$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: 1AaR1CkyEjPOgBQkRXnp5cd3mHxiJ/JuU/yUw++0JgQ= Subject key identifier: 11:12:41:CA:E7:7A:25:05:67:49:D3:7F:D9:A9:4D:13:36:A8:00:20 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 6295379D40933279C72200EC1C1818588FDB2052 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: BC Signing time: Fri 28 Aug 2026 06:48:26 +0000 Manifest this update: Fri 28 Aug 2026 06:43:26 +0000 Manifest next update: Mon 31 Aug 2026 11:23:26 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: cafAmdxOHZACJtwAXSNvcPImlx2C3J8kCy3mCxlGuA8=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:95:37:9d:40:93:32:79:c7:22:00:ec:1c:18:18:58:8f:db:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Aug 28 06:43:26 2026 GMT Not After : Aug 31 11:23:26 2026 GMT Subject: CN=111241CAE77A25056749D37FD9A94D1336A80020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:a3:f7:07:e7:fe:e1:6d:3d:9f:0c:9d:b3: ad:97:2e:6e:7e:c2:ee:27:88:77:2d:9a:d7:1c:1f: 61:81:47:1d:9b:3b:cb:00:12:57:aa:a3:ed:c3:3b: 0c:66:42:43:e0:68:c9:c1:c1:21:37:35:69:fd:e9: 94:b1:5c:5a:80:56:49:ef:15:ef:5a:1b:00:d8:8e: bf:f0:68:83:03:42:b9:e6:cc:c1:66:d0:29:fa:4c: 30:55:6a:aa:97:5c:da:1b:03:e9:6a:97:65:4d:2c: 7a:8c:55:99:ae:45:d2:a1:db:2e:bd:e6:ac:ba:58: b5:5c:81:7a:91:ab:1e:1c:17:73:c8:7b:7b:14:7b: 09:75:ee:b3:5c:6a:fb:b1:e5:f9:f9:b1:1e:c5:4e: 5d:a9:a5:e5:49:12:44:59:93:68:be:74:26:a1:24: d7:7a:8e:13:16:06:41:95:de:8e:c8:e5:f2:85:b3: eb:62:01:0c:c1:6b:14:9d:6c:7e:0d:e5:0e:cc:a8: 2d:66:74:df:1b:fc:0c:0b:03:96:5b:83:a7:d0:a2: c3:75:a1:65:c4:07:45:97:fe:1b:41:26:3a:c6:cb: 0f:b1:00:3f:02:47:27:d0:ad:c1:8b:38:18:79:08: 10:8e:35:94:e1:11:d1:11:b6:33:aa:2e:90:0b:2a: 49:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:41:CA:E7:7A:25:05:67:49:D3:7F:D9:A9:4D:13:36:A8:00:20 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fa:d4:00:1b:ee:ab:7a:a9:15:87:0d:83:06:44:0a:89:58: 22:cc:1f:d8:0c:d9:46:d8:3a:bf:24:b8:b8:d2:44:05:1a:9f: df:91:b2:8a:fc:59:f1:79:19:cd:bb:bf:bd:2f:6c:5b:87:43: ef:f3:5f:2c:30:a3:80:f8:47:08:8f:88:e2:92:39:9d:3d:4c: 41:78:b0:4e:b0:76:5e:62:18:d1:bf:16:33:1c:9e:5e:ad:c4: 18:42:8f:6c:e4:2f:fb:91:70:ba:ba:e4:3f:c2:db:5f:69:0a: 76:76:c5:85:79:ac:ff:dc:04:01:19:57:e8:1b:5e:7a:42:af: ab:4b:33:4a:bb:af:70:c4:ab:ef:ff:52:8d:76:a6:56:52:73: 42:be:7f:90:5a:67:05:9d:c5:0f:29:d4:a3:11:81:4d:0d:67: 75:64:f7:47:33:c4:4f:20:b9:2e:ab:08:2e:11:e4:8c:af:84: 3a:fb:11:6b:26:14:34:47:a2:08:f3:f1:da:18:6b:4a:e7:96: a7:8e:0a:a8:2e:90:10:96:ae:32:96:49:5a:de:3f:f4:cc:ad: c9:72:5e:c6:3a:d3:e1:ce:bb:a7:3c:61:22:89:73:d1:01:7a: a3:e9:ac:b4:0f:42:88:08:c6:30:ad:c4:d6:52:de:df:e5:df: 95:1d:1e:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYpU3nUCTMnnHIgDsHBgYWI/bIFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA4MjgwNjQzMjZaFw0yNjA4MzExMTIzMjZaMDMxMTAvBgNV BAMTKDExMTI0MUNBRTc3QTI1MDU2NzQ5RDM3RkQ5QTk0RDEzMzZBODAwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdYaP3B+f+4W09nwyds62XLm5+ wu4niHctmtccH2GBRx2bO8sAEleqo+3DOwxmQkPgaMnBwSE3NWn96ZSxXFqAVknv Fe9aGwDYjr/waIMDQrnmzMFm0Cn6TDBVaqqXXNobA+lql2VNLHqMVZmuRdKh2y69 5qy6WLVcgXqRqx4cF3PIe3sUewl17rNcavux5fn5sR7FTl2ppeVJEkRZk2i+dCah JNd6jhMWBkGV3o7I5fKFs+tiAQzBaxSdbH4N5Q7MqC1mdN8b/AwLA5Zbg6fQosN1 oWXEB0WX/htBJjrGyw+xAD8CRyfQrcGLOBh5CBCONZThEdERtjOqLpALKkkBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUERJByud6JQVnSdN/2alNEzaoACAwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfrUABvuq3qp FYcNgwZEColYIswf2AzZRtg6vyS4uNJEBRqf35GyivxZ8XkZzbu/vS9sW4dD7/Nf LDCjgPhHCI+I4pI5nT1MQXiwTrB2XmIY0b8WMxyeXq3EGEKPbOQv+5FwurrkP8Lb X2kKdnbFhXms/9wEARlX6BteekKvq0szSruvcMSr7/9SjXamVlJzQr5/kFpnBZ3F DynUoxGBTQ1ndWT3RzPETyC5LqsILhHkjK+EOvsRayYUNEeiCPPx2hhrSueWp44K qC6QEJauMpZJWt4/9MytyXJexjrT4c67pzxhIolz0QF6o+mstA9CiAjGMK3E1lLe 3+XflR0eNQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:47 2026 by rpki-client