$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: +Z1Xc1TWOebbX9KgsDOkCc0kM9CRrh1WNGCxKqiBIS0= Subject key identifier: CC:2D:A4:87:A4:74:3B:63:3A:B9:25:E4:B4:82:96:81:9A:5F:78:52 Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 32B11941CE73F37B12A93C9285DB864D3A4DA4CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: A9 Signing time: Wed 19 Aug 2026 10:49:23 +0000 Manifest this update: Wed 19 Aug 2026 10:44:23 +0000 Manifest next update: Thu 20 Aug 2026 11:15:23 +0000 Files and hashes: 1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) 2: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: 3PYAzwG39NI6wgs3a9dwXDW42ySqrYlTx3HBS1dKAes=) 3: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 07:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b1:19:41:ce:73:f3:7b:12:a9:3c:92:85:db:86:4d:3a:4d:a4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: Aug 19 10:44:23 2026 GMT Not After : Aug 20 11:15:23 2026 GMT Subject: CN=CC2DA487A4743B633AB925E4B48296819A5F7852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:50:db:ae:b9:62:15:6e:b8:f9:5e:ea:21: 00:8d:eb:4f:e4:f4:4d:42:d4:b1:14:0a:8c:47:3f: c7:63:7f:ca:67:0e:ad:98:69:ef:ae:df:c3:fe:78: f3:79:4a:52:98:60:15:c8:84:98:21:b5:c4:4b:74: 06:7c:7d:6b:a4:13:f3:7e:17:04:79:7f:d8:44:41: c0:88:21:45:30:06:85:2e:b4:5f:1d:16:bf:30:3b: 68:b8:e4:8e:4a:9f:c8:1d:e8:5a:00:df:db:9c:a0: 8b:fc:8c:39:af:ac:90:44:26:bd:4c:d8:e1:94:e7: f7:28:01:4f:f5:c2:81:03:77:74:b7:0a:7f:4f:48: 5e:94:15:1f:81:15:3b:d7:20:4f:ec:4b:e5:48:34: 15:73:39:d2:3d:58:98:8c:18:af:c1:a6:db:47:e0: 70:75:b2:7b:ec:0d:50:2c:2b:ba:00:e9:3c:26:97: d5:59:a5:f2:bd:29:39:f3:3c:08:6d:a6:b3:7f:32: c9:68:8a:c0:3c:b7:f4:c5:75:66:f0:d1:8f:6e:96: d6:f4:b7:e1:7d:fc:36:78:b0:c3:57:2d:db:02:b1: 1a:62:1e:f1:a8:62:9f:9f:60:bb:77:9b:a6:05:17: c8:64:2c:a5:84:51:28:55:0d:70:c3:56:bd:d4:57: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:A4:87:A4:74:3B:63:3A:B9:25:E4:B4:82:96:81:9A:5F:78:52 X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:e7:dc:af:bb:e0:28:92:c6:d9:01:57:ba:b9:0c:f5:27: 1c:0e:dc:86:bb:4d:74:90:b4:e2:5d:84:99:32:f6:b4:9b:75: 48:a8:b6:ce:73:15:0a:7f:06:41:1b:04:d9:86:88:d5:a7:7d: 75:de:89:83:47:7c:fa:36:fd:0a:19:4c:c8:09:8d:01:29:1a: 10:40:74:ac:7f:9a:a5:84:6d:2a:2f:e7:50:6f:81:94:4b:9b: fe:72:a1:fa:09:d8:91:d0:29:46:cc:01:c7:c2:13:98:d0:67: c6:f2:24:d5:c1:97:5e:77:72:26:03:b4:1a:67:24:33:ab:8a: 11:41:be:86:39:2b:fb:cd:ae:1e:57:00:a3:d7:91:10:6f:a7: 8c:61:93:43:9b:2f:a6:c0:69:58:18:be:38:6c:55:9e:dd:2f: f7:fb:9b:85:43:e2:9e:ce:42:c2:a0:c8:95:59:3c:b5:04:07: dd:7f:e0:75:21:28:26:9e:74:93:e7:c7:8c:49:c3:15:44:e5: 6f:93:4c:c9:29:c2:4e:76:33:59:2e:dc:50:bd:ac:80:4e:84: c0:fe:13:05:dd:9e:ea:b4:61:fc:3b:ef:af:d7:1c:f0:50:a9: 05:d2:80:2c:5b:47:51:87:28:d6:44:25:1a:68:91:f2:13:29: 3e:66:2f:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMrEZQc5z83sSqTyShduGTTpNpMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA4MTkxMDQ0MjNaFw0yNjA4MjAxMTE1MjNaMDMxMTAvBgNV BAMTKENDMkRBNDg3QTQ3NDNCNjMzQUI5MjVFNEI0ODI5NjgxOUE1Rjc4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bVDbrrliFW64+V7qIQCN60/k 9E1C1LEUCoxHP8djf8pnDq2Yae+u38P+ePN5SlKYYBXIhJghtcRLdAZ8fWukE/N+ FwR5f9hEQcCIIUUwBoUutF8dFr8wO2i45I5Kn8gd6FoA39ucoIv8jDmvrJBEJr1M 2OGU5/coAU/1woEDd3S3Cn9PSF6UFR+BFTvXIE/sS+VINBVzOdI9WJiMGK/BpttH 4HB1snvsDVAsK7oA6Twml9VZpfK9KTnzPAhtprN/MsloisA8t/TFdWbw0Y9ultb0 t+F9/DZ4sMNXLdsCsRpiHvGoYp+fYLt3m6YFF8hkLKWEUShVDXDDVr3UV08lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzC2kh6R0O2M6uSXktIKWgZpfeFIwHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErDn3K+74CiS xtkBV7q5DPUnHA7chrtNdJC04l2EmTL2tJt1SKi2znMVCn8GQRsE2YaI1ad9dd6J g0d8+jb9ChlMyAmNASkaEEB0rH+apYRtKi/nUG+BlEub/nKh+gnYkdApRswBx8IT mNBnxvIk1cGXXndyJgO0GmckM6uKEUG+hjkr+82uHlcAo9eREG+njGGTQ5svpsBp WBi+OGxVnt0v9/ubhUPins5CwqDIlVk8tQQH3X/gdSEoJp50k+fHjEnDFUTlb5NM ySnCTnYzWS7cUL2sgE6EwP4TBd2e6rRh/Dvvr9cc8FCpBdKALFtHUYco1kQlGmiR 8hMpPmYvVg== -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:42 2026 by rpki-client