a:8f:8a: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:B4:A7:B7:1E:B1:FD:79:A8:99:DE:94:DE:D3:CE:25:C3:29:AA X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:0c:13:ec:00:77:45:ed:0e:89:40:41:74:4e:d2:8e:3f: 5f:70:b3:c4:23:db:bb:79:52:70:f4:b5:d8:94:4f:87:4e:e8: ab:5b:c2:16:0d:2f:ea:8f:9f:4f:d0:49:e1:7c:e7:19:e1:e6: 96:35:ea:36:0f:41:2c:ef:5d:aa:65:5b:15:e1:25:0c:71:e1: 1c:e5:ea:95:2b:d9:a0:74:d8:b3:6c:10:1b:6b:81:e0:56:63: 44:21:37:3b:9e:28:72:03:6e:52:15:fd:a4:9d:f7:95:6a:b9: 25:bd:75:9c:6e:a4:2c:92:8b:6f:1d:e2:da:80:f9:2c:0c:9f: cc:2b:cf:35:56:84:fe:43:ca:d0:71:be:f9:0f:48:ed:a2:e7: 7e:63:21:93:97:c0:42:95:c6:c7:ec:91:9a:a9:4f:4d:16:57: 79:07:1e:7a:39:92:ce:90:a5:d8:6a:96:c8:69:4b:ed:99:df: 96:64:1c:95:dc:5d:f6:04:6a:68:d0:c4:03:f0:b0:72:b5:5d: 1a:b1:c1:32:31:ef:b9:5a:ab:fd:70:85:09:bf:3f:b7:28:12: e7:2e:5b:88:40:ac:24:09:d3:2d:09:9c:9c:aa:f1:ca:52:c6: e4:ee:f2:1e:63:4c:1a:a6:9b:6e:e9:28:3e:5f:1c:13:0e:15: 5b:62:e7:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHpswjk3HTPedgV2XHZONdbUv4PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjA4MjgwNjQzMDNaFw0yNjA4MzEwNzI5MDNaMDMxMTAvBgNV BAMTKEVGOTVCNEE3QjcxRUIxRkQ3OUE4OTlERTk0REVEM0NFMjVDMzI5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jZu09tajLyJ9LrClP47/HzdE c7pFpvgyZfbBZMt7/g63uPkOMWwy+Nc5KOHBefXfJLKWuGCU1Hs88UntJ6ZQDrMp wco0QH4Ta7WRHEd5X4DpYwGPSWGxQGx4p40nWogv0F8k/y2BAM5umSlxaLJlgZi6 BnsNo5kyMYP7dgbFM6r36H1nTDRladCSv5pQitO4tZ0MbHxgtRF/gU+aD25eHzL4 eHiQQLl780DaeTg0uwa8xIkUUcUXFT8Cq8cFAS5fp5wQTIeOpgzoDLSVoOkUKXxH Zx1TTHdsdv3l0nATrx4Y0dOdgKrUW4tRqBAn2xc8NtQyA0WdJYLOlgqPiuOZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU75W0p7cesf15qJnelN7TziXDKaowHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfEME+wAd0Xt DolAQXRO0o4/X3CzxCPbu3lScPS12JRPh07oq1vCFg0v6o+fT9BJ4XznGeHmljXq Ng9BLO9dqmVbFeElDHHhHOXqlSvZoHTYs2wQG2uB4FZjRCE3O54ocgNuUhX9pJ33 lWq5Jb11nG6kLJKLbx3i2oD5LAyfzCvPNVaE/kPK0HG++Q9I7aLnfmMhk5fAQpXG x+yRmqlPTRZXeQceejmSzpCl2GqWyGlL7ZnflmQcldxd9gRqaNDEA/CwcrVdGrHB MjHvuVqr/XCFCb8/tygS5y5biECsJAnTLQmcnKrxylLG5O7yHmNMGqabbukoPl8c Ew4VW2Ln3w== -----END CERTIFICATE-----Generated at Sat Aug 29 07:03:17 2026 by rpki-client