$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: GUToc1iA7FqAxur5MWfljRMZajbpeJ8dzKZgi0yesB4= Subject key identifier: 63:3E:56:4B:E0:2F:4C:11:BA:E8:A7:E2:92:B0:AF:95:70:EA:7F:3D Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 3B3828A9C20AC2149DC633867C8BF72796970843 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: B1 Signing time: Fri 28 Aug 2026 06:47:51 +0000 Manifest this update: Fri 28 Aug 2026 06:42:51 +0000 Manifest next update: Mon 31 Aug 2026 15:16:51 +0000 Files and hashes: 1: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) 2: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: pebsQzwL1n6O9CrBc5LAzyqDn1w3gwpb4rdGlsDGca0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:38:28:a9:c2:0a:c2:14:9d:c6:33:86:7c:8b:f7:27:96:97:08:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: Aug 28 06:42:51 2026 GMT Not After : Aug 31 15:16:51 2026 GMT Subject: CN=633E564BE02F4C11BAE8A7E292B0AF9570EA7F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:77:8f:a5:23:50:dd:fc:f4:a8:4c:84:c0: f1:f9:a1:24:ae:88:2a:ca:70:22:f1:e9:08:07:83: 5d:ff:fc:00:e5:98:09:60:50:58:df:16:70:12:5b: af:77:9f:9b:74:e5:da:aa:31:8c:e3:f7:6b:5f:44: 37:fd:bb:85:42:0d:c4:34:2b:9b:ed:19:68:1b:f0: aa:0f:e9:dc:bc:53:1e:17:3e:09:64:46:16:5e:4d: 65:fc:fb:f8:c4:1c:7b:db:c0:af:77:87:ec:0f:2a: db:80:91:d3:7b:a2:08:c5:cf:56:3c:3c:0b:65:e8: e2:da:c7:36:9b:7d:93:50:3c:e6:92:18:44:c9:39: 16:dc:b4:99:55:3c:34:55:d0:a7:0a:bd:50:e9:65: ee:a7:73:2f:b4:56:a4:19:c7:19:7b:7b:9c:be:b8: 42:7e:5e:22:84:87:bb:e7:c0:03:60:0d:6e:dc:ed: 40:1b:20:ff:b5:9c:12:2e:17:48:0f:15:7d:65:bd: bc:86:89:5e:37:ab:0a:89:23:a0:b3:ed:07:de:bc: 51:de:62:e5:87:dd:97:d1:7e:ce:00:41:79:41:2b: 74:7f:23:d6:fe:c4:f0:01:08:10:d5:b0:79:ef:c7: f2:83:ef:09:fb:f7:13:0f:5c:76:e9:8c:39:1f:e8: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:56:4B:E0:2F:4C:11:BA:E8:A7:E2:92:B0:AF:95:70:EA:7F:3D X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f7:84:de:b4:d8:92:98:25:fa:99:26:7e:9d:d3:f9:91:90: f0:83:bd:36:39:27:d9:5e:fe:ba:20:00:9c:20:49:4a:41:99: 5c:5a:e2:18:57:58:e7:02:8f:ae:8f:59:20:71:16:34:c1:47: b3:63:73:6e:28:4e:79:46:81:71:99:d1:e0:25:4c:a1:2f:58: 2b:99:9b:d8:31:51:ef:0b:eb:57:2b:35:8a:af:e8:0d:d6:ed: a2:7f:ba:2f:e0:53:50:3f:14:71:95:50:61:45:93:b0:5a:9d: 3d:50:9d:bd:5d:de:71:ec:0e:58:9d:bb:6f:2b:f2:fd:cd:f9: b7:02:b3:e2:91:62:63:83:c9:1d:81:27:0e:a6:2c:1e:93:c5: 41:a8:31:13:09:74:73:78:02:16:03:b3:74:8e:02:8d:86:3f: 54:1f:2a:87:e0:57:a1:7c:69:7e:8a:5b:b8:b5:f5:af:0b:28: fa:13:49:c6:83:28:98:90:4e:fe:e0:f9:27:71:fd:ca:ca:01: e6:17:80:e4:77:51:27:e6:11:55:67:41:9f:ca:3b:b1:e0:54: d2:23:10:14:8b:c8:13:75:1b:e5:0c:9f:a1:e3:2c:02:59:11: 58:ba:83:56:95:ee:0d:f6:58:68:19:07:77:b6:77:8e:8a:a3: ad:2e:93:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOzgoqcIKwhSdxjOGfIv3J5aXCEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA4MjgwNjQyNTFaFw0yNjA4MzExNTE2NTFaMDMxMTAvBgNV BAMTKDYzM0U1NjRCRTAyRjRDMTFCQUU4QTdFMjkyQjBBRjk1NzBFQTdGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6XePpSNQ3fz0qEyEwPH5oSSu iCrKcCLx6QgHg13//ADlmAlgUFjfFnASW693n5t05dqqMYzj92tfRDf9u4VCDcQ0 K5vtGWgb8KoP6dy8Ux4XPglkRhZeTWX8+/jEHHvbwK93h+wPKtuAkdN7ogjFz1Y8 PAtl6OLaxzabfZNQPOaSGETJORbctJlVPDRV0KcKvVDpZe6ncy+0VqQZxxl7e5y+ uEJ+XiKEh7vnwANgDW7c7UAbIP+1nBIuF0gPFX1lvbyGiV43qwqJI6Cz7QfevFHe YuWH3ZfRfs4AQXlBK3R/I9b+xPABCBDVsHnvx/KD7wn79xMPXHbpjDkf6PfDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYz5WS+AvTBG66KfikrCvlXDqfz0wHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQveE3rTYkpgl +pkmfp3T+ZGQ8IO9Njkn2V7+uiAAnCBJSkGZXFriGFdY5wKPro9ZIHEWNMFHs2Nz bihOeUaBcZnR4CVMoS9YK5mb2DFR7wvrVys1iq/oDdbton+6L+BTUD8UcZVQYUWT sFqdPVCdvV3ecewOWJ27byvy/c35twKz4pFiY4PJHYEnDqYsHpPFQagxEwl0c3gC FgOzdI4CjYY/VB8qh+BXoXxpfopbuLX1rwso+hNJxoMomJBO/uD5J3H9ysoB5heA 5HdRJ+YRVWdBn8o7seBU0iMQFIvIE3Ub5QyfoeMsAlkRWLqDVpXuDfZYaBkHd7Z3 joqjrS6TPQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:13 2026 by rpki-client