$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: Rnagmt1hI9YMuN2/nwtDQkBT1Npfj1w1Qys+8+kWfqg= Subject key identifier: 34:75:87:BD:BA:03:1C:FC:79:F0:BE:36:EA:64:0B:D4:55:25:9C:2D Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 7A435EF15782D19B609F52E2CAC997D5F88489F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: BC Signing time: Thu 10 Sep 2026 14:26:44 +0000 Manifest this update: Thu 10 Sep 2026 14:21:44 +0000 Manifest next update: Sun 13 Sep 2026 15:03:44 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: 87gRDu3cb0KmDHS0aD8egrp7fFFsNk2YeFBp2ybGonk=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:43:5e:f1:57:82:d1:9b:60:9f:52:e2:ca:c9:97:d5:f8:84:89:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Sep 10 14:21:44 2026 GMT Not After : Sep 13 15:03:44 2026 GMT Subject: CN=347587BDBA031CFC79F0BE36EA640BD455259C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:67:91:53:bc:f6:c5:9f:0c:71:39:f7:fa: 76:33:d0:61:c5:e4:32:b3:2d:c6:6d:e2:b8:cf:22: f5:d0:9f:62:85:73:ad:1e:8b:c9:ab:d5:ce:4b:e3: fb:aa:be:38:ca:29:02:99:af:b2:11:48:20:68:a5: f7:f0:e0:2b:e1:85:e3:66:a5:bd:d4:bd:02:ac:d9: a1:1a:af:0a:28:de:66:98:47:c0:42:fd:2f:a9:78: 4b:6a:a1:1d:c0:8e:aa:6d:99:49:ba:0c:3b:11:00: 3f:98:be:71:80:c7:54:d1:04:43:92:6f:a9:6a:67: 2f:98:05:ab:34:fd:c8:fc:23:34:eb:22:3e:fa:79: 7f:1b:40:10:70:d4:71:71:ed:4d:65:93:1a:b2:10: aa:e1:c3:b5:d5:60:11:c6:f7:5d:a1:b0:68:48:40: 88:d1:27:d0:d9:b6:8b:05:b8:f3:8e:29:25:61:30: 58:99:e7:45:52:b6:9c:10:5e:3f:27:41:2a:ff:1f: 29:e3:2e:64:3c:a5:da:2c:ef:ef:35:59:19:6d:67: b2:b1:11:86:21:2d:d5:64:40:90:b9:ad:26:bd:b0: 15:0e:f7:f1:0b:32:e8:cf:00:da:0d:1c:cd:70:7a: 5b:46:24:d5:1d:43:45:0b:6a:6f:f0:f8:49:c9:ee: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:87:BD:BA:03:1C:FC:79:F0:BE:36:EA:64:0B:D4:55:25:9C:2D X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:45:37:d2:99:c3:97:9d:ad:f4:78:f2:b4:54:b2:88:e4:40: 84:85:0c:37:21:79:e4:a5:21:37:1c:65:b1:f3:b3:0d:99:21: ef:c0:6e:c3:b0:a4:f0:77:70:be:2e:86:1c:58:bd:55:00:98: 07:2d:b1:6f:55:ba:d9:de:13:45:2e:e0:d1:1e:aa:3a:56:09: 25:be:7a:60:ea:b9:f7:16:7b:24:e1:d7:e8:39:91:84:27:b3: 72:03:d9:39:00:1a:77:a7:c4:12:61:bf:95:6d:b6:58:dd:10: f0:1c:f0:c5:65:fd:b3:0d:a9:2e:62:25:b6:f0:8d:2f:99:19: d7:39:e8:b3:99:3e:2a:8a:dc:35:15:48:46:aa:df:ff:6f:75: 6a:06:a4:19:23:7d:89:16:88:10:ed:3f:3e:b5:aa:7a:3d:22: ce:a5:75:b1:ef:f5:c9:7d:76:5d:c4:c8:94:dd:c1:28:36:a8: 44:fa:fb:0a:6a:32:c4:5a:0e:a8:5c:3d:1a:c4:a3:b5:40:d3: 15:b9:97:2e:bc:e6:7a:c1:54:85:d0:40:57:a1:40:42:0d:14: 63:17:ce:0c:d0:3a:c3:82:a0:dc:06:f8:d0:44:3b:9f:65:2c: e5:62:a0:d9:2c:a0:3a:c0:f5:9f:55:87:66:b1:9b:97:82:02: 61:42:b4:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUekNe8VeC0Ztgn1LiysmX1fiEifYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA5MTAxNDIxNDRaFw0yNjA5MTMxNTAzNDRaMDMxMTAvBgNV BAMTKDM0NzU4N0JEQkEwMzFDRkM3OUYwQkUzNkVBNjQwQkQ0NTUyNTlDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUM2eRU7z2xZ8McTn3+nYz0GHF 5DKzLcZt4rjPIvXQn2KFc60ei8mr1c5L4/uqvjjKKQKZr7IRSCBopffw4CvhheNm pb3UvQKs2aEarwoo3maYR8BC/S+peEtqoR3AjqptmUm6DDsRAD+YvnGAx1TRBEOS b6lqZy+YBas0/cj8IzTrIj76eX8bQBBw1HFx7U1lkxqyEKrhw7XVYBHG912hsGhI QIjRJ9DZtosFuPOOKSVhMFiZ50VStpwQXj8nQSr/HynjLmQ8pdos7+81WRltZ7Kx EYYhLdVkQJC5rSa9sBUO9/ELMujPANoNHM1weltGJNUdQ0ULam/w+EnJ7vjtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNHWHvboDHPx58L426mQL1FUlnC0wHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUU30pnDl52t 9HjytFSyiORAhIUMNyF55KUhNxxlsfOzDZkh78Buw7Ck8Hdwvi6GHFi9VQCYBy2x b1W62d4TRS7g0R6qOlYJJb56YOq59xZ7JOHX6DmRhCezcgPZOQAad6fEEmG/lW22 WN0Q8BzwxWX9sw2pLmIltvCNL5kZ1znos5k+KorcNRVIRqrf/291agakGSN9iRaI EO0/PrWqej0izqV1se/1yX12XcTIlN3BKDaoRPr7CmoyxFoOqFw9GsSjtUDTFbmX LrzmesFUhdBAV6FAQg0UYxfODNA6w4Kg3Ab40EQ7n2Us5WKg2SygOsD1n1WHZrGb l4ICYUK0Jw== -----END CERTIFICATE-----Generated at Thu Sep 10 17:45:36 2026 by rpki-client