$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: 6RGUGSGuHVDJDkQK/8DhpioHKuAviacwWf84RvPaBaw= Subject key identifier: 1B:66:D8:08:AC:87:20:C0:DB:38:61:E9:6F:68:09:B0:A0:42:80:4F Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 1029BA599B88DBBDD14877D1954A13024353FE80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: AE Signing time: Fri 28 Aug 2026 06:48:19 +0000 Manifest this update: Fri 28 Aug 2026 06:43:19 +0000 Manifest next update: Mon 31 Aug 2026 09:44:19 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: T7aZ+Dc6M54aA+NJU27BZoZdWVxCogQVkZm9f+KESeI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:ba:59:9b:88:db:bd:d1:48:77:d1:95:4a:13:02:43:53:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: Aug 28 06:43:19 2026 GMT Not After : Aug 31 09:44:19 2026 GMT Subject: CN=1B66D808AC8720C0DB3861E96F6809B0A042804F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:c1:d5:b3:68:3e:e0:8b:da:41:db:88:d5: a0:bf:64:03:92:a9:4e:0b:b8:b0:c7:fa:d4:74:67: 16:1d:bd:f3:9d:2a:c7:98:34:6f:b2:0e:23:4a:4d: 60:ea:2f:c9:77:4e:eb:9d:a2:77:ab:e8:38:d2:31: db:57:46:ed:37:50:c2:3b:08:22:74:c1:3a:45:08: 67:17:9c:c4:ae:5a:67:95:2f:ef:49:39:e6:4a:b4: a1:b9:8a:21:88:6f:54:eb:03:f0:65:2d:ea:b4:1f: 27:ee:1d:68:79:ae:95:10:09:85:48:2e:ff:02:82: 72:e8:15:41:80:20:99:0a:bf:f6:d2:d1:d3:72:35: 03:55:0d:05:7b:24:b1:dc:55:ab:78:6d:d6:65:7b: b2:c7:d9:df:26:89:15:3e:24:87:9e:30:b9:33:38: 99:ea:fa:c0:e8:27:4c:1c:ba:7a:8d:ef:d7:ad:3e: f1:8a:8c:53:28:4f:2c:e4:6f:63:11:e4:69:ec:88: fa:65:a9:e8:ad:e5:a3:21:1b:5d:ae:7e:02:9a:9f: ac:bf:d7:b5:1d:d2:d9:c6:43:bb:ad:91:e0:e9:2e: fd:0e:1e:a1:a2:57:81:04:45:77:ad:54:b0:cc:a4: 02:ad:03:7c:1b:0d:36:f1:9d:22:98:2c:d8:4f:14: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:66:D8:08:AC:87:20:C0:DB:38:61:E9:6F:68:09:B0:A0:42:80:4F X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:49:ff:df:e4:a7:3c:b3:05:e7:df:5f:19:77:7e:fb:a5: e0:45:75:57:95:c6:cc:6e:38:02:b8:31:26:99:e2:65:1b:9a: db:04:4e:2c:7b:e8:19:9c:67:0a:01:21:0e:c7:9a:fe:6f:1f: 28:ec:36:2a:51:6a:c3:4b:f4:cf:84:2b:5b:ab:dc:0f:bd:dc: 7e:b0:e4:ed:6d:88:ef:5f:22:24:00:d1:88:62:a5:26:91:88: da:ce:b0:cb:fe:6c:06:dd:b3:b8:0b:ee:a5:3c:a0:d1:b2:a0: 04:b6:1a:30:dc:9c:b5:d1:62:32:6c:4b:29:4d:c3:b6:67:85: ac:de:77:5c:8a:ee:96:ad:ab:af:6c:8a:a0:cd:f7:22:e4:b5: 8a:42:a0:f6:37:69:bc:90:35:08:00:52:62:a6:47:22:96:5d: 19:4a:f9:e5:7d:c6:e6:a9:b4:4c:d2:ad:76:17:95:49:c8:a0: eb:04:2e:84:52:5a:08:36:7f:80:68:6f:6b:b3:9f:fc:1b:5c: cd:53:44:46:9d:02:eb:b8:80:91:b3:ff:42:dc:25:ad:02:52: 66:20:3c:1a:d2:7b:d9:6d:a5:19:8d:0b:07:8d:d0:3d:da:00: 37:27:97:4b:04:d0:db:7a:e8:68:ad:5d:25:39:13:f2:ac:cc: 3d:b3:be:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUECm6WZuI273RSHfRlUoTAkNT/oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjA4MjgwNjQzMTlaFw0yNjA4MzEwOTQ0MTlaMDMxMTAvBgNV BAMTKDFCNjZEODA4QUM4NzIwQzBEQjM4NjFFOTZGNjgwOUIwQTA0MjgwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIsHVs2g+4IvaQduI1aC/ZAOS qU4LuLDH+tR0ZxYdvfOdKseYNG+yDiNKTWDqL8l3Tuudoner6DjSMdtXRu03UMI7 CCJ0wTpFCGcXnMSuWmeVL+9JOeZKtKG5iiGIb1TrA/BlLeq0HyfuHWh5rpUQCYVI Lv8CgnLoFUGAIJkKv/bS0dNyNQNVDQV7JLHcVat4bdZle7LH2d8miRU+JIeeMLkz OJnq+sDoJ0wcunqN79etPvGKjFMoTyzkb2MR5GnsiPplqeit5aMhG12ufgKan6y/ 17Ud0tnGQ7utkeDpLv0OHqGiV4EERXetVLDMpAKtA3wbDTbxnSKYLNhPFMJ3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG2bYCKyHIMDbOGHpb2gJsKBCgE8wHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPL5J/9/kpzyz BeffXxl3fvul4EV1V5XGzG44ArgxJpniZRua2wROLHvoGZxnCgEhDsea/m8fKOw2 KlFqw0v0z4QrW6vcD73cfrDk7W2I718iJADRiGKlJpGI2s6wy/5sBt2zuAvupTyg 0bKgBLYaMNyctdFiMmxLKU3DtmeFrN53XIrulq2rr2yKoM33IuS1ikKg9jdpvJA1 CABSYqZHIpZdGUr55X3G5qm0TNKtdheVScig6wQuhFJaCDZ/gGhva7Of/BtczVNE Rp0C67iAkbP/QtwlrQJSZiA8GtJ72W2lGY0LB43QPdoANyeXSwTQ23roaK1dJTkT 8qzMPbO+dQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:27 2026 by rpki-client