$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json) Hash identifier: wnb3xXAYGVF+V9nQfzSMiLmyxbkTkRT6ALN/8905Xvw= Subject key identifier: 2C:FF:E9:CA:C2:C1:07:30:2A:AF:62:D6:2F:28:B8:D1:C7:25:55:60 Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Certificate serial: 63905584084F5104EECA37E25067907FC64F7E4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft Manifest number: B3 Signing time: Fri 28 Aug 2026 06:48:25 +0000 Manifest this update: Fri 28 Aug 2026 06:43:25 +0000 Manifest next update: Mon 31 Aug 2026 08:07:25 +0000 Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: eNMumtgazLZx6uQDVfFHqxIkq9BmAVqpKrEtniDw+lk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:90:55:84:08:4f:51:04:ee:ca:37:e2:50:67:90:7f:c6:4f:7e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Validity Not Before: Aug 28 06:43:25 2026 GMT Not After : Aug 31 08:07:25 2026 GMT Subject: CN=2CFFE9CAC2C107302AAF62D62F28B8D1C7255560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:87:84:c6:ed:a7:3b:49:f7:c7:48:54:3d: 97:bb:8b:17:03:d7:2a:37:f6:ab:e6:9d:17:81:b0: cd:1a:77:65:5a:3d:71:d0:71:29:18:37:55:63:7b: ac:42:2c:c8:9f:cb:c5:97:55:da:3f:7d:34:e3:2d: 07:b6:17:be:ec:74:b9:48:d0:09:5a:9c:81:f1:5d: 9f:e1:ed:27:87:89:a3:51:61:86:ad:fc:7f:56:64: b4:63:af:f8:0b:2e:5a:b7:06:d3:9d:2c:95:29:8b: 68:6f:54:1d:36:4f:84:a6:94:5d:5e:00:76:5c:74: d2:48:50:a6:b2:c1:85:cd:1a:c0:f0:b0:4e:da:68: f1:c9:fb:59:01:0c:55:ae:1e:0d:d4:83:1a:10:ef: b8:73:be:d2:cc:fa:7e:a3:57:98:b8:b7:1c:6e:3d: 05:a8:71:e9:ac:09:9f:ad:6f:27:ba:53:4b:51:17: d9:18:1f:7c:d6:6e:55:ea:89:d1:6d:17:87:2a:f0: 86:00:02:6c:c0:d9:7a:7a:fe:eb:0f:f8:96:e9:32: 32:f3:b0:a9:f0:b6:0f:4f:fd:b2:29:3f:18:35:3c: 9b:31:77:f8:05:cf:39:f8:04:01:cd:ec:79:29:70: c1:ac:e1:3e:d6:06:07:a6:9b:9a:26:dc:11:14:94: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FF:E9:CA:C2:C1:07:30:2A:AF:62:D6:2F:28:B8:D1:C7:25:55:60 X509v3 Authority Key Identifier: keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1c:86:58:6b:66:c9:f7:c6:26:23:39:80:57:1c:6f:00:46: df:30:ec:df:1b:21:e3:aa:be:17:f8:bc:8c:ba:5d:b7:c1:43: b8:b4:83:2e:fa:f5:af:77:0f:fe:3a:a0:c6:bc:5b:ee:bd:00: ce:24:78:04:cb:37:b2:2d:c6:28:9b:4d:e6:50:74:46:c7:93: 96:4a:68:19:ce:ac:44:99:e2:37:be:ec:1a:62:42:e9:56:8e: 67:41:fb:89:62:1b:21:58:fa:82:41:39:48:45:fc:fb:c2:94: 83:d7:cd:5d:a9:ad:0b:3f:e0:c9:ed:37:50:0a:c2:90:d5:ac: ff:a6:f3:37:2e:b2:01:99:af:f4:0c:7a:e7:fe:ec:66:27:7f: 47:5c:b6:2a:a4:33:af:11:2a:5e:eb:a2:b0:d9:f2:0e:99:e3: d6:e3:34:50:6a:12:60:cd:c5:f2:f3:97:b2:b7:d2:df:b5:b5: 2a:76:0c:bd:70:31:4a:e1:85:08:c3:e0:5d:63:d7:5f:9c:81: bc:3a:94:c3:21:5f:0f:a0:85:60:f6:d9:7a:c7:6a:d0:83:d0: ca:30:7a:29:c7:01:24:b3:3c:3d:db:0b:94:d7:b4:a9:84:39: e7:2b:e9:b9:07:65:63:7c:08:8f:72:33:bd:4f:66:75:ab:86: 97:4a:76:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY5BVhAhPUQTuyjfiUGeQf8ZPfkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVC QkNGM0RDNDAeFw0yNjA4MjgwNjQzMjVaFw0yNjA4MzEwODA3MjVaMDMxMTAvBgNV BAMTKDJDRkZFOUNBQzJDMTA3MzAyQUFGNjJENjJGMjhCOEQxQzcyNTU1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMoeExu2nO0n3x0hUPZe7ixcD 1yo39qvmnReBsM0ad2VaPXHQcSkYN1Vje6xCLMify8WXVdo/fTTjLQe2F77sdLlI 0AlanIHxXZ/h7SeHiaNRYYat/H9WZLRjr/gLLlq3BtOdLJUpi2hvVB02T4SmlF1e AHZcdNJIUKaywYXNGsDwsE7aaPHJ+1kBDFWuHg3UgxoQ77hzvtLM+n6jV5i4txxu PQWocemsCZ+tbye6U0tRF9kYH3zWblXqidFtF4cq8IYAAmzA2Xp6/usP+JbpMjLz sKnwtg9P/bIpPxg1PJsxd/gFzzn4BAHN7HkpcMGs4T7WBgemm5om3BEUlAEFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULP/pysLBBzAqr2LWLyi40cclVWAwHwYDVR0j BBgwFoAUlRgw+utT+Al8E18WKS4plbvPPcQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2NjA4MjEyNzEzNDcyMy8wLzk1MTgzMEZBRUI1M0Y4MDk3QzEzNUYxNjI5MkUy OTk1QkJDRjNEQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjYwODIxMjcxMzQ3MjMvMC85NTE4MzBGQUVCNTNG ODA5N0MxMzVGMTYyOTJFMjk5NUJCQ0YzREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRyGWGtmyffG JiM5gFccbwBG3zDs3xsh46q+F/i8jLpdt8FDuLSDLvr1r3cP/jqgxrxb7r0AziR4 BMs3si3GKJtN5lB0RseTlkpoGc6sRJniN77sGmJC6VaOZ0H7iWIbIVj6gkE5SEX8 +8KUg9fNXamtCz/gye03UArCkNWs/6bzNy6yAZmv9Ax65/7sZid/R1y2KqQzrxEq XuuisNnyDpnj1uM0UGoSYM3F8vOXsrfS37W1KnYMvXAxSuGFCMPgXWPXX5yBvDqU wyFfD6CFYPbZesdq0IPQyjB6KccBJLM8PdsLlNe0qYQ55yvpuQdlY3wIj3IzvU9m dauGl0p2cw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:15 2026 by rpki-client