$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: 4z1DDroWfspbWTIueYrFT64JyTswUfQRjlbCoRh3CqM= Subject key identifier: A9:2A:BD:8E:83:B5:72:7A:8D:D1:DA:B6:27:88:E7:8A:E7:CF:A1:87 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 2EE642E0DE75053A1573B001D837968446D122AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: B6 Signing time: Fri 28 Aug 2026 06:47:55 +0000 Manifest this update: Fri 28 Aug 2026 06:42:55 +0000 Manifest next update: Mon 31 Aug 2026 11:18:55 +0000 Files and hashes: 1: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (hash: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=) 2: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (hash: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y=) 3: 3231312e3135382e302e302f31362d3136203d3e2034383337.roa (hash: i9hECE3kOB5KCZJDOyjFbCvXCgNoN/LRN4pG0/aZL80=) 4: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: l+mg0Fx6YSh0beeljD2J7Uaefjm4rDTzEj795QPehX4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e6:42:e0:de:75:05:3a:15:73:b0:01:d8:37:96:84:46:d1:22:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: Aug 28 06:42:55 2026 GMT Not After : Aug 31 11:18:55 2026 GMT Subject: CN=A92ABD8E83B5727A8DD1DAB62788E78AE7CFA187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:34:ae:43:99:ed:af:ea:45:27:80:4a:95: c3:62:aa:cc:cb:62:a1:d3:4d:4c:ab:72:26:f2:5b: 35:d7:bb:25:1e:e8:66:c7:89:99:84:8a:3e:23:e2: 1a:45:4e:eb:4d:60:81:4d:c5:1d:73:c1:25:0c:41: 4e:5b:aa:b2:f2:a2:9e:85:35:1a:0f:2e:b5:82:da: a9:3c:97:2a:5a:17:43:8a:01:11:26:cf:a4:bc:7f: 98:2f:27:e7:ce:34:43:4c:23:50:db:af:73:93:8f: fb:15:ca:b8:0f:ea:13:cf:3c:00:d6:eb:b5:cc:72: 69:10:52:44:8d:6e:ab:a4:c8:99:ce:79:b9:e2:7f: b9:f0:52:0f:a2:a9:73:db:15:52:83:88:fc:28:9b: 2f:39:58:67:76:9b:d7:08:e1:a3:8c:2a:e5:e5:4d: b4:b5:f5:43:36:96:24:4d:44:73:81:cf:ee:d2:40: 4a:f4:a6:07:22:e0:6f:19:ca:43:95:b5:4e:1d:36: a9:0c:ae:92:e7:ab:00:53:71:ab:79:1a:aa:97:75: 74:61:94:25:03:50:e9:64:d3:08:53:ef:bf:d2:bd: f0:24:0a:99:33:b3:75:98:9d:bc:e8:61:bd:0c:86: c4:36:e2:d6:35:3b:9f:f6:4c:c6:21:55:51:96:ca: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2A:BD:8E:83:B5:72:7A:8D:D1:DA:B6:27:88:E7:8A:E7:CF:A1:87 X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:63:92:40:bf:b8:45:c9:6a:3a:ea:fa:f2:df:49:42:39:97: 98:31:83:31:8a:dc:26:5b:fc:e4:c5:d3:ae:d1:cd:82:db:0b: 63:dd:f2:23:c3:d5:22:7e:a5:f2:fe:d4:14:ca:7b:52:51:f6: 45:5c:2b:47:9c:47:13:8b:e7:13:24:77:c1:63:97:75:3e:29: e3:72:1f:3d:5b:3a:6c:60:ce:8c:1a:04:e5:6a:16:38:b7:d9: 02:2a:b7:32:14:0f:e6:ab:fa:99:79:08:f4:af:2e:41:b6:ee: 81:8b:ff:25:24:37:b3:75:18:24:40:70:b7:87:55:67:4c:45: c5:2b:c6:25:b0:6d:1e:19:82:3f:5e:c4:7a:62:15:24:ab:05: e1:1c:52:b0:d6:c4:a7:b4:a9:7d:b2:3b:e2:43:3a:ad:d0:aa: ee:82:da:f2:4d:c6:d4:e8:71:73:c4:7c:ab:0a:a1:4b:17:32: 5a:94:31:ea:a7:b3:3b:34:06:fd:1d:55:bf:64:0d:ea:fa:9b: 3f:4c:c1:65:24:a6:88:78:39:bc:44:c3:74:d0:e0:59:22:bf: 5d:16:10:63:9e:a2:73:a7:2f:07:b6:c7:37:7a:df:f5:f0:0d: 94:6c:66:9c:5e:c6:ea:31:9e:d4:ad:71:fe:9a:b1:f4:78:5b: b7:e4:3f:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULuZC4N51BToVc7AB2DeWhEbRIq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA4MjgwNjQyNTVaFw0yNjA4MzExMTE4NTVaMDMxMTAvBgNV BAMTKEE5MkFCRDhFODNCNTcyN0E4REQxREFCNjI3ODhFNzhBRTdDRkExODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVDSuQ5ntr+pFJ4BKlcNiqszL YqHTTUyrcibyWzXXuyUe6GbHiZmEij4j4hpFTutNYIFNxR1zwSUMQU5bqrLyop6F NRoPLrWC2qk8lypaF0OKAREmz6S8f5gvJ+fONENMI1Dbr3OTj/sVyrgP6hPPPADW 67XMcmkQUkSNbqukyJnOebnif7nwUg+iqXPbFVKDiPwomy85WGd2m9cI4aOMKuXl TbS19UM2liRNRHOBz+7SQEr0pgci4G8ZykOVtU4dNqkMrpLnqwBTcat5GqqXdXRh lCUDUOlk0whT77/SvfAkCpkzs3WYnbzoYb0MhsQ24tY1O5/2TMYhVVGWyqb1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqSq9joO1cnqN0dq2J4jniufPoYcwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmOSQL+4Rclq Our68t9JQjmXmDGDMYrcJlv85MXTrtHNgtsLY93yI8PVIn6l8v7UFMp7UlH2RVwr R5xHE4vnEyR3wWOXdT4p43IfPVs6bGDOjBoE5WoWOLfZAiq3MhQP5qv6mXkI9K8u QbbugYv/JSQ3s3UYJEBwt4dVZ0xFxSvGJbBtHhmCP17EemIVJKsF4RxSsNbEp7Sp fbI74kM6rdCq7oLa8k3G1Ohxc8R8qwqhSxcyWpQx6qezOzQG/R1Vv2QN6vqbP0zB ZSSmiHg5vETDdNDgWSK/XRYQY56ic6cvB7bHN3rf9fANlGxmnF7G6jGe1K1x/pqx 9Hhbt+Q/1w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:53 2026 by rpki-client