$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: DAB3bXbW1uuzdtW/d2Go2NonsBQ95yqAUsmjcP47E2Y= Subject key identifier: DC:77:0E:06:F0:0A:C6:67:1F:E6:68:2D:2F:29:67:66:34:66:C9:82 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 779F29A1463A23F963C7DFAFDEFDA1273E60A95E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: A7 Signing time: Fri 21 Aug 2026 08:14:08 +0000 Manifest this update: Fri 21 Aug 2026 08:09:08 +0000 Manifest next update: Sat 22 Aug 2026 09:30:08 +0000 Files and hashes: 1: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 2: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 3: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: 7GbktySjEgAkSA9gSTFvpwpIOG8ha5CjIXBEn+uHiCU=) 4: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 5: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 6: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 09:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9f:29:a1:46:3a:23:f9:63:c7:df:af:de:fd:a1:27:3e:60:a9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Aug 21 08:09:08 2026 GMT Not After : Aug 22 09:30:08 2026 GMT Subject: CN=DC770E06F00AC6671FE6682D2F2967663466C982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:59:2f:b2:11:d3:7a:f5:54:4c:14:64:fd: 49:2b:d4:ac:92:95:0d:57:8e:5e:b5:f2:37:d0:69: 6d:82:b4:d0:65:88:a3:6a:92:ea:ba:e8:d0:f5:9a: c3:5c:bf:f1:2c:1f:76:04:7f:f9:08:50:a1:63:fb: f2:89:53:19:64:c7:12:56:4e:2c:a5:eb:61:a9:d7: 70:a5:4a:bd:4d:12:93:86:8a:52:ad:74:fd:3d:81: f1:63:1a:c4:86:9a:b0:e9:19:29:aa:0b:57:d7:be: b9:9c:e4:e8:17:a1:fc:b9:04:87:b6:d8:e9:03:c9: c4:a3:21:6a:d4:2c:6f:e7:8d:e7:c1:e5:ce:47:f6: fe:1e:dc:ff:ea:ed:ee:4b:b0:e6:b2:b4:de:63:7e: 47:cc:79:13:bb:00:9e:d8:64:d1:15:eb:28:8d:55: 8e:d5:85:50:ed:3a:e3:b9:66:0c:8f:bd:9a:a6:04: 47:ab:64:62:82:a0:06:38:9e:38:0b:16:2c:5d:c2: 9e:a7:70:02:56:f7:f7:ea:f9:77:62:41:38:f7:5a: 52:3d:de:c3:6a:34:74:66:39:bf:96:0b:d6:49:01: 84:b6:fa:ca:16:d1:7d:85:c1:99:87:cf:eb:ae:b6: 95:11:ee:4a:b9:b8:dd:48:cb:12:44:36:ed:bd:38: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:0E:06:F0:0A:C6:67:1F:E6:68:2D:2F:29:67:66:34:66:C9:82 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:8b:60:7d:c9:7f:9b:ed:90:89:98:55:77:fe:5b:9d:09: f0:93:57:05:92:3d:f9:37:18:f6:dc:a9:07:4a:6a:c8:6e:20: 33:d5:ac:d7:21:f5:ba:75:58:a9:3b:c9:40:41:d8:50:aa:86: 5d:01:53:ab:5d:47:a4:4a:6a:a3:e7:d1:c6:12:44:5e:e2:b7: 9f:74:68:81:b4:c5:ec:58:16:cd:a9:b2:e9:30:7d:d5:82:9b: 86:4d:b9:b8:9f:9f:cd:54:43:32:a3:eb:b0:7c:05:70:87:33: fe:73:0c:20:9a:b6:d1:fb:d8:f0:6d:1c:e8:9e:e6:93:47:4f: cf:11:43:9f:1e:d3:4e:87:ad:15:43:c2:72:38:a2:90:04:37: 14:4d:ac:da:06:1b:80:95:3f:56:ca:cf:4f:6e:7a:d2:fa:83: 56:fb:54:a6:cb:1c:27:12:9a:28:7f:c9:a9:b6:5b:9a:bf:c2: b4:78:a8:a6:68:11:65:88:89:c6:86:c8:8b:b5:94:f9:d8:2e: b1:7e:04:99:3a:d9:d1:92:7a:04:0b:77:ed:4f:54:eb:6b:4f: 1e:ad:07:ef:6e:2d:d3:09:46:d4:bd:56:db:cf:7c:63:9b:e1: fa:12:5a:54:63:8a:c4:87:0d:2b:39:4c:a6:38:a5:71:ad:6e: 7d:8f:6f:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd58poUY6I/ljx9+v3v2hJz5gqV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA4MjEwODA5MDhaFw0yNjA4MjIwOTMwMDhaMDMxMTAvBgNV BAMTKERDNzcwRTA2RjAwQUM2NjcxRkU2NjgyRDJGMjk2NzY2MzQ2NkM5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmVkvshHTevVUTBRk/Ukr1KyS lQ1Xjl618jfQaW2CtNBliKNqkuq66ND1msNcv/EsH3YEf/kIUKFj+/KJUxlkxxJW Tiyl62Gp13ClSr1NEpOGilKtdP09gfFjGsSGmrDpGSmqC1fXvrmc5OgXofy5BIe2 2OkDycSjIWrULG/njefB5c5H9v4e3P/q7e5LsOaytN5jfkfMeRO7AJ7YZNEV6yiN VY7VhVDtOuO5ZgyPvZqmBEerZGKCoAY4njgLFixdwp6ncAJW9/fq+XdiQTj3WlI9 3sNqNHRmOb+WC9ZJAYS2+soW0X2FwZmHz+uutpUR7kq5uN1IyxJENu29OIwTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3HcOBvAKxmcf5mgtLylnZjRmyYIwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQeLYH3Jf5vt kImYVXf+W50J8JNXBZI9+TcY9typB0pqyG4gM9Ws1yH1unVYqTvJQEHYUKqGXQFT q11HpEpqo+fRxhJEXuK3n3RogbTF7FgWzamy6TB91YKbhk25uJ+fzVRDMqPrsHwF cIcz/nMMIJq20fvY8G0c6J7mk0dPzxFDnx7TToetFUPCcjiikAQ3FE2s2gYbgJU/ VsrPT2560vqDVvtUpsscJxKaKH/JqbZbmr/CtHiopmgRZYiJxobIi7WU+dgusX4E mTrZ0ZJ6BAt37U9U62tPHq0H724t0wlG1L1W2898Y5vh+hJaVGOKxIcNKzlMpjil ca1ufY9v4A== -----END CERTIFICATE-----Generated at Fri Aug 21 22:35:29 2026 by rpki-client