$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: TfqMb1bGEkdGvvDZI0MgwLcrrI/fUjUdAuhz3eDVzvQ= Subject key identifier: 01:22:11:45:93:76:2F:E8:75:C1:4D:15:2D:89:24:16:63:CC:B6:14 Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 62CF33FD55D21A22F5A84697F5EFBA8FD9CF095C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: B7 Signing time: Tue 08 Sep 2026 13:49:18 +0000 Manifest this update: Tue 08 Sep 2026 13:44:18 +0000 Manifest next update: Sat 12 Sep 2026 00:36:18 +0000 Files and hashes: 1: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) 2: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) 3: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) 4: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: vrEV4Qyox+KcDoSdQudcw0DBJnSioNA3XkBlJwSF5og=) 5: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) 6: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cf:33:fd:55:d2:1a:22:f5:a8:46:97:f5:ef:ba:8f:d9:cf:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Sep 8 13:44:18 2026 GMT Not After : Sep 12 00:36:18 2026 GMT Subject: CN=0122114593762FE875C14D152D89241663CCB614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:09:72:ec:88:7d:7a:d6:63:f5:09:a2:08: 20:1f:8e:c4:ff:00:27:3e:de:18:ee:34:bd:f3:ff: 8b:0e:d1:1e:bb:e5:ca:0e:e7:8c:50:6e:1d:ef:47: 8d:47:b9:47:08:72:30:03:cd:b6:66:d3:f0:df:b6: 1d:41:c2:94:98:12:10:df:81:79:f7:93:8c:02:a9: 1a:04:a3:d1:6b:13:9c:59:f6:2a:de:50:3f:99:c5: 61:e0:bc:9b:26:29:9b:9c:24:5d:9b:c7:0b:68:74: f3:e3:e1:5b:2b:f9:0f:8e:14:26:9c:6f:75:77:e5: 23:57:76:03:9b:4f:77:da:05:f4:0b:54:ba:ad:44: 09:b1:14:f3:d9:a4:95:e8:55:5c:4c:bf:bd:d8:3b: 30:cb:f0:74:dd:8f:50:a5:a2:bb:3c:eb:af:68:1f: 2c:a2:b5:0c:ca:46:53:d3:3d:c2:1c:cf:9b:00:a3: 87:f0:d2:fb:d9:ec:bb:18:a3:54:84:6c:c2:65:46: 8b:32:4a:f5:b1:ee:b0:9e:c2:e9:57:7f:a3:d5:37: 6c:db:3e:43:92:3c:33:0f:b2:e4:8a:a0:4a:9b:21: 9a:8d:42:29:8e:55:4e:e1:b0:dd:cb:a6:e2:01:97: 8b:13:e7:b9:0d:ee:cc:5a:5a:b2:b1:7f:ed:17:05: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:11:45:93:76:2F:E8:75:C1:4D:15:2D:89:24:16:63:CC:B6:14 X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:53:29:44:07:a4:a9:3f:8f:8e:8c:64:21:65:e5:fa:90: 59:98:0b:ce:e1:5e:ce:17:c3:60:11:aa:8c:94:26:ff:be:f6: 0b:a0:a0:79:15:f2:78:fa:23:10:a2:64:d0:fe:0b:a1:66:75: 31:dc:5f:9a:31:55:f4:cb:c0:4e:fc:72:0b:8e:1e:7f:5f:6b: c7:fd:e6:52:10:5e:09:80:b5:73:97:bb:e1:9e:d5:80:07:d2: 0b:99:55:a6:f9:ea:cd:8e:db:2c:2b:d7:28:39:75:d0:bc:bf: 28:a9:17:32:8e:01:34:47:43:1b:60:67:4a:2e:60:f9:e8:a5: db:7f:f8:e6:0d:21:d8:3b:98:80:bd:ac:01:2d:9b:cf:bf:db: a6:27:13:87:d5:8e:74:5a:fe:fd:6e:f7:05:21:25:db:8a:de: 40:2c:df:75:78:dc:77:d5:ef:cf:3e:40:f8:d6:2d:26:b9:f2: 82:1b:68:d6:f6:9f:58:07:ed:9d:8c:71:f2:41:6b:05:91:41: 44:86:ff:2b:ac:e0:1e:6d:65:44:14:21:bb:ca:64:1d:cd:08: c7:72:c1:36:a7:e5:df:e2:73:6a:8e:89:41:f8:97:5f:7e:f9: a7:63:62:e4:c3:11:a0:5d:af:f2:1e:52:eb:59:14:c4:8b:c0: 95:f4:00:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYs8z/VXSGiL1qEaX9e+6j9nPCVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA5MDgxMzQ0MThaFw0yNjA5MTIwMDM2MThaMDMxMTAvBgNV BAMTKDAxMjIxMTQ1OTM3NjJGRTg3NUMxNEQxNTJEODkyNDE2NjNDQ0I2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLQly7Ih9etZj9QmiCCAfjsT/ ACc+3hjuNL3z/4sO0R675coO54xQbh3vR41HuUcIcjADzbZm0/Dfth1BwpSYEhDf gXn3k4wCqRoEo9FrE5xZ9ireUD+ZxWHgvJsmKZucJF2bxwtodPPj4Vsr+Q+OFCac b3V35SNXdgObT3faBfQLVLqtRAmxFPPZpJXoVVxMv73YOzDL8HTdj1Clors8669o HyyitQzKRlPTPcIcz5sAo4fw0vvZ7LsYo1SEbMJlRosySvWx7rCewulXf6PVN2zb PkOSPDMPsuSKoEqbIZqNQimOVU7hsN3LpuIBl4sT57kN7sxaWrKxf+0XBYv3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUASIRRZN2L+h1wU0VLYkkFmPMthQwHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoVTKUQHpKk/ j46MZCFl5fqQWZgLzuFezhfDYBGqjJQm/772C6CgeRXyePojEKJk0P4LoWZ1Mdxf mjFV9MvATvxyC44ef19rx/3mUhBeCYC1c5e74Z7VgAfSC5lVpvnqzY7bLCvXKDl1 0Ly/KKkXMo4BNEdDG2BnSi5g+eil23/45g0h2DuYgL2sAS2bz7/bpicTh9WOdFr+ /W73BSEl24reQCzfdXjcd9Xvzz5A+NYtJrnyghto1vafWAftnYxx8kFrBZFBRIb/ K6zgHm1lRBQhu8pkHc0Ix3LBNqfl3+Jzao6JQfiXX375p2Ni5MMRoF2v8h5S61kU xIvAlfQA2A== -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:31 2026 by rpki-client