$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: w/6AcuFHrDnqWxyXGoP/10UMtt/vC+hyWVC1lGqwTkM= Subject key identifier: 2B:8A:54:A1:5A:A6:59:E2:3A:3D:F4:78:93:47:93:FB:3D:8C:10:4A Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 4B5D91D962B4DFB177ACF76A4F00F7E2B2FA29C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: BA Signing time: Tue 08 Sep 2026 22:45:09 +0000 Manifest this update: Tue 08 Sep 2026 22:40:09 +0000 Manifest next update: Sat 12 Sep 2026 07:20:09 +0000 Files and hashes: 1: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) 2: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: wmYPWVWKrPZ521vWTJkNn+qQH78wfs11lu2smvjGQpE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:91:d9:62:b4:df:b1:77:ac:f7:6a:4f:00:f7:e2:b2:fa:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Sep 8 22:40:09 2026 GMT Not After : Sep 12 07:20:09 2026 GMT Subject: CN=2B8A54A15AA659E23A3DF478934793FB3D8C104A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:1d:55:bd:35:91:6a:3a:27:16:52:b7:75: 32:c2:6d:8a:3a:f2:1c:13:de:fb:24:6b:c2:f9:f9: 58:04:23:80:30:9b:46:58:cb:9a:e6:37:89:22:88: f9:7f:7a:a1:a4:b7:44:8d:de:e0:fe:63:71:e9:af: ca:0f:da:0e:26:b2:cc:7d:6f:2b:4f:cc:95:69:8f: aa:2d:b3:46:7b:50:0d:0e:d2:41:cb:54:33:e9:3d: bd:fb:a6:9d:eb:0b:be:3a:f7:90:f2:db:04:40:c9: 51:cf:85:f0:3b:1e:56:30:2c:d8:72:aa:a3:cf:66: ff:8f:85:b0:4b:9e:2a:25:5e:e4:f4:51:74:f1:5e: d0:b5:91:63:c1:25:aa:8d:93:48:de:c7:d5:cd:98: 52:6f:04:24:11:1e:89:ee:a7:3c:0c:79:84:97:a6: ec:13:1e:ac:bb:67:ea:b8:3a:2d:2c:d7:85:12:3b: 84:ac:f5:d8:cc:64:17:e1:4a:14:da:f7:15:a1:71: 47:c4:8a:2f:6b:b8:31:69:69:2b:ad:08:e0:0a:b0: 78:ad:33:be:47:cf:f5:6d:e7:68:69:cf:4b:99:f9: 50:c3:13:da:27:f2:42:80:3f:1f:d6:65:61:e2:2e: 6a:37:b9:9b:91:a0:c1:94:39:d7:fa:02:c1:fd:a0: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:54:A1:5A:A6:59:E2:3A:3D:F4:78:93:47:93:FB:3D:8C:10:4A X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b0:d7:68:ad:d5:1e:0e:51:66:29:24:98:55:d5:b8:dd:7e: b3:05:3a:d8:d9:9d:83:f2:21:68:a3:c5:e0:45:2e:98:4f:47: 2b:9c:3a:7d:d9:93:14:fb:40:e2:84:97:34:2c:bc:3c:76:0a: ae:88:8f:63:09:cc:92:b2:50:5f:9c:d2:4e:5f:9d:9c:2e:d7: 34:5a:44:ce:58:52:34:0a:73:e1:48:29:45:d0:46:48:26:0c: 5c:0f:9f:6f:1b:58:3a:e3:68:4d:06:bd:b4:cf:d0:9b:bc:24: 51:c2:10:ad:34:18:c6:a1:72:f2:f7:79:74:89:ff:b0:ad:63: 96:ca:66:b8:77:f7:d1:ee:26:aa:45:52:4c:87:e5:a9:8b:6a: e9:9d:3e:1d:4a:38:d5:36:f0:e4:c8:54:15:e4:41:6c:6d:24: c7:3c:0d:50:47:c0:f3:bf:63:4e:74:36:83:7f:a1:52:6c:4b: a9:b7:b6:a8:fa:28:79:73:be:35:00:05:3b:13:97:27:19:d4: a0:19:76:29:3c:ac:b7:ed:42:e3:3f:7e:89:19:c0:38:ca:26: 2c:de:92:65:40:19:0e:25:2b:ab:93:33:e5:19:c7:f2:6d:91: ee:14:69:d2:06:06:a6:c2:2b:b8:ed:f9:a0:a7:67:90:87:54: 49:5b:dd:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS12R2WK037F3rPdqTwD34rL6KcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA5MDgyMjQwMDlaFw0yNjA5MTIwNzIwMDlaMDMxMTAvBgNV BAMTKDJCOEE1NEExNUFBNjU5RTIzQTNERjQ3ODkzNDc5M0ZCM0Q4QzEwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8h1VvTWRajonFlK3dTLCbYo6 8hwT3vska8L5+VgEI4Awm0ZYy5rmN4kiiPl/eqGkt0SN3uD+Y3Hpr8oP2g4mssx9 bytPzJVpj6ots0Z7UA0O0kHLVDPpPb37pp3rC74695Dy2wRAyVHPhfA7HlYwLNhy qqPPZv+PhbBLniolXuT0UXTxXtC1kWPBJaqNk0jex9XNmFJvBCQRHonupzwMeYSX puwTHqy7Z+q4Oi0s14USO4Ss9djMZBfhShTa9xWhcUfEii9ruDFpaSutCOAKsHit M75Hz/Vt52hpz0uZ+VDDE9on8kKAPx/WZWHiLmo3uZuRoMGUOdf6AsH9oNFXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK4pUoVqmWeI6PfR4k0eT+z2MEEowHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLDXaK3VHg5R ZikkmFXVuN1+swU62Nmdg/IhaKPF4EUumE9HK5w6fdmTFPtA4oSXNCy8PHYKroiP YwnMkrJQX5zSTl+dnC7XNFpEzlhSNApz4UgpRdBGSCYMXA+fbxtYOuNoTQa9tM/Q m7wkUcIQrTQYxqFy8vd5dIn/sK1jlspmuHf30e4mqkVSTIflqYtq6Z0+HUo41Tbw 5MhUFeRBbG0kxzwNUEfA879jTnQ2g3+hUmxLqbe2qPooeXO+NQAFOxOXJxnUoBl2 KTyst+1C4z9+iRnAOMomLN6SZUAZDiUrq5Mz5RnH8m2R7hRp0gYGpsIruO35oKdn kIdUSVvdgA== -----END CERTIFICATE-----Generated at Thu Sep 10 18:43:01 2026 by rpki-client